/usr/bin/java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationJordan_32.epf -i ../../../trunk/examples/svcomp/ntdrivers/kbfiltr.i.cil-2.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-fb4f59a-m [2022-04-28 08:27:30,477 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-04-28 08:27:30,480 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-04-28 08:27:30,499 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-04-28 08:27:30,500 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-04-28 08:27:30,500 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-04-28 08:27:30,501 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-04-28 08:27:30,502 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-04-28 08:27:30,503 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-04-28 08:27:30,504 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-04-28 08:27:30,504 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-04-28 08:27:30,505 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-04-28 08:27:30,505 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-04-28 08:27:30,506 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-04-28 08:27:30,507 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-04-28 08:27:30,507 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-04-28 08:27:30,508 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-04-28 08:27:30,508 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-04-28 08:27:30,509 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-04-28 08:27:30,510 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-04-28 08:27:30,513 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-04-28 08:27:30,514 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-04-28 08:27:30,514 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-04-28 08:27:30,515 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-04-28 08:27:30,516 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-04-28 08:27:30,518 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-04-28 08:27:30,518 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-04-28 08:27:30,518 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-04-28 08:27:30,519 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-04-28 08:27:30,519 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-04-28 08:27:30,519 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-04-28 08:27:30,520 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-04-28 08:27:30,520 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-04-28 08:27:30,521 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-04-28 08:27:30,521 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-04-28 08:27:30,522 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-04-28 08:27:30,522 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-04-28 08:27:30,522 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-04-28 08:27:30,523 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-04-28 08:27:30,523 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-04-28 08:27:30,523 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-04-28 08:27:30,524 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-04-28 08:27:30,525 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationJordan_32.epf [2022-04-28 08:27:30,530 INFO L113 SettingsManager]: Loading preferences was successful [2022-04-28 08:27:30,531 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-04-28 08:27:30,532 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-04-28 08:27:30,532 INFO L138 SettingsManager]: * sizeof long=4 [2022-04-28 08:27:30,532 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-04-28 08:27:30,533 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-04-28 08:27:30,533 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-04-28 08:27:30,533 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-04-28 08:27:30,533 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-04-28 08:27:30,533 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-04-28 08:27:30,534 INFO L138 SettingsManager]: * sizeof long double=12 [2022-04-28 08:27:30,534 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-04-28 08:27:30,534 INFO L138 SettingsManager]: * Use constant arrays=true [2022-04-28 08:27:30,534 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-04-28 08:27:30,534 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-04-28 08:27:30,534 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-04-28 08:27:30,534 INFO L138 SettingsManager]: * To the following directory=./dump/ [2022-04-28 08:27:30,534 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-04-28 08:27:30,534 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-28 08:27:30,534 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-04-28 08:27:30,534 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=Craig_NestedInterpolation [2022-04-28 08:27:30,535 INFO L138 SettingsManager]: * Trace refinement strategy=ACCELERATED_INTERPOLATION [2022-04-28 08:27:30,535 INFO L138 SettingsManager]: * Trace refinement strategy used in Accelerated Interpolation=CAMEL [2022-04-28 08:27:30,535 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-04-28 08:27:30,535 INFO L138 SettingsManager]: * Loop acceleration method that is used by accelerated interpolation=JORDAN [2022-04-28 08:27:30,535 INFO L138 SettingsManager]: * Use separate solver for trace checks=false WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-04-28 08:27:30,726 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-04-28 08:27:30,740 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-04-28 08:27:30,741 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-04-28 08:27:30,742 INFO L271 PluginConnector]: Initializing CDTParser... [2022-04-28 08:27:30,743 INFO L275 PluginConnector]: CDTParser initialized [2022-04-28 08:27:30,743 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ntdrivers/kbfiltr.i.cil-2.c [2022-04-28 08:27:30,778 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8ad087d30/364af927166a44fca909ef3ab15c2294/FLAGf6579c988 [2022-04-28 08:27:31,218 INFO L306 CDTParser]: Found 1 translation units. [2022-04-28 08:27:31,218 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers/kbfiltr.i.cil-2.c [2022-04-28 08:27:31,235 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8ad087d30/364af927166a44fca909ef3ab15c2294/FLAGf6579c988 [2022-04-28 08:27:31,572 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8ad087d30/364af927166a44fca909ef3ab15c2294 [2022-04-28 08:27:31,573 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-04-28 08:27:31,574 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2022-04-28 08:27:31,577 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-04-28 08:27:31,577 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-04-28 08:27:31,580 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-04-28 08:27:31,589 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.04 08:27:31" (1/1) ... [2022-04-28 08:27:31,590 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3d524ec9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:27:31, skipping insertion in model container [2022-04-28 08:27:31,590 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.04 08:27:31" (1/1) ... [2022-04-28 08:27:31,595 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-04-28 08:27:31,648 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-04-28 08:27:31,974 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers/kbfiltr.i.cil-2.c[62209,62222] [2022-04-28 08:27:32,161 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-28 08:27:32,168 INFO L203 MainTranslator]: Completed pre-run [2022-04-28 08:27:32,218 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers/kbfiltr.i.cil-2.c[62209,62222] [2022-04-28 08:27:32,343 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-28 08:27:32,384 INFO L208 MainTranslator]: Completed translation [2022-04-28 08:27:32,385 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:27:32 WrapperNode [2022-04-28 08:27:32,385 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-04-28 08:27:32,386 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-04-28 08:27:32,386 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-04-28 08:27:32,386 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-04-28 08:27:32,394 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:27:32" (1/1) ... [2022-04-28 08:27:32,394 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:27:32" (1/1) ... [2022-04-28 08:27:32,431 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:27:32" (1/1) ... [2022-04-28 08:27:32,432 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:27:32" (1/1) ... [2022-04-28 08:27:32,503 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:27:32" (1/1) ... [2022-04-28 08:27:32,509 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:27:32" (1/1) ... [2022-04-28 08:27:32,531 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:27:32" (1/1) ... [2022-04-28 08:27:32,549 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-04-28 08:27:32,550 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-04-28 08:27:32,550 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-04-28 08:27:32,550 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-04-28 08:27:32,553 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:27:32" (1/1) ... [2022-04-28 08:27:32,558 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-28 08:27:32,565 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 08:27:32,605 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-04-28 08:27:32,621 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-04-28 08:27:32,645 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2022-04-28 08:27:32,645 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-04-28 08:27:32,645 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~~PVOID~0~X~~PVOID~0~X~$Pointer$~X~$Pointer$~X~~PBOOLEAN~0~TO~~NTSTATUS~0 [2022-04-28 08:27:32,646 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~~PVOID~0~X~~PKEYBOARD_INPUT_DATA~0~X~~POUTPUT_PACKET~0~X~~UCHAR~0~X~~PUCHAR~0~X~~PBOOLEAN~0~X~~PKEYBOARD_SCAN_STATE~0~TO~~BOOLEAN~0 [2022-04-28 08:27:32,646 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~~PVOID~0~X~~PVOID~0~X~~PVOID~0~X~~PVOID~0~TO~VOID [2022-04-28 08:27:32,646 INFO L138 BoogieDeclarations]: Found implementation of procedure reach_error [2022-04-28 08:27:32,646 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-04-28 08:27:32,646 INFO L138 BoogieDeclarations]: Found implementation of procedure InterlockedIncrement [2022-04-28 08:27:32,646 INFO L138 BoogieDeclarations]: Found implementation of procedure InterlockedDecrement [2022-04-28 08:27:32,646 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_IoCtl [2022-04-28 08:27:32,647 INFO L138 BoogieDeclarations]: Found implementation of procedure errorFn [2022-04-28 08:27:32,647 INFO L138 BoogieDeclarations]: Found implementation of procedure _BLAST_init [2022-04-28 08:27:32,648 INFO L138 BoogieDeclarations]: Found implementation of procedure DriverEntry [2022-04-28 08:27:32,648 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_AddDevice [2022-04-28 08:27:32,648 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Complete [2022-04-28 08:27:32,648 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_CreateClose [2022-04-28 08:27:32,648 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_DispatchPassThrough [2022-04-28 08:27:32,648 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_InternIoCtl [2022-04-28 08:27:32,648 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_PnP [2022-04-28 08:27:32,648 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Power [2022-04-28 08:27:32,648 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_InitializationRoutine [2022-04-28 08:27:32,648 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_IsrHook [2022-04-28 08:27:32,648 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_ServiceCallback [2022-04-28 08:27:32,648 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Unload [2022-04-28 08:27:32,648 INFO L138 BoogieDeclarations]: Found implementation of procedure stub_driver_init [2022-04-28 08:27:32,649 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2022-04-28 08:27:32,649 INFO L138 BoogieDeclarations]: Found implementation of procedure ExAcquireFastMutex [2022-04-28 08:27:32,649 INFO L138 BoogieDeclarations]: Found implementation of procedure ExReleaseFastMutex [2022-04-28 08:27:32,649 INFO L138 BoogieDeclarations]: Found implementation of procedure ExAllocatePoolWithTag [2022-04-28 08:27:32,649 INFO L138 BoogieDeclarations]: Found implementation of procedure ExFreePool [2022-04-28 08:27:32,649 INFO L138 BoogieDeclarations]: Found implementation of procedure ExfInterlockedInsertHeadList [2022-04-28 08:27:32,649 INFO L138 BoogieDeclarations]: Found implementation of procedure ExfInterlockedInsertTailList [2022-04-28 08:27:32,649 INFO L138 BoogieDeclarations]: Found implementation of procedure ExfInterlockedRemoveHeadList [2022-04-28 08:27:32,649 INFO L138 BoogieDeclarations]: Found implementation of procedure IoAllocateMdl [2022-04-28 08:27:32,649 INFO L138 BoogieDeclarations]: Found implementation of procedure IoAttachDeviceToDeviceStack [2022-04-28 08:27:32,649 INFO L138 BoogieDeclarations]: Found implementation of procedure IoBuildAsynchronousFsdRequest [2022-04-28 08:27:32,649 INFO L138 BoogieDeclarations]: Found implementation of procedure IoBuildDeviceIoControlRequest [2022-04-28 08:27:32,649 INFO L138 BoogieDeclarations]: Found implementation of procedure IoCreateDevice [2022-04-28 08:27:32,649 INFO L138 BoogieDeclarations]: Found implementation of procedure IoCreateSymbolicLink [2022-04-28 08:27:32,650 INFO L138 BoogieDeclarations]: Found implementation of procedure IoDeleteDevice [2022-04-28 08:27:32,650 INFO L138 BoogieDeclarations]: Found implementation of procedure IoDeleteSymbolicLink [2022-04-28 08:27:32,650 INFO L138 BoogieDeclarations]: Found implementation of procedure IoDetachDevice [2022-04-28 08:27:32,650 INFO L138 BoogieDeclarations]: Found implementation of procedure IoFreeIrp [2022-04-28 08:27:32,650 INFO L138 BoogieDeclarations]: Found implementation of procedure IoFreeMdl [2022-04-28 08:27:32,650 INFO L138 BoogieDeclarations]: Found implementation of procedure IoGetConfigurationInformation [2022-04-28 08:27:32,650 INFO L138 BoogieDeclarations]: Found implementation of procedure IoQueryDeviceDescription [2022-04-28 08:27:32,650 INFO L138 BoogieDeclarations]: Found implementation of procedure IoRegisterDeviceInterface [2022-04-28 08:27:32,650 INFO L138 BoogieDeclarations]: Found implementation of procedure IoReleaseCancelSpinLock [2022-04-28 08:27:32,650 INFO L138 BoogieDeclarations]: Found implementation of procedure IoSetDeviceInterfaceState [2022-04-28 08:27:32,650 INFO L138 BoogieDeclarations]: Found implementation of procedure IoSetHardErrorOrVerifyDevice [2022-04-28 08:27:32,650 INFO L138 BoogieDeclarations]: Found implementation of procedure stubMoreProcessingRequired [2022-04-28 08:27:32,650 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCallDriver [2022-04-28 08:27:32,650 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCompleteRequest [2022-04-28 08:27:32,651 INFO L138 BoogieDeclarations]: Found implementation of procedure KeAcquireSpinLockRaiseToDpc [2022-04-28 08:27:32,651 INFO L138 BoogieDeclarations]: Found implementation of procedure KeDelayExecutionThread [2022-04-28 08:27:32,651 INFO L138 BoogieDeclarations]: Found implementation of procedure KeInitializeEvent [2022-04-28 08:27:32,651 INFO L138 BoogieDeclarations]: Found implementation of procedure KeInitializeSemaphore [2022-04-28 08:27:32,651 INFO L138 BoogieDeclarations]: Found implementation of procedure KeInitializeSpinLock [2022-04-28 08:27:32,651 INFO L138 BoogieDeclarations]: Found implementation of procedure KeReleaseSemaphore [2022-04-28 08:27:32,651 INFO L138 BoogieDeclarations]: Found implementation of procedure KfReleaseSpinLock [2022-04-28 08:27:32,651 INFO L138 BoogieDeclarations]: Found implementation of procedure KeSetEvent [2022-04-28 08:27:32,651 INFO L138 BoogieDeclarations]: Found implementation of procedure KeWaitForSingleObject [2022-04-28 08:27:32,651 INFO L138 BoogieDeclarations]: Found implementation of procedure MmAllocateContiguousMemory [2022-04-28 08:27:32,651 INFO L138 BoogieDeclarations]: Found implementation of procedure MmFreeContiguousMemory [2022-04-28 08:27:32,651 INFO L138 BoogieDeclarations]: Found implementation of procedure MmMapLockedPagesSpecifyCache [2022-04-28 08:27:32,651 INFO L138 BoogieDeclarations]: Found implementation of procedure MmPageEntireDriver [2022-04-28 08:27:32,651 INFO L138 BoogieDeclarations]: Found implementation of procedure MmResetDriverPaging [2022-04-28 08:27:32,652 INFO L138 BoogieDeclarations]: Found implementation of procedure MmUnlockPages [2022-04-28 08:27:32,652 INFO L138 BoogieDeclarations]: Found implementation of procedure ObReferenceObjectByHandle [2022-04-28 08:27:32,652 INFO L138 BoogieDeclarations]: Found implementation of procedure ObfDereferenceObject [2022-04-28 08:27:32,652 INFO L138 BoogieDeclarations]: Found implementation of procedure PoCallDriver [2022-04-28 08:27:32,652 INFO L138 BoogieDeclarations]: Found implementation of procedure PoStartNextPowerIrp [2022-04-28 08:27:32,652 INFO L138 BoogieDeclarations]: Found implementation of procedure PsCreateSystemThread [2022-04-28 08:27:32,653 INFO L138 BoogieDeclarations]: Found implementation of procedure PsTerminateSystemThread [2022-04-28 08:27:32,653 INFO L138 BoogieDeclarations]: Found implementation of procedure RtlAnsiStringToUnicodeString [2022-04-28 08:27:32,653 INFO L138 BoogieDeclarations]: Found implementation of procedure RtlCompareMemory [2022-04-28 08:27:32,653 INFO L138 BoogieDeclarations]: Found implementation of procedure RtlCopyUnicodeString [2022-04-28 08:27:32,653 INFO L138 BoogieDeclarations]: Found implementation of procedure RtlDeleteRegistryValue [2022-04-28 08:27:32,653 INFO L138 BoogieDeclarations]: Found implementation of procedure RtlFreeUnicodeString [2022-04-28 08:27:32,653 INFO L138 BoogieDeclarations]: Found implementation of procedure RtlInitString [2022-04-28 08:27:32,653 INFO L138 BoogieDeclarations]: Found implementation of procedure RtlInitUnicodeString [2022-04-28 08:27:32,653 INFO L138 BoogieDeclarations]: Found implementation of procedure RtlQueryRegistryValues [2022-04-28 08:27:32,654 INFO L138 BoogieDeclarations]: Found implementation of procedure ZwClose [2022-04-28 08:27:32,654 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-04-28 08:27:32,655 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memmove [2022-04-28 08:27:32,655 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2022-04-28 08:27:32,655 INFO L130 BoogieDeclarations]: Found specification of procedure __assert_fail [2022-04-28 08:27:32,655 INFO L130 BoogieDeclarations]: Found specification of procedure reach_error [2022-04-28 08:27:32,655 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-04-28 08:27:32,655 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_char [2022-04-28 08:27:32,655 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2022-04-28 08:27:32,655 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_long [2022-04-28 08:27:32,656 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_ulong [2022-04-28 08:27:32,656 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-04-28 08:27:32,656 INFO L130 BoogieDeclarations]: Found specification of procedure memcpy [2022-04-28 08:27:32,656 INFO L130 BoogieDeclarations]: Found specification of procedure memmove [2022-04-28 08:27:32,656 INFO L130 BoogieDeclarations]: Found specification of procedure memset [2022-04-28 08:27:32,656 INFO L130 BoogieDeclarations]: Found specification of procedure RtlQueryRegistryValues [2022-04-28 08:27:32,656 INFO L130 BoogieDeclarations]: Found specification of procedure RtlDeleteRegistryValue [2022-04-28 08:27:32,656 INFO L130 BoogieDeclarations]: Found specification of procedure RtlInitString [2022-04-28 08:27:32,656 INFO L130 BoogieDeclarations]: Found specification of procedure RtlInitUnicodeString [2022-04-28 08:27:32,656 INFO L130 BoogieDeclarations]: Found specification of procedure RtlAnsiStringToUnicodeString [2022-04-28 08:27:32,656 INFO L130 BoogieDeclarations]: Found specification of procedure RtlCopyUnicodeString [2022-04-28 08:27:32,656 INFO L130 BoogieDeclarations]: Found specification of procedure RtlFreeUnicodeString [2022-04-28 08:27:32,656 INFO L130 BoogieDeclarations]: Found specification of procedure RtlCompareMemory [2022-04-28 08:27:32,657 INFO L130 BoogieDeclarations]: Found specification of procedure InterlockedIncrement [2022-04-28 08:27:32,657 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-04-28 08:27:32,657 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-04-28 08:27:32,657 INFO L130 BoogieDeclarations]: Found specification of procedure InterlockedDecrement [2022-04-28 08:27:32,657 INFO L130 BoogieDeclarations]: Found specification of procedure KeInitializeEvent [2022-04-28 08:27:32,658 INFO L130 BoogieDeclarations]: Found specification of procedure KeSetEvent [2022-04-28 08:27:32,658 INFO L130 BoogieDeclarations]: Found specification of procedure KeInitializeSemaphore [2022-04-28 08:27:32,658 INFO L130 BoogieDeclarations]: Found specification of procedure KeReleaseSemaphore [2022-04-28 08:27:32,658 INFO L130 BoogieDeclarations]: Found specification of procedure KeDelayExecutionThread [2022-04-28 08:27:32,659 INFO L130 BoogieDeclarations]: Found specification of procedure KeWaitForSingleObject [2022-04-28 08:27:32,659 INFO L130 BoogieDeclarations]: Found specification of procedure KeInitializeSpinLock [2022-04-28 08:27:32,659 INFO L130 BoogieDeclarations]: Found specification of procedure KfReleaseSpinLock [2022-04-28 08:27:32,659 INFO L130 BoogieDeclarations]: Found specification of procedure ExAllocatePoolWithTag [2022-04-28 08:27:32,659 INFO L130 BoogieDeclarations]: Found specification of procedure ExFreePool [2022-04-28 08:27:32,659 INFO L130 BoogieDeclarations]: Found specification of procedure ExAcquireFastMutex [2022-04-28 08:27:32,659 INFO L130 BoogieDeclarations]: Found specification of procedure ExReleaseFastMutex [2022-04-28 08:27:32,659 INFO L130 BoogieDeclarations]: Found specification of procedure ExfInterlockedInsertHeadList [2022-04-28 08:27:32,659 INFO L130 BoogieDeclarations]: Found specification of procedure ExfInterlockedInsertTailList [2022-04-28 08:27:32,659 INFO L130 BoogieDeclarations]: Found specification of procedure ExfInterlockedRemoveHeadList [2022-04-28 08:27:32,659 INFO L130 BoogieDeclarations]: Found specification of procedure MmUnlockPages [2022-04-28 08:27:32,660 INFO L130 BoogieDeclarations]: Found specification of procedure MmMapLockedPagesSpecifyCache [2022-04-28 08:27:32,660 INFO L130 BoogieDeclarations]: Found specification of procedure MmAllocateContiguousMemory [2022-04-28 08:27:32,660 INFO L130 BoogieDeclarations]: Found specification of procedure MmFreeContiguousMemory [2022-04-28 08:27:32,660 INFO L130 BoogieDeclarations]: Found specification of procedure MmResetDriverPaging [2022-04-28 08:27:32,660 INFO L130 BoogieDeclarations]: Found specification of procedure MmPageEntireDriver [2022-04-28 08:27:32,660 INFO L130 BoogieDeclarations]: Found specification of procedure PsCreateSystemThread [2022-04-28 08:27:32,660 INFO L130 BoogieDeclarations]: Found specification of procedure PsTerminateSystemThread [2022-04-28 08:27:32,660 INFO L130 BoogieDeclarations]: Found specification of procedure IoAllocateMdl [2022-04-28 08:27:32,660 INFO L130 BoogieDeclarations]: Found specification of procedure IoAttachDeviceToDeviceStack [2022-04-28 08:27:32,660 INFO L130 BoogieDeclarations]: Found specification of procedure IoBuildAsynchronousFsdRequest [2022-04-28 08:27:32,661 INFO L130 BoogieDeclarations]: Found specification of procedure IoBuildDeviceIoControlRequest [2022-04-28 08:27:32,661 INFO L130 BoogieDeclarations]: Found specification of procedure IofCallDriver [2022-04-28 08:27:32,662 INFO L130 BoogieDeclarations]: Found specification of procedure IofCompleteRequest [2022-04-28 08:27:32,664 INFO L130 BoogieDeclarations]: Found specification of procedure IoCreateDevice [2022-04-28 08:27:32,664 INFO L130 BoogieDeclarations]: Found specification of procedure IoCreateSymbolicLink [2022-04-28 08:27:32,670 INFO L130 BoogieDeclarations]: Found specification of procedure IoDeleteDevice [2022-04-28 08:27:32,670 INFO L130 BoogieDeclarations]: Found specification of procedure IoDeleteSymbolicLink [2022-04-28 08:27:32,670 INFO L130 BoogieDeclarations]: Found specification of procedure IoDetachDevice [2022-04-28 08:27:32,670 INFO L130 BoogieDeclarations]: Found specification of procedure IoFreeIrp [2022-04-28 08:27:32,670 INFO L130 BoogieDeclarations]: Found specification of procedure IoFreeMdl [2022-04-28 08:27:32,670 INFO L130 BoogieDeclarations]: Found specification of procedure IoGetConfigurationInformation [2022-04-28 08:27:32,670 INFO L130 BoogieDeclarations]: Found specification of procedure IoQueryDeviceDescription [2022-04-28 08:27:32,670 INFO L130 BoogieDeclarations]: Found specification of procedure IoReleaseCancelSpinLock [2022-04-28 08:27:32,670 INFO L130 BoogieDeclarations]: Found specification of procedure IoSetHardErrorOrVerifyDevice [2022-04-28 08:27:32,670 INFO L130 BoogieDeclarations]: Found specification of procedure IoRegisterDeviceInterface [2022-04-28 08:27:32,670 INFO L130 BoogieDeclarations]: Found specification of procedure IoSetDeviceInterfaceState [2022-04-28 08:27:32,670 INFO L130 BoogieDeclarations]: Found specification of procedure PoCallDriver [2022-04-28 08:27:32,670 INFO L130 BoogieDeclarations]: Found specification of procedure PoStartNextPowerIrp [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure ObReferenceObjectByHandle [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure ObfDereferenceObject [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure ZwClose [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_AddDevice [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_CreateClose [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_DispatchPassThrough [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_InternIoCtl [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_IoCtl [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_PnP [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Power [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_InitializationRoutine [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_IsrHook [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_ServiceCallback [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Unload [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure DriverEntry [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure errorFn [2022-04-28 08:27:32,671 INFO L130 BoogieDeclarations]: Found specification of procedure _BLAST_init [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Complete [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memmove [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~~PVOID~0~X~~PVOID~0~X~$Pointer$~X~$Pointer$~X~~PBOOLEAN~0~TO~~NTSTATUS~0 [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~~PVOID~0~X~~PKEYBOARD_INPUT_DATA~0~X~~POUTPUT_PACKET~0~X~~UCHAR~0~X~~PUCHAR~0~X~~PBOOLEAN~0~X~~PKEYBOARD_SCAN_STATE~0~TO~~BOOLEAN~0 [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~~PVOID~0~X~~PVOID~0~X~~PVOID~0~X~~PVOID~0~TO~VOID [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure stub_driver_init [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_uchar [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure main [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure stubMoreProcessingRequired [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure KeAcquireSpinLockRaiseToDpc [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2022-04-28 08:27:32,672 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-04-28 08:27:32,673 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-04-28 08:27:32,673 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-04-28 08:27:32,673 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-04-28 08:27:32,673 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-04-28 08:27:32,673 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-04-28 08:27:33,031 INFO L234 CfgBuilder]: Building ICFG [2022-04-28 08:27:33,034 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-04-28 08:27:33,063 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,121 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:33,121 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:33,122 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,128 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:33,128 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:33,145 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,150 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:33,150 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:33,151 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,164 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:33,164 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:33,167 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,174 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:33,175 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:33,412 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,419 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:33,419 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:33,420 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,442 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:33,442 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:33,442 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,463 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:33,463 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:33,477 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,483 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:33,483 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:33,483 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,488 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:33,488 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:33,489 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,495 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:33,496 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:33,525 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,531 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:33,531 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:33,531 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,536 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:33,536 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:33,544 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,723 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##43: assume false; [2022-04-28 08:27:33,723 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##44: assume !false; [2022-04-28 08:27:33,738 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,757 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-28 08:27:33,758 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-28 08:27:33,770 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:33,774 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:33,774 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:33,779 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:35,652 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##21: assume !false; [2022-04-28 08:27:35,652 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##20: assume false; [2022-04-28 08:27:35,796 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:35,802 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:35,802 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:35,943 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:35,948 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:35,948 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:35,963 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:35,980 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-28 08:27:35,980 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-28 08:27:35,990 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:36,000 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##16: assume !false; [2022-04-28 08:27:36,000 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##15: assume false; [2022-04-28 08:27:36,032 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:36,038 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:36,038 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:36,039 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:36,065 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##10: assume !false; [2022-04-28 08:27:36,065 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##9: assume false; [2022-04-28 08:27:36,068 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:27:36,073 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-04-28 08:27:36,073 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-04-28 08:27:36,098 INFO L275 CfgBuilder]: Performing block encoding [2022-04-28 08:27:36,123 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-04-28 08:27:36,123 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-04-28 08:27:36,125 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.04 08:27:36 BoogieIcfgContainer [2022-04-28 08:27:36,125 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-04-28 08:27:36,126 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-04-28 08:27:36,127 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-04-28 08:27:36,129 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-04-28 08:27:36,129 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.04 08:27:31" (1/3) ... [2022-04-28 08:27:36,130 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d92bf57 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.04 08:27:36, skipping insertion in model container [2022-04-28 08:27:36,130 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:27:32" (2/3) ... [2022-04-28 08:27:36,130 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d92bf57 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.04 08:27:36, skipping insertion in model container [2022-04-28 08:27:36,130 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.04 08:27:36" (3/3) ... [2022-04-28 08:27:36,131 INFO L111 eAbstractionObserver]: Analyzing ICFG kbfiltr.i.cil-2.c [2022-04-28 08:27:36,140 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:Craig_NestedInterpolation Determinization: PREDICATE_ABSTRACTION [2022-04-28 08:27:36,140 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-04-28 08:27:36,187 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-04-28 08:27:36,192 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=Craig_NestedInterpolation, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@1829caff, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@74694c01 [2022-04-28 08:27:36,192 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-04-28 08:27:36,200 INFO L276 IsEmpty]: Start isEmpty. Operand has 308 states, 230 states have (on average 1.5) internal successors, (345), 248 states have internal predecessors, (345), 49 states have call successors, (49), 27 states have call predecessors, (49), 27 states have return successors, (49), 47 states have call predecessors, (49), 49 states have call successors, (49) [2022-04-28 08:27:36,206 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-04-28 08:27:36,206 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:27:36,206 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:27:36,207 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:27:36,210 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:27:36,210 INFO L85 PathProgramCache]: Analyzing trace with hash 1774662017, now seen corresponding path program 1 times [2022-04-28 08:27:36,214 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:27:36,215 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [63381525] [2022-04-28 08:27:36,221 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:27:36,221 INFO L85 PathProgramCache]: Analyzing trace with hash 1774662017, now seen corresponding path program 2 times [2022-04-28 08:27:36,223 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:27:36,224 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [668850928] [2022-04-28 08:27:36,224 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:27:36,224 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:27:36,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:27:36,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:27:36,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:27:36,606 INFO L290 TraceCheckUtils]: 0: Hoare triple {328#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {311#true} is VALID [2022-04-28 08:27:36,607 INFO L290 TraceCheckUtils]: 1: Hoare triple {311#true} assume true; {311#true} is VALID [2022-04-28 08:27:36,607 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {311#true} {311#true} #1270#return; {311#true} is VALID [2022-04-28 08:27:36,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:27:36,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:27:36,669 INFO L290 TraceCheckUtils]: 0: Hoare triple {329#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {311#true} is VALID [2022-04-28 08:27:36,670 INFO L290 TraceCheckUtils]: 1: Hoare triple {311#true} assume true; {311#true} is VALID [2022-04-28 08:27:36,670 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {311#true} {311#true} #1216#return; {311#true} is VALID [2022-04-28 08:27:36,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:27:36,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:27:36,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:27:36,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:27:36,723 INFO L290 TraceCheckUtils]: 0: Hoare triple {311#true} ~cond := #in~cond; {311#true} is VALID [2022-04-28 08:27:36,724 INFO L290 TraceCheckUtils]: 1: Hoare triple {311#true} assume 0 == ~cond;assume false; {312#false} is VALID [2022-04-28 08:27:36,724 INFO L290 TraceCheckUtils]: 2: Hoare triple {312#false} assume true; {312#false} is VALID [2022-04-28 08:27:36,724 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {312#false} {311#true} #1254#return; {312#false} is VALID [2022-04-28 08:27:36,724 INFO L290 TraceCheckUtils]: 0: Hoare triple {330#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {311#true} is VALID [2022-04-28 08:27:36,725 INFO L272 TraceCheckUtils]: 1: Hoare triple {311#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {311#true} is VALID [2022-04-28 08:27:36,725 INFO L290 TraceCheckUtils]: 2: Hoare triple {311#true} ~cond := #in~cond; {311#true} is VALID [2022-04-28 08:27:36,726 INFO L290 TraceCheckUtils]: 3: Hoare triple {311#true} assume 0 == ~cond;assume false; {312#false} is VALID [2022-04-28 08:27:36,726 INFO L290 TraceCheckUtils]: 4: Hoare triple {312#false} assume true; {312#false} is VALID [2022-04-28 08:27:36,726 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {312#false} {311#true} #1254#return; {312#false} is VALID [2022-04-28 08:27:36,726 INFO L290 TraceCheckUtils]: 6: Hoare triple {312#false} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {312#false} is VALID [2022-04-28 08:27:36,726 INFO L290 TraceCheckUtils]: 7: Hoare triple {312#false} assume true; {312#false} is VALID [2022-04-28 08:27:36,726 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {312#false} {311#true} #1218#return; {312#false} is VALID [2022-04-28 08:27:36,729 INFO L272 TraceCheckUtils]: 0: Hoare triple {311#true} call ULTIMATE.init(); {328#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:27:36,729 INFO L290 TraceCheckUtils]: 1: Hoare triple {328#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {311#true} is VALID [2022-04-28 08:27:36,729 INFO L290 TraceCheckUtils]: 2: Hoare triple {311#true} assume true; {311#true} is VALID [2022-04-28 08:27:36,729 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {311#true} {311#true} #1270#return; {311#true} is VALID [2022-04-28 08:27:36,730 INFO L272 TraceCheckUtils]: 4: Hoare triple {311#true} call #t~ret213 := main(); {311#true} is VALID [2022-04-28 08:27:36,733 INFO L290 TraceCheckUtils]: 5: Hoare triple {311#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {311#true} is VALID [2022-04-28 08:27:36,734 INFO L272 TraceCheckUtils]: 6: Hoare triple {311#true} call _BLAST_init(); {329#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:27:36,734 INFO L290 TraceCheckUtils]: 7: Hoare triple {329#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {311#true} is VALID [2022-04-28 08:27:36,734 INFO L290 TraceCheckUtils]: 8: Hoare triple {311#true} assume true; {311#true} is VALID [2022-04-28 08:27:36,735 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {311#true} {311#true} #1216#return; {311#true} is VALID [2022-04-28 08:27:36,736 INFO L272 TraceCheckUtils]: 10: Hoare triple {311#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {330#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:27:36,736 INFO L290 TraceCheckUtils]: 11: Hoare triple {330#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {311#true} is VALID [2022-04-28 08:27:36,736 INFO L272 TraceCheckUtils]: 12: Hoare triple {311#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {311#true} is VALID [2022-04-28 08:27:36,736 INFO L290 TraceCheckUtils]: 13: Hoare triple {311#true} ~cond := #in~cond; {311#true} is VALID [2022-04-28 08:27:36,736 INFO L290 TraceCheckUtils]: 14: Hoare triple {311#true} assume 0 == ~cond;assume false; {312#false} is VALID [2022-04-28 08:27:36,736 INFO L290 TraceCheckUtils]: 15: Hoare triple {312#false} assume true; {312#false} is VALID [2022-04-28 08:27:36,737 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {312#false} {311#true} #1254#return; {312#false} is VALID [2022-04-28 08:27:36,737 INFO L290 TraceCheckUtils]: 17: Hoare triple {312#false} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {312#false} is VALID [2022-04-28 08:27:36,737 INFO L290 TraceCheckUtils]: 18: Hoare triple {312#false} assume true; {312#false} is VALID [2022-04-28 08:27:36,737 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {312#false} {311#true} #1218#return; {312#false} is VALID [2022-04-28 08:27:36,737 INFO L290 TraceCheckUtils]: 20: Hoare triple {312#false} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {312#false} is VALID [2022-04-28 08:27:36,737 INFO L290 TraceCheckUtils]: 21: Hoare triple {312#false} assume !(~status~5 >= 0); {312#false} is VALID [2022-04-28 08:27:36,737 INFO L290 TraceCheckUtils]: 22: Hoare triple {312#false} assume !(1 == ~pended~0); {312#false} is VALID [2022-04-28 08:27:36,738 INFO L290 TraceCheckUtils]: 23: Hoare triple {312#false} assume !(1 == ~pended~0); {312#false} is VALID [2022-04-28 08:27:36,738 INFO L290 TraceCheckUtils]: 24: Hoare triple {312#false} assume !(~s~0 == ~UNLOADED~0); {312#false} is VALID [2022-04-28 08:27:36,738 INFO L290 TraceCheckUtils]: 25: Hoare triple {312#false} assume !(-1 == ~status~5); {312#false} is VALID [2022-04-28 08:27:36,739 INFO L290 TraceCheckUtils]: 26: Hoare triple {312#false} assume !(~s~0 != ~SKIP2~0); {312#false} is VALID [2022-04-28 08:27:36,739 INFO L290 TraceCheckUtils]: 27: Hoare triple {312#false} assume 1 == ~pended~0; {312#false} is VALID [2022-04-28 08:27:36,739 INFO L290 TraceCheckUtils]: 28: Hoare triple {312#false} assume 259 != ~status~5; {312#false} is VALID [2022-04-28 08:27:36,741 INFO L272 TraceCheckUtils]: 29: Hoare triple {312#false} call errorFn(); {312#false} is VALID [2022-04-28 08:27:36,741 INFO L290 TraceCheckUtils]: 30: Hoare triple {312#false} assume !false; {312#false} is VALID [2022-04-28 08:27:36,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:27:36,742 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:27:36,742 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [668850928] [2022-04-28 08:27:36,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [668850928] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:27:36,743 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:27:36,743 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-28 08:27:36,745 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:27:36,745 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [63381525] [2022-04-28 08:27:36,745 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [63381525] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:27:36,745 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:27:36,745 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-28 08:27:36,745 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1998546071] [2022-04-28 08:27:36,746 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:27:36,750 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.2) internal successors, (21), 2 states have internal predecessors, (21), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 31 [2022-04-28 08:27:36,751 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:27:36,753 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 4.2) internal successors, (21), 2 states have internal predecessors, (21), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-04-28 08:27:36,787 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:27:36,787 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-04-28 08:27:36,787 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:27:36,811 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-04-28 08:27:36,812 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-28 08:27:36,818 INFO L87 Difference]: Start difference. First operand has 308 states, 230 states have (on average 1.5) internal successors, (345), 248 states have internal predecessors, (345), 49 states have call successors, (49), 27 states have call predecessors, (49), 27 states have return successors, (49), 47 states have call predecessors, (49), 49 states have call successors, (49) Second operand has 5 states, 5 states have (on average 4.2) internal successors, (21), 2 states have internal predecessors, (21), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-04-28 08:27:38,902 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:27:42,291 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:27:42,291 INFO L93 Difference]: Finished difference Result 643 states and 953 transitions. [2022-04-28 08:27:42,291 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-28 08:27:42,292 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.2) internal successors, (21), 2 states have internal predecessors, (21), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 31 [2022-04-28 08:27:42,292 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:27:42,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 4.2) internal successors, (21), 2 states have internal predecessors, (21), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-04-28 08:27:42,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 953 transitions. [2022-04-28 08:27:42,324 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 4.2) internal successors, (21), 2 states have internal predecessors, (21), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-04-28 08:27:42,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 953 transitions. [2022-04-28 08:27:42,336 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 953 transitions. [2022-04-28 08:27:43,237 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 953 edges. 953 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:27:43,262 INFO L225 Difference]: With dead ends: 643 [2022-04-28 08:27:43,262 INFO L226 Difference]: Without dead ends: 343 [2022-04-28 08:27:43,280 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-04-28 08:27:43,282 INFO L413 NwaCegarLoop]: 335 mSDtfsCounter, 597 mSDsluCounter, 128 mSDsCounter, 0 mSdLazyCounter, 379 mSolverCounterSat, 220 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 602 SdHoareTripleChecker+Valid, 463 SdHoareTripleChecker+Invalid, 600 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 220 IncrementalHoareTripleChecker+Valid, 379 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-04-28 08:27:43,282 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [602 Valid, 463 Invalid, 600 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [220 Valid, 379 Invalid, 1 Unknown, 0 Unchecked, 3.2s Time] [2022-04-28 08:27:43,294 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-04-28 08:27:43,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 299. [2022-04-28 08:27:43,328 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:27:43,329 INFO L82 GeneralOperation]: Start isEquivalent. First operand 343 states. Second operand has 299 states, 224 states have (on average 1.4464285714285714) internal successors, (324), 240 states have internal predecessors, (324), 49 states have call successors, (49), 27 states have call predecessors, (49), 25 states have return successors, (34), 34 states have call predecessors, (34), 34 states have call successors, (34) [2022-04-28 08:27:43,343 INFO L74 IsIncluded]: Start isIncluded. First operand 343 states. Second operand has 299 states, 224 states have (on average 1.4464285714285714) internal successors, (324), 240 states have internal predecessors, (324), 49 states have call successors, (49), 27 states have call predecessors, (49), 25 states have return successors, (34), 34 states have call predecessors, (34), 34 states have call successors, (34) [2022-04-28 08:27:43,344 INFO L87 Difference]: Start difference. First operand 343 states. Second operand has 299 states, 224 states have (on average 1.4464285714285714) internal successors, (324), 240 states have internal predecessors, (324), 49 states have call successors, (49), 27 states have call predecessors, (49), 25 states have return successors, (34), 34 states have call predecessors, (34), 34 states have call successors, (34) [2022-04-28 08:27:43,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:27:43,356 INFO L93 Difference]: Finished difference Result 343 states and 471 transitions. [2022-04-28 08:27:43,356 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 471 transitions. [2022-04-28 08:27:43,359 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:27:43,359 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:27:43,360 INFO L74 IsIncluded]: Start isIncluded. First operand has 299 states, 224 states have (on average 1.4464285714285714) internal successors, (324), 240 states have internal predecessors, (324), 49 states have call successors, (49), 27 states have call predecessors, (49), 25 states have return successors, (34), 34 states have call predecessors, (34), 34 states have call successors, (34) Second operand 343 states. [2022-04-28 08:27:43,360 INFO L87 Difference]: Start difference. First operand has 299 states, 224 states have (on average 1.4464285714285714) internal successors, (324), 240 states have internal predecessors, (324), 49 states have call successors, (49), 27 states have call predecessors, (49), 25 states have return successors, (34), 34 states have call predecessors, (34), 34 states have call successors, (34) Second operand 343 states. [2022-04-28 08:27:43,405 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:27:43,406 INFO L93 Difference]: Finished difference Result 343 states and 471 transitions. [2022-04-28 08:27:43,406 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 471 transitions. [2022-04-28 08:27:43,407 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:27:43,407 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:27:43,407 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:27:43,407 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:27:43,408 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 299 states, 224 states have (on average 1.4464285714285714) internal successors, (324), 240 states have internal predecessors, (324), 49 states have call successors, (49), 27 states have call predecessors, (49), 25 states have return successors, (34), 34 states have call predecessors, (34), 34 states have call successors, (34) [2022-04-28 08:27:43,439 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 299 states to 299 states and 407 transitions. [2022-04-28 08:27:43,440 INFO L78 Accepts]: Start accepts. Automaton has 299 states and 407 transitions. Word has length 31 [2022-04-28 08:27:43,440 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:27:43,441 INFO L495 AbstractCegarLoop]: Abstraction has 299 states and 407 transitions. [2022-04-28 08:27:43,441 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.2) internal successors, (21), 2 states have internal predecessors, (21), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-04-28 08:27:43,441 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 299 states and 407 transitions. [2022-04-28 08:27:43,916 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 407 edges. 407 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:27:43,916 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 407 transitions. [2022-04-28 08:27:43,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-04-28 08:27:43,917 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:27:43,917 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:27:43,917 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-04-28 08:27:43,917 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:27:43,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:27:43,918 INFO L85 PathProgramCache]: Analyzing trace with hash 186314115, now seen corresponding path program 1 times [2022-04-28 08:27:43,918 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:27:43,918 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [335633270] [2022-04-28 08:27:43,918 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:27:43,918 INFO L85 PathProgramCache]: Analyzing trace with hash 186314115, now seen corresponding path program 2 times [2022-04-28 08:27:43,918 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:27:43,918 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1701696236] [2022-04-28 08:27:43,918 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:27:43,919 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:27:44,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:27:44,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:27:44,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:27:44,224 INFO L290 TraceCheckUtils]: 0: Hoare triple {2929#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {2910#true} is VALID [2022-04-28 08:27:44,224 INFO L290 TraceCheckUtils]: 1: Hoare triple {2910#true} assume true; {2910#true} is VALID [2022-04-28 08:27:44,224 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2910#true} {2910#true} #1270#return; {2910#true} is VALID [2022-04-28 08:27:44,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:27:44,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:27:44,256 INFO L290 TraceCheckUtils]: 0: Hoare triple {2930#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2910#true} is VALID [2022-04-28 08:27:44,256 INFO L290 TraceCheckUtils]: 1: Hoare triple {2910#true} assume true; {2910#true} is VALID [2022-04-28 08:27:44,257 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2910#true} {2910#true} #1216#return; {2910#true} is VALID [2022-04-28 08:27:44,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:27:44,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:27:44,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:27:44,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:27:44,316 INFO L290 TraceCheckUtils]: 0: Hoare triple {2910#true} ~cond := #in~cond; {2910#true} is VALID [2022-04-28 08:27:44,316 INFO L290 TraceCheckUtils]: 1: Hoare triple {2910#true} assume !(0 == ~cond); {2910#true} is VALID [2022-04-28 08:27:44,316 INFO L290 TraceCheckUtils]: 2: Hoare triple {2910#true} assume true; {2910#true} is VALID [2022-04-28 08:27:44,316 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {2910#true} {2910#true} #1254#return; {2910#true} is VALID [2022-04-28 08:27:44,316 INFO L290 TraceCheckUtils]: 0: Hoare triple {2931#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {2910#true} is VALID [2022-04-28 08:27:44,316 INFO L272 TraceCheckUtils]: 1: Hoare triple {2910#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {2910#true} is VALID [2022-04-28 08:27:44,317 INFO L290 TraceCheckUtils]: 2: Hoare triple {2910#true} ~cond := #in~cond; {2910#true} is VALID [2022-04-28 08:27:44,317 INFO L290 TraceCheckUtils]: 3: Hoare triple {2910#true} assume !(0 == ~cond); {2910#true} is VALID [2022-04-28 08:27:44,317 INFO L290 TraceCheckUtils]: 4: Hoare triple {2910#true} assume true; {2910#true} is VALID [2022-04-28 08:27:44,317 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {2910#true} {2910#true} #1254#return; {2910#true} is VALID [2022-04-28 08:27:44,317 INFO L290 TraceCheckUtils]: 6: Hoare triple {2910#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {2936#(= |DriverEntry_#res| 0)} is VALID [2022-04-28 08:27:44,318 INFO L290 TraceCheckUtils]: 7: Hoare triple {2936#(= |DriverEntry_#res| 0)} assume true; {2936#(= |DriverEntry_#res| 0)} is VALID [2022-04-28 08:27:44,319 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {2936#(= |DriverEntry_#res| 0)} {2910#true} #1218#return; {2927#(= 0 |main_#t~ret169|)} is VALID [2022-04-28 08:27:44,320 INFO L272 TraceCheckUtils]: 0: Hoare triple {2910#true} call ULTIMATE.init(); {2929#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:27:44,320 INFO L290 TraceCheckUtils]: 1: Hoare triple {2929#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {2910#true} is VALID [2022-04-28 08:27:44,320 INFO L290 TraceCheckUtils]: 2: Hoare triple {2910#true} assume true; {2910#true} is VALID [2022-04-28 08:27:44,320 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {2910#true} {2910#true} #1270#return; {2910#true} is VALID [2022-04-28 08:27:44,321 INFO L272 TraceCheckUtils]: 4: Hoare triple {2910#true} call #t~ret213 := main(); {2910#true} is VALID [2022-04-28 08:27:44,321 INFO L290 TraceCheckUtils]: 5: Hoare triple {2910#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {2910#true} is VALID [2022-04-28 08:27:44,322 INFO L272 TraceCheckUtils]: 6: Hoare triple {2910#true} call _BLAST_init(); {2930#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:27:44,322 INFO L290 TraceCheckUtils]: 7: Hoare triple {2930#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2910#true} is VALID [2022-04-28 08:27:44,322 INFO L290 TraceCheckUtils]: 8: Hoare triple {2910#true} assume true; {2910#true} is VALID [2022-04-28 08:27:44,322 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {2910#true} {2910#true} #1216#return; {2910#true} is VALID [2022-04-28 08:27:44,323 INFO L272 TraceCheckUtils]: 10: Hoare triple {2910#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {2931#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:27:44,323 INFO L290 TraceCheckUtils]: 11: Hoare triple {2931#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {2910#true} is VALID [2022-04-28 08:27:44,323 INFO L272 TraceCheckUtils]: 12: Hoare triple {2910#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {2910#true} is VALID [2022-04-28 08:27:44,324 INFO L290 TraceCheckUtils]: 13: Hoare triple {2910#true} ~cond := #in~cond; {2910#true} is VALID [2022-04-28 08:27:44,324 INFO L290 TraceCheckUtils]: 14: Hoare triple {2910#true} assume !(0 == ~cond); {2910#true} is VALID [2022-04-28 08:27:44,324 INFO L290 TraceCheckUtils]: 15: Hoare triple {2910#true} assume true; {2910#true} is VALID [2022-04-28 08:27:44,324 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {2910#true} {2910#true} #1254#return; {2910#true} is VALID [2022-04-28 08:27:44,324 INFO L290 TraceCheckUtils]: 17: Hoare triple {2910#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {2936#(= |DriverEntry_#res| 0)} is VALID [2022-04-28 08:27:44,325 INFO L290 TraceCheckUtils]: 18: Hoare triple {2936#(= |DriverEntry_#res| 0)} assume true; {2936#(= |DriverEntry_#res| 0)} is VALID [2022-04-28 08:27:44,325 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {2936#(= |DriverEntry_#res| 0)} {2910#true} #1218#return; {2927#(= 0 |main_#t~ret169|)} is VALID [2022-04-28 08:27:44,326 INFO L290 TraceCheckUtils]: 20: Hoare triple {2927#(= 0 |main_#t~ret169|)} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {2928#(= main_~status~5 0)} is VALID [2022-04-28 08:27:44,326 INFO L290 TraceCheckUtils]: 21: Hoare triple {2928#(= main_~status~5 0)} assume !(~status~5 >= 0); {2911#false} is VALID [2022-04-28 08:27:44,326 INFO L290 TraceCheckUtils]: 22: Hoare triple {2911#false} assume !(1 == ~pended~0); {2911#false} is VALID [2022-04-28 08:27:44,326 INFO L290 TraceCheckUtils]: 23: Hoare triple {2911#false} assume !(1 == ~pended~0); {2911#false} is VALID [2022-04-28 08:27:44,326 INFO L290 TraceCheckUtils]: 24: Hoare triple {2911#false} assume !(~s~0 == ~UNLOADED~0); {2911#false} is VALID [2022-04-28 08:27:44,327 INFO L290 TraceCheckUtils]: 25: Hoare triple {2911#false} assume !(-1 == ~status~5); {2911#false} is VALID [2022-04-28 08:27:44,327 INFO L290 TraceCheckUtils]: 26: Hoare triple {2911#false} assume !(~s~0 != ~SKIP2~0); {2911#false} is VALID [2022-04-28 08:27:44,327 INFO L290 TraceCheckUtils]: 27: Hoare triple {2911#false} assume 1 == ~pended~0; {2911#false} is VALID [2022-04-28 08:27:44,327 INFO L290 TraceCheckUtils]: 28: Hoare triple {2911#false} assume 259 != ~status~5; {2911#false} is VALID [2022-04-28 08:27:44,327 INFO L272 TraceCheckUtils]: 29: Hoare triple {2911#false} call errorFn(); {2911#false} is VALID [2022-04-28 08:27:44,327 INFO L290 TraceCheckUtils]: 30: Hoare triple {2911#false} assume !false; {2911#false} is VALID [2022-04-28 08:27:44,327 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:27:44,328 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:27:44,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1701696236] [2022-04-28 08:27:44,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1701696236] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:27:44,328 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:27:44,328 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:27:44,328 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:27:44,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [335633270] [2022-04-28 08:27:44,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [335633270] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:27:44,329 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:27:44,329 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:27:44,329 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [424309364] [2022-04-28 08:27:44,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:27:44,330 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.625) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 31 [2022-04-28 08:27:44,330 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:27:44,330 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 2.625) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-04-28 08:27:44,360 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:27:44,360 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 08:27:44,360 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:27:44,360 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 08:27:44,361 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-04-28 08:27:44,361 INFO L87 Difference]: Start difference. First operand 299 states and 407 transitions. Second operand has 8 states, 8 states have (on average 2.625) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-04-28 08:27:47,983 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.52s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:27:49,990 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:27:52,010 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:27:54,027 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:27:56,039 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:27:58,055 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:28:01,968 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.21s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:28:07,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:28:07,235 INFO L93 Difference]: Finished difference Result 360 states and 492 transitions. [2022-04-28 08:28:07,236 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-28 08:28:07,236 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.625) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 31 [2022-04-28 08:28:07,236 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:28:07,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 2.625) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-04-28 08:28:07,242 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 492 transitions. [2022-04-28 08:28:07,242 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 2.625) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-04-28 08:28:07,247 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 492 transitions. [2022-04-28 08:28:07,247 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 492 transitions. [2022-04-28 08:28:07,822 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 492 edges. 492 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:28:07,830 INFO L225 Difference]: With dead ends: 360 [2022-04-28 08:28:07,830 INFO L226 Difference]: Without dead ends: 343 [2022-04-28 08:28:07,830 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=24, Invalid=66, Unknown=0, NotChecked=0, Total=90 [2022-04-28 08:28:07,831 INFO L413 NwaCegarLoop]: 315 mSDtfsCounter, 600 mSDsluCounter, 369 mSDsCounter, 0 mSdLazyCounter, 1368 mSolverCounterSat, 221 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 606 SdHoareTripleChecker+Valid, 684 SdHoareTripleChecker+Invalid, 1594 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 221 IncrementalHoareTripleChecker+Valid, 1368 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.1s IncrementalHoareTripleChecker+Time [2022-04-28 08:28:07,831 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [606 Valid, 684 Invalid, 1594 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [221 Valid, 1368 Invalid, 5 Unknown, 0 Unchecked, 16.1s Time] [2022-04-28 08:28:07,832 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-04-28 08:28:07,857 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 299. [2022-04-28 08:28:07,857 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:28:07,858 INFO L82 GeneralOperation]: Start isEquivalent. First operand 343 states. Second operand has 299 states, 224 states have (on average 1.4419642857142858) internal successors, (323), 240 states have internal predecessors, (323), 49 states have call successors, (49), 27 states have call predecessors, (49), 25 states have return successors, (34), 34 states have call predecessors, (34), 34 states have call successors, (34) [2022-04-28 08:28:07,858 INFO L74 IsIncluded]: Start isIncluded. First operand 343 states. Second operand has 299 states, 224 states have (on average 1.4419642857142858) internal successors, (323), 240 states have internal predecessors, (323), 49 states have call successors, (49), 27 states have call predecessors, (49), 25 states have return successors, (34), 34 states have call predecessors, (34), 34 states have call successors, (34) [2022-04-28 08:28:07,859 INFO L87 Difference]: Start difference. First operand 343 states. Second operand has 299 states, 224 states have (on average 1.4419642857142858) internal successors, (323), 240 states have internal predecessors, (323), 49 states have call successors, (49), 27 states have call predecessors, (49), 25 states have return successors, (34), 34 states have call predecessors, (34), 34 states have call successors, (34) [2022-04-28 08:28:07,867 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:28:07,867 INFO L93 Difference]: Finished difference Result 343 states and 470 transitions. [2022-04-28 08:28:07,867 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 470 transitions. [2022-04-28 08:28:07,868 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:28:07,868 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:28:07,869 INFO L74 IsIncluded]: Start isIncluded. First operand has 299 states, 224 states have (on average 1.4419642857142858) internal successors, (323), 240 states have internal predecessors, (323), 49 states have call successors, (49), 27 states have call predecessors, (49), 25 states have return successors, (34), 34 states have call predecessors, (34), 34 states have call successors, (34) Second operand 343 states. [2022-04-28 08:28:07,870 INFO L87 Difference]: Start difference. First operand has 299 states, 224 states have (on average 1.4419642857142858) internal successors, (323), 240 states have internal predecessors, (323), 49 states have call successors, (49), 27 states have call predecessors, (49), 25 states have return successors, (34), 34 states have call predecessors, (34), 34 states have call successors, (34) Second operand 343 states. [2022-04-28 08:28:07,878 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:28:07,878 INFO L93 Difference]: Finished difference Result 343 states and 470 transitions. [2022-04-28 08:28:07,878 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 470 transitions. [2022-04-28 08:28:07,879 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:28:07,879 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:28:07,879 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:28:07,879 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:28:07,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 299 states, 224 states have (on average 1.4419642857142858) internal successors, (323), 240 states have internal predecessors, (323), 49 states have call successors, (49), 27 states have call predecessors, (49), 25 states have return successors, (34), 34 states have call predecessors, (34), 34 states have call successors, (34) [2022-04-28 08:28:07,887 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 299 states to 299 states and 406 transitions. [2022-04-28 08:28:07,888 INFO L78 Accepts]: Start accepts. Automaton has 299 states and 406 transitions. Word has length 31 [2022-04-28 08:28:07,888 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:28:07,888 INFO L495 AbstractCegarLoop]: Abstraction has 299 states and 406 transitions. [2022-04-28 08:28:07,888 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.625) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-04-28 08:28:07,888 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 299 states and 406 transitions. [2022-04-28 08:28:08,388 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 406 edges. 406 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:28:08,388 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 406 transitions. [2022-04-28 08:28:08,389 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-28 08:28:08,389 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:28:08,389 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:28:08,389 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-04-28 08:28:08,390 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:28:08,390 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:28:08,390 INFO L85 PathProgramCache]: Analyzing trace with hash -1201516382, now seen corresponding path program 1 times [2022-04-28 08:28:08,390 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:28:08,390 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1236778] [2022-04-28 08:28:08,390 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:28:08,391 INFO L85 PathProgramCache]: Analyzing trace with hash -1201516382, now seen corresponding path program 2 times [2022-04-28 08:28:08,391 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:28:08,391 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1134847707] [2022-04-28 08:28:08,391 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:28:08,391 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:28:08,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:08,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:28:08,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:08,560 INFO L290 TraceCheckUtils]: 0: Hoare triple {4979#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {4948#true} is VALID [2022-04-28 08:28:08,560 INFO L290 TraceCheckUtils]: 1: Hoare triple {4948#true} assume true; {4948#true} is VALID [2022-04-28 08:28:08,561 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4948#true} {4948#true} #1270#return; {4948#true} is VALID [2022-04-28 08:28:08,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:28:08,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:08,597 INFO L290 TraceCheckUtils]: 0: Hoare triple {4980#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4948#true} is VALID [2022-04-28 08:28:08,597 INFO L290 TraceCheckUtils]: 1: Hoare triple {4948#true} assume true; {4948#true} is VALID [2022-04-28 08:28:08,597 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4948#true} {4948#true} #1216#return; {4948#true} is VALID [2022-04-28 08:28:08,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:28:08,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:08,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:28:08,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:08,632 INFO L290 TraceCheckUtils]: 0: Hoare triple {4948#true} ~cond := #in~cond; {4948#true} is VALID [2022-04-28 08:28:08,633 INFO L290 TraceCheckUtils]: 1: Hoare triple {4948#true} assume !(0 == ~cond); {4948#true} is VALID [2022-04-28 08:28:08,633 INFO L290 TraceCheckUtils]: 2: Hoare triple {4948#true} assume true; {4948#true} is VALID [2022-04-28 08:28:08,633 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {4948#true} {4948#true} #1254#return; {4948#true} is VALID [2022-04-28 08:28:08,633 INFO L290 TraceCheckUtils]: 0: Hoare triple {4981#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {4948#true} is VALID [2022-04-28 08:28:08,633 INFO L272 TraceCheckUtils]: 1: Hoare triple {4948#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {4948#true} is VALID [2022-04-28 08:28:08,633 INFO L290 TraceCheckUtils]: 2: Hoare triple {4948#true} ~cond := #in~cond; {4948#true} is VALID [2022-04-28 08:28:08,633 INFO L290 TraceCheckUtils]: 3: Hoare triple {4948#true} assume !(0 == ~cond); {4948#true} is VALID [2022-04-28 08:28:08,634 INFO L290 TraceCheckUtils]: 4: Hoare triple {4948#true} assume true; {4948#true} is VALID [2022-04-28 08:28:08,634 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {4948#true} {4948#true} #1254#return; {4948#true} is VALID [2022-04-28 08:28:08,635 INFO L290 TraceCheckUtils]: 6: Hoare triple {4948#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {4948#true} is VALID [2022-04-28 08:28:08,636 INFO L290 TraceCheckUtils]: 7: Hoare triple {4948#true} assume true; {4948#true} is VALID [2022-04-28 08:28:08,636 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {4948#true} {4948#true} #1218#return; {4948#true} is VALID [2022-04-28 08:28:08,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:28:08,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:08,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:28:08,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:08,757 INFO L290 TraceCheckUtils]: 0: Hoare triple {4986#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {4948#true} is VALID [2022-04-28 08:28:08,759 INFO L290 TraceCheckUtils]: 1: Hoare triple {4948#true} assume 0 == ~__BLAST_NONDET~5; {4948#true} is VALID [2022-04-28 08:28:08,760 INFO L290 TraceCheckUtils]: 2: Hoare triple {4948#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {4994#(and (<= |IoCreateDevice_#res| 0) (<= 0 |IoCreateDevice_#res|))} is VALID [2022-04-28 08:28:08,761 INFO L290 TraceCheckUtils]: 3: Hoare triple {4994#(and (<= |IoCreateDevice_#res| 0) (<= 0 |IoCreateDevice_#res|))} assume true; {4994#(and (<= |IoCreateDevice_#res| 0) (<= 0 |IoCreateDevice_#res|))} is VALID [2022-04-28 08:28:08,762 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {4994#(and (<= |IoCreateDevice_#res| 0) (<= 0 |IoCreateDevice_#res|))} {4948#true} #1176#return; {4992#(= |KbFilter_AddDevice_#t~ret22| 0)} is VALID [2022-04-28 08:28:08,762 INFO L290 TraceCheckUtils]: 0: Hoare triple {4986#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {4948#true} is VALID [2022-04-28 08:28:08,763 INFO L272 TraceCheckUtils]: 1: Hoare triple {4948#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {4986#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:28:08,763 INFO L290 TraceCheckUtils]: 2: Hoare triple {4986#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {4948#true} is VALID [2022-04-28 08:28:08,763 INFO L290 TraceCheckUtils]: 3: Hoare triple {4948#true} assume 0 == ~__BLAST_NONDET~5; {4948#true} is VALID [2022-04-28 08:28:08,764 INFO L290 TraceCheckUtils]: 4: Hoare triple {4948#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {4994#(and (<= |IoCreateDevice_#res| 0) (<= 0 |IoCreateDevice_#res|))} is VALID [2022-04-28 08:28:08,764 INFO L290 TraceCheckUtils]: 5: Hoare triple {4994#(and (<= |IoCreateDevice_#res| 0) (<= 0 |IoCreateDevice_#res|))} assume true; {4994#(and (<= |IoCreateDevice_#res| 0) (<= 0 |IoCreateDevice_#res|))} is VALID [2022-04-28 08:28:08,765 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {4994#(and (<= |IoCreateDevice_#res| 0) (<= 0 |IoCreateDevice_#res|))} {4948#true} #1176#return; {4992#(= |KbFilter_AddDevice_#t~ret22| 0)} is VALID [2022-04-28 08:28:08,766 INFO L290 TraceCheckUtils]: 7: Hoare triple {4992#(= |KbFilter_AddDevice_#t~ret22| 0)} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {4993#(= KbFilter_AddDevice_~status~0 0)} is VALID [2022-04-28 08:28:08,766 INFO L290 TraceCheckUtils]: 8: Hoare triple {4993#(= KbFilter_AddDevice_~status~0 0)} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {4949#false} is VALID [2022-04-28 08:28:08,766 INFO L290 TraceCheckUtils]: 9: Hoare triple {4949#false} assume true; {4949#false} is VALID [2022-04-28 08:28:08,766 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {4949#false} {4948#true} #1220#return; {4949#false} is VALID [2022-04-28 08:28:08,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:28:08,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:08,789 INFO L290 TraceCheckUtils]: 0: Hoare triple {4995#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4948#true} is VALID [2022-04-28 08:28:08,789 INFO L290 TraceCheckUtils]: 1: Hoare triple {4948#true} assume true; {4948#true} is VALID [2022-04-28 08:28:08,790 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4948#true} {4949#false} #1222#return; {4949#false} is VALID [2022-04-28 08:28:08,791 INFO L272 TraceCheckUtils]: 0: Hoare triple {4948#true} call ULTIMATE.init(); {4979#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:28:08,791 INFO L290 TraceCheckUtils]: 1: Hoare triple {4979#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {4948#true} is VALID [2022-04-28 08:28:08,791 INFO L290 TraceCheckUtils]: 2: Hoare triple {4948#true} assume true; {4948#true} is VALID [2022-04-28 08:28:08,791 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {4948#true} {4948#true} #1270#return; {4948#true} is VALID [2022-04-28 08:28:08,791 INFO L272 TraceCheckUtils]: 4: Hoare triple {4948#true} call #t~ret213 := main(); {4948#true} is VALID [2022-04-28 08:28:08,791 INFO L290 TraceCheckUtils]: 5: Hoare triple {4948#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {4948#true} is VALID [2022-04-28 08:28:08,792 INFO L272 TraceCheckUtils]: 6: Hoare triple {4948#true} call _BLAST_init(); {4980#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:28:08,792 INFO L290 TraceCheckUtils]: 7: Hoare triple {4980#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4948#true} is VALID [2022-04-28 08:28:08,792 INFO L290 TraceCheckUtils]: 8: Hoare triple {4948#true} assume true; {4948#true} is VALID [2022-04-28 08:28:08,793 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {4948#true} {4948#true} #1216#return; {4948#true} is VALID [2022-04-28 08:28:08,793 INFO L272 TraceCheckUtils]: 10: Hoare triple {4948#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {4981#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:28:08,793 INFO L290 TraceCheckUtils]: 11: Hoare triple {4981#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {4948#true} is VALID [2022-04-28 08:28:08,793 INFO L272 TraceCheckUtils]: 12: Hoare triple {4948#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {4948#true} is VALID [2022-04-28 08:28:08,794 INFO L290 TraceCheckUtils]: 13: Hoare triple {4948#true} ~cond := #in~cond; {4948#true} is VALID [2022-04-28 08:28:08,794 INFO L290 TraceCheckUtils]: 14: Hoare triple {4948#true} assume !(0 == ~cond); {4948#true} is VALID [2022-04-28 08:28:08,794 INFO L290 TraceCheckUtils]: 15: Hoare triple {4948#true} assume true; {4948#true} is VALID [2022-04-28 08:28:08,794 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {4948#true} {4948#true} #1254#return; {4948#true} is VALID [2022-04-28 08:28:08,794 INFO L290 TraceCheckUtils]: 17: Hoare triple {4948#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {4948#true} is VALID [2022-04-28 08:28:08,794 INFO L290 TraceCheckUtils]: 18: Hoare triple {4948#true} assume true; {4948#true} is VALID [2022-04-28 08:28:08,794 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {4948#true} {4948#true} #1218#return; {4948#true} is VALID [2022-04-28 08:28:08,794 INFO L290 TraceCheckUtils]: 20: Hoare triple {4948#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {4948#true} is VALID [2022-04-28 08:28:08,794 INFO L290 TraceCheckUtils]: 21: Hoare triple {4948#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {4948#true} is VALID [2022-04-28 08:28:08,794 INFO L290 TraceCheckUtils]: 22: Hoare triple {4948#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {4948#true} is VALID [2022-04-28 08:28:08,795 INFO L272 TraceCheckUtils]: 23: Hoare triple {4948#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {4986#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:28:08,795 INFO L290 TraceCheckUtils]: 24: Hoare triple {4986#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {4948#true} is VALID [2022-04-28 08:28:08,797 INFO L272 TraceCheckUtils]: 25: Hoare triple {4948#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {4986#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:28:08,797 INFO L290 TraceCheckUtils]: 26: Hoare triple {4986#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {4948#true} is VALID [2022-04-28 08:28:08,797 INFO L290 TraceCheckUtils]: 27: Hoare triple {4948#true} assume 0 == ~__BLAST_NONDET~5; {4948#true} is VALID [2022-04-28 08:28:08,797 INFO L290 TraceCheckUtils]: 28: Hoare triple {4948#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {4994#(and (<= |IoCreateDevice_#res| 0) (<= 0 |IoCreateDevice_#res|))} is VALID [2022-04-28 08:28:08,798 INFO L290 TraceCheckUtils]: 29: Hoare triple {4994#(and (<= |IoCreateDevice_#res| 0) (<= 0 |IoCreateDevice_#res|))} assume true; {4994#(and (<= |IoCreateDevice_#res| 0) (<= 0 |IoCreateDevice_#res|))} is VALID [2022-04-28 08:28:08,799 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {4994#(and (<= |IoCreateDevice_#res| 0) (<= 0 |IoCreateDevice_#res|))} {4948#true} #1176#return; {4992#(= |KbFilter_AddDevice_#t~ret22| 0)} is VALID [2022-04-28 08:28:08,799 INFO L290 TraceCheckUtils]: 31: Hoare triple {4992#(= |KbFilter_AddDevice_#t~ret22| 0)} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {4993#(= KbFilter_AddDevice_~status~0 0)} is VALID [2022-04-28 08:28:08,800 INFO L290 TraceCheckUtils]: 32: Hoare triple {4993#(= KbFilter_AddDevice_~status~0 0)} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {4949#false} is VALID [2022-04-28 08:28:08,800 INFO L290 TraceCheckUtils]: 33: Hoare triple {4949#false} assume true; {4949#false} is VALID [2022-04-28 08:28:08,800 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {4949#false} {4948#true} #1220#return; {4949#false} is VALID [2022-04-28 08:28:08,800 INFO L290 TraceCheckUtils]: 35: Hoare triple {4949#false} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {4949#false} is VALID [2022-04-28 08:28:08,800 INFO L272 TraceCheckUtils]: 36: Hoare triple {4949#false} call stub_driver_init(); {4995#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:28:08,800 INFO L290 TraceCheckUtils]: 37: Hoare triple {4995#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4948#true} is VALID [2022-04-28 08:28:08,800 INFO L290 TraceCheckUtils]: 38: Hoare triple {4948#true} assume true; {4948#true} is VALID [2022-04-28 08:28:08,800 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {4948#true} {4949#false} #1222#return; {4949#false} is VALID [2022-04-28 08:28:08,800 INFO L290 TraceCheckUtils]: 40: Hoare triple {4949#false} assume !!(~status~5 >= 0); {4949#false} is VALID [2022-04-28 08:28:08,801 INFO L290 TraceCheckUtils]: 41: Hoare triple {4949#false} assume 0 == ~__BLAST_NONDET~0; {4949#false} is VALID [2022-04-28 08:28:08,801 INFO L272 TraceCheckUtils]: 42: Hoare triple {4949#false} call #t~ret171 := KbFilter_CreateClose(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {4949#false} is VALID [2022-04-28 08:28:08,801 INFO L290 TraceCheckUtils]: 43: Hoare triple {4949#false} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~0.base, ~irpStack~0.offset;havoc ~status~1;havoc ~devExt~1.base, ~devExt~1.offset;havoc ~tmp~0;havoc ~tmp___0~0;havoc ~tmp___1~0;call #t~mem36.base, #t~mem36.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~0.base, ~irpStack~0.offset := #t~mem36.base, #t~mem36.offset;havoc #t~mem36.base, #t~mem36.offset;call #t~mem37.base, #t~mem37.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~1.base, ~devExt~1.offset := #t~mem37.base, #t~mem37.offset;havoc #t~mem37.base, #t~mem37.offset;call #t~mem38 := read~int(~Irp.base, 24 + ~Irp.offset, 4);~status~1 := #t~mem38;havoc #t~mem38;~status~1 := ~myStatus~0;call #t~mem39 := read~int(~irpStack~0.base, ~irpStack~0.offset, 1); {4949#false} is VALID [2022-04-28 08:28:08,801 INFO L290 TraceCheckUtils]: 44: Hoare triple {4949#false} assume 0 == #t~mem39 % 256;havoc #t~mem39; {4949#false} is VALID [2022-04-28 08:28:08,801 INFO L290 TraceCheckUtils]: 45: Hoare triple {4949#false} call #t~mem41.base, #t~mem41.offset := read~$Pointer$(~devExt~1.base, 20 + ~devExt~1.offset, 4); {4949#false} is VALID [2022-04-28 08:28:08,801 INFO L290 TraceCheckUtils]: 46: Hoare triple {4949#false} assume 0 == (#t~mem41.base + #t~mem41.offset) % 4294967296;havoc #t~mem41.base, #t~mem41.offset;~status~1 := -1073741436; {4949#false} is VALID [2022-04-28 08:28:08,801 INFO L290 TraceCheckUtils]: 47: Hoare triple {4949#false} call write~int(~status~1, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~1; {4949#false} is VALID [2022-04-28 08:28:08,801 INFO L272 TraceCheckUtils]: 48: Hoare triple {4949#false} call #t~ret44 := KbFilter_DispatchPassThrough(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset); {4949#false} is VALID [2022-04-28 08:28:08,801 INFO L290 TraceCheckUtils]: 49: Hoare triple {4949#false} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~1.base, ~irpStack~1.offset;havoc ~tmp~1;call #t~mem45.base, #t~mem45.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~1.base, ~irpStack~1.offset := #t~mem45.base, #t~mem45.offset;havoc #t~mem45.base, #t~mem45.offset; {4949#false} is VALID [2022-04-28 08:28:08,802 INFO L290 TraceCheckUtils]: 50: Hoare triple {4949#false} assume !(~s~0 == ~NP~0); {4949#false} is VALID [2022-04-28 08:28:08,802 INFO L272 TraceCheckUtils]: 51: Hoare triple {4949#false} call errorFn(); {4949#false} is VALID [2022-04-28 08:28:08,802 INFO L290 TraceCheckUtils]: 52: Hoare triple {4949#false} assume !false; {4949#false} is VALID [2022-04-28 08:28:08,802 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:28:08,802 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:28:08,802 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1134847707] [2022-04-28 08:28:08,802 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1134847707] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:28:08,802 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:28:08,802 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:28:08,803 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:28:08,803 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1236778] [2022-04-28 08:28:08,803 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1236778] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:28:08,803 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:28:08,803 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:28:08,803 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1242892979] [2022-04-28 08:28:08,803 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:28:08,803 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 3.5) internal successors, (35), 4 states have internal predecessors, (35), 2 states have call successors, (11), 7 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 53 [2022-04-28 08:28:08,804 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:28:08,804 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 3.5) internal successors, (35), 4 states have internal predecessors, (35), 2 states have call successors, (11), 7 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:28:08,849 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:28:08,849 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-28 08:28:08,849 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:28:08,850 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-28 08:28:08,850 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2022-04-28 08:28:08,850 INFO L87 Difference]: Start difference. First operand 299 states and 406 transitions. Second operand has 10 states, 10 states have (on average 3.5) internal successors, (35), 4 states have internal predecessors, (35), 2 states have call successors, (11), 7 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:28:10,966 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:28:20,101 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:28:20,102 INFO L93 Difference]: Finished difference Result 599 states and 829 transitions. [2022-04-28 08:28:20,102 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 08:28:20,102 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 3.5) internal successors, (35), 4 states have internal predecessors, (35), 2 states have call successors, (11), 7 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 53 [2022-04-28 08:28:20,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:28:20,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 3.5) internal successors, (35), 4 states have internal predecessors, (35), 2 states have call successors, (11), 7 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:28:20,109 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 829 transitions. [2022-04-28 08:28:20,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 3.5) internal successors, (35), 4 states have internal predecessors, (35), 2 states have call successors, (11), 7 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:28:20,114 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 829 transitions. [2022-04-28 08:28:20,114 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 829 transitions. [2022-04-28 08:28:20,958 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 829 edges. 829 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:28:20,965 INFO L225 Difference]: With dead ends: 599 [2022-04-28 08:28:20,965 INFO L226 Difference]: Without dead ends: 348 [2022-04-28 08:28:20,966 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=64, Invalid=176, Unknown=0, NotChecked=0, Total=240 [2022-04-28 08:28:20,966 INFO L413 NwaCegarLoop]: 312 mSDtfsCounter, 397 mSDsluCounter, 480 mSDsCounter, 0 mSdLazyCounter, 1840 mSolverCounterSat, 170 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 400 SdHoareTripleChecker+Valid, 792 SdHoareTripleChecker+Invalid, 2011 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 170 IncrementalHoareTripleChecker+Valid, 1840 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.2s IncrementalHoareTripleChecker+Time [2022-04-28 08:28:20,967 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [400 Valid, 792 Invalid, 2011 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [170 Valid, 1840 Invalid, 1 Unknown, 0 Unchecked, 6.2s Time] [2022-04-28 08:28:20,970 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2022-04-28 08:28:21,004 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 303. [2022-04-28 08:28:21,004 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:28:21,005 INFO L82 GeneralOperation]: Start isEquivalent. First operand 348 states. Second operand has 303 states, 227 states have (on average 1.4361233480176212) internal successors, (326), 243 states have internal predecessors, (326), 49 states have call successors, (49), 27 states have call predecessors, (49), 26 states have return successors, (35), 35 states have call predecessors, (35), 34 states have call successors, (35) [2022-04-28 08:28:21,007 INFO L74 IsIncluded]: Start isIncluded. First operand 348 states. Second operand has 303 states, 227 states have (on average 1.4361233480176212) internal successors, (326), 243 states have internal predecessors, (326), 49 states have call successors, (49), 27 states have call predecessors, (49), 26 states have return successors, (35), 35 states have call predecessors, (35), 34 states have call successors, (35) [2022-04-28 08:28:21,008 INFO L87 Difference]: Start difference. First operand 348 states. Second operand has 303 states, 227 states have (on average 1.4361233480176212) internal successors, (326), 243 states have internal predecessors, (326), 49 states have call successors, (49), 27 states have call predecessors, (49), 26 states have return successors, (35), 35 states have call predecessors, (35), 34 states have call successors, (35) [2022-04-28 08:28:21,016 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:28:21,016 INFO L93 Difference]: Finished difference Result 348 states and 475 transitions. [2022-04-28 08:28:21,016 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 475 transitions. [2022-04-28 08:28:21,017 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:28:21,017 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:28:21,018 INFO L74 IsIncluded]: Start isIncluded. First operand has 303 states, 227 states have (on average 1.4361233480176212) internal successors, (326), 243 states have internal predecessors, (326), 49 states have call successors, (49), 27 states have call predecessors, (49), 26 states have return successors, (35), 35 states have call predecessors, (35), 34 states have call successors, (35) Second operand 348 states. [2022-04-28 08:28:21,018 INFO L87 Difference]: Start difference. First operand has 303 states, 227 states have (on average 1.4361233480176212) internal successors, (326), 243 states have internal predecessors, (326), 49 states have call successors, (49), 27 states have call predecessors, (49), 26 states have return successors, (35), 35 states have call predecessors, (35), 34 states have call successors, (35) Second operand 348 states. [2022-04-28 08:28:21,025 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:28:21,025 INFO L93 Difference]: Finished difference Result 348 states and 475 transitions. [2022-04-28 08:28:21,025 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 475 transitions. [2022-04-28 08:28:21,026 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:28:21,026 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:28:21,026 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:28:21,026 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:28:21,027 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 227 states have (on average 1.4361233480176212) internal successors, (326), 243 states have internal predecessors, (326), 49 states have call successors, (49), 27 states have call predecessors, (49), 26 states have return successors, (35), 35 states have call predecessors, (35), 34 states have call successors, (35) [2022-04-28 08:28:21,033 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 410 transitions. [2022-04-28 08:28:21,033 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 410 transitions. Word has length 53 [2022-04-28 08:28:21,034 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:28:21,034 INFO L495 AbstractCegarLoop]: Abstraction has 303 states and 410 transitions. [2022-04-28 08:28:21,034 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 3.5) internal successors, (35), 4 states have internal predecessors, (35), 2 states have call successors, (11), 7 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:28:21,034 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 303 states and 410 transitions. [2022-04-28 08:28:21,565 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 410 edges. 410 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:28:21,565 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 410 transitions. [2022-04-28 08:28:21,566 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-28 08:28:21,566 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:28:21,566 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:28:21,566 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-04-28 08:28:21,566 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:28:21,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:28:21,567 INFO L85 PathProgramCache]: Analyzing trace with hash 1078281185, now seen corresponding path program 1 times [2022-04-28 08:28:21,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:28:21,567 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1050162110] [2022-04-28 08:28:21,567 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:28:21,567 INFO L85 PathProgramCache]: Analyzing trace with hash 1078281185, now seen corresponding path program 2 times [2022-04-28 08:28:21,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:28:21,568 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [788507065] [2022-04-28 08:28:21,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:28:21,568 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:28:21,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:21,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:28:21,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:21,729 INFO L290 TraceCheckUtils]: 0: Hoare triple {7544#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {7512#true} is VALID [2022-04-28 08:28:21,729 INFO L290 TraceCheckUtils]: 1: Hoare triple {7512#true} assume true; {7512#true} is VALID [2022-04-28 08:28:21,730 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7512#true} {7512#true} #1270#return; {7512#true} is VALID [2022-04-28 08:28:21,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:28:21,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:21,759 INFO L290 TraceCheckUtils]: 0: Hoare triple {7545#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {7512#true} is VALID [2022-04-28 08:28:21,759 INFO L290 TraceCheckUtils]: 1: Hoare triple {7512#true} assume true; {7512#true} is VALID [2022-04-28 08:28:21,759 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7512#true} {7512#true} #1216#return; {7512#true} is VALID [2022-04-28 08:28:21,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:28:21,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:21,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:28:21,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:21,811 INFO L290 TraceCheckUtils]: 0: Hoare triple {7512#true} ~cond := #in~cond; {7512#true} is VALID [2022-04-28 08:28:21,811 INFO L290 TraceCheckUtils]: 1: Hoare triple {7512#true} assume !(0 == ~cond); {7512#true} is VALID [2022-04-28 08:28:21,812 INFO L290 TraceCheckUtils]: 2: Hoare triple {7512#true} assume true; {7512#true} is VALID [2022-04-28 08:28:21,812 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {7512#true} {7512#true} #1254#return; {7512#true} is VALID [2022-04-28 08:28:21,812 INFO L290 TraceCheckUtils]: 0: Hoare triple {7546#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {7512#true} is VALID [2022-04-28 08:28:21,812 INFO L272 TraceCheckUtils]: 1: Hoare triple {7512#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {7512#true} is VALID [2022-04-28 08:28:21,812 INFO L290 TraceCheckUtils]: 2: Hoare triple {7512#true} ~cond := #in~cond; {7512#true} is VALID [2022-04-28 08:28:21,812 INFO L290 TraceCheckUtils]: 3: Hoare triple {7512#true} assume !(0 == ~cond); {7512#true} is VALID [2022-04-28 08:28:21,812 INFO L290 TraceCheckUtils]: 4: Hoare triple {7512#true} assume true; {7512#true} is VALID [2022-04-28 08:28:21,812 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {7512#true} {7512#true} #1254#return; {7512#true} is VALID [2022-04-28 08:28:21,812 INFO L290 TraceCheckUtils]: 6: Hoare triple {7512#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {7512#true} is VALID [2022-04-28 08:28:21,812 INFO L290 TraceCheckUtils]: 7: Hoare triple {7512#true} assume true; {7512#true} is VALID [2022-04-28 08:28:21,813 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {7512#true} {7512#true} #1218#return; {7512#true} is VALID [2022-04-28 08:28:21,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:28:21,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:21,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:28:21,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:21,840 INFO L290 TraceCheckUtils]: 0: Hoare triple {7551#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {7512#true} is VALID [2022-04-28 08:28:21,840 INFO L290 TraceCheckUtils]: 1: Hoare triple {7512#true} assume !(0 == ~__BLAST_NONDET~5); {7512#true} is VALID [2022-04-28 08:28:21,840 INFO L290 TraceCheckUtils]: 2: Hoare triple {7512#true} #res := -1073741823; {7512#true} is VALID [2022-04-28 08:28:21,840 INFO L290 TraceCheckUtils]: 3: Hoare triple {7512#true} assume true; {7512#true} is VALID [2022-04-28 08:28:21,840 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {7512#true} {7512#true} #1176#return; {7512#true} is VALID [2022-04-28 08:28:21,841 INFO L290 TraceCheckUtils]: 0: Hoare triple {7551#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {7512#true} is VALID [2022-04-28 08:28:21,842 INFO L272 TraceCheckUtils]: 1: Hoare triple {7512#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {7551#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:28:21,842 INFO L290 TraceCheckUtils]: 2: Hoare triple {7551#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {7512#true} is VALID [2022-04-28 08:28:21,842 INFO L290 TraceCheckUtils]: 3: Hoare triple {7512#true} assume !(0 == ~__BLAST_NONDET~5); {7512#true} is VALID [2022-04-28 08:28:21,842 INFO L290 TraceCheckUtils]: 4: Hoare triple {7512#true} #res := -1073741823; {7512#true} is VALID [2022-04-28 08:28:21,842 INFO L290 TraceCheckUtils]: 5: Hoare triple {7512#true} assume true; {7512#true} is VALID [2022-04-28 08:28:21,842 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {7512#true} {7512#true} #1176#return; {7512#true} is VALID [2022-04-28 08:28:21,842 INFO L290 TraceCheckUtils]: 7: Hoare triple {7512#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {7512#true} is VALID [2022-04-28 08:28:21,842 INFO L290 TraceCheckUtils]: 8: Hoare triple {7512#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {7512#true} is VALID [2022-04-28 08:28:21,843 INFO L290 TraceCheckUtils]: 9: Hoare triple {7512#true} assume true; {7512#true} is VALID [2022-04-28 08:28:21,843 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {7512#true} {7512#true} #1220#return; {7512#true} is VALID [2022-04-28 08:28:21,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:28:21,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:21,866 INFO L290 TraceCheckUtils]: 0: Hoare triple {7557#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,867 INFO L290 TraceCheckUtils]: 1: Hoare triple {7543#(= ~s~0 ~NP~0)} assume true; {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,867 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7543#(= ~s~0 ~NP~0)} {7512#true} #1222#return; {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,868 INFO L272 TraceCheckUtils]: 0: Hoare triple {7512#true} call ULTIMATE.init(); {7544#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:28:21,868 INFO L290 TraceCheckUtils]: 1: Hoare triple {7544#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {7512#true} is VALID [2022-04-28 08:28:21,868 INFO L290 TraceCheckUtils]: 2: Hoare triple {7512#true} assume true; {7512#true} is VALID [2022-04-28 08:28:21,869 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {7512#true} {7512#true} #1270#return; {7512#true} is VALID [2022-04-28 08:28:21,869 INFO L272 TraceCheckUtils]: 4: Hoare triple {7512#true} call #t~ret213 := main(); {7512#true} is VALID [2022-04-28 08:28:21,869 INFO L290 TraceCheckUtils]: 5: Hoare triple {7512#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {7512#true} is VALID [2022-04-28 08:28:21,870 INFO L272 TraceCheckUtils]: 6: Hoare triple {7512#true} call _BLAST_init(); {7545#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:28:21,870 INFO L290 TraceCheckUtils]: 7: Hoare triple {7545#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {7512#true} is VALID [2022-04-28 08:28:21,870 INFO L290 TraceCheckUtils]: 8: Hoare triple {7512#true} assume true; {7512#true} is VALID [2022-04-28 08:28:21,870 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {7512#true} {7512#true} #1216#return; {7512#true} is VALID [2022-04-28 08:28:21,871 INFO L272 TraceCheckUtils]: 10: Hoare triple {7512#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {7546#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:28:21,871 INFO L290 TraceCheckUtils]: 11: Hoare triple {7546#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {7512#true} is VALID [2022-04-28 08:28:21,871 INFO L272 TraceCheckUtils]: 12: Hoare triple {7512#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {7512#true} is VALID [2022-04-28 08:28:21,871 INFO L290 TraceCheckUtils]: 13: Hoare triple {7512#true} ~cond := #in~cond; {7512#true} is VALID [2022-04-28 08:28:21,871 INFO L290 TraceCheckUtils]: 14: Hoare triple {7512#true} assume !(0 == ~cond); {7512#true} is VALID [2022-04-28 08:28:21,871 INFO L290 TraceCheckUtils]: 15: Hoare triple {7512#true} assume true; {7512#true} is VALID [2022-04-28 08:28:21,872 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {7512#true} {7512#true} #1254#return; {7512#true} is VALID [2022-04-28 08:28:21,875 INFO L290 TraceCheckUtils]: 17: Hoare triple {7512#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {7512#true} is VALID [2022-04-28 08:28:21,876 INFO L290 TraceCheckUtils]: 18: Hoare triple {7512#true} assume true; {7512#true} is VALID [2022-04-28 08:28:21,880 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {7512#true} {7512#true} #1218#return; {7512#true} is VALID [2022-04-28 08:28:21,881 INFO L290 TraceCheckUtils]: 20: Hoare triple {7512#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {7512#true} is VALID [2022-04-28 08:28:21,881 INFO L290 TraceCheckUtils]: 21: Hoare triple {7512#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {7512#true} is VALID [2022-04-28 08:28:21,881 INFO L290 TraceCheckUtils]: 22: Hoare triple {7512#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {7512#true} is VALID [2022-04-28 08:28:21,883 INFO L272 TraceCheckUtils]: 23: Hoare triple {7512#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {7551#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:28:21,885 INFO L290 TraceCheckUtils]: 24: Hoare triple {7551#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {7512#true} is VALID [2022-04-28 08:28:21,886 INFO L272 TraceCheckUtils]: 25: Hoare triple {7512#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {7551#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:28:21,887 INFO L290 TraceCheckUtils]: 26: Hoare triple {7551#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {7512#true} is VALID [2022-04-28 08:28:21,887 INFO L290 TraceCheckUtils]: 27: Hoare triple {7512#true} assume !(0 == ~__BLAST_NONDET~5); {7512#true} is VALID [2022-04-28 08:28:21,887 INFO L290 TraceCheckUtils]: 28: Hoare triple {7512#true} #res := -1073741823; {7512#true} is VALID [2022-04-28 08:28:21,887 INFO L290 TraceCheckUtils]: 29: Hoare triple {7512#true} assume true; {7512#true} is VALID [2022-04-28 08:28:21,887 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {7512#true} {7512#true} #1176#return; {7512#true} is VALID [2022-04-28 08:28:21,887 INFO L290 TraceCheckUtils]: 31: Hoare triple {7512#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {7512#true} is VALID [2022-04-28 08:28:21,887 INFO L290 TraceCheckUtils]: 32: Hoare triple {7512#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {7512#true} is VALID [2022-04-28 08:28:21,887 INFO L290 TraceCheckUtils]: 33: Hoare triple {7512#true} assume true; {7512#true} is VALID [2022-04-28 08:28:21,887 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {7512#true} {7512#true} #1220#return; {7512#true} is VALID [2022-04-28 08:28:21,887 INFO L290 TraceCheckUtils]: 35: Hoare triple {7512#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {7512#true} is VALID [2022-04-28 08:28:21,890 INFO L272 TraceCheckUtils]: 36: Hoare triple {7512#true} call stub_driver_init(); {7557#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:28:21,890 INFO L290 TraceCheckUtils]: 37: Hoare triple {7557#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,890 INFO L290 TraceCheckUtils]: 38: Hoare triple {7543#(= ~s~0 ~NP~0)} assume true; {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,891 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {7543#(= ~s~0 ~NP~0)} {7512#true} #1222#return; {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,891 INFO L290 TraceCheckUtils]: 40: Hoare triple {7543#(= ~s~0 ~NP~0)} assume !!(~status~5 >= 0); {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,891 INFO L290 TraceCheckUtils]: 41: Hoare triple {7543#(= ~s~0 ~NP~0)} assume 0 == ~__BLAST_NONDET~0; {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,892 INFO L272 TraceCheckUtils]: 42: Hoare triple {7543#(= ~s~0 ~NP~0)} call #t~ret171 := KbFilter_CreateClose(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,892 INFO L290 TraceCheckUtils]: 43: Hoare triple {7543#(= ~s~0 ~NP~0)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~0.base, ~irpStack~0.offset;havoc ~status~1;havoc ~devExt~1.base, ~devExt~1.offset;havoc ~tmp~0;havoc ~tmp___0~0;havoc ~tmp___1~0;call #t~mem36.base, #t~mem36.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~0.base, ~irpStack~0.offset := #t~mem36.base, #t~mem36.offset;havoc #t~mem36.base, #t~mem36.offset;call #t~mem37.base, #t~mem37.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~1.base, ~devExt~1.offset := #t~mem37.base, #t~mem37.offset;havoc #t~mem37.base, #t~mem37.offset;call #t~mem38 := read~int(~Irp.base, 24 + ~Irp.offset, 4);~status~1 := #t~mem38;havoc #t~mem38;~status~1 := ~myStatus~0;call #t~mem39 := read~int(~irpStack~0.base, ~irpStack~0.offset, 1); {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,892 INFO L290 TraceCheckUtils]: 44: Hoare triple {7543#(= ~s~0 ~NP~0)} assume 0 == #t~mem39 % 256;havoc #t~mem39; {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,893 INFO L290 TraceCheckUtils]: 45: Hoare triple {7543#(= ~s~0 ~NP~0)} call #t~mem41.base, #t~mem41.offset := read~$Pointer$(~devExt~1.base, 20 + ~devExt~1.offset, 4); {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,893 INFO L290 TraceCheckUtils]: 46: Hoare triple {7543#(= ~s~0 ~NP~0)} assume 0 == (#t~mem41.base + #t~mem41.offset) % 4294967296;havoc #t~mem41.base, #t~mem41.offset;~status~1 := -1073741436; {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,893 INFO L290 TraceCheckUtils]: 47: Hoare triple {7543#(= ~s~0 ~NP~0)} call write~int(~status~1, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~1; {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,894 INFO L272 TraceCheckUtils]: 48: Hoare triple {7543#(= ~s~0 ~NP~0)} call #t~ret44 := KbFilter_DispatchPassThrough(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset); {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,894 INFO L290 TraceCheckUtils]: 49: Hoare triple {7543#(= ~s~0 ~NP~0)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~1.base, ~irpStack~1.offset;havoc ~tmp~1;call #t~mem45.base, #t~mem45.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~1.base, ~irpStack~1.offset := #t~mem45.base, #t~mem45.offset;havoc #t~mem45.base, #t~mem45.offset; {7543#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:28:21,894 INFO L290 TraceCheckUtils]: 50: Hoare triple {7543#(= ~s~0 ~NP~0)} assume !(~s~0 == ~NP~0); {7513#false} is VALID [2022-04-28 08:28:21,894 INFO L272 TraceCheckUtils]: 51: Hoare triple {7513#false} call errorFn(); {7513#false} is VALID [2022-04-28 08:28:21,895 INFO L290 TraceCheckUtils]: 52: Hoare triple {7513#false} assume !false; {7513#false} is VALID [2022-04-28 08:28:21,896 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:28:21,896 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:28:21,897 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [788507065] [2022-04-28 08:28:21,897 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [788507065] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:28:21,897 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:28:21,897 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:28:21,897 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:28:21,898 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1050162110] [2022-04-28 08:28:21,898 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1050162110] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:28:21,898 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:28:21,898 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:28:21,898 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1732912201] [2022-04-28 08:28:21,898 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:28:21,899 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 3 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 53 [2022-04-28 08:28:21,899 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:28:21,899 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 3 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:28:21,944 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:28:21,945 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 08:28:21,945 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:28:21,946 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 08:28:21,946 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-04-28 08:28:21,946 INFO L87 Difference]: Start difference. First operand 303 states and 410 transitions. Second operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 3 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:28:24,102 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:28:32,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:28:32,242 INFO L93 Difference]: Finished difference Result 492 states and 667 transitions. [2022-04-28 08:28:32,242 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 08:28:32,242 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 3 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 53 [2022-04-28 08:28:32,243 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:28:32,243 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 3 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:28:32,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 667 transitions. [2022-04-28 08:28:32,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 3 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:28:32,269 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 667 transitions. [2022-04-28 08:28:32,269 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 667 transitions. [2022-04-28 08:28:32,956 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 667 edges. 667 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:28:32,967 INFO L225 Difference]: With dead ends: 492 [2022-04-28 08:28:32,967 INFO L226 Difference]: Without dead ends: 431 [2022-04-28 08:28:32,967 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=63, Invalid=119, Unknown=0, NotChecked=0, Total=182 [2022-04-28 08:28:32,969 INFO L413 NwaCegarLoop]: 365 mSDtfsCounter, 659 mSDsluCounter, 282 mSDsCounter, 0 mSdLazyCounter, 1236 mSolverCounterSat, 219 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 664 SdHoareTripleChecker+Valid, 647 SdHoareTripleChecker+Invalid, 1456 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 219 IncrementalHoareTripleChecker+Valid, 1236 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.3s IncrementalHoareTripleChecker+Time [2022-04-28 08:28:32,970 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [664 Valid, 647 Invalid, 1456 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [219 Valid, 1236 Invalid, 1 Unknown, 0 Unchecked, 5.3s Time] [2022-04-28 08:28:32,971 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 431 states. [2022-04-28 08:28:33,006 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 431 to 374. [2022-04-28 08:28:33,006 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:28:33,007 INFO L82 GeneralOperation]: Start isEquivalent. First operand 431 states. Second operand has 374 states, 288 states have (on average 1.3715277777777777) internal successors, (395), 292 states have internal predecessors, (395), 48 states have call successors, (48), 33 states have call predecessors, (48), 37 states have return successors, (55), 51 states have call predecessors, (55), 39 states have call successors, (55) [2022-04-28 08:28:33,008 INFO L74 IsIncluded]: Start isIncluded. First operand 431 states. Second operand has 374 states, 288 states have (on average 1.3715277777777777) internal successors, (395), 292 states have internal predecessors, (395), 48 states have call successors, (48), 33 states have call predecessors, (48), 37 states have return successors, (55), 51 states have call predecessors, (55), 39 states have call successors, (55) [2022-04-28 08:28:33,008 INFO L87 Difference]: Start difference. First operand 431 states. Second operand has 374 states, 288 states have (on average 1.3715277777777777) internal successors, (395), 292 states have internal predecessors, (395), 48 states have call successors, (48), 33 states have call predecessors, (48), 37 states have return successors, (55), 51 states have call predecessors, (55), 39 states have call successors, (55) [2022-04-28 08:28:33,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:28:33,018 INFO L93 Difference]: Finished difference Result 431 states and 578 transitions. [2022-04-28 08:28:33,018 INFO L276 IsEmpty]: Start isEmpty. Operand 431 states and 578 transitions. [2022-04-28 08:28:33,019 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:28:33,019 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:28:33,020 INFO L74 IsIncluded]: Start isIncluded. First operand has 374 states, 288 states have (on average 1.3715277777777777) internal successors, (395), 292 states have internal predecessors, (395), 48 states have call successors, (48), 33 states have call predecessors, (48), 37 states have return successors, (55), 51 states have call predecessors, (55), 39 states have call successors, (55) Second operand 431 states. [2022-04-28 08:28:33,021 INFO L87 Difference]: Start difference. First operand has 374 states, 288 states have (on average 1.3715277777777777) internal successors, (395), 292 states have internal predecessors, (395), 48 states have call successors, (48), 33 states have call predecessors, (48), 37 states have return successors, (55), 51 states have call predecessors, (55), 39 states have call successors, (55) Second operand 431 states. [2022-04-28 08:28:33,030 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:28:33,031 INFO L93 Difference]: Finished difference Result 431 states and 578 transitions. [2022-04-28 08:28:33,031 INFO L276 IsEmpty]: Start isEmpty. Operand 431 states and 578 transitions. [2022-04-28 08:28:33,031 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:28:33,032 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:28:33,032 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:28:33,032 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:28:33,033 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 374 states, 288 states have (on average 1.3715277777777777) internal successors, (395), 292 states have internal predecessors, (395), 48 states have call successors, (48), 33 states have call predecessors, (48), 37 states have return successors, (55), 51 states have call predecessors, (55), 39 states have call successors, (55) [2022-04-28 08:28:33,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 374 states to 374 states and 498 transitions. [2022-04-28 08:28:33,041 INFO L78 Accepts]: Start accepts. Automaton has 374 states and 498 transitions. Word has length 53 [2022-04-28 08:28:33,042 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:28:33,042 INFO L495 AbstractCegarLoop]: Abstraction has 374 states and 498 transitions. [2022-04-28 08:28:33,042 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 3 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:28:33,042 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 374 states and 498 transitions. [2022-04-28 08:28:33,693 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 498 edges. 498 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:28:33,693 INFO L276 IsEmpty]: Start isEmpty. Operand 374 states and 498 transitions. [2022-04-28 08:28:33,694 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-04-28 08:28:33,694 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:28:33,694 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:28:33,695 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-04-28 08:28:33,695 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:28:33,695 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:28:33,695 INFO L85 PathProgramCache]: Analyzing trace with hash 17478568, now seen corresponding path program 1 times [2022-04-28 08:28:33,695 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:28:33,695 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1435116504] [2022-04-28 08:28:33,695 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:28:33,696 INFO L85 PathProgramCache]: Analyzing trace with hash 17478568, now seen corresponding path program 2 times [2022-04-28 08:28:33,696 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:28:33,696 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1285399413] [2022-04-28 08:28:33,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:28:33,696 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:28:33,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:33,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:28:33,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:33,828 INFO L290 TraceCheckUtils]: 0: Hoare triple {10208#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {10171#true} is VALID [2022-04-28 08:28:33,829 INFO L290 TraceCheckUtils]: 1: Hoare triple {10171#true} assume true; {10171#true} is VALID [2022-04-28 08:28:33,829 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10171#true} {10171#true} #1270#return; {10171#true} is VALID [2022-04-28 08:28:33,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:28:33,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:33,858 INFO L290 TraceCheckUtils]: 0: Hoare triple {10209#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10171#true} is VALID [2022-04-28 08:28:33,858 INFO L290 TraceCheckUtils]: 1: Hoare triple {10171#true} assume true; {10171#true} is VALID [2022-04-28 08:28:33,858 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10171#true} {10171#true} #1216#return; {10171#true} is VALID [2022-04-28 08:28:33,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:28:33,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:33,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:28:33,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:33,886 INFO L290 TraceCheckUtils]: 0: Hoare triple {10171#true} ~cond := #in~cond; {10171#true} is VALID [2022-04-28 08:28:33,886 INFO L290 TraceCheckUtils]: 1: Hoare triple {10171#true} assume !(0 == ~cond); {10171#true} is VALID [2022-04-28 08:28:33,886 INFO L290 TraceCheckUtils]: 2: Hoare triple {10171#true} assume true; {10171#true} is VALID [2022-04-28 08:28:33,886 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10171#true} {10171#true} #1254#return; {10171#true} is VALID [2022-04-28 08:28:33,887 INFO L290 TraceCheckUtils]: 0: Hoare triple {10210#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {10171#true} is VALID [2022-04-28 08:28:33,887 INFO L272 TraceCheckUtils]: 1: Hoare triple {10171#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {10171#true} is VALID [2022-04-28 08:28:33,887 INFO L290 TraceCheckUtils]: 2: Hoare triple {10171#true} ~cond := #in~cond; {10171#true} is VALID [2022-04-28 08:28:33,887 INFO L290 TraceCheckUtils]: 3: Hoare triple {10171#true} assume !(0 == ~cond); {10171#true} is VALID [2022-04-28 08:28:33,887 INFO L290 TraceCheckUtils]: 4: Hoare triple {10171#true} assume true; {10171#true} is VALID [2022-04-28 08:28:33,887 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {10171#true} {10171#true} #1254#return; {10171#true} is VALID [2022-04-28 08:28:33,887 INFO L290 TraceCheckUtils]: 6: Hoare triple {10171#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {10171#true} is VALID [2022-04-28 08:28:33,887 INFO L290 TraceCheckUtils]: 7: Hoare triple {10171#true} assume true; {10171#true} is VALID [2022-04-28 08:28:33,887 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {10171#true} {10171#true} #1218#return; {10171#true} is VALID [2022-04-28 08:28:33,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:28:33,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:33,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:28:33,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:33,913 INFO L290 TraceCheckUtils]: 0: Hoare triple {10215#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {10171#true} is VALID [2022-04-28 08:28:33,913 INFO L290 TraceCheckUtils]: 1: Hoare triple {10171#true} assume !(0 == ~__BLAST_NONDET~5); {10171#true} is VALID [2022-04-28 08:28:33,913 INFO L290 TraceCheckUtils]: 2: Hoare triple {10171#true} #res := -1073741823; {10171#true} is VALID [2022-04-28 08:28:33,913 INFO L290 TraceCheckUtils]: 3: Hoare triple {10171#true} assume true; {10171#true} is VALID [2022-04-28 08:28:33,913 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {10171#true} {10171#true} #1176#return; {10171#true} is VALID [2022-04-28 08:28:33,913 INFO L290 TraceCheckUtils]: 0: Hoare triple {10215#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {10171#true} is VALID [2022-04-28 08:28:33,914 INFO L272 TraceCheckUtils]: 1: Hoare triple {10171#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {10215#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:28:33,915 INFO L290 TraceCheckUtils]: 2: Hoare triple {10215#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {10171#true} is VALID [2022-04-28 08:28:33,915 INFO L290 TraceCheckUtils]: 3: Hoare triple {10171#true} assume !(0 == ~__BLAST_NONDET~5); {10171#true} is VALID [2022-04-28 08:28:33,915 INFO L290 TraceCheckUtils]: 4: Hoare triple {10171#true} #res := -1073741823; {10171#true} is VALID [2022-04-28 08:28:33,915 INFO L290 TraceCheckUtils]: 5: Hoare triple {10171#true} assume true; {10171#true} is VALID [2022-04-28 08:28:33,915 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {10171#true} {10171#true} #1176#return; {10171#true} is VALID [2022-04-28 08:28:33,915 INFO L290 TraceCheckUtils]: 7: Hoare triple {10171#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {10171#true} is VALID [2022-04-28 08:28:33,915 INFO L290 TraceCheckUtils]: 8: Hoare triple {10171#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {10171#true} is VALID [2022-04-28 08:28:33,915 INFO L290 TraceCheckUtils]: 9: Hoare triple {10171#true} assume true; {10171#true} is VALID [2022-04-28 08:28:33,915 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {10171#true} {10171#true} #1220#return; {10171#true} is VALID [2022-04-28 08:28:33,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:28:33,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:33,941 INFO L290 TraceCheckUtils]: 0: Hoare triple {10221#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,942 INFO L290 TraceCheckUtils]: 1: Hoare triple {10202#(= ~compRegistered~0 0)} assume true; {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,942 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10202#(= ~compRegistered~0 0)} {10171#true} #1222#return; {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-04-28 08:28:33,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:33,952 INFO L290 TraceCheckUtils]: 0: Hoare triple {10210#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {10171#true} is VALID [2022-04-28 08:28:33,953 INFO L290 TraceCheckUtils]: 1: Hoare triple {10171#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {10171#true} is VALID [2022-04-28 08:28:33,953 INFO L290 TraceCheckUtils]: 2: Hoare triple {10171#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {10171#true} is VALID [2022-04-28 08:28:33,953 INFO L290 TraceCheckUtils]: 3: Hoare triple {10171#true} assume #res.base == dest.base && #res.offset == dest.offset; {10171#true} is VALID [2022-04-28 08:28:33,958 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {10171#true} {10202#(= ~compRegistered~0 0)} #1186#return; {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,959 INFO L272 TraceCheckUtils]: 0: Hoare triple {10171#true} call ULTIMATE.init(); {10208#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:28:33,959 INFO L290 TraceCheckUtils]: 1: Hoare triple {10208#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {10171#true} is VALID [2022-04-28 08:28:33,960 INFO L290 TraceCheckUtils]: 2: Hoare triple {10171#true} assume true; {10171#true} is VALID [2022-04-28 08:28:33,960 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10171#true} {10171#true} #1270#return; {10171#true} is VALID [2022-04-28 08:28:33,960 INFO L272 TraceCheckUtils]: 4: Hoare triple {10171#true} call #t~ret213 := main(); {10171#true} is VALID [2022-04-28 08:28:33,960 INFO L290 TraceCheckUtils]: 5: Hoare triple {10171#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {10171#true} is VALID [2022-04-28 08:28:33,961 INFO L272 TraceCheckUtils]: 6: Hoare triple {10171#true} call _BLAST_init(); {10209#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:28:33,961 INFO L290 TraceCheckUtils]: 7: Hoare triple {10209#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10171#true} is VALID [2022-04-28 08:28:33,961 INFO L290 TraceCheckUtils]: 8: Hoare triple {10171#true} assume true; {10171#true} is VALID [2022-04-28 08:28:33,961 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {10171#true} {10171#true} #1216#return; {10171#true} is VALID [2022-04-28 08:28:33,962 INFO L272 TraceCheckUtils]: 10: Hoare triple {10171#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {10210#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:28:33,962 INFO L290 TraceCheckUtils]: 11: Hoare triple {10210#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {10171#true} is VALID [2022-04-28 08:28:33,962 INFO L272 TraceCheckUtils]: 12: Hoare triple {10171#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {10171#true} is VALID [2022-04-28 08:28:33,962 INFO L290 TraceCheckUtils]: 13: Hoare triple {10171#true} ~cond := #in~cond; {10171#true} is VALID [2022-04-28 08:28:33,962 INFO L290 TraceCheckUtils]: 14: Hoare triple {10171#true} assume !(0 == ~cond); {10171#true} is VALID [2022-04-28 08:28:33,962 INFO L290 TraceCheckUtils]: 15: Hoare triple {10171#true} assume true; {10171#true} is VALID [2022-04-28 08:28:33,962 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {10171#true} {10171#true} #1254#return; {10171#true} is VALID [2022-04-28 08:28:33,962 INFO L290 TraceCheckUtils]: 17: Hoare triple {10171#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {10171#true} is VALID [2022-04-28 08:28:33,962 INFO L290 TraceCheckUtils]: 18: Hoare triple {10171#true} assume true; {10171#true} is VALID [2022-04-28 08:28:33,962 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {10171#true} {10171#true} #1218#return; {10171#true} is VALID [2022-04-28 08:28:33,963 INFO L290 TraceCheckUtils]: 20: Hoare triple {10171#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {10171#true} is VALID [2022-04-28 08:28:33,963 INFO L290 TraceCheckUtils]: 21: Hoare triple {10171#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {10171#true} is VALID [2022-04-28 08:28:33,963 INFO L290 TraceCheckUtils]: 22: Hoare triple {10171#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {10171#true} is VALID [2022-04-28 08:28:33,964 INFO L272 TraceCheckUtils]: 23: Hoare triple {10171#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {10215#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:28:33,964 INFO L290 TraceCheckUtils]: 24: Hoare triple {10215#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {10171#true} is VALID [2022-04-28 08:28:33,965 INFO L272 TraceCheckUtils]: 25: Hoare triple {10171#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {10215#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:28:33,965 INFO L290 TraceCheckUtils]: 26: Hoare triple {10215#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {10171#true} is VALID [2022-04-28 08:28:33,965 INFO L290 TraceCheckUtils]: 27: Hoare triple {10171#true} assume !(0 == ~__BLAST_NONDET~5); {10171#true} is VALID [2022-04-28 08:28:33,965 INFO L290 TraceCheckUtils]: 28: Hoare triple {10171#true} #res := -1073741823; {10171#true} is VALID [2022-04-28 08:28:33,965 INFO L290 TraceCheckUtils]: 29: Hoare triple {10171#true} assume true; {10171#true} is VALID [2022-04-28 08:28:33,965 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {10171#true} {10171#true} #1176#return; {10171#true} is VALID [2022-04-28 08:28:33,965 INFO L290 TraceCheckUtils]: 31: Hoare triple {10171#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {10171#true} is VALID [2022-04-28 08:28:33,965 INFO L290 TraceCheckUtils]: 32: Hoare triple {10171#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {10171#true} is VALID [2022-04-28 08:28:33,965 INFO L290 TraceCheckUtils]: 33: Hoare triple {10171#true} assume true; {10171#true} is VALID [2022-04-28 08:28:33,965 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {10171#true} {10171#true} #1220#return; {10171#true} is VALID [2022-04-28 08:28:33,965 INFO L290 TraceCheckUtils]: 35: Hoare triple {10171#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {10171#true} is VALID [2022-04-28 08:28:33,966 INFO L272 TraceCheckUtils]: 36: Hoare triple {10171#true} call stub_driver_init(); {10221#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:28:33,966 INFO L290 TraceCheckUtils]: 37: Hoare triple {10221#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,967 INFO L290 TraceCheckUtils]: 38: Hoare triple {10202#(= ~compRegistered~0 0)} assume true; {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,967 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {10202#(= ~compRegistered~0 0)} {10171#true} #1222#return; {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,967 INFO L290 TraceCheckUtils]: 40: Hoare triple {10202#(= ~compRegistered~0 0)} assume !!(~status~5 >= 0); {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,967 INFO L290 TraceCheckUtils]: 41: Hoare triple {10202#(= ~compRegistered~0 0)} assume !(0 == ~__BLAST_NONDET~0); {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,968 INFO L290 TraceCheckUtils]: 42: Hoare triple {10202#(= ~compRegistered~0 0)} assume !(1 == ~__BLAST_NONDET~0); {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,968 INFO L290 TraceCheckUtils]: 43: Hoare triple {10202#(= ~compRegistered~0 0)} assume !(2 == ~__BLAST_NONDET~0); {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,968 INFO L290 TraceCheckUtils]: 44: Hoare triple {10202#(= ~compRegistered~0 0)} assume 3 == ~__BLAST_NONDET~0; {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,969 INFO L272 TraceCheckUtils]: 45: Hoare triple {10202#(= ~compRegistered~0 0)} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,969 INFO L290 TraceCheckUtils]: 46: Hoare triple {10202#(= ~compRegistered~0 0)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,969 INFO L290 TraceCheckUtils]: 47: Hoare triple {10202#(= ~compRegistered~0 0)} assume 0 == #t~mem81 % 256;havoc #t~mem81; {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,971 INFO L290 TraceCheckUtils]: 48: Hoare triple {10202#(= ~compRegistered~0 0)} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,973 INFO L272 TraceCheckUtils]: 49: Hoare triple {10202#(= ~compRegistered~0 0)} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {10210#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:28:33,974 INFO L290 TraceCheckUtils]: 50: Hoare triple {10210#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {10171#true} is VALID [2022-04-28 08:28:33,974 INFO L290 TraceCheckUtils]: 51: Hoare triple {10171#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {10171#true} is VALID [2022-04-28 08:28:33,974 INFO L290 TraceCheckUtils]: 52: Hoare triple {10171#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {10171#true} is VALID [2022-04-28 08:28:33,974 INFO L290 TraceCheckUtils]: 53: Hoare triple {10171#true} assume #res.base == dest.base && #res.offset == dest.offset; {10171#true} is VALID [2022-04-28 08:28:33,975 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {10171#true} {10202#(= ~compRegistered~0 0)} #1186#return; {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,975 INFO L290 TraceCheckUtils]: 55: Hoare triple {10202#(= ~compRegistered~0 0)} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,975 INFO L290 TraceCheckUtils]: 56: Hoare triple {10202#(= ~compRegistered~0 0)} assume !(~s~0 != ~NP~0); {10202#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:28:33,976 INFO L290 TraceCheckUtils]: 57: Hoare triple {10202#(= ~compRegistered~0 0)} assume 0 != ~compRegistered~0; {10172#false} is VALID [2022-04-28 08:28:33,976 INFO L272 TraceCheckUtils]: 58: Hoare triple {10172#false} call errorFn(); {10172#false} is VALID [2022-04-28 08:28:33,976 INFO L290 TraceCheckUtils]: 59: Hoare triple {10172#false} assume !false; {10172#false} is VALID [2022-04-28 08:28:33,976 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:28:33,976 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:28:33,977 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1285399413] [2022-04-28 08:28:33,977 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1285399413] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:28:33,977 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:28:33,978 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:28:33,978 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:28:33,978 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1435116504] [2022-04-28 08:28:33,978 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1435116504] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:28:33,978 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:28:33,978 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:28:33,978 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [669975535] [2022-04-28 08:28:33,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:28:33,979 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 3 states have internal predecessors, (41), 3 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 60 [2022-04-28 08:28:33,980 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:28:33,980 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 5.125) internal successors, (41), 3 states have internal predecessors, (41), 3 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-04-28 08:28:34,029 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:28:34,029 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 08:28:34,029 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:28:34,029 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 08:28:34,029 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-04-28 08:28:34,030 INFO L87 Difference]: Start difference. First operand 374 states and 498 transitions. Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 3 states have internal predecessors, (41), 3 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-04-28 08:28:36,184 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:28:39,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:28:39,991 INFO L93 Difference]: Finished difference Result 569 states and 751 transitions. [2022-04-28 08:28:39,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-04-28 08:28:39,992 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 3 states have internal predecessors, (41), 3 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 60 [2022-04-28 08:28:39,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:28:39,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 3 states have internal predecessors, (41), 3 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-04-28 08:28:39,997 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 618 transitions. [2022-04-28 08:28:39,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 3 states have internal predecessors, (41), 3 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-04-28 08:28:40,002 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 618 transitions. [2022-04-28 08:28:40,003 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 11 states and 618 transitions. [2022-04-28 08:28:40,487 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 618 edges. 618 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:28:40,498 INFO L225 Difference]: With dead ends: 569 [2022-04-28 08:28:40,498 INFO L226 Difference]: Without dead ends: 450 [2022-04-28 08:28:40,499 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=70, Invalid=140, Unknown=0, NotChecked=0, Total=210 [2022-04-28 08:28:40,503 INFO L413 NwaCegarLoop]: 318 mSDtfsCounter, 977 mSDsluCounter, 169 mSDsCounter, 0 mSdLazyCounter, 650 mSolverCounterSat, 334 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 989 SdHoareTripleChecker+Valid, 487 SdHoareTripleChecker+Invalid, 985 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 334 IncrementalHoareTripleChecker+Valid, 650 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.5s IncrementalHoareTripleChecker+Time [2022-04-28 08:28:40,504 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [989 Valid, 487 Invalid, 985 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [334 Valid, 650 Invalid, 1 Unknown, 0 Unchecked, 3.5s Time] [2022-04-28 08:28:40,505 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 450 states. [2022-04-28 08:28:40,570 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 450 to 410. [2022-04-28 08:28:40,571 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:28:40,572 INFO L82 GeneralOperation]: Start isEquivalent. First operand 450 states. Second operand has 410 states, 325 states have (on average 1.3723076923076922) internal successors, (446), 327 states have internal predecessors, (446), 44 states have call successors, (44), 33 states have call predecessors, (44), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:28:40,572 INFO L74 IsIncluded]: Start isIncluded. First operand 450 states. Second operand has 410 states, 325 states have (on average 1.3723076923076922) internal successors, (446), 327 states have internal predecessors, (446), 44 states have call successors, (44), 33 states have call predecessors, (44), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:28:40,573 INFO L87 Difference]: Start difference. First operand 450 states. Second operand has 410 states, 325 states have (on average 1.3723076923076922) internal successors, (446), 327 states have internal predecessors, (446), 44 states have call successors, (44), 33 states have call predecessors, (44), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:28:40,581 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:28:40,581 INFO L93 Difference]: Finished difference Result 450 states and 596 transitions. [2022-04-28 08:28:40,581 INFO L276 IsEmpty]: Start isEmpty. Operand 450 states and 596 transitions. [2022-04-28 08:28:40,582 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:28:40,582 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:28:40,583 INFO L74 IsIncluded]: Start isIncluded. First operand has 410 states, 325 states have (on average 1.3723076923076922) internal successors, (446), 327 states have internal predecessors, (446), 44 states have call successors, (44), 33 states have call predecessors, (44), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) Second operand 450 states. [2022-04-28 08:28:40,584 INFO L87 Difference]: Start difference. First operand has 410 states, 325 states have (on average 1.3723076923076922) internal successors, (446), 327 states have internal predecessors, (446), 44 states have call successors, (44), 33 states have call predecessors, (44), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) Second operand 450 states. [2022-04-28 08:28:40,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:28:40,594 INFO L93 Difference]: Finished difference Result 450 states and 596 transitions. [2022-04-28 08:28:40,594 INFO L276 IsEmpty]: Start isEmpty. Operand 450 states and 596 transitions. [2022-04-28 08:28:40,594 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:28:40,595 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:28:40,595 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:28:40,595 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:28:40,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 410 states, 325 states have (on average 1.3723076923076922) internal successors, (446), 327 states have internal predecessors, (446), 44 states have call successors, (44), 33 states have call predecessors, (44), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:28:40,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 410 states to 410 states and 545 transitions. [2022-04-28 08:28:40,606 INFO L78 Accepts]: Start accepts. Automaton has 410 states and 545 transitions. Word has length 60 [2022-04-28 08:28:40,606 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:28:40,606 INFO L495 AbstractCegarLoop]: Abstraction has 410 states and 545 transitions. [2022-04-28 08:28:40,606 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 3 states have internal predecessors, (41), 3 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-04-28 08:28:40,606 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 410 states and 545 transitions. [2022-04-28 08:28:41,170 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 545 edges. 545 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:28:41,171 INFO L276 IsEmpty]: Start isEmpty. Operand 410 states and 545 transitions. [2022-04-28 08:28:41,173 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-04-28 08:28:41,173 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:28:41,173 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:28:41,173 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-04-28 08:28:41,173 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:28:41,174 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:28:41,181 INFO L85 PathProgramCache]: Analyzing trace with hash -110356200, now seen corresponding path program 1 times [2022-04-28 08:28:41,181 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:28:41,182 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [303968867] [2022-04-28 08:28:41,182 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:28:41,182 INFO L85 PathProgramCache]: Analyzing trace with hash -110356200, now seen corresponding path program 2 times [2022-04-28 08:28:41,182 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:28:41,182 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [396102507] [2022-04-28 08:28:41,182 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:28:41,186 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:28:41,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:41,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:28:41,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:41,402 INFO L290 TraceCheckUtils]: 0: Hoare triple {13137#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {13100#true} is VALID [2022-04-28 08:28:41,402 INFO L290 TraceCheckUtils]: 1: Hoare triple {13100#true} assume true; {13100#true} is VALID [2022-04-28 08:28:41,402 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13100#true} {13100#true} #1270#return; {13100#true} is VALID [2022-04-28 08:28:41,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:28:41,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:41,455 INFO L290 TraceCheckUtils]: 0: Hoare triple {13138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13139#(and (= (+ (- 1) ~NP~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:28:41,455 INFO L290 TraceCheckUtils]: 1: Hoare triple {13139#(and (= (+ (- 1) ~NP~0) 0) (<= 4 ~SKIP2~0))} assume true; {13139#(and (= (+ (- 1) ~NP~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:28:41,456 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13139#(and (= (+ (- 1) ~NP~0) 0) (<= 4 ~SKIP2~0))} {13100#true} #1216#return; {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:28:41,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:28:41,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:41,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:28:41,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:41,493 INFO L290 TraceCheckUtils]: 0: Hoare triple {13100#true} ~cond := #in~cond; {13100#true} is VALID [2022-04-28 08:28:41,493 INFO L290 TraceCheckUtils]: 1: Hoare triple {13100#true} assume !(0 == ~cond); {13100#true} is VALID [2022-04-28 08:28:41,493 INFO L290 TraceCheckUtils]: 2: Hoare triple {13100#true} assume true; {13100#true} is VALID [2022-04-28 08:28:41,493 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {13100#true} {13100#true} #1254#return; {13100#true} is VALID [2022-04-28 08:28:41,493 INFO L290 TraceCheckUtils]: 0: Hoare triple {13140#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {13100#true} is VALID [2022-04-28 08:28:41,493 INFO L272 TraceCheckUtils]: 1: Hoare triple {13100#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {13100#true} is VALID [2022-04-28 08:28:41,493 INFO L290 TraceCheckUtils]: 2: Hoare triple {13100#true} ~cond := #in~cond; {13100#true} is VALID [2022-04-28 08:28:41,493 INFO L290 TraceCheckUtils]: 3: Hoare triple {13100#true} assume !(0 == ~cond); {13100#true} is VALID [2022-04-28 08:28:41,493 INFO L290 TraceCheckUtils]: 4: Hoare triple {13100#true} assume true; {13100#true} is VALID [2022-04-28 08:28:41,493 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {13100#true} {13100#true} #1254#return; {13100#true} is VALID [2022-04-28 08:28:41,494 INFO L290 TraceCheckUtils]: 6: Hoare triple {13100#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {13100#true} is VALID [2022-04-28 08:28:41,494 INFO L290 TraceCheckUtils]: 7: Hoare triple {13100#true} assume true; {13100#true} is VALID [2022-04-28 08:28:41,494 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {13100#true} {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} #1218#return; {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:28:41,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:28:41,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:41,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:28:41,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:41,524 INFO L290 TraceCheckUtils]: 0: Hoare triple {13145#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {13100#true} is VALID [2022-04-28 08:28:41,524 INFO L290 TraceCheckUtils]: 1: Hoare triple {13100#true} assume !(0 == ~__BLAST_NONDET~5); {13100#true} is VALID [2022-04-28 08:28:41,524 INFO L290 TraceCheckUtils]: 2: Hoare triple {13100#true} #res := -1073741823; {13100#true} is VALID [2022-04-28 08:28:41,524 INFO L290 TraceCheckUtils]: 3: Hoare triple {13100#true} assume true; {13100#true} is VALID [2022-04-28 08:28:41,524 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {13100#true} {13100#true} #1176#return; {13100#true} is VALID [2022-04-28 08:28:41,524 INFO L290 TraceCheckUtils]: 0: Hoare triple {13145#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {13100#true} is VALID [2022-04-28 08:28:41,525 INFO L272 TraceCheckUtils]: 1: Hoare triple {13100#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {13145#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:28:41,525 INFO L290 TraceCheckUtils]: 2: Hoare triple {13145#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {13100#true} is VALID [2022-04-28 08:28:41,525 INFO L290 TraceCheckUtils]: 3: Hoare triple {13100#true} assume !(0 == ~__BLAST_NONDET~5); {13100#true} is VALID [2022-04-28 08:28:41,525 INFO L290 TraceCheckUtils]: 4: Hoare triple {13100#true} #res := -1073741823; {13100#true} is VALID [2022-04-28 08:28:41,526 INFO L290 TraceCheckUtils]: 5: Hoare triple {13100#true} assume true; {13100#true} is VALID [2022-04-28 08:28:41,526 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {13100#true} {13100#true} #1176#return; {13100#true} is VALID [2022-04-28 08:28:41,526 INFO L290 TraceCheckUtils]: 7: Hoare triple {13100#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {13100#true} is VALID [2022-04-28 08:28:41,526 INFO L290 TraceCheckUtils]: 8: Hoare triple {13100#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {13100#true} is VALID [2022-04-28 08:28:41,526 INFO L290 TraceCheckUtils]: 9: Hoare triple {13100#true} assume true; {13100#true} is VALID [2022-04-28 08:28:41,527 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {13100#true} {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} #1220#return; {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:28:41,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:28:41,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:41,582 INFO L290 TraceCheckUtils]: 0: Hoare triple {13151#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13152#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} is VALID [2022-04-28 08:28:41,583 INFO L290 TraceCheckUtils]: 1: Hoare triple {13152#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} assume true; {13152#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} is VALID [2022-04-28 08:28:41,584 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13152#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} #1222#return; {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} is VALID [2022-04-28 08:28:41,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-04-28 08:28:41,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:28:41,607 INFO L290 TraceCheckUtils]: 0: Hoare triple {13100#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; {13100#true} is VALID [2022-04-28 08:28:41,607 INFO L290 TraceCheckUtils]: 1: Hoare triple {13100#true} assume 0 != #t~nondet17;havoc #t~nondet17;#res := 0; {13100#true} is VALID [2022-04-28 08:28:41,608 INFO L290 TraceCheckUtils]: 2: Hoare triple {13100#true} assume true; {13100#true} is VALID [2022-04-28 08:28:41,608 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {13100#true} {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} #1228#return; {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} is VALID [2022-04-28 08:28:41,610 INFO L272 TraceCheckUtils]: 0: Hoare triple {13100#true} call ULTIMATE.init(); {13137#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:28:41,610 INFO L290 TraceCheckUtils]: 1: Hoare triple {13137#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {13100#true} is VALID [2022-04-28 08:28:41,610 INFO L290 TraceCheckUtils]: 2: Hoare triple {13100#true} assume true; {13100#true} is VALID [2022-04-28 08:28:41,611 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {13100#true} {13100#true} #1270#return; {13100#true} is VALID [2022-04-28 08:28:41,611 INFO L272 TraceCheckUtils]: 4: Hoare triple {13100#true} call #t~ret213 := main(); {13100#true} is VALID [2022-04-28 08:28:41,611 INFO L290 TraceCheckUtils]: 5: Hoare triple {13100#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {13100#true} is VALID [2022-04-28 08:28:41,612 INFO L272 TraceCheckUtils]: 6: Hoare triple {13100#true} call _BLAST_init(); {13138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:28:41,612 INFO L290 TraceCheckUtils]: 7: Hoare triple {13138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13139#(and (= (+ (- 1) ~NP~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:28:41,613 INFO L290 TraceCheckUtils]: 8: Hoare triple {13139#(and (= (+ (- 1) ~NP~0) 0) (<= 4 ~SKIP2~0))} assume true; {13139#(and (= (+ (- 1) ~NP~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:28:41,613 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {13139#(and (= (+ (- 1) ~NP~0) 0) (<= 4 ~SKIP2~0))} {13100#true} #1216#return; {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:28:41,614 INFO L272 TraceCheckUtils]: 10: Hoare triple {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {13140#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:28:41,614 INFO L290 TraceCheckUtils]: 11: Hoare triple {13140#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {13100#true} is VALID [2022-04-28 08:28:41,614 INFO L272 TraceCheckUtils]: 12: Hoare triple {13100#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {13100#true} is VALID [2022-04-28 08:28:41,614 INFO L290 TraceCheckUtils]: 13: Hoare triple {13100#true} ~cond := #in~cond; {13100#true} is VALID [2022-04-28 08:28:41,614 INFO L290 TraceCheckUtils]: 14: Hoare triple {13100#true} assume !(0 == ~cond); {13100#true} is VALID [2022-04-28 08:28:41,614 INFO L290 TraceCheckUtils]: 15: Hoare triple {13100#true} assume true; {13100#true} is VALID [2022-04-28 08:28:41,614 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {13100#true} {13100#true} #1254#return; {13100#true} is VALID [2022-04-28 08:28:41,614 INFO L290 TraceCheckUtils]: 17: Hoare triple {13100#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {13100#true} is VALID [2022-04-28 08:28:41,614 INFO L290 TraceCheckUtils]: 18: Hoare triple {13100#true} assume true; {13100#true} is VALID [2022-04-28 08:28:41,615 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {13100#true} {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} #1218#return; {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:28:41,616 INFO L290 TraceCheckUtils]: 20: Hoare triple {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:28:41,616 INFO L290 TraceCheckUtils]: 21: Hoare triple {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:28:41,617 INFO L290 TraceCheckUtils]: 22: Hoare triple {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:28:41,617 INFO L272 TraceCheckUtils]: 23: Hoare triple {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {13145#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:28:41,618 INFO L290 TraceCheckUtils]: 24: Hoare triple {13145#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {13100#true} is VALID [2022-04-28 08:28:41,619 INFO L272 TraceCheckUtils]: 25: Hoare triple {13100#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {13145#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:28:41,619 INFO L290 TraceCheckUtils]: 26: Hoare triple {13145#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {13100#true} is VALID [2022-04-28 08:28:41,619 INFO L290 TraceCheckUtils]: 27: Hoare triple {13100#true} assume !(0 == ~__BLAST_NONDET~5); {13100#true} is VALID [2022-04-28 08:28:41,619 INFO L290 TraceCheckUtils]: 28: Hoare triple {13100#true} #res := -1073741823; {13100#true} is VALID [2022-04-28 08:28:41,619 INFO L290 TraceCheckUtils]: 29: Hoare triple {13100#true} assume true; {13100#true} is VALID [2022-04-28 08:28:41,619 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {13100#true} {13100#true} #1176#return; {13100#true} is VALID [2022-04-28 08:28:41,619 INFO L290 TraceCheckUtils]: 31: Hoare triple {13100#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {13100#true} is VALID [2022-04-28 08:28:41,619 INFO L290 TraceCheckUtils]: 32: Hoare triple {13100#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {13100#true} is VALID [2022-04-28 08:28:41,619 INFO L290 TraceCheckUtils]: 33: Hoare triple {13100#true} assume true; {13100#true} is VALID [2022-04-28 08:28:41,620 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {13100#true} {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} #1220#return; {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:28:41,620 INFO L290 TraceCheckUtils]: 35: Hoare triple {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:28:41,621 INFO L272 TraceCheckUtils]: 36: Hoare triple {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} call stub_driver_init(); {13151#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:28:41,621 INFO L290 TraceCheckUtils]: 37: Hoare triple {13151#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13152#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} is VALID [2022-04-28 08:28:41,622 INFO L290 TraceCheckUtils]: 38: Hoare triple {13152#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} assume true; {13152#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} is VALID [2022-04-28 08:28:41,622 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {13152#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} {13108#(and (not (= ~SKIP2~0 1)) (= ~NP~0 1))} #1222#return; {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} is VALID [2022-04-28 08:28:41,623 INFO L290 TraceCheckUtils]: 40: Hoare triple {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} assume !!(~status~5 >= 0); {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} is VALID [2022-04-28 08:28:41,623 INFO L290 TraceCheckUtils]: 41: Hoare triple {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} assume !(0 == ~__BLAST_NONDET~0); {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} is VALID [2022-04-28 08:28:41,623 INFO L290 TraceCheckUtils]: 42: Hoare triple {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} assume !(1 == ~__BLAST_NONDET~0); {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} is VALID [2022-04-28 08:28:41,624 INFO L290 TraceCheckUtils]: 43: Hoare triple {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} assume 2 == ~__BLAST_NONDET~0; {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} is VALID [2022-04-28 08:28:41,624 INFO L272 TraceCheckUtils]: 44: Hoare triple {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} call #t~ret173 := KbFilter_IoCtl(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {13100#true} is VALID [2022-04-28 08:28:41,624 INFO L290 TraceCheckUtils]: 45: Hoare triple {13100#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; {13100#true} is VALID [2022-04-28 08:28:41,624 INFO L290 TraceCheckUtils]: 46: Hoare triple {13100#true} assume 0 != #t~nondet17;havoc #t~nondet17;#res := 0; {13100#true} is VALID [2022-04-28 08:28:41,624 INFO L290 TraceCheckUtils]: 47: Hoare triple {13100#true} assume true; {13100#true} is VALID [2022-04-28 08:28:41,625 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {13100#true} {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} #1228#return; {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} is VALID [2022-04-28 08:28:41,625 INFO L290 TraceCheckUtils]: 49: Hoare triple {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} assume -2147483648 <= #t~ret173 && #t~ret173 <= 2147483647;~status~5 := #t~ret173;havoc #t~ret173; {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} is VALID [2022-04-28 08:28:41,625 INFO L290 TraceCheckUtils]: 50: Hoare triple {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} assume 0 != ~we_should_unload~0; {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} is VALID [2022-04-28 08:28:41,626 INFO L290 TraceCheckUtils]: 51: Hoare triple {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} assume !(1 == ~pended~0); {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} is VALID [2022-04-28 08:28:41,626 INFO L290 TraceCheckUtils]: 52: Hoare triple {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} assume !(1 == ~pended~0); {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} is VALID [2022-04-28 08:28:41,626 INFO L290 TraceCheckUtils]: 53: Hoare triple {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} assume !(~s~0 == ~UNLOADED~0); {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} is VALID [2022-04-28 08:28:41,627 INFO L290 TraceCheckUtils]: 54: Hoare triple {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} assume !(-1 == ~status~5); {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} is VALID [2022-04-28 08:28:41,627 INFO L290 TraceCheckUtils]: 55: Hoare triple {13132#(and (= ~s~0 1) (not (= ~SKIP2~0 1)))} assume !(~s~0 != ~SKIP2~0); {13101#false} is VALID [2022-04-28 08:28:41,627 INFO L290 TraceCheckUtils]: 56: Hoare triple {13101#false} assume 1 == ~pended~0; {13101#false} is VALID [2022-04-28 08:28:41,627 INFO L290 TraceCheckUtils]: 57: Hoare triple {13101#false} assume 259 != ~status~5; {13101#false} is VALID [2022-04-28 08:28:41,627 INFO L272 TraceCheckUtils]: 58: Hoare triple {13101#false} call errorFn(); {13101#false} is VALID [2022-04-28 08:28:41,628 INFO L290 TraceCheckUtils]: 59: Hoare triple {13101#false} assume !false; {13101#false} is VALID [2022-04-28 08:28:41,628 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:28:41,628 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:28:41,628 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [396102507] [2022-04-28 08:28:41,628 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [396102507] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:28:41,628 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:28:41,628 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:28:41,629 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:28:41,629 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [303968867] [2022-04-28 08:28:41,629 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [303968867] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:28:41,629 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:28:41,629 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:28:41,629 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1539383206] [2022-04-28 08:28:41,629 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:28:41,630 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.8181818181818183) internal successors, (42), 6 states have internal predecessors, (42), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 60 [2022-04-28 08:28:41,630 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:28:41,630 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.8181818181818183) internal successors, (42), 6 states have internal predecessors, (42), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-04-28 08:28:41,680 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:28:41,680 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 08:28:41,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:28:41,682 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 08:28:41,682 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=85, Unknown=0, NotChecked=0, Total=110 [2022-04-28 08:28:41,682 INFO L87 Difference]: Start difference. First operand 410 states and 545 transitions. Second operand has 11 states, 11 states have (on average 3.8181818181818183) internal successors, (42), 6 states have internal predecessors, (42), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-04-28 08:28:46,652 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:28:48,670 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:28:50,691 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:28:52,716 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:28:58,753 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:28:58,754 INFO L93 Difference]: Finished difference Result 450 states and 594 transitions. [2022-04-28 08:28:58,754 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-04-28 08:28:58,755 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.8181818181818183) internal successors, (42), 6 states have internal predecessors, (42), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 60 [2022-04-28 08:28:58,755 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:28:58,755 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.8181818181818183) internal successors, (42), 6 states have internal predecessors, (42), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-04-28 08:28:58,758 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 542 transitions. [2022-04-28 08:28:58,758 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.8181818181818183) internal successors, (42), 6 states have internal predecessors, (42), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-04-28 08:28:58,762 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 542 transitions. [2022-04-28 08:28:58,762 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 18 states and 542 transitions. [2022-04-28 08:28:59,462 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 542 edges. 542 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:28:59,472 INFO L225 Difference]: With dead ends: 450 [2022-04-28 08:28:59,472 INFO L226 Difference]: Without dead ends: 442 [2022-04-28 08:28:59,473 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 93 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=166, Invalid=434, Unknown=0, NotChecked=0, Total=600 [2022-04-28 08:28:59,473 INFO L413 NwaCegarLoop]: 333 mSDtfsCounter, 1628 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 742 mSolverCounterSat, 568 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1637 SdHoareTripleChecker+Valid, 535 SdHoareTripleChecker+Invalid, 1314 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 568 IncrementalHoareTripleChecker+Valid, 742 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.9s IncrementalHoareTripleChecker+Time [2022-04-28 08:28:59,473 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1637 Valid, 535 Invalid, 1314 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [568 Valid, 742 Invalid, 4 Unknown, 0 Unchecked, 10.9s Time] [2022-04-28 08:28:59,474 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 442 states. [2022-04-28 08:28:59,696 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 442 to 415. [2022-04-28 08:28:59,696 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:28:59,698 INFO L82 GeneralOperation]: Start isEquivalent. First operand 442 states. Second operand has 415 states, 330 states have (on average 1.3696969696969696) internal successors, (452), 332 states have internal predecessors, (452), 44 states have call successors, (44), 33 states have call predecessors, (44), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:28:59,698 INFO L74 IsIncluded]: Start isIncluded. First operand 442 states. Second operand has 415 states, 330 states have (on average 1.3696969696969696) internal successors, (452), 332 states have internal predecessors, (452), 44 states have call successors, (44), 33 states have call predecessors, (44), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:28:59,699 INFO L87 Difference]: Start difference. First operand 442 states. Second operand has 415 states, 330 states have (on average 1.3696969696969696) internal successors, (452), 332 states have internal predecessors, (452), 44 states have call successors, (44), 33 states have call predecessors, (44), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:28:59,708 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:28:59,709 INFO L93 Difference]: Finished difference Result 442 states and 585 transitions. [2022-04-28 08:28:59,709 INFO L276 IsEmpty]: Start isEmpty. Operand 442 states and 585 transitions. [2022-04-28 08:28:59,709 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:28:59,709 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:28:59,710 INFO L74 IsIncluded]: Start isIncluded. First operand has 415 states, 330 states have (on average 1.3696969696969696) internal successors, (452), 332 states have internal predecessors, (452), 44 states have call successors, (44), 33 states have call predecessors, (44), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) Second operand 442 states. [2022-04-28 08:28:59,711 INFO L87 Difference]: Start difference. First operand has 415 states, 330 states have (on average 1.3696969696969696) internal successors, (452), 332 states have internal predecessors, (452), 44 states have call successors, (44), 33 states have call predecessors, (44), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) Second operand 442 states. [2022-04-28 08:28:59,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:28:59,723 INFO L93 Difference]: Finished difference Result 442 states and 585 transitions. [2022-04-28 08:28:59,723 INFO L276 IsEmpty]: Start isEmpty. Operand 442 states and 585 transitions. [2022-04-28 08:28:59,724 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:28:59,724 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:28:59,724 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:28:59,724 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:28:59,725 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 415 states, 330 states have (on average 1.3696969696969696) internal successors, (452), 332 states have internal predecessors, (452), 44 states have call successors, (44), 33 states have call predecessors, (44), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:28:59,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 415 states to 415 states and 551 transitions. [2022-04-28 08:28:59,735 INFO L78 Accepts]: Start accepts. Automaton has 415 states and 551 transitions. Word has length 60 [2022-04-28 08:28:59,735 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:28:59,736 INFO L495 AbstractCegarLoop]: Abstraction has 415 states and 551 transitions. [2022-04-28 08:28:59,736 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.8181818181818183) internal successors, (42), 6 states have internal predecessors, (42), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-04-28 08:28:59,736 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 415 states and 551 transitions. [2022-04-28 08:29:00,531 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 551 edges. 551 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:29:00,532 INFO L276 IsEmpty]: Start isEmpty. Operand 415 states and 551 transitions. [2022-04-28 08:29:00,532 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-04-28 08:29:00,532 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:29:00,533 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:29:00,533 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-04-28 08:29:00,533 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:29:00,533 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:29:00,533 INFO L85 PathProgramCache]: Analyzing trace with hash 400358010, now seen corresponding path program 1 times [2022-04-28 08:29:00,533 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:29:00,533 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [954885723] [2022-04-28 08:29:00,533 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:29:00,534 INFO L85 PathProgramCache]: Analyzing trace with hash 400358010, now seen corresponding path program 2 times [2022-04-28 08:29:00,534 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:29:00,534 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [700811792] [2022-04-28 08:29:00,534 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:29:00,534 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:29:00,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:00,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:29:00,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:00,668 INFO L290 TraceCheckUtils]: 0: Hoare triple {15834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {15802#true} is VALID [2022-04-28 08:29:00,668 INFO L290 TraceCheckUtils]: 1: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,668 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15802#true} {15802#true} #1270#return; {15802#true} is VALID [2022-04-28 08:29:00,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:29:00,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:00,697 INFO L290 TraceCheckUtils]: 0: Hoare triple {15835#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15802#true} is VALID [2022-04-28 08:29:00,697 INFO L290 TraceCheckUtils]: 1: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,697 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15802#true} {15802#true} #1216#return; {15802#true} is VALID [2022-04-28 08:29:00,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:29:00,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:00,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:29:00,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:00,722 INFO L290 TraceCheckUtils]: 0: Hoare triple {15802#true} ~cond := #in~cond; {15802#true} is VALID [2022-04-28 08:29:00,722 INFO L290 TraceCheckUtils]: 1: Hoare triple {15802#true} assume !(0 == ~cond); {15802#true} is VALID [2022-04-28 08:29:00,722 INFO L290 TraceCheckUtils]: 2: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,723 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {15802#true} {15802#true} #1254#return; {15802#true} is VALID [2022-04-28 08:29:00,723 INFO L290 TraceCheckUtils]: 0: Hoare triple {15836#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {15802#true} is VALID [2022-04-28 08:29:00,723 INFO L272 TraceCheckUtils]: 1: Hoare triple {15802#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {15802#true} is VALID [2022-04-28 08:29:00,723 INFO L290 TraceCheckUtils]: 2: Hoare triple {15802#true} ~cond := #in~cond; {15802#true} is VALID [2022-04-28 08:29:00,723 INFO L290 TraceCheckUtils]: 3: Hoare triple {15802#true} assume !(0 == ~cond); {15802#true} is VALID [2022-04-28 08:29:00,723 INFO L290 TraceCheckUtils]: 4: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,723 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {15802#true} {15802#true} #1254#return; {15802#true} is VALID [2022-04-28 08:29:00,723 INFO L290 TraceCheckUtils]: 6: Hoare triple {15802#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {15802#true} is VALID [2022-04-28 08:29:00,723 INFO L290 TraceCheckUtils]: 7: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,723 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {15802#true} {15802#true} #1218#return; {15802#true} is VALID [2022-04-28 08:29:00,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:29:00,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:00,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:29:00,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:00,749 INFO L290 TraceCheckUtils]: 0: Hoare triple {15841#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {15802#true} is VALID [2022-04-28 08:29:00,749 INFO L290 TraceCheckUtils]: 1: Hoare triple {15802#true} assume !(0 == ~__BLAST_NONDET~5); {15802#true} is VALID [2022-04-28 08:29:00,749 INFO L290 TraceCheckUtils]: 2: Hoare triple {15802#true} #res := -1073741823; {15802#true} is VALID [2022-04-28 08:29:00,749 INFO L290 TraceCheckUtils]: 3: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,749 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15802#true} {15802#true} #1176#return; {15802#true} is VALID [2022-04-28 08:29:00,749 INFO L290 TraceCheckUtils]: 0: Hoare triple {15841#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {15802#true} is VALID [2022-04-28 08:29:00,750 INFO L272 TraceCheckUtils]: 1: Hoare triple {15802#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {15841#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:29:00,750 INFO L290 TraceCheckUtils]: 2: Hoare triple {15841#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {15802#true} is VALID [2022-04-28 08:29:00,750 INFO L290 TraceCheckUtils]: 3: Hoare triple {15802#true} assume !(0 == ~__BLAST_NONDET~5); {15802#true} is VALID [2022-04-28 08:29:00,750 INFO L290 TraceCheckUtils]: 4: Hoare triple {15802#true} #res := -1073741823; {15802#true} is VALID [2022-04-28 08:29:00,751 INFO L290 TraceCheckUtils]: 5: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,751 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {15802#true} {15802#true} #1176#return; {15802#true} is VALID [2022-04-28 08:29:00,751 INFO L290 TraceCheckUtils]: 7: Hoare triple {15802#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {15802#true} is VALID [2022-04-28 08:29:00,751 INFO L290 TraceCheckUtils]: 8: Hoare triple {15802#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {15802#true} is VALID [2022-04-28 08:29:00,751 INFO L290 TraceCheckUtils]: 9: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,751 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {15802#true} {15802#true} #1220#return; {15802#true} is VALID [2022-04-28 08:29:00,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:29:00,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:00,794 INFO L290 TraceCheckUtils]: 0: Hoare triple {15847#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15802#true} is VALID [2022-04-28 08:29:00,794 INFO L290 TraceCheckUtils]: 1: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,794 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15802#true} {15802#true} #1222#return; {15802#true} is VALID [2022-04-28 08:29:00,796 INFO L272 TraceCheckUtils]: 0: Hoare triple {15802#true} call ULTIMATE.init(); {15834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:29:00,796 INFO L290 TraceCheckUtils]: 1: Hoare triple {15834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {15802#true} is VALID [2022-04-28 08:29:00,796 INFO L290 TraceCheckUtils]: 2: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,796 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {15802#true} {15802#true} #1270#return; {15802#true} is VALID [2022-04-28 08:29:00,796 INFO L272 TraceCheckUtils]: 4: Hoare triple {15802#true} call #t~ret213 := main(); {15802#true} is VALID [2022-04-28 08:29:00,796 INFO L290 TraceCheckUtils]: 5: Hoare triple {15802#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {15802#true} is VALID [2022-04-28 08:29:00,797 INFO L272 TraceCheckUtils]: 6: Hoare triple {15802#true} call _BLAST_init(); {15835#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:29:00,797 INFO L290 TraceCheckUtils]: 7: Hoare triple {15835#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15802#true} is VALID [2022-04-28 08:29:00,797 INFO L290 TraceCheckUtils]: 8: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,797 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {15802#true} {15802#true} #1216#return; {15802#true} is VALID [2022-04-28 08:29:00,798 INFO L272 TraceCheckUtils]: 10: Hoare triple {15802#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {15836#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:29:00,798 INFO L290 TraceCheckUtils]: 11: Hoare triple {15836#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {15802#true} is VALID [2022-04-28 08:29:00,798 INFO L272 TraceCheckUtils]: 12: Hoare triple {15802#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {15802#true} is VALID [2022-04-28 08:29:00,798 INFO L290 TraceCheckUtils]: 13: Hoare triple {15802#true} ~cond := #in~cond; {15802#true} is VALID [2022-04-28 08:29:00,798 INFO L290 TraceCheckUtils]: 14: Hoare triple {15802#true} assume !(0 == ~cond); {15802#true} is VALID [2022-04-28 08:29:00,798 INFO L290 TraceCheckUtils]: 15: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,798 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {15802#true} {15802#true} #1254#return; {15802#true} is VALID [2022-04-28 08:29:00,798 INFO L290 TraceCheckUtils]: 17: Hoare triple {15802#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {15802#true} is VALID [2022-04-28 08:29:00,799 INFO L290 TraceCheckUtils]: 18: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,799 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {15802#true} {15802#true} #1218#return; {15802#true} is VALID [2022-04-28 08:29:00,799 INFO L290 TraceCheckUtils]: 20: Hoare triple {15802#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {15802#true} is VALID [2022-04-28 08:29:00,799 INFO L290 TraceCheckUtils]: 21: Hoare triple {15802#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {15802#true} is VALID [2022-04-28 08:29:00,799 INFO L290 TraceCheckUtils]: 22: Hoare triple {15802#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {15802#true} is VALID [2022-04-28 08:29:00,800 INFO L272 TraceCheckUtils]: 23: Hoare triple {15802#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {15841#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:29:00,800 INFO L290 TraceCheckUtils]: 24: Hoare triple {15841#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {15802#true} is VALID [2022-04-28 08:29:00,801 INFO L272 TraceCheckUtils]: 25: Hoare triple {15802#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {15841#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:29:00,801 INFO L290 TraceCheckUtils]: 26: Hoare triple {15841#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {15802#true} is VALID [2022-04-28 08:29:00,801 INFO L290 TraceCheckUtils]: 27: Hoare triple {15802#true} assume !(0 == ~__BLAST_NONDET~5); {15802#true} is VALID [2022-04-28 08:29:00,801 INFO L290 TraceCheckUtils]: 28: Hoare triple {15802#true} #res := -1073741823; {15802#true} is VALID [2022-04-28 08:29:00,801 INFO L290 TraceCheckUtils]: 29: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,801 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {15802#true} {15802#true} #1176#return; {15802#true} is VALID [2022-04-28 08:29:00,801 INFO L290 TraceCheckUtils]: 31: Hoare triple {15802#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {15802#true} is VALID [2022-04-28 08:29:00,801 INFO L290 TraceCheckUtils]: 32: Hoare triple {15802#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {15802#true} is VALID [2022-04-28 08:29:00,801 INFO L290 TraceCheckUtils]: 33: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,802 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {15802#true} {15802#true} #1220#return; {15802#true} is VALID [2022-04-28 08:29:00,802 INFO L290 TraceCheckUtils]: 35: Hoare triple {15802#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {15802#true} is VALID [2022-04-28 08:29:00,816 INFO L272 TraceCheckUtils]: 36: Hoare triple {15802#true} call stub_driver_init(); {15847#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:29:00,816 INFO L290 TraceCheckUtils]: 37: Hoare triple {15847#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15802#true} is VALID [2022-04-28 08:29:00,816 INFO L290 TraceCheckUtils]: 38: Hoare triple {15802#true} assume true; {15802#true} is VALID [2022-04-28 08:29:00,816 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {15802#true} {15802#true} #1222#return; {15802#true} is VALID [2022-04-28 08:29:00,816 INFO L290 TraceCheckUtils]: 40: Hoare triple {15802#true} assume !!(~status~5 >= 0); {15802#true} is VALID [2022-04-28 08:29:00,816 INFO L290 TraceCheckUtils]: 41: Hoare triple {15802#true} assume 0 == ~__BLAST_NONDET~0; {15802#true} is VALID [2022-04-28 08:29:00,816 INFO L272 TraceCheckUtils]: 42: Hoare triple {15802#true} call #t~ret171 := KbFilter_CreateClose(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {15802#true} is VALID [2022-04-28 08:29:00,816 INFO L290 TraceCheckUtils]: 43: Hoare triple {15802#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~0.base, ~irpStack~0.offset;havoc ~status~1;havoc ~devExt~1.base, ~devExt~1.offset;havoc ~tmp~0;havoc ~tmp___0~0;havoc ~tmp___1~0;call #t~mem36.base, #t~mem36.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~0.base, ~irpStack~0.offset := #t~mem36.base, #t~mem36.offset;havoc #t~mem36.base, #t~mem36.offset;call #t~mem37.base, #t~mem37.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~1.base, ~devExt~1.offset := #t~mem37.base, #t~mem37.offset;havoc #t~mem37.base, #t~mem37.offset;call #t~mem38 := read~int(~Irp.base, 24 + ~Irp.offset, 4);~status~1 := #t~mem38;havoc #t~mem38;~status~1 := ~myStatus~0;call #t~mem39 := read~int(~irpStack~0.base, ~irpStack~0.offset, 1); {15802#true} is VALID [2022-04-28 08:29:00,816 INFO L290 TraceCheckUtils]: 44: Hoare triple {15802#true} assume 0 == #t~mem39 % 256;havoc #t~mem39; {15802#true} is VALID [2022-04-28 08:29:00,816 INFO L290 TraceCheckUtils]: 45: Hoare triple {15802#true} call #t~mem41.base, #t~mem41.offset := read~$Pointer$(~devExt~1.base, 20 + ~devExt~1.offset, 4); {15802#true} is VALID [2022-04-28 08:29:00,816 INFO L290 TraceCheckUtils]: 46: Hoare triple {15802#true} assume 0 == (#t~mem41.base + #t~mem41.offset) % 4294967296;havoc #t~mem41.base, #t~mem41.offset;~status~1 := -1073741436; {15802#true} is VALID [2022-04-28 08:29:00,817 INFO L290 TraceCheckUtils]: 47: Hoare triple {15802#true} call write~int(~status~1, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~1; {15802#true} is VALID [2022-04-28 08:29:00,817 INFO L272 TraceCheckUtils]: 48: Hoare triple {15802#true} call #t~ret44 := KbFilter_DispatchPassThrough(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset); {15802#true} is VALID [2022-04-28 08:29:00,817 INFO L290 TraceCheckUtils]: 49: Hoare triple {15802#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~1.base, ~irpStack~1.offset;havoc ~tmp~1;call #t~mem45.base, #t~mem45.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~1.base, ~irpStack~1.offset := #t~mem45.base, #t~mem45.offset;havoc #t~mem45.base, #t~mem45.offset; {15802#true} is VALID [2022-04-28 08:29:00,817 INFO L290 TraceCheckUtils]: 50: Hoare triple {15802#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {15833#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:29:00,818 INFO L290 TraceCheckUtils]: 51: Hoare triple {15833#(= ~SKIP1~0 ~s~0)} call #t~mem46 := read~int(~Irp.base, 35 + ~Irp.offset, 1);call write~int((if (1 + #t~mem46) % 256 <= 127 then (1 + #t~mem46) % 256 else (1 + #t~mem46) % 256 - 256), ~Irp.base, 35 + ~Irp.offset, 1);havoc #t~mem46;call #t~mem47.base, #t~mem47.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);call write~$Pointer$(#t~mem47.base, 36 + #t~mem47.offset, ~Irp.base, 96 + ~Irp.offset, 4);havoc #t~mem47.base, #t~mem47.offset;call #t~mem48.base, #t~mem48.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);call #t~mem49.base, #t~mem49.offset := read~$Pointer$(#t~mem48.base, 8 + #t~mem48.offset, 4); {15833#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:29:00,818 INFO L272 TraceCheckUtils]: 52: Hoare triple {15833#(= ~SKIP1~0 ~s~0)} call #t~ret50 := IofCallDriver(#t~mem49.base, #t~mem49.offset, ~Irp.base, ~Irp.offset); {15833#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:29:00,819 INFO L290 TraceCheckUtils]: 53: Hoare triple {15833#(= ~SKIP1~0 ~s~0)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {15833#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:29:00,819 INFO L290 TraceCheckUtils]: 54: Hoare triple {15833#(= ~SKIP1~0 ~s~0)} assume !(0 != ~compRegistered~0); {15833#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:29:00,819 INFO L290 TraceCheckUtils]: 55: Hoare triple {15833#(= ~SKIP1~0 ~s~0)} assume 0 == ~__BLAST_NONDET~11; {15833#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:29:00,820 INFO L290 TraceCheckUtils]: 56: Hoare triple {15833#(= ~SKIP1~0 ~s~0)} ~returnVal2~0 := 0; {15833#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:29:00,820 INFO L290 TraceCheckUtils]: 57: Hoare triple {15833#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~NP~0); {15833#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:29:00,820 INFO L290 TraceCheckUtils]: 58: Hoare triple {15833#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~MPR1~0); {15833#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:29:00,821 INFO L290 TraceCheckUtils]: 59: Hoare triple {15833#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~SKIP1~0); {15803#false} is VALID [2022-04-28 08:29:00,821 INFO L272 TraceCheckUtils]: 60: Hoare triple {15803#false} call errorFn(); {15803#false} is VALID [2022-04-28 08:29:00,821 INFO L290 TraceCheckUtils]: 61: Hoare triple {15803#false} assume !false; {15803#false} is VALID [2022-04-28 08:29:00,821 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:29:00,821 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:29:00,821 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [700811792] [2022-04-28 08:29:00,821 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [700811792] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:29:00,821 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:29:00,821 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:29:00,822 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:29:00,822 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [954885723] [2022-04-28 08:29:00,822 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [954885723] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:29:00,822 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:29:00,822 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:29:00,822 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [519827234] [2022-04-28 08:29:00,822 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:29:00,822 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.375) internal successors, (43), 3 states have internal predecessors, (43), 3 states have call successors, (12), 8 states have call predecessors, (12), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) Word has length 62 [2022-04-28 08:29:00,822 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:29:00,823 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 5.375) internal successors, (43), 3 states have internal predecessors, (43), 3 states have call successors, (12), 8 states have call predecessors, (12), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:29:00,886 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 62 edges. 62 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:29:00,886 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 08:29:00,886 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:29:00,887 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 08:29:00,887 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-04-28 08:29:00,887 INFO L87 Difference]: Start difference. First operand 415 states and 551 transitions. Second operand has 8 states, 8 states have (on average 5.375) internal successors, (43), 3 states have internal predecessors, (43), 3 states have call successors, (12), 8 states have call predecessors, (12), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:29:03,050 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:29:05,381 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.13s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:29:09,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:29:09,124 INFO L93 Difference]: Finished difference Result 433 states and 574 transitions. [2022-04-28 08:29:09,125 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-04-28 08:29:09,125 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.375) internal successors, (43), 3 states have internal predecessors, (43), 3 states have call successors, (12), 8 states have call predecessors, (12), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) Word has length 62 [2022-04-28 08:29:09,125 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:29:09,125 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.375) internal successors, (43), 3 states have internal predecessors, (43), 3 states have call successors, (12), 8 states have call predecessors, (12), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:29:09,128 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 440 transitions. [2022-04-28 08:29:09,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.375) internal successors, (43), 3 states have internal predecessors, (43), 3 states have call successors, (12), 8 states have call predecessors, (12), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:29:09,131 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 440 transitions. [2022-04-28 08:29:09,131 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 11 states and 440 transitions. [2022-04-28 08:29:09,684 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 440 edges. 440 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:29:09,693 INFO L225 Difference]: With dead ends: 433 [2022-04-28 08:29:09,693 INFO L226 Difference]: Without dead ends: 429 [2022-04-28 08:29:09,694 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=53, Invalid=103, Unknown=0, NotChecked=0, Total=156 [2022-04-28 08:29:09,694 INFO L413 NwaCegarLoop]: 297 mSDtfsCounter, 520 mSDsluCounter, 209 mSDsCounter, 0 mSdLazyCounter, 943 mSolverCounterSat, 193 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 524 SdHoareTripleChecker+Valid, 506 SdHoareTripleChecker+Invalid, 1137 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 193 IncrementalHoareTripleChecker+Valid, 943 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.1s IncrementalHoareTripleChecker+Time [2022-04-28 08:29:09,695 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [524 Valid, 506 Invalid, 1137 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [193 Valid, 943 Invalid, 1 Unknown, 0 Unchecked, 5.1s Time] [2022-04-28 08:29:09,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 429 states. [2022-04-28 08:29:09,932 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 429 to 414. [2022-04-28 08:29:09,933 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:29:09,933 INFO L82 GeneralOperation]: Start isEquivalent. First operand 429 states. Second operand has 414 states, 330 states have (on average 1.3636363636363635) internal successors, (450), 331 states have internal predecessors, (450), 43 states have call successors, (43), 33 states have call predecessors, (43), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:29:09,935 INFO L74 IsIncluded]: Start isIncluded. First operand 429 states. Second operand has 414 states, 330 states have (on average 1.3636363636363635) internal successors, (450), 331 states have internal predecessors, (450), 43 states have call successors, (43), 33 states have call predecessors, (43), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:29:09,936 INFO L87 Difference]: Start difference. First operand 429 states. Second operand has 414 states, 330 states have (on average 1.3636363636363635) internal successors, (450), 331 states have internal predecessors, (450), 43 states have call successors, (43), 33 states have call predecessors, (43), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:29:09,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:29:09,944 INFO L93 Difference]: Finished difference Result 429 states and 569 transitions. [2022-04-28 08:29:09,944 INFO L276 IsEmpty]: Start isEmpty. Operand 429 states and 569 transitions. [2022-04-28 08:29:09,944 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:29:09,944 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:29:09,945 INFO L74 IsIncluded]: Start isIncluded. First operand has 414 states, 330 states have (on average 1.3636363636363635) internal successors, (450), 331 states have internal predecessors, (450), 43 states have call successors, (43), 33 states have call predecessors, (43), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) Second operand 429 states. [2022-04-28 08:29:09,947 INFO L87 Difference]: Start difference. First operand has 414 states, 330 states have (on average 1.3636363636363635) internal successors, (450), 331 states have internal predecessors, (450), 43 states have call successors, (43), 33 states have call predecessors, (43), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) Second operand 429 states. [2022-04-28 08:29:09,955 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:29:09,955 INFO L93 Difference]: Finished difference Result 429 states and 569 transitions. [2022-04-28 08:29:09,955 INFO L276 IsEmpty]: Start isEmpty. Operand 429 states and 569 transitions. [2022-04-28 08:29:09,955 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:29:09,956 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:29:09,956 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:29:09,956 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:29:09,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 414 states, 330 states have (on average 1.3636363636363635) internal successors, (450), 331 states have internal predecessors, (450), 43 states have call successors, (43), 33 states have call predecessors, (43), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:29:09,965 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 414 states to 414 states and 548 transitions. [2022-04-28 08:29:09,966 INFO L78 Accepts]: Start accepts. Automaton has 414 states and 548 transitions. Word has length 62 [2022-04-28 08:29:09,966 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:29:09,966 INFO L495 AbstractCegarLoop]: Abstraction has 414 states and 548 transitions. [2022-04-28 08:29:09,966 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.375) internal successors, (43), 3 states have internal predecessors, (43), 3 states have call successors, (12), 8 states have call predecessors, (12), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:29:09,966 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 414 states and 548 transitions. [2022-04-28 08:29:10,788 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 548 edges. 548 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:29:10,788 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 548 transitions. [2022-04-28 08:29:10,789 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-04-28 08:29:10,789 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:29:10,789 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:29:10,789 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-04-28 08:29:10,789 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:29:10,789 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:29:10,789 INFO L85 PathProgramCache]: Analyzing trace with hash 466089939, now seen corresponding path program 1 times [2022-04-28 08:29:10,790 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:29:10,790 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1379424832] [2022-04-28 08:29:10,790 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:29:10,790 INFO L85 PathProgramCache]: Analyzing trace with hash 466089939, now seen corresponding path program 2 times [2022-04-28 08:29:10,790 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:29:10,790 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [653628127] [2022-04-28 08:29:10,790 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:29:10,790 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:29:10,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:10,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:29:10,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:10,948 INFO L290 TraceCheckUtils]: 0: Hoare triple {18453#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {18416#true} is VALID [2022-04-28 08:29:10,948 INFO L290 TraceCheckUtils]: 1: Hoare triple {18416#true} assume true; {18416#true} is VALID [2022-04-28 08:29:10,948 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18416#true} {18416#true} #1270#return; {18416#true} is VALID [2022-04-28 08:29:10,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:29:10,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:10,991 INFO L290 TraceCheckUtils]: 0: Hoare triple {18454#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18455#(and (<= 7 ~IPC~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-28 08:29:10,992 INFO L290 TraceCheckUtils]: 1: Hoare triple {18455#(and (<= 7 ~IPC~0) (= (+ (- 1) ~NP~0) 0))} assume true; {18455#(and (<= 7 ~IPC~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-28 08:29:10,992 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18455#(and (<= 7 ~IPC~0) (= (+ (- 1) ~NP~0) 0))} {18416#true} #1216#return; {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:29:11,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:29:11,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:11,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:29:11,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:11,025 INFO L290 TraceCheckUtils]: 0: Hoare triple {18416#true} ~cond := #in~cond; {18416#true} is VALID [2022-04-28 08:29:11,026 INFO L290 TraceCheckUtils]: 1: Hoare triple {18416#true} assume !(0 == ~cond); {18416#true} is VALID [2022-04-28 08:29:11,026 INFO L290 TraceCheckUtils]: 2: Hoare triple {18416#true} assume true; {18416#true} is VALID [2022-04-28 08:29:11,026 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {18416#true} {18416#true} #1254#return; {18416#true} is VALID [2022-04-28 08:29:11,026 INFO L290 TraceCheckUtils]: 0: Hoare triple {18456#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {18416#true} is VALID [2022-04-28 08:29:11,026 INFO L272 TraceCheckUtils]: 1: Hoare triple {18416#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {18416#true} is VALID [2022-04-28 08:29:11,026 INFO L290 TraceCheckUtils]: 2: Hoare triple {18416#true} ~cond := #in~cond; {18416#true} is VALID [2022-04-28 08:29:11,026 INFO L290 TraceCheckUtils]: 3: Hoare triple {18416#true} assume !(0 == ~cond); {18416#true} is VALID [2022-04-28 08:29:11,026 INFO L290 TraceCheckUtils]: 4: Hoare triple {18416#true} assume true; {18416#true} is VALID [2022-04-28 08:29:11,026 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {18416#true} {18416#true} #1254#return; {18416#true} is VALID [2022-04-28 08:29:11,026 INFO L290 TraceCheckUtils]: 6: Hoare triple {18416#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {18416#true} is VALID [2022-04-28 08:29:11,026 INFO L290 TraceCheckUtils]: 7: Hoare triple {18416#true} assume true; {18416#true} is VALID [2022-04-28 08:29:11,027 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {18416#true} {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} #1218#return; {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:29:11,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:29:11,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:11,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:29:11,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:11,056 INFO L290 TraceCheckUtils]: 0: Hoare triple {18461#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {18416#true} is VALID [2022-04-28 08:29:11,057 INFO L290 TraceCheckUtils]: 1: Hoare triple {18416#true} assume !(0 == ~__BLAST_NONDET~5); {18416#true} is VALID [2022-04-28 08:29:11,057 INFO L290 TraceCheckUtils]: 2: Hoare triple {18416#true} #res := -1073741823; {18416#true} is VALID [2022-04-28 08:29:11,057 INFO L290 TraceCheckUtils]: 3: Hoare triple {18416#true} assume true; {18416#true} is VALID [2022-04-28 08:29:11,057 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {18416#true} {18416#true} #1176#return; {18416#true} is VALID [2022-04-28 08:29:11,057 INFO L290 TraceCheckUtils]: 0: Hoare triple {18461#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {18416#true} is VALID [2022-04-28 08:29:11,058 INFO L272 TraceCheckUtils]: 1: Hoare triple {18416#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {18461#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:29:11,058 INFO L290 TraceCheckUtils]: 2: Hoare triple {18461#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {18416#true} is VALID [2022-04-28 08:29:11,058 INFO L290 TraceCheckUtils]: 3: Hoare triple {18416#true} assume !(0 == ~__BLAST_NONDET~5); {18416#true} is VALID [2022-04-28 08:29:11,058 INFO L290 TraceCheckUtils]: 4: Hoare triple {18416#true} #res := -1073741823; {18416#true} is VALID [2022-04-28 08:29:11,058 INFO L290 TraceCheckUtils]: 5: Hoare triple {18416#true} assume true; {18416#true} is VALID [2022-04-28 08:29:11,059 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {18416#true} {18416#true} #1176#return; {18416#true} is VALID [2022-04-28 08:29:11,059 INFO L290 TraceCheckUtils]: 7: Hoare triple {18416#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {18416#true} is VALID [2022-04-28 08:29:11,059 INFO L290 TraceCheckUtils]: 8: Hoare triple {18416#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {18416#true} is VALID [2022-04-28 08:29:11,059 INFO L290 TraceCheckUtils]: 9: Hoare triple {18416#true} assume true; {18416#true} is VALID [2022-04-28 08:29:11,059 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {18416#true} {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} #1220#return; {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:29:11,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:29:11,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:11,113 INFO L290 TraceCheckUtils]: 0: Hoare triple {18467#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18468#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} is VALID [2022-04-28 08:29:11,114 INFO L290 TraceCheckUtils]: 1: Hoare triple {18468#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} assume true; {18468#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} is VALID [2022-04-28 08:29:11,114 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18468#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} #1222#return; {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} is VALID [2022-04-28 08:29:11,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-04-28 08:29:11,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:11,123 INFO L290 TraceCheckUtils]: 0: Hoare triple {18416#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; {18416#true} is VALID [2022-04-28 08:29:11,123 INFO L290 TraceCheckUtils]: 1: Hoare triple {18416#true} assume 0 != #t~nondet17;havoc #t~nondet17;#res := 0; {18416#true} is VALID [2022-04-28 08:29:11,123 INFO L290 TraceCheckUtils]: 2: Hoare triple {18416#true} assume true; {18416#true} is VALID [2022-04-28 08:29:11,124 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {18416#true} {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} #1228#return; {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} is VALID [2022-04-28 08:29:11,125 INFO L272 TraceCheckUtils]: 0: Hoare triple {18416#true} call ULTIMATE.init(); {18453#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:29:11,125 INFO L290 TraceCheckUtils]: 1: Hoare triple {18453#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {18416#true} is VALID [2022-04-28 08:29:11,125 INFO L290 TraceCheckUtils]: 2: Hoare triple {18416#true} assume true; {18416#true} is VALID [2022-04-28 08:29:11,125 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {18416#true} {18416#true} #1270#return; {18416#true} is VALID [2022-04-28 08:29:11,125 INFO L272 TraceCheckUtils]: 4: Hoare triple {18416#true} call #t~ret213 := main(); {18416#true} is VALID [2022-04-28 08:29:11,125 INFO L290 TraceCheckUtils]: 5: Hoare triple {18416#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {18416#true} is VALID [2022-04-28 08:29:11,126 INFO L272 TraceCheckUtils]: 6: Hoare triple {18416#true} call _BLAST_init(); {18454#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:29:11,127 INFO L290 TraceCheckUtils]: 7: Hoare triple {18454#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18455#(and (<= 7 ~IPC~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-28 08:29:11,127 INFO L290 TraceCheckUtils]: 8: Hoare triple {18455#(and (<= 7 ~IPC~0) (= (+ (- 1) ~NP~0) 0))} assume true; {18455#(and (<= 7 ~IPC~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-28 08:29:11,128 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {18455#(and (<= 7 ~IPC~0) (= (+ (- 1) ~NP~0) 0))} {18416#true} #1216#return; {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:29:11,128 INFO L272 TraceCheckUtils]: 10: Hoare triple {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {18456#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:29:11,128 INFO L290 TraceCheckUtils]: 11: Hoare triple {18456#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {18416#true} is VALID [2022-04-28 08:29:11,129 INFO L272 TraceCheckUtils]: 12: Hoare triple {18416#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {18416#true} is VALID [2022-04-28 08:29:11,129 INFO L290 TraceCheckUtils]: 13: Hoare triple {18416#true} ~cond := #in~cond; {18416#true} is VALID [2022-04-28 08:29:11,129 INFO L290 TraceCheckUtils]: 14: Hoare triple {18416#true} assume !(0 == ~cond); {18416#true} is VALID [2022-04-28 08:29:11,129 INFO L290 TraceCheckUtils]: 15: Hoare triple {18416#true} assume true; {18416#true} is VALID [2022-04-28 08:29:11,129 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {18416#true} {18416#true} #1254#return; {18416#true} is VALID [2022-04-28 08:29:11,129 INFO L290 TraceCheckUtils]: 17: Hoare triple {18416#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {18416#true} is VALID [2022-04-28 08:29:11,129 INFO L290 TraceCheckUtils]: 18: Hoare triple {18416#true} assume true; {18416#true} is VALID [2022-04-28 08:29:11,130 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {18416#true} {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} #1218#return; {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:29:11,130 INFO L290 TraceCheckUtils]: 20: Hoare triple {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:29:11,131 INFO L290 TraceCheckUtils]: 21: Hoare triple {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:29:11,131 INFO L290 TraceCheckUtils]: 22: Hoare triple {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:29:11,132 INFO L272 TraceCheckUtils]: 23: Hoare triple {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {18461#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:29:11,132 INFO L290 TraceCheckUtils]: 24: Hoare triple {18461#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {18416#true} is VALID [2022-04-28 08:29:11,133 INFO L272 TraceCheckUtils]: 25: Hoare triple {18416#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {18461#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:29:11,133 INFO L290 TraceCheckUtils]: 26: Hoare triple {18461#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {18416#true} is VALID [2022-04-28 08:29:11,133 INFO L290 TraceCheckUtils]: 27: Hoare triple {18416#true} assume !(0 == ~__BLAST_NONDET~5); {18416#true} is VALID [2022-04-28 08:29:11,133 INFO L290 TraceCheckUtils]: 28: Hoare triple {18416#true} #res := -1073741823; {18416#true} is VALID [2022-04-28 08:29:11,133 INFO L290 TraceCheckUtils]: 29: Hoare triple {18416#true} assume true; {18416#true} is VALID [2022-04-28 08:29:11,133 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {18416#true} {18416#true} #1176#return; {18416#true} is VALID [2022-04-28 08:29:11,134 INFO L290 TraceCheckUtils]: 31: Hoare triple {18416#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {18416#true} is VALID [2022-04-28 08:29:11,134 INFO L290 TraceCheckUtils]: 32: Hoare triple {18416#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {18416#true} is VALID [2022-04-28 08:29:11,134 INFO L290 TraceCheckUtils]: 33: Hoare triple {18416#true} assume true; {18416#true} is VALID [2022-04-28 08:29:11,134 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {18416#true} {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} #1220#return; {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:29:11,135 INFO L290 TraceCheckUtils]: 35: Hoare triple {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} is VALID [2022-04-28 08:29:11,135 INFO L272 TraceCheckUtils]: 36: Hoare triple {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} call stub_driver_init(); {18467#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:29:11,136 INFO L290 TraceCheckUtils]: 37: Hoare triple {18467#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18468#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} is VALID [2022-04-28 08:29:11,136 INFO L290 TraceCheckUtils]: 38: Hoare triple {18468#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} assume true; {18468#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} is VALID [2022-04-28 08:29:11,137 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {18468#(and (or (not (<= ~s~0 0)) (<= ~NP~0 ~s~0)) (or (<= ~s~0 ~NP~0) (<= ~s~0 1)))} {18424#(and (not (= ~IPC~0 1)) (= ~NP~0 1))} #1222#return; {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} is VALID [2022-04-28 08:29:11,137 INFO L290 TraceCheckUtils]: 40: Hoare triple {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} assume !!(~status~5 >= 0); {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} is VALID [2022-04-28 08:29:11,138 INFO L290 TraceCheckUtils]: 41: Hoare triple {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} assume !(0 == ~__BLAST_NONDET~0); {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} is VALID [2022-04-28 08:29:11,139 INFO L290 TraceCheckUtils]: 42: Hoare triple {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} assume !(1 == ~__BLAST_NONDET~0); {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} is VALID [2022-04-28 08:29:11,139 INFO L290 TraceCheckUtils]: 43: Hoare triple {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} assume 2 == ~__BLAST_NONDET~0; {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} is VALID [2022-04-28 08:29:11,139 INFO L272 TraceCheckUtils]: 44: Hoare triple {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} call #t~ret173 := KbFilter_IoCtl(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {18416#true} is VALID [2022-04-28 08:29:11,139 INFO L290 TraceCheckUtils]: 45: Hoare triple {18416#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; {18416#true} is VALID [2022-04-28 08:29:11,139 INFO L290 TraceCheckUtils]: 46: Hoare triple {18416#true} assume 0 != #t~nondet17;havoc #t~nondet17;#res := 0; {18416#true} is VALID [2022-04-28 08:29:11,139 INFO L290 TraceCheckUtils]: 47: Hoare triple {18416#true} assume true; {18416#true} is VALID [2022-04-28 08:29:11,140 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {18416#true} {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} #1228#return; {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} is VALID [2022-04-28 08:29:11,140 INFO L290 TraceCheckUtils]: 49: Hoare triple {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} assume -2147483648 <= #t~ret173 && #t~ret173 <= 2147483647;~status~5 := #t~ret173;havoc #t~ret173; {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} is VALID [2022-04-28 08:29:11,141 INFO L290 TraceCheckUtils]: 50: Hoare triple {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} assume 0 != ~we_should_unload~0; {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} is VALID [2022-04-28 08:29:11,141 INFO L290 TraceCheckUtils]: 51: Hoare triple {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} assume !(1 == ~pended~0); {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} is VALID [2022-04-28 08:29:11,141 INFO L290 TraceCheckUtils]: 52: Hoare triple {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} assume !(1 == ~pended~0); {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} is VALID [2022-04-28 08:29:11,142 INFO L290 TraceCheckUtils]: 53: Hoare triple {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} assume !(~s~0 == ~UNLOADED~0); {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} is VALID [2022-04-28 08:29:11,142 INFO L290 TraceCheckUtils]: 54: Hoare triple {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} assume !(-1 == ~status~5); {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} is VALID [2022-04-28 08:29:11,142 INFO L290 TraceCheckUtils]: 55: Hoare triple {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} assume ~s~0 != ~SKIP2~0; {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} is VALID [2022-04-28 08:29:11,143 INFO L290 TraceCheckUtils]: 56: Hoare triple {18448#(and (= ~s~0 1) (not (= ~IPC~0 1)))} assume !(~s~0 != ~IPC~0); {18417#false} is VALID [2022-04-28 08:29:11,143 INFO L290 TraceCheckUtils]: 57: Hoare triple {18417#false} assume 1 == ~pended~0; {18417#false} is VALID [2022-04-28 08:29:11,143 INFO L290 TraceCheckUtils]: 58: Hoare triple {18417#false} assume 259 != ~status~5; {18417#false} is VALID [2022-04-28 08:29:11,143 INFO L272 TraceCheckUtils]: 59: Hoare triple {18417#false} call errorFn(); {18417#false} is VALID [2022-04-28 08:29:11,143 INFO L290 TraceCheckUtils]: 60: Hoare triple {18417#false} assume !false; {18417#false} is VALID [2022-04-28 08:29:11,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:29:11,144 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:29:11,144 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [653628127] [2022-04-28 08:29:11,144 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [653628127] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:29:11,144 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:29:11,144 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:29:11,144 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:29:11,144 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1379424832] [2022-04-28 08:29:11,144 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1379424832] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:29:11,144 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:29:11,144 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:29:11,144 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1020537533] [2022-04-28 08:29:11,145 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:29:11,145 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.909090909090909) internal successors, (43), 6 states have internal predecessors, (43), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 61 [2022-04-28 08:29:11,145 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:29:11,145 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.909090909090909) internal successors, (43), 6 states have internal predecessors, (43), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-04-28 08:29:11,197 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:29:11,198 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 08:29:11,198 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:29:11,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 08:29:11,199 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=85, Unknown=0, NotChecked=0, Total=110 [2022-04-28 08:29:11,199 INFO L87 Difference]: Start difference. First operand 414 states and 548 transitions. Second operand has 11 states, 11 states have (on average 3.909090909090909) internal successors, (43), 6 states have internal predecessors, (43), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-04-28 08:29:13,399 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:29:21,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:29:21,894 INFO L93 Difference]: Finished difference Result 448 states and 589 transitions. [2022-04-28 08:29:21,894 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-04-28 08:29:21,899 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.909090909090909) internal successors, (43), 6 states have internal predecessors, (43), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 61 [2022-04-28 08:29:21,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:29:21,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.909090909090909) internal successors, (43), 6 states have internal predecessors, (43), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-04-28 08:29:21,918 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 537 transitions. [2022-04-28 08:29:21,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.909090909090909) internal successors, (43), 6 states have internal predecessors, (43), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-04-28 08:29:21,921 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 537 transitions. [2022-04-28 08:29:21,921 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 17 states and 537 transitions. [2022-04-28 08:29:22,475 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 537 edges. 537 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:29:22,485 INFO L225 Difference]: With dead ends: 448 [2022-04-28 08:29:22,485 INFO L226 Difference]: Without dead ends: 440 [2022-04-28 08:29:22,485 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 81 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=156, Invalid=396, Unknown=0, NotChecked=0, Total=552 [2022-04-28 08:29:22,486 INFO L413 NwaCegarLoop]: 336 mSDtfsCounter, 1922 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 781 mSolverCounterSat, 629 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1931 SdHoareTripleChecker+Valid, 564 SdHoareTripleChecker+Invalid, 1411 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 629 IncrementalHoareTripleChecker+Valid, 781 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.3s IncrementalHoareTripleChecker+Time [2022-04-28 08:29:22,486 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1931 Valid, 564 Invalid, 1411 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [629 Valid, 781 Invalid, 1 Unknown, 0 Unchecked, 5.3s Time] [2022-04-28 08:29:22,487 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 440 states. [2022-04-28 08:29:22,912 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 440 to 415. [2022-04-28 08:29:22,912 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:29:22,913 INFO L82 GeneralOperation]: Start isEquivalent. First operand 440 states. Second operand has 415 states, 331 states have (on average 1.3625377643504533) internal successors, (451), 332 states have internal predecessors, (451), 43 states have call successors, (43), 33 states have call predecessors, (43), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:29:22,914 INFO L74 IsIncluded]: Start isIncluded. First operand 440 states. Second operand has 415 states, 331 states have (on average 1.3625377643504533) internal successors, (451), 332 states have internal predecessors, (451), 43 states have call successors, (43), 33 states have call predecessors, (43), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:29:22,915 INFO L87 Difference]: Start difference. First operand 440 states. Second operand has 415 states, 331 states have (on average 1.3625377643504533) internal successors, (451), 332 states have internal predecessors, (451), 43 states have call successors, (43), 33 states have call predecessors, (43), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:29:22,923 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:29:22,923 INFO L93 Difference]: Finished difference Result 440 states and 580 transitions. [2022-04-28 08:29:22,923 INFO L276 IsEmpty]: Start isEmpty. Operand 440 states and 580 transitions. [2022-04-28 08:29:22,924 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:29:22,924 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:29:22,925 INFO L74 IsIncluded]: Start isIncluded. First operand has 415 states, 331 states have (on average 1.3625377643504533) internal successors, (451), 332 states have internal predecessors, (451), 43 states have call successors, (43), 33 states have call predecessors, (43), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) Second operand 440 states. [2022-04-28 08:29:22,926 INFO L87 Difference]: Start difference. First operand has 415 states, 331 states have (on average 1.3625377643504533) internal successors, (451), 332 states have internal predecessors, (451), 43 states have call successors, (43), 33 states have call predecessors, (43), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) Second operand 440 states. [2022-04-28 08:29:22,934 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:29:22,934 INFO L93 Difference]: Finished difference Result 440 states and 580 transitions. [2022-04-28 08:29:22,934 INFO L276 IsEmpty]: Start isEmpty. Operand 440 states and 580 transitions. [2022-04-28 08:29:22,934 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:29:22,934 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:29:22,935 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:29:22,935 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:29:22,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 415 states, 331 states have (on average 1.3625377643504533) internal successors, (451), 332 states have internal predecessors, (451), 43 states have call successors, (43), 33 states have call predecessors, (43), 40 states have return successors, (55), 50 states have call predecessors, (55), 37 states have call successors, (55) [2022-04-28 08:29:22,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 415 states to 415 states and 549 transitions. [2022-04-28 08:29:22,944 INFO L78 Accepts]: Start accepts. Automaton has 415 states and 549 transitions. Word has length 61 [2022-04-28 08:29:22,944 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:29:22,945 INFO L495 AbstractCegarLoop]: Abstraction has 415 states and 549 transitions. [2022-04-28 08:29:22,945 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.909090909090909) internal successors, (43), 6 states have internal predecessors, (43), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-04-28 08:29:22,945 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 415 states and 549 transitions. [2022-04-28 08:29:23,632 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 549 edges. 549 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:29:23,632 INFO L276 IsEmpty]: Start isEmpty. Operand 415 states and 549 transitions. [2022-04-28 08:29:23,633 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-04-28 08:29:23,633 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:29:23,633 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:29:23,633 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-04-28 08:29:23,634 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:29:23,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:29:23,634 INFO L85 PathProgramCache]: Analyzing trace with hash 1325055407, now seen corresponding path program 1 times [2022-04-28 08:29:23,634 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:29:23,634 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1562017395] [2022-04-28 08:29:23,634 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:29:23,634 INFO L85 PathProgramCache]: Analyzing trace with hash 1325055407, now seen corresponding path program 2 times [2022-04-28 08:29:23,634 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:29:23,634 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1157595426] [2022-04-28 08:29:23,635 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:29:23,635 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:29:23,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:23,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:29:23,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:23,834 INFO L290 TraceCheckUtils]: 0: Hoare triple {21144#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {21107#true} is VALID [2022-04-28 08:29:23,834 INFO L290 TraceCheckUtils]: 1: Hoare triple {21107#true} assume true; {21107#true} is VALID [2022-04-28 08:29:23,834 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21107#true} {21107#true} #1270#return; {21107#true} is VALID [2022-04-28 08:29:23,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:29:23,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:23,877 INFO L290 TraceCheckUtils]: 0: Hoare triple {21145#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21115#(not (= ~DC~0 ~NP~0))} is VALID [2022-04-28 08:29:23,877 INFO L290 TraceCheckUtils]: 1: Hoare triple {21115#(not (= ~DC~0 ~NP~0))} assume true; {21115#(not (= ~DC~0 ~NP~0))} is VALID [2022-04-28 08:29:23,878 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21115#(not (= ~DC~0 ~NP~0))} {21107#true} #1216#return; {21115#(not (= ~DC~0 ~NP~0))} is VALID [2022-04-28 08:29:23,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:29:23,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:23,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:29:23,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:23,910 INFO L290 TraceCheckUtils]: 0: Hoare triple {21107#true} ~cond := #in~cond; {21107#true} is VALID [2022-04-28 08:29:23,911 INFO L290 TraceCheckUtils]: 1: Hoare triple {21107#true} assume !(0 == ~cond); {21107#true} is VALID [2022-04-28 08:29:23,911 INFO L290 TraceCheckUtils]: 2: Hoare triple {21107#true} assume true; {21107#true} is VALID [2022-04-28 08:29:23,911 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {21107#true} {21107#true} #1254#return; {21107#true} is VALID [2022-04-28 08:29:23,911 INFO L290 TraceCheckUtils]: 0: Hoare triple {21146#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {21107#true} is VALID [2022-04-28 08:29:23,911 INFO L272 TraceCheckUtils]: 1: Hoare triple {21107#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {21107#true} is VALID [2022-04-28 08:29:23,911 INFO L290 TraceCheckUtils]: 2: Hoare triple {21107#true} ~cond := #in~cond; {21107#true} is VALID [2022-04-28 08:29:23,911 INFO L290 TraceCheckUtils]: 3: Hoare triple {21107#true} assume !(0 == ~cond); {21107#true} is VALID [2022-04-28 08:29:23,911 INFO L290 TraceCheckUtils]: 4: Hoare triple {21107#true} assume true; {21107#true} is VALID [2022-04-28 08:29:23,921 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {21107#true} {21107#true} #1254#return; {21107#true} is VALID [2022-04-28 08:29:23,922 INFO L290 TraceCheckUtils]: 6: Hoare triple {21107#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {21107#true} is VALID [2022-04-28 08:29:23,922 INFO L290 TraceCheckUtils]: 7: Hoare triple {21107#true} assume true; {21107#true} is VALID [2022-04-28 08:29:23,932 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {21107#true} {21115#(not (= ~DC~0 ~NP~0))} #1218#return; {21115#(not (= ~DC~0 ~NP~0))} is VALID [2022-04-28 08:29:23,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:29:23,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:23,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:29:23,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:23,971 INFO L290 TraceCheckUtils]: 0: Hoare triple {21151#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {21107#true} is VALID [2022-04-28 08:29:23,971 INFO L290 TraceCheckUtils]: 1: Hoare triple {21107#true} assume !(0 == ~__BLAST_NONDET~5); {21107#true} is VALID [2022-04-28 08:29:23,971 INFO L290 TraceCheckUtils]: 2: Hoare triple {21107#true} #res := -1073741823; {21107#true} is VALID [2022-04-28 08:29:23,971 INFO L290 TraceCheckUtils]: 3: Hoare triple {21107#true} assume true; {21107#true} is VALID [2022-04-28 08:29:23,971 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {21107#true} {21107#true} #1176#return; {21107#true} is VALID [2022-04-28 08:29:23,971 INFO L290 TraceCheckUtils]: 0: Hoare triple {21151#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {21107#true} is VALID [2022-04-28 08:29:23,972 INFO L272 TraceCheckUtils]: 1: Hoare triple {21107#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {21151#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:29:23,972 INFO L290 TraceCheckUtils]: 2: Hoare triple {21151#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {21107#true} is VALID [2022-04-28 08:29:23,972 INFO L290 TraceCheckUtils]: 3: Hoare triple {21107#true} assume !(0 == ~__BLAST_NONDET~5); {21107#true} is VALID [2022-04-28 08:29:23,972 INFO L290 TraceCheckUtils]: 4: Hoare triple {21107#true} #res := -1073741823; {21107#true} is VALID [2022-04-28 08:29:23,972 INFO L290 TraceCheckUtils]: 5: Hoare triple {21107#true} assume true; {21107#true} is VALID [2022-04-28 08:29:23,973 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {21107#true} {21107#true} #1176#return; {21107#true} is VALID [2022-04-28 08:29:23,973 INFO L290 TraceCheckUtils]: 7: Hoare triple {21107#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {21107#true} is VALID [2022-04-28 08:29:23,973 INFO L290 TraceCheckUtils]: 8: Hoare triple {21107#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {21107#true} is VALID [2022-04-28 08:29:23,973 INFO L290 TraceCheckUtils]: 9: Hoare triple {21107#true} assume true; {21107#true} is VALID [2022-04-28 08:29:23,973 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {21107#true} {21115#(not (= ~DC~0 ~NP~0))} #1220#return; {21115#(not (= ~DC~0 ~NP~0))} is VALID [2022-04-28 08:29:23,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:29:23,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:24,000 INFO L290 TraceCheckUtils]: 0: Hoare triple {21157#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21158#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:29:24,001 INFO L290 TraceCheckUtils]: 1: Hoare triple {21158#(= ~s~0 ~NP~0)} assume true; {21158#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:29:24,001 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21158#(= ~s~0 ~NP~0)} {21115#(not (= ~DC~0 ~NP~0))} #1222#return; {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-04-28 08:29:24,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:24,010 INFO L290 TraceCheckUtils]: 0: Hoare triple {21107#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; {21107#true} is VALID [2022-04-28 08:29:24,010 INFO L290 TraceCheckUtils]: 1: Hoare triple {21107#true} assume 0 != #t~nondet17;havoc #t~nondet17;#res := 0; {21107#true} is VALID [2022-04-28 08:29:24,010 INFO L290 TraceCheckUtils]: 2: Hoare triple {21107#true} assume true; {21107#true} is VALID [2022-04-28 08:29:24,011 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {21107#true} {21139#(not (= ~s~0 ~DC~0))} #1228#return; {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,012 INFO L272 TraceCheckUtils]: 0: Hoare triple {21107#true} call ULTIMATE.init(); {21144#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:29:24,012 INFO L290 TraceCheckUtils]: 1: Hoare triple {21144#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {21107#true} is VALID [2022-04-28 08:29:24,012 INFO L290 TraceCheckUtils]: 2: Hoare triple {21107#true} assume true; {21107#true} is VALID [2022-04-28 08:29:24,012 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {21107#true} {21107#true} #1270#return; {21107#true} is VALID [2022-04-28 08:29:24,012 INFO L272 TraceCheckUtils]: 4: Hoare triple {21107#true} call #t~ret213 := main(); {21107#true} is VALID [2022-04-28 08:29:24,013 INFO L290 TraceCheckUtils]: 5: Hoare triple {21107#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {21107#true} is VALID [2022-04-28 08:29:24,013 INFO L272 TraceCheckUtils]: 6: Hoare triple {21107#true} call _BLAST_init(); {21145#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:29:24,014 INFO L290 TraceCheckUtils]: 7: Hoare triple {21145#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21115#(not (= ~DC~0 ~NP~0))} is VALID [2022-04-28 08:29:24,014 INFO L290 TraceCheckUtils]: 8: Hoare triple {21115#(not (= ~DC~0 ~NP~0))} assume true; {21115#(not (= ~DC~0 ~NP~0))} is VALID [2022-04-28 08:29:24,014 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {21115#(not (= ~DC~0 ~NP~0))} {21107#true} #1216#return; {21115#(not (= ~DC~0 ~NP~0))} is VALID [2022-04-28 08:29:24,015 INFO L272 TraceCheckUtils]: 10: Hoare triple {21115#(not (= ~DC~0 ~NP~0))} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {21146#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:29:24,015 INFO L290 TraceCheckUtils]: 11: Hoare triple {21146#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {21107#true} is VALID [2022-04-28 08:29:24,015 INFO L272 TraceCheckUtils]: 12: Hoare triple {21107#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {21107#true} is VALID [2022-04-28 08:29:24,015 INFO L290 TraceCheckUtils]: 13: Hoare triple {21107#true} ~cond := #in~cond; {21107#true} is VALID [2022-04-28 08:29:24,015 INFO L290 TraceCheckUtils]: 14: Hoare triple {21107#true} assume !(0 == ~cond); {21107#true} is VALID [2022-04-28 08:29:24,016 INFO L290 TraceCheckUtils]: 15: Hoare triple {21107#true} assume true; {21107#true} is VALID [2022-04-28 08:29:24,016 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {21107#true} {21107#true} #1254#return; {21107#true} is VALID [2022-04-28 08:29:24,016 INFO L290 TraceCheckUtils]: 17: Hoare triple {21107#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {21107#true} is VALID [2022-04-28 08:29:24,016 INFO L290 TraceCheckUtils]: 18: Hoare triple {21107#true} assume true; {21107#true} is VALID [2022-04-28 08:29:24,016 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {21107#true} {21115#(not (= ~DC~0 ~NP~0))} #1218#return; {21115#(not (= ~DC~0 ~NP~0))} is VALID [2022-04-28 08:29:24,017 INFO L290 TraceCheckUtils]: 20: Hoare triple {21115#(not (= ~DC~0 ~NP~0))} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {21115#(not (= ~DC~0 ~NP~0))} is VALID [2022-04-28 08:29:24,017 INFO L290 TraceCheckUtils]: 21: Hoare triple {21115#(not (= ~DC~0 ~NP~0))} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {21115#(not (= ~DC~0 ~NP~0))} is VALID [2022-04-28 08:29:24,017 INFO L290 TraceCheckUtils]: 22: Hoare triple {21115#(not (= ~DC~0 ~NP~0))} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {21115#(not (= ~DC~0 ~NP~0))} is VALID [2022-04-28 08:29:24,018 INFO L272 TraceCheckUtils]: 23: Hoare triple {21115#(not (= ~DC~0 ~NP~0))} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {21151#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:29:24,018 INFO L290 TraceCheckUtils]: 24: Hoare triple {21151#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {21107#true} is VALID [2022-04-28 08:29:24,019 INFO L272 TraceCheckUtils]: 25: Hoare triple {21107#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {21151#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:29:24,019 INFO L290 TraceCheckUtils]: 26: Hoare triple {21151#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {21107#true} is VALID [2022-04-28 08:29:24,019 INFO L290 TraceCheckUtils]: 27: Hoare triple {21107#true} assume !(0 == ~__BLAST_NONDET~5); {21107#true} is VALID [2022-04-28 08:29:24,019 INFO L290 TraceCheckUtils]: 28: Hoare triple {21107#true} #res := -1073741823; {21107#true} is VALID [2022-04-28 08:29:24,019 INFO L290 TraceCheckUtils]: 29: Hoare triple {21107#true} assume true; {21107#true} is VALID [2022-04-28 08:29:24,019 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {21107#true} {21107#true} #1176#return; {21107#true} is VALID [2022-04-28 08:29:24,019 INFO L290 TraceCheckUtils]: 31: Hoare triple {21107#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {21107#true} is VALID [2022-04-28 08:29:24,020 INFO L290 TraceCheckUtils]: 32: Hoare triple {21107#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {21107#true} is VALID [2022-04-28 08:29:24,020 INFO L290 TraceCheckUtils]: 33: Hoare triple {21107#true} assume true; {21107#true} is VALID [2022-04-28 08:29:24,020 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {21107#true} {21115#(not (= ~DC~0 ~NP~0))} #1220#return; {21115#(not (= ~DC~0 ~NP~0))} is VALID [2022-04-28 08:29:24,020 INFO L290 TraceCheckUtils]: 35: Hoare triple {21115#(not (= ~DC~0 ~NP~0))} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {21115#(not (= ~DC~0 ~NP~0))} is VALID [2022-04-28 08:29:24,021 INFO L272 TraceCheckUtils]: 36: Hoare triple {21115#(not (= ~DC~0 ~NP~0))} call stub_driver_init(); {21157#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:29:24,021 INFO L290 TraceCheckUtils]: 37: Hoare triple {21157#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21158#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:29:24,022 INFO L290 TraceCheckUtils]: 38: Hoare triple {21158#(= ~s~0 ~NP~0)} assume true; {21158#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:29:24,022 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {21158#(= ~s~0 ~NP~0)} {21115#(not (= ~DC~0 ~NP~0))} #1222#return; {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,022 INFO L290 TraceCheckUtils]: 40: Hoare triple {21139#(not (= ~s~0 ~DC~0))} assume !!(~status~5 >= 0); {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,022 INFO L290 TraceCheckUtils]: 41: Hoare triple {21139#(not (= ~s~0 ~DC~0))} assume !(0 == ~__BLAST_NONDET~0); {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,023 INFO L290 TraceCheckUtils]: 42: Hoare triple {21139#(not (= ~s~0 ~DC~0))} assume !(1 == ~__BLAST_NONDET~0); {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,023 INFO L290 TraceCheckUtils]: 43: Hoare triple {21139#(not (= ~s~0 ~DC~0))} assume 2 == ~__BLAST_NONDET~0; {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,023 INFO L272 TraceCheckUtils]: 44: Hoare triple {21139#(not (= ~s~0 ~DC~0))} call #t~ret173 := KbFilter_IoCtl(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {21107#true} is VALID [2022-04-28 08:29:24,023 INFO L290 TraceCheckUtils]: 45: Hoare triple {21107#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; {21107#true} is VALID [2022-04-28 08:29:24,023 INFO L290 TraceCheckUtils]: 46: Hoare triple {21107#true} assume 0 != #t~nondet17;havoc #t~nondet17;#res := 0; {21107#true} is VALID [2022-04-28 08:29:24,023 INFO L290 TraceCheckUtils]: 47: Hoare triple {21107#true} assume true; {21107#true} is VALID [2022-04-28 08:29:24,024 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {21107#true} {21139#(not (= ~s~0 ~DC~0))} #1228#return; {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,024 INFO L290 TraceCheckUtils]: 49: Hoare triple {21139#(not (= ~s~0 ~DC~0))} assume -2147483648 <= #t~ret173 && #t~ret173 <= 2147483647;~status~5 := #t~ret173;havoc #t~ret173; {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,024 INFO L290 TraceCheckUtils]: 50: Hoare triple {21139#(not (= ~s~0 ~DC~0))} assume 0 != ~we_should_unload~0; {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,025 INFO L290 TraceCheckUtils]: 51: Hoare triple {21139#(not (= ~s~0 ~DC~0))} assume !(1 == ~pended~0); {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,025 INFO L290 TraceCheckUtils]: 52: Hoare triple {21139#(not (= ~s~0 ~DC~0))} assume !(1 == ~pended~0); {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,025 INFO L290 TraceCheckUtils]: 53: Hoare triple {21139#(not (= ~s~0 ~DC~0))} assume !(~s~0 == ~UNLOADED~0); {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,025 INFO L290 TraceCheckUtils]: 54: Hoare triple {21139#(not (= ~s~0 ~DC~0))} assume !(-1 == ~status~5); {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,026 INFO L290 TraceCheckUtils]: 55: Hoare triple {21139#(not (= ~s~0 ~DC~0))} assume ~s~0 != ~SKIP2~0; {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,026 INFO L290 TraceCheckUtils]: 56: Hoare triple {21139#(not (= ~s~0 ~DC~0))} assume ~s~0 != ~IPC~0; {21139#(not (= ~s~0 ~DC~0))} is VALID [2022-04-28 08:29:24,026 INFO L290 TraceCheckUtils]: 57: Hoare triple {21139#(not (= ~s~0 ~DC~0))} assume !(~s~0 != ~DC~0); {21108#false} is VALID [2022-04-28 08:29:24,032 INFO L290 TraceCheckUtils]: 58: Hoare triple {21108#false} assume 1 == ~pended~0; {21108#false} is VALID [2022-04-28 08:29:24,032 INFO L290 TraceCheckUtils]: 59: Hoare triple {21108#false} assume 259 != ~status~5; {21108#false} is VALID [2022-04-28 08:29:24,032 INFO L272 TraceCheckUtils]: 60: Hoare triple {21108#false} call errorFn(); {21108#false} is VALID [2022-04-28 08:29:24,033 INFO L290 TraceCheckUtils]: 61: Hoare triple {21108#false} assume !false; {21108#false} is VALID [2022-04-28 08:29:24,033 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:29:24,033 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:29:24,033 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1157595426] [2022-04-28 08:29:24,033 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1157595426] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:29:24,033 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:29:24,033 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:29:24,033 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:29:24,033 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1562017395] [2022-04-28 08:29:24,034 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1562017395] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:29:24,034 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:29:24,034 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:29:24,034 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [151432296] [2022-04-28 08:29:24,034 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:29:24,035 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 5 states have internal predecessors, (44), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 62 [2022-04-28 08:29:24,035 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:29:24,035 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.4) internal successors, (44), 5 states have internal predecessors, (44), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-04-28 08:29:24,077 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 62 edges. 62 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:29:24,077 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-28 08:29:24,077 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:29:24,078 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-28 08:29:24,078 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2022-04-28 08:29:24,079 INFO L87 Difference]: Start difference. First operand 415 states and 549 transitions. Second operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 5 states have internal predecessors, (44), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-04-28 08:29:26,244 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:29:32,305 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:29:32,305 INFO L93 Difference]: Finished difference Result 442 states and 581 transitions. [2022-04-28 08:29:32,305 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-04-28 08:29:32,305 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 5 states have internal predecessors, (44), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 62 [2022-04-28 08:29:32,306 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:29:32,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 5 states have internal predecessors, (44), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-04-28 08:29:32,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 529 transitions. [2022-04-28 08:29:32,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 5 states have internal predecessors, (44), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-04-28 08:29:32,312 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 529 transitions. [2022-04-28 08:29:32,313 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 20 states and 529 transitions. [2022-04-28 08:29:32,868 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 529 edges. 529 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:29:32,877 INFO L225 Difference]: With dead ends: 442 [2022-04-28 08:29:32,877 INFO L226 Difference]: Without dead ends: 389 [2022-04-28 08:29:32,878 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 113 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=181, Invalid=469, Unknown=0, NotChecked=0, Total=650 [2022-04-28 08:29:32,880 INFO L413 NwaCegarLoop]: 336 mSDtfsCounter, 1509 mSDsluCounter, 206 mSDsCounter, 0 mSdLazyCounter, 716 mSolverCounterSat, 507 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1517 SdHoareTripleChecker+Valid, 542 SdHoareTripleChecker+Invalid, 1224 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 507 IncrementalHoareTripleChecker+Valid, 716 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2022-04-28 08:29:32,880 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1517 Valid, 542 Invalid, 1224 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [507 Valid, 716 Invalid, 1 Unknown, 0 Unchecked, 4.2s Time] [2022-04-28 08:29:32,881 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 389 states. [2022-04-28 08:29:33,177 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 389 to 371. [2022-04-28 08:29:33,177 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:29:33,177 INFO L82 GeneralOperation]: Start isEquivalent. First operand 389 states. Second operand has 371 states, 296 states have (on average 1.3817567567567568) internal successors, (409), 302 states have internal predecessors, (409), 42 states have call successors, (42), 32 states have call predecessors, (42), 32 states have return successors, (42), 37 states have call predecessors, (42), 36 states have call successors, (42) [2022-04-28 08:29:33,178 INFO L74 IsIncluded]: Start isIncluded. First operand 389 states. Second operand has 371 states, 296 states have (on average 1.3817567567567568) internal successors, (409), 302 states have internal predecessors, (409), 42 states have call successors, (42), 32 states have call predecessors, (42), 32 states have return successors, (42), 37 states have call predecessors, (42), 36 states have call successors, (42) [2022-04-28 08:29:33,178 INFO L87 Difference]: Start difference. First operand 389 states. Second operand has 371 states, 296 states have (on average 1.3817567567567568) internal successors, (409), 302 states have internal predecessors, (409), 42 states have call successors, (42), 32 states have call predecessors, (42), 32 states have return successors, (42), 37 states have call predecessors, (42), 36 states have call successors, (42) [2022-04-28 08:29:33,185 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:29:33,185 INFO L93 Difference]: Finished difference Result 389 states and 516 transitions. [2022-04-28 08:29:33,185 INFO L276 IsEmpty]: Start isEmpty. Operand 389 states and 516 transitions. [2022-04-28 08:29:33,185 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:29:33,185 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:29:33,186 INFO L74 IsIncluded]: Start isIncluded. First operand has 371 states, 296 states have (on average 1.3817567567567568) internal successors, (409), 302 states have internal predecessors, (409), 42 states have call successors, (42), 32 states have call predecessors, (42), 32 states have return successors, (42), 37 states have call predecessors, (42), 36 states have call successors, (42) Second operand 389 states. [2022-04-28 08:29:33,186 INFO L87 Difference]: Start difference. First operand has 371 states, 296 states have (on average 1.3817567567567568) internal successors, (409), 302 states have internal predecessors, (409), 42 states have call successors, (42), 32 states have call predecessors, (42), 32 states have return successors, (42), 37 states have call predecessors, (42), 36 states have call successors, (42) Second operand 389 states. [2022-04-28 08:29:33,192 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:29:33,193 INFO L93 Difference]: Finished difference Result 389 states and 516 transitions. [2022-04-28 08:29:33,193 INFO L276 IsEmpty]: Start isEmpty. Operand 389 states and 516 transitions. [2022-04-28 08:29:33,193 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:29:33,193 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:29:33,193 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:29:33,193 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:29:33,194 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 371 states, 296 states have (on average 1.3817567567567568) internal successors, (409), 302 states have internal predecessors, (409), 42 states have call successors, (42), 32 states have call predecessors, (42), 32 states have return successors, (42), 37 states have call predecessors, (42), 36 states have call successors, (42) [2022-04-28 08:29:33,200 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 371 states to 371 states and 493 transitions. [2022-04-28 08:29:33,201 INFO L78 Accepts]: Start accepts. Automaton has 371 states and 493 transitions. Word has length 62 [2022-04-28 08:29:33,201 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:29:33,201 INFO L495 AbstractCegarLoop]: Abstraction has 371 states and 493 transitions. [2022-04-28 08:29:33,201 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 5 states have internal predecessors, (44), 4 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-04-28 08:29:33,201 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 371 states and 493 transitions. [2022-04-28 08:29:33,915 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 493 edges. 493 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:29:33,915 INFO L276 IsEmpty]: Start isEmpty. Operand 371 states and 493 transitions. [2022-04-28 08:29:33,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-04-28 08:29:33,917 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:29:33,917 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:29:33,917 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-04-28 08:29:33,918 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:29:33,918 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:29:33,918 INFO L85 PathProgramCache]: Analyzing trace with hash 1052170321, now seen corresponding path program 1 times [2022-04-28 08:29:33,918 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:29:33,918 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [63998284] [2022-04-28 08:29:33,919 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:29:33,919 INFO L85 PathProgramCache]: Analyzing trace with hash 1052170321, now seen corresponding path program 2 times [2022-04-28 08:29:33,919 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:29:33,919 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1039516770] [2022-04-28 08:29:33,919 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:29:33,919 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:29:33,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:34,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:29:34,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:34,134 INFO L290 TraceCheckUtils]: 0: Hoare triple {23647#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {23601#true} is VALID [2022-04-28 08:29:34,134 INFO L290 TraceCheckUtils]: 1: Hoare triple {23601#true} assume true; {23601#true} is VALID [2022-04-28 08:29:34,134 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {23601#true} {23601#true} #1270#return; {23601#true} is VALID [2022-04-28 08:29:34,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:29:34,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:34,170 INFO L290 TraceCheckUtils]: 0: Hoare triple {23648#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {23649#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:29:34,171 INFO L290 TraceCheckUtils]: 1: Hoare triple {23649#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {23649#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:29:34,171 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {23649#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {23601#true} #1216#return; {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:29:34,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:34,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:29:34,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:34,225 INFO L290 TraceCheckUtils]: 0: Hoare triple {23601#true} ~cond := #in~cond; {23601#true} is VALID [2022-04-28 08:29:34,225 INFO L290 TraceCheckUtils]: 1: Hoare triple {23601#true} assume !(0 == ~cond); {23601#true} is VALID [2022-04-28 08:29:34,225 INFO L290 TraceCheckUtils]: 2: Hoare triple {23601#true} assume true; {23601#true} is VALID [2022-04-28 08:29:34,225 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {23601#true} {23601#true} #1254#return; {23601#true} is VALID [2022-04-28 08:29:34,225 INFO L290 TraceCheckUtils]: 0: Hoare triple {23650#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {23601#true} is VALID [2022-04-28 08:29:34,226 INFO L272 TraceCheckUtils]: 1: Hoare triple {23601#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {23601#true} is VALID [2022-04-28 08:29:34,226 INFO L290 TraceCheckUtils]: 2: Hoare triple {23601#true} ~cond := #in~cond; {23601#true} is VALID [2022-04-28 08:29:34,226 INFO L290 TraceCheckUtils]: 3: Hoare triple {23601#true} assume !(0 == ~cond); {23601#true} is VALID [2022-04-28 08:29:34,226 INFO L290 TraceCheckUtils]: 4: Hoare triple {23601#true} assume true; {23601#true} is VALID [2022-04-28 08:29:34,226 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {23601#true} {23601#true} #1254#return; {23601#true} is VALID [2022-04-28 08:29:34,226 INFO L290 TraceCheckUtils]: 6: Hoare triple {23601#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {23601#true} is VALID [2022-04-28 08:29:34,226 INFO L290 TraceCheckUtils]: 7: Hoare triple {23601#true} assume true; {23601#true} is VALID [2022-04-28 08:29:34,227 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {23601#true} {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #1218#return; {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:29:34,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:34,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:29:34,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:34,257 INFO L290 TraceCheckUtils]: 0: Hoare triple {23655#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {23601#true} is VALID [2022-04-28 08:29:34,257 INFO L290 TraceCheckUtils]: 1: Hoare triple {23601#true} assume !(0 == ~__BLAST_NONDET~5); {23601#true} is VALID [2022-04-28 08:29:34,258 INFO L290 TraceCheckUtils]: 2: Hoare triple {23601#true} #res := -1073741823; {23601#true} is VALID [2022-04-28 08:29:34,258 INFO L290 TraceCheckUtils]: 3: Hoare triple {23601#true} assume true; {23601#true} is VALID [2022-04-28 08:29:34,258 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {23601#true} {23601#true} #1176#return; {23601#true} is VALID [2022-04-28 08:29:34,258 INFO L290 TraceCheckUtils]: 0: Hoare triple {23655#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {23601#true} is VALID [2022-04-28 08:29:34,259 INFO L272 TraceCheckUtils]: 1: Hoare triple {23601#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {23655#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:29:34,259 INFO L290 TraceCheckUtils]: 2: Hoare triple {23655#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {23601#true} is VALID [2022-04-28 08:29:34,259 INFO L290 TraceCheckUtils]: 3: Hoare triple {23601#true} assume !(0 == ~__BLAST_NONDET~5); {23601#true} is VALID [2022-04-28 08:29:34,259 INFO L290 TraceCheckUtils]: 4: Hoare triple {23601#true} #res := -1073741823; {23601#true} is VALID [2022-04-28 08:29:34,259 INFO L290 TraceCheckUtils]: 5: Hoare triple {23601#true} assume true; {23601#true} is VALID [2022-04-28 08:29:34,259 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {23601#true} {23601#true} #1176#return; {23601#true} is VALID [2022-04-28 08:29:34,259 INFO L290 TraceCheckUtils]: 7: Hoare triple {23601#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {23601#true} is VALID [2022-04-28 08:29:34,259 INFO L290 TraceCheckUtils]: 8: Hoare triple {23601#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {23601#true} is VALID [2022-04-28 08:29:34,260 INFO L290 TraceCheckUtils]: 9: Hoare triple {23601#true} assume true; {23601#true} is VALID [2022-04-28 08:29:34,260 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {23601#true} {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #1220#return; {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:29:34,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:34,282 INFO L290 TraceCheckUtils]: 0: Hoare triple {23661#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {23601#true} is VALID [2022-04-28 08:29:34,282 INFO L290 TraceCheckUtils]: 1: Hoare triple {23601#true} assume true; {23601#true} is VALID [2022-04-28 08:29:34,282 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {23601#true} {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #1222#return; {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-04-28 08:29:34,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:34,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 08:29:34,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:34,360 INFO L290 TraceCheckUtils]: 0: Hoare triple {23668#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {23601#true} is VALID [2022-04-28 08:29:34,360 INFO L290 TraceCheckUtils]: 1: Hoare triple {23601#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {23669#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:29:34,361 INFO L290 TraceCheckUtils]: 2: Hoare triple {23669#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {23669#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:29:34,361 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {23669#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {23601#true} #1248#return; {23667#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:29:34,362 INFO L290 TraceCheckUtils]: 0: Hoare triple {23662#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~2.base, ~irpStack~2.offset;havoc ~devExt~2.base, ~devExt~2.offset;havoc ~hookKeyboard~0.base, ~hookKeyboard~0.offset;havoc ~connectData~0.base, ~connectData~0.offset;havoc ~status~2;havoc ~tmp~2;~status~2 := 0;call #t~mem51.base, #t~mem51.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~2.base, ~devExt~2.offset := #t~mem51.base, #t~mem51.offset;havoc #t~mem51.base, #t~mem51.offset;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4);call #t~mem52.base, #t~mem52.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~2.base, ~irpStack~2.offset := #t~mem52.base, #t~mem52.offset;havoc #t~mem52.base, #t~mem52.offset;call #t~mem53 := read~int(~irpStack~2.base, 12 + ~irpStack~2.offset, 4); {23601#true} is VALID [2022-04-28 08:29:34,362 INFO L290 TraceCheckUtils]: 1: Hoare triple {23601#true} assume #t~mem53 % 4294967296 == ~bitwiseOr(~bitwiseOr(720896, 512), 3) % 4294967296;havoc #t~mem53; {23601#true} is VALID [2022-04-28 08:29:34,362 INFO L290 TraceCheckUtils]: 2: Hoare triple {23601#true} call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~devExt~2.base, 20 + ~devExt~2.offset, 4); {23601#true} is VALID [2022-04-28 08:29:34,362 INFO L290 TraceCheckUtils]: 3: Hoare triple {23601#true} assume 0 != (#t~mem62.base + #t~mem62.offset) % 4294967296;havoc #t~mem62.base, #t~mem62.offset;~status~2 := -1073741757; {23601#true} is VALID [2022-04-28 08:29:34,363 INFO L290 TraceCheckUtils]: 4: Hoare triple {23601#true} assume !(~status~2 >= 0);call write~int(~status~2, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~2; {23601#true} is VALID [2022-04-28 08:29:34,363 INFO L272 TraceCheckUtils]: 5: Hoare triple {23601#true} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {23668#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:29:34,363 INFO L290 TraceCheckUtils]: 6: Hoare triple {23668#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {23601#true} is VALID [2022-04-28 08:29:34,363 INFO L290 TraceCheckUtils]: 7: Hoare triple {23601#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {23669#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:29:34,364 INFO L290 TraceCheckUtils]: 8: Hoare triple {23669#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {23669#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:29:34,364 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {23669#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {23601#true} #1248#return; {23667#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:29:34,364 INFO L290 TraceCheckUtils]: 10: Hoare triple {23667#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~2; {23667#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:29:34,365 INFO L290 TraceCheckUtils]: 11: Hoare triple {23667#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {23667#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:29:34,366 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {23667#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #1234#return; {23646#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:29:34,367 INFO L272 TraceCheckUtils]: 0: Hoare triple {23601#true} call ULTIMATE.init(); {23647#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:29:34,367 INFO L290 TraceCheckUtils]: 1: Hoare triple {23647#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {23601#true} is VALID [2022-04-28 08:29:34,367 INFO L290 TraceCheckUtils]: 2: Hoare triple {23601#true} assume true; {23601#true} is VALID [2022-04-28 08:29:34,367 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {23601#true} {23601#true} #1270#return; {23601#true} is VALID [2022-04-28 08:29:34,367 INFO L272 TraceCheckUtils]: 4: Hoare triple {23601#true} call #t~ret213 := main(); {23601#true} is VALID [2022-04-28 08:29:34,367 INFO L290 TraceCheckUtils]: 5: Hoare triple {23601#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {23601#true} is VALID [2022-04-28 08:29:34,368 INFO L272 TraceCheckUtils]: 6: Hoare triple {23601#true} call _BLAST_init(); {23648#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:29:34,368 INFO L290 TraceCheckUtils]: 7: Hoare triple {23648#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {23649#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:29:34,369 INFO L290 TraceCheckUtils]: 8: Hoare triple {23649#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {23649#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:29:34,369 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {23649#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {23601#true} #1216#return; {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,370 INFO L272 TraceCheckUtils]: 10: Hoare triple {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {23650#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:29:34,370 INFO L290 TraceCheckUtils]: 11: Hoare triple {23650#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {23601#true} is VALID [2022-04-28 08:29:34,370 INFO L272 TraceCheckUtils]: 12: Hoare triple {23601#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {23601#true} is VALID [2022-04-28 08:29:34,370 INFO L290 TraceCheckUtils]: 13: Hoare triple {23601#true} ~cond := #in~cond; {23601#true} is VALID [2022-04-28 08:29:34,370 INFO L290 TraceCheckUtils]: 14: Hoare triple {23601#true} assume !(0 == ~cond); {23601#true} is VALID [2022-04-28 08:29:34,370 INFO L290 TraceCheckUtils]: 15: Hoare triple {23601#true} assume true; {23601#true} is VALID [2022-04-28 08:29:34,370 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {23601#true} {23601#true} #1254#return; {23601#true} is VALID [2022-04-28 08:29:34,370 INFO L290 TraceCheckUtils]: 17: Hoare triple {23601#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {23601#true} is VALID [2022-04-28 08:29:34,370 INFO L290 TraceCheckUtils]: 18: Hoare triple {23601#true} assume true; {23601#true} is VALID [2022-04-28 08:29:34,371 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {23601#true} {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #1218#return; {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,371 INFO L290 TraceCheckUtils]: 20: Hoare triple {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,372 INFO L290 TraceCheckUtils]: 21: Hoare triple {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,372 INFO L290 TraceCheckUtils]: 22: Hoare triple {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,373 INFO L272 TraceCheckUtils]: 23: Hoare triple {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {23655#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:29:34,373 INFO L290 TraceCheckUtils]: 24: Hoare triple {23655#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {23601#true} is VALID [2022-04-28 08:29:34,374 INFO L272 TraceCheckUtils]: 25: Hoare triple {23601#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {23655#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:29:34,374 INFO L290 TraceCheckUtils]: 26: Hoare triple {23655#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {23601#true} is VALID [2022-04-28 08:29:34,374 INFO L290 TraceCheckUtils]: 27: Hoare triple {23601#true} assume !(0 == ~__BLAST_NONDET~5); {23601#true} is VALID [2022-04-28 08:29:34,374 INFO L290 TraceCheckUtils]: 28: Hoare triple {23601#true} #res := -1073741823; {23601#true} is VALID [2022-04-28 08:29:34,374 INFO L290 TraceCheckUtils]: 29: Hoare triple {23601#true} assume true; {23601#true} is VALID [2022-04-28 08:29:34,374 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {23601#true} {23601#true} #1176#return; {23601#true} is VALID [2022-04-28 08:29:34,374 INFO L290 TraceCheckUtils]: 31: Hoare triple {23601#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {23601#true} is VALID [2022-04-28 08:29:34,374 INFO L290 TraceCheckUtils]: 32: Hoare triple {23601#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {23601#true} is VALID [2022-04-28 08:29:34,374 INFO L290 TraceCheckUtils]: 33: Hoare triple {23601#true} assume true; {23601#true} is VALID [2022-04-28 08:29:34,375 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {23601#true} {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #1220#return; {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,375 INFO L290 TraceCheckUtils]: 35: Hoare triple {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,376 INFO L272 TraceCheckUtils]: 36: Hoare triple {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call stub_driver_init(); {23661#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:29:34,376 INFO L290 TraceCheckUtils]: 37: Hoare triple {23661#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {23601#true} is VALID [2022-04-28 08:29:34,376 INFO L290 TraceCheckUtils]: 38: Hoare triple {23601#true} assume true; {23601#true} is VALID [2022-04-28 08:29:34,376 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {23601#true} {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #1222#return; {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,376 INFO L290 TraceCheckUtils]: 40: Hoare triple {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !!(~status~5 >= 0); {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,377 INFO L290 TraceCheckUtils]: 41: Hoare triple {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~__BLAST_NONDET~0); {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,377 INFO L290 TraceCheckUtils]: 42: Hoare triple {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(1 == ~__BLAST_NONDET~0); {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,377 INFO L290 TraceCheckUtils]: 43: Hoare triple {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(2 == ~__BLAST_NONDET~0); {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,378 INFO L290 TraceCheckUtils]: 44: Hoare triple {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(3 == ~__BLAST_NONDET~0); {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,378 INFO L290 TraceCheckUtils]: 45: Hoare triple {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(4 == ~__BLAST_NONDET~0); {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,378 INFO L290 TraceCheckUtils]: 46: Hoare triple {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume 8 == ~__BLAST_NONDET~0; {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:29:34,379 INFO L272 TraceCheckUtils]: 47: Hoare triple {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call #t~ret176 := KbFilter_InternIoCtl(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {23662#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:29:34,379 INFO L290 TraceCheckUtils]: 48: Hoare triple {23662#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~2.base, ~irpStack~2.offset;havoc ~devExt~2.base, ~devExt~2.offset;havoc ~hookKeyboard~0.base, ~hookKeyboard~0.offset;havoc ~connectData~0.base, ~connectData~0.offset;havoc ~status~2;havoc ~tmp~2;~status~2 := 0;call #t~mem51.base, #t~mem51.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~2.base, ~devExt~2.offset := #t~mem51.base, #t~mem51.offset;havoc #t~mem51.base, #t~mem51.offset;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4);call #t~mem52.base, #t~mem52.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~2.base, ~irpStack~2.offset := #t~mem52.base, #t~mem52.offset;havoc #t~mem52.base, #t~mem52.offset;call #t~mem53 := read~int(~irpStack~2.base, 12 + ~irpStack~2.offset, 4); {23601#true} is VALID [2022-04-28 08:29:34,379 INFO L290 TraceCheckUtils]: 49: Hoare triple {23601#true} assume #t~mem53 % 4294967296 == ~bitwiseOr(~bitwiseOr(720896, 512), 3) % 4294967296;havoc #t~mem53; {23601#true} is VALID [2022-04-28 08:29:34,379 INFO L290 TraceCheckUtils]: 50: Hoare triple {23601#true} call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~devExt~2.base, 20 + ~devExt~2.offset, 4); {23601#true} is VALID [2022-04-28 08:29:34,379 INFO L290 TraceCheckUtils]: 51: Hoare triple {23601#true} assume 0 != (#t~mem62.base + #t~mem62.offset) % 4294967296;havoc #t~mem62.base, #t~mem62.offset;~status~2 := -1073741757; {23601#true} is VALID [2022-04-28 08:29:34,379 INFO L290 TraceCheckUtils]: 52: Hoare triple {23601#true} assume !(~status~2 >= 0);call write~int(~status~2, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~2; {23601#true} is VALID [2022-04-28 08:29:34,380 INFO L272 TraceCheckUtils]: 53: Hoare triple {23601#true} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {23668#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:29:34,380 INFO L290 TraceCheckUtils]: 54: Hoare triple {23668#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {23601#true} is VALID [2022-04-28 08:29:34,380 INFO L290 TraceCheckUtils]: 55: Hoare triple {23601#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {23669#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:29:34,380 INFO L290 TraceCheckUtils]: 56: Hoare triple {23669#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {23669#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:29:34,381 INFO L284 TraceCheckUtils]: 57: Hoare quadruple {23669#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {23601#true} #1248#return; {23667#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:29:34,381 INFO L290 TraceCheckUtils]: 58: Hoare triple {23667#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~2; {23667#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:29:34,382 INFO L290 TraceCheckUtils]: 59: Hoare triple {23667#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {23667#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:29:34,382 INFO L284 TraceCheckUtils]: 60: Hoare quadruple {23667#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {23609#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #1234#return; {23646#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:29:34,383 INFO L290 TraceCheckUtils]: 61: Hoare triple {23646#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -2147483648 <= #t~ret176 && #t~ret176 <= 2147483647;~status~5 := #t~ret176;havoc #t~ret176; {23646#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:29:34,383 INFO L290 TraceCheckUtils]: 62: Hoare triple {23646#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume 0 != ~we_should_unload~0; {23646#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:29:34,383 INFO L290 TraceCheckUtils]: 63: Hoare triple {23646#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {23646#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:29:34,384 INFO L290 TraceCheckUtils]: 64: Hoare triple {23646#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {23646#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:29:34,384 INFO L290 TraceCheckUtils]: 65: Hoare triple {23646#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(~s~0 == ~UNLOADED~0); {23646#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:29:34,384 INFO L290 TraceCheckUtils]: 66: Hoare triple {23646#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(-1 == ~status~5); {23646#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:29:34,384 INFO L290 TraceCheckUtils]: 67: Hoare triple {23646#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(~s~0 != ~SKIP2~0); {23602#false} is VALID [2022-04-28 08:29:34,385 INFO L290 TraceCheckUtils]: 68: Hoare triple {23602#false} assume 1 == ~pended~0; {23602#false} is VALID [2022-04-28 08:29:34,385 INFO L290 TraceCheckUtils]: 69: Hoare triple {23602#false} assume 259 != ~status~5; {23602#false} is VALID [2022-04-28 08:29:34,385 INFO L272 TraceCheckUtils]: 70: Hoare triple {23602#false} call errorFn(); {23602#false} is VALID [2022-04-28 08:29:34,385 INFO L290 TraceCheckUtils]: 71: Hoare triple {23602#false} assume !false; {23602#false} is VALID [2022-04-28 08:29:34,385 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:29:34,385 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:29:34,385 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1039516770] [2022-04-28 08:29:34,385 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1039516770] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:29:34,385 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:29:34,386 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:29:34,386 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:29:34,386 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [63998284] [2022-04-28 08:29:34,386 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [63998284] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:29:34,386 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:29:34,386 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:29:34,386 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1934461283] [2022-04-28 08:29:34,386 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:29:34,386 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.7142857142857144) internal successors, (52), 7 states have internal predecessors, (52), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) Word has length 72 [2022-04-28 08:29:34,387 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:29:34,387 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 3.7142857142857144) internal successors, (52), 7 states have internal predecessors, (52), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:29:34,441 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:29:34,441 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-28 08:29:34,441 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:29:34,442 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-28 08:29:34,442 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=145, Unknown=0, NotChecked=0, Total=182 [2022-04-28 08:29:34,442 INFO L87 Difference]: Start difference. First operand 371 states and 493 transitions. Second operand has 14 states, 14 states have (on average 3.7142857142857144) internal successors, (52), 7 states have internal predecessors, (52), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:29:36,664 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:29:47,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:29:47,924 INFO L93 Difference]: Finished difference Result 417 states and 550 transitions. [2022-04-28 08:29:47,924 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-04-28 08:29:47,924 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.7142857142857144) internal successors, (52), 7 states have internal predecessors, (52), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) Word has length 72 [2022-04-28 08:29:47,925 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:29:47,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.7142857142857144) internal successors, (52), 7 states have internal predecessors, (52), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:29:47,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 457 transitions. [2022-04-28 08:29:47,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.7142857142857144) internal successors, (52), 7 states have internal predecessors, (52), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:29:47,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 457 transitions. [2022-04-28 08:29:47,931 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 18 states and 457 transitions. [2022-04-28 08:29:48,493 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 457 edges. 457 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:29:48,501 INFO L225 Difference]: With dead ends: 417 [2022-04-28 08:29:48,501 INFO L226 Difference]: Without dead ends: 409 [2022-04-28 08:29:48,502 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 125 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=190, Invalid=566, Unknown=0, NotChecked=0, Total=756 [2022-04-28 08:29:48,502 INFO L413 NwaCegarLoop]: 278 mSDtfsCounter, 827 mSDsluCounter, 461 mSDsCounter, 0 mSdLazyCounter, 2033 mSolverCounterSat, 260 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 839 SdHoareTripleChecker+Valid, 739 SdHoareTripleChecker+Invalid, 2294 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 260 IncrementalHoareTripleChecker+Valid, 2033 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.4s IncrementalHoareTripleChecker+Time [2022-04-28 08:29:48,503 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [839 Valid, 739 Invalid, 2294 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [260 Valid, 2033 Invalid, 1 Unknown, 0 Unchecked, 7.4s Time] [2022-04-28 08:29:48,504 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 409 states. [2022-04-28 08:29:48,922 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 409 to 386. [2022-04-28 08:29:48,922 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:29:48,923 INFO L82 GeneralOperation]: Start isEquivalent. First operand 409 states. Second operand has 386 states, 309 states have (on average 1.3754045307443366) internal successors, (425), 314 states have internal predecessors, (425), 42 states have call successors, (42), 32 states have call predecessors, (42), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) [2022-04-28 08:29:48,923 INFO L74 IsIncluded]: Start isIncluded. First operand 409 states. Second operand has 386 states, 309 states have (on average 1.3754045307443366) internal successors, (425), 314 states have internal predecessors, (425), 42 states have call successors, (42), 32 states have call predecessors, (42), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) [2022-04-28 08:29:48,924 INFO L87 Difference]: Start difference. First operand 409 states. Second operand has 386 states, 309 states have (on average 1.3754045307443366) internal successors, (425), 314 states have internal predecessors, (425), 42 states have call successors, (42), 32 states have call predecessors, (42), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) [2022-04-28 08:29:48,930 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:29:48,931 INFO L93 Difference]: Finished difference Result 409 states and 541 transitions. [2022-04-28 08:29:48,931 INFO L276 IsEmpty]: Start isEmpty. Operand 409 states and 541 transitions. [2022-04-28 08:29:48,931 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:29:48,931 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:29:48,932 INFO L74 IsIncluded]: Start isIncluded. First operand has 386 states, 309 states have (on average 1.3754045307443366) internal successors, (425), 314 states have internal predecessors, (425), 42 states have call successors, (42), 32 states have call predecessors, (42), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) Second operand 409 states. [2022-04-28 08:29:48,932 INFO L87 Difference]: Start difference. First operand has 386 states, 309 states have (on average 1.3754045307443366) internal successors, (425), 314 states have internal predecessors, (425), 42 states have call successors, (42), 32 states have call predecessors, (42), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) Second operand 409 states. [2022-04-28 08:29:48,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:29:48,939 INFO L93 Difference]: Finished difference Result 409 states and 541 transitions. [2022-04-28 08:29:48,939 INFO L276 IsEmpty]: Start isEmpty. Operand 409 states and 541 transitions. [2022-04-28 08:29:48,940 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:29:48,940 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:29:48,940 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:29:48,940 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:29:48,941 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 386 states, 309 states have (on average 1.3754045307443366) internal successors, (425), 314 states have internal predecessors, (425), 42 states have call successors, (42), 32 states have call predecessors, (42), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) [2022-04-28 08:29:48,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 386 states to 386 states and 511 transitions. [2022-04-28 08:29:48,949 INFO L78 Accepts]: Start accepts. Automaton has 386 states and 511 transitions. Word has length 72 [2022-04-28 08:29:48,949 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:29:48,949 INFO L495 AbstractCegarLoop]: Abstraction has 386 states and 511 transitions. [2022-04-28 08:29:48,949 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.7142857142857144) internal successors, (52), 7 states have internal predecessors, (52), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:29:48,949 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 386 states and 511 transitions. [2022-04-28 08:29:49,604 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 511 edges. 511 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:29:49,605 INFO L276 IsEmpty]: Start isEmpty. Operand 386 states and 511 transitions. [2022-04-28 08:29:49,606 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-04-28 08:29:49,606 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:29:49,606 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:29:49,606 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-04-28 08:29:49,606 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:29:49,606 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:29:49,606 INFO L85 PathProgramCache]: Analyzing trace with hash 2144673722, now seen corresponding path program 1 times [2022-04-28 08:29:49,606 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:29:49,606 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1476295305] [2022-04-28 08:29:49,607 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:29:49,607 INFO L85 PathProgramCache]: Analyzing trace with hash 2144673722, now seen corresponding path program 2 times [2022-04-28 08:29:49,607 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:29:49,607 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [844195751] [2022-04-28 08:29:49,607 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:29:49,607 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:29:49,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:49,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:29:49,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:49,795 INFO L290 TraceCheckUtils]: 0: Hoare triple {26175#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {26129#true} is VALID [2022-04-28 08:29:49,796 INFO L290 TraceCheckUtils]: 1: Hoare triple {26129#true} assume true; {26129#true} is VALID [2022-04-28 08:29:49,796 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {26129#true} {26129#true} #1270#return; {26129#true} is VALID [2022-04-28 08:29:49,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:29:49,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:49,840 INFO L290 TraceCheckUtils]: 0: Hoare triple {26176#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {26177#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 08:29:49,841 INFO L290 TraceCheckUtils]: 1: Hoare triple {26177#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {26177#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 08:29:49,841 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {26177#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {26129#true} #1216#return; {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:49,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:29:49,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:49,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:29:49,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:49,888 INFO L290 TraceCheckUtils]: 0: Hoare triple {26129#true} ~cond := #in~cond; {26129#true} is VALID [2022-04-28 08:29:49,888 INFO L290 TraceCheckUtils]: 1: Hoare triple {26129#true} assume !(0 == ~cond); {26129#true} is VALID [2022-04-28 08:29:49,888 INFO L290 TraceCheckUtils]: 2: Hoare triple {26129#true} assume true; {26129#true} is VALID [2022-04-28 08:29:49,888 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {26129#true} {26129#true} #1254#return; {26129#true} is VALID [2022-04-28 08:29:49,888 INFO L290 TraceCheckUtils]: 0: Hoare triple {26178#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {26129#true} is VALID [2022-04-28 08:29:49,888 INFO L272 TraceCheckUtils]: 1: Hoare triple {26129#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {26129#true} is VALID [2022-04-28 08:29:49,888 INFO L290 TraceCheckUtils]: 2: Hoare triple {26129#true} ~cond := #in~cond; {26129#true} is VALID [2022-04-28 08:29:49,888 INFO L290 TraceCheckUtils]: 3: Hoare triple {26129#true} assume !(0 == ~cond); {26129#true} is VALID [2022-04-28 08:29:49,889 INFO L290 TraceCheckUtils]: 4: Hoare triple {26129#true} assume true; {26129#true} is VALID [2022-04-28 08:29:49,889 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {26129#true} {26129#true} #1254#return; {26129#true} is VALID [2022-04-28 08:29:49,889 INFO L290 TraceCheckUtils]: 6: Hoare triple {26129#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {26129#true} is VALID [2022-04-28 08:29:49,889 INFO L290 TraceCheckUtils]: 7: Hoare triple {26129#true} assume true; {26129#true} is VALID [2022-04-28 08:29:49,889 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {26129#true} {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #1218#return; {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:49,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:29:49,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:49,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:29:49,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:49,918 INFO L290 TraceCheckUtils]: 0: Hoare triple {26183#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {26129#true} is VALID [2022-04-28 08:29:49,918 INFO L290 TraceCheckUtils]: 1: Hoare triple {26129#true} assume !(0 == ~__BLAST_NONDET~5); {26129#true} is VALID [2022-04-28 08:29:49,918 INFO L290 TraceCheckUtils]: 2: Hoare triple {26129#true} #res := -1073741823; {26129#true} is VALID [2022-04-28 08:29:49,918 INFO L290 TraceCheckUtils]: 3: Hoare triple {26129#true} assume true; {26129#true} is VALID [2022-04-28 08:29:49,918 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {26129#true} {26129#true} #1176#return; {26129#true} is VALID [2022-04-28 08:29:49,918 INFO L290 TraceCheckUtils]: 0: Hoare triple {26183#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {26129#true} is VALID [2022-04-28 08:29:49,919 INFO L272 TraceCheckUtils]: 1: Hoare triple {26129#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {26183#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:29:49,919 INFO L290 TraceCheckUtils]: 2: Hoare triple {26183#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {26129#true} is VALID [2022-04-28 08:29:49,920 INFO L290 TraceCheckUtils]: 3: Hoare triple {26129#true} assume !(0 == ~__BLAST_NONDET~5); {26129#true} is VALID [2022-04-28 08:29:49,920 INFO L290 TraceCheckUtils]: 4: Hoare triple {26129#true} #res := -1073741823; {26129#true} is VALID [2022-04-28 08:29:49,920 INFO L290 TraceCheckUtils]: 5: Hoare triple {26129#true} assume true; {26129#true} is VALID [2022-04-28 08:29:49,920 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {26129#true} {26129#true} #1176#return; {26129#true} is VALID [2022-04-28 08:29:49,920 INFO L290 TraceCheckUtils]: 7: Hoare triple {26129#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {26129#true} is VALID [2022-04-28 08:29:49,920 INFO L290 TraceCheckUtils]: 8: Hoare triple {26129#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {26129#true} is VALID [2022-04-28 08:29:49,920 INFO L290 TraceCheckUtils]: 9: Hoare triple {26129#true} assume true; {26129#true} is VALID [2022-04-28 08:29:49,921 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {26129#true} {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #1220#return; {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:49,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:29:49,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:49,942 INFO L290 TraceCheckUtils]: 0: Hoare triple {26189#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {26129#true} is VALID [2022-04-28 08:29:49,942 INFO L290 TraceCheckUtils]: 1: Hoare triple {26129#true} assume true; {26129#true} is VALID [2022-04-28 08:29:49,943 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {26129#true} {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #1222#return; {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:49,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-04-28 08:29:49,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:50,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 08:29:50,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:29:50,028 INFO L290 TraceCheckUtils]: 0: Hoare triple {26196#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {26129#true} is VALID [2022-04-28 08:29:50,029 INFO L290 TraceCheckUtils]: 1: Hoare triple {26129#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {26197#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:29:50,029 INFO L290 TraceCheckUtils]: 2: Hoare triple {26197#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {26197#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:29:50,030 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {26197#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {26129#true} #1248#return; {26195#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:29:50,030 INFO L290 TraceCheckUtils]: 0: Hoare triple {26190#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~2.base, ~irpStack~2.offset;havoc ~devExt~2.base, ~devExt~2.offset;havoc ~hookKeyboard~0.base, ~hookKeyboard~0.offset;havoc ~connectData~0.base, ~connectData~0.offset;havoc ~status~2;havoc ~tmp~2;~status~2 := 0;call #t~mem51.base, #t~mem51.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~2.base, ~devExt~2.offset := #t~mem51.base, #t~mem51.offset;havoc #t~mem51.base, #t~mem51.offset;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4);call #t~mem52.base, #t~mem52.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~2.base, ~irpStack~2.offset := #t~mem52.base, #t~mem52.offset;havoc #t~mem52.base, #t~mem52.offset;call #t~mem53 := read~int(~irpStack~2.base, 12 + ~irpStack~2.offset, 4); {26129#true} is VALID [2022-04-28 08:29:50,030 INFO L290 TraceCheckUtils]: 1: Hoare triple {26129#true} assume #t~mem53 % 4294967296 == ~bitwiseOr(~bitwiseOr(720896, 512), 3) % 4294967296;havoc #t~mem53; {26129#true} is VALID [2022-04-28 08:29:50,030 INFO L290 TraceCheckUtils]: 2: Hoare triple {26129#true} call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~devExt~2.base, 20 + ~devExt~2.offset, 4); {26129#true} is VALID [2022-04-28 08:29:50,030 INFO L290 TraceCheckUtils]: 3: Hoare triple {26129#true} assume 0 != (#t~mem62.base + #t~mem62.offset) % 4294967296;havoc #t~mem62.base, #t~mem62.offset;~status~2 := -1073741757; {26129#true} is VALID [2022-04-28 08:29:50,031 INFO L290 TraceCheckUtils]: 4: Hoare triple {26129#true} assume !(~status~2 >= 0);call write~int(~status~2, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~2; {26129#true} is VALID [2022-04-28 08:29:50,031 INFO L272 TraceCheckUtils]: 5: Hoare triple {26129#true} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {26196#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:29:50,031 INFO L290 TraceCheckUtils]: 6: Hoare triple {26196#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {26129#true} is VALID [2022-04-28 08:29:50,032 INFO L290 TraceCheckUtils]: 7: Hoare triple {26129#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {26197#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:29:50,032 INFO L290 TraceCheckUtils]: 8: Hoare triple {26197#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {26197#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:29:50,033 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {26197#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {26129#true} #1248#return; {26195#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:29:50,033 INFO L290 TraceCheckUtils]: 10: Hoare triple {26195#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~2; {26195#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:29:50,034 INFO L290 TraceCheckUtils]: 11: Hoare triple {26195#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {26195#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:29:50,035 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {26195#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #1234#return; {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,036 INFO L272 TraceCheckUtils]: 0: Hoare triple {26129#true} call ULTIMATE.init(); {26175#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:29:50,036 INFO L290 TraceCheckUtils]: 1: Hoare triple {26175#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {26129#true} is VALID [2022-04-28 08:29:50,036 INFO L290 TraceCheckUtils]: 2: Hoare triple {26129#true} assume true; {26129#true} is VALID [2022-04-28 08:29:50,036 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {26129#true} {26129#true} #1270#return; {26129#true} is VALID [2022-04-28 08:29:50,036 INFO L272 TraceCheckUtils]: 4: Hoare triple {26129#true} call #t~ret213 := main(); {26129#true} is VALID [2022-04-28 08:29:50,036 INFO L290 TraceCheckUtils]: 5: Hoare triple {26129#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {26129#true} is VALID [2022-04-28 08:29:50,037 INFO L272 TraceCheckUtils]: 6: Hoare triple {26129#true} call _BLAST_init(); {26176#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:29:50,038 INFO L290 TraceCheckUtils]: 7: Hoare triple {26176#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {26177#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 08:29:50,038 INFO L290 TraceCheckUtils]: 8: Hoare triple {26177#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {26177#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 08:29:50,039 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {26177#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {26129#true} #1216#return; {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,040 INFO L272 TraceCheckUtils]: 10: Hoare triple {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {26178#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:29:50,040 INFO L290 TraceCheckUtils]: 11: Hoare triple {26178#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {26129#true} is VALID [2022-04-28 08:29:50,040 INFO L272 TraceCheckUtils]: 12: Hoare triple {26129#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {26129#true} is VALID [2022-04-28 08:29:50,040 INFO L290 TraceCheckUtils]: 13: Hoare triple {26129#true} ~cond := #in~cond; {26129#true} is VALID [2022-04-28 08:29:50,040 INFO L290 TraceCheckUtils]: 14: Hoare triple {26129#true} assume !(0 == ~cond); {26129#true} is VALID [2022-04-28 08:29:50,040 INFO L290 TraceCheckUtils]: 15: Hoare triple {26129#true} assume true; {26129#true} is VALID [2022-04-28 08:29:50,040 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {26129#true} {26129#true} #1254#return; {26129#true} is VALID [2022-04-28 08:29:50,040 INFO L290 TraceCheckUtils]: 17: Hoare triple {26129#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {26129#true} is VALID [2022-04-28 08:29:50,041 INFO L290 TraceCheckUtils]: 18: Hoare triple {26129#true} assume true; {26129#true} is VALID [2022-04-28 08:29:50,041 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {26129#true} {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #1218#return; {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,042 INFO L290 TraceCheckUtils]: 20: Hoare triple {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,042 INFO L290 TraceCheckUtils]: 21: Hoare triple {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,043 INFO L290 TraceCheckUtils]: 22: Hoare triple {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,044 INFO L272 TraceCheckUtils]: 23: Hoare triple {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {26183#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:29:50,044 INFO L290 TraceCheckUtils]: 24: Hoare triple {26183#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {26129#true} is VALID [2022-04-28 08:29:50,045 INFO L272 TraceCheckUtils]: 25: Hoare triple {26129#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {26183#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:29:50,045 INFO L290 TraceCheckUtils]: 26: Hoare triple {26183#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {26129#true} is VALID [2022-04-28 08:29:50,045 INFO L290 TraceCheckUtils]: 27: Hoare triple {26129#true} assume !(0 == ~__BLAST_NONDET~5); {26129#true} is VALID [2022-04-28 08:29:50,045 INFO L290 TraceCheckUtils]: 28: Hoare triple {26129#true} #res := -1073741823; {26129#true} is VALID [2022-04-28 08:29:50,045 INFO L290 TraceCheckUtils]: 29: Hoare triple {26129#true} assume true; {26129#true} is VALID [2022-04-28 08:29:50,046 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {26129#true} {26129#true} #1176#return; {26129#true} is VALID [2022-04-28 08:29:50,046 INFO L290 TraceCheckUtils]: 31: Hoare triple {26129#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {26129#true} is VALID [2022-04-28 08:29:50,046 INFO L290 TraceCheckUtils]: 32: Hoare triple {26129#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {26129#true} is VALID [2022-04-28 08:29:50,046 INFO L290 TraceCheckUtils]: 33: Hoare triple {26129#true} assume true; {26129#true} is VALID [2022-04-28 08:29:50,046 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {26129#true} {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #1220#return; {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,047 INFO L290 TraceCheckUtils]: 35: Hoare triple {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,047 INFO L272 TraceCheckUtils]: 36: Hoare triple {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call stub_driver_init(); {26189#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:29:50,048 INFO L290 TraceCheckUtils]: 37: Hoare triple {26189#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {26129#true} is VALID [2022-04-28 08:29:50,048 INFO L290 TraceCheckUtils]: 38: Hoare triple {26129#true} assume true; {26129#true} is VALID [2022-04-28 08:29:50,048 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {26129#true} {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #1222#return; {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,048 INFO L290 TraceCheckUtils]: 40: Hoare triple {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !!(~status~5 >= 0); {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,049 INFO L290 TraceCheckUtils]: 41: Hoare triple {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~__BLAST_NONDET~0); {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,049 INFO L290 TraceCheckUtils]: 42: Hoare triple {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(1 == ~__BLAST_NONDET~0); {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,049 INFO L290 TraceCheckUtils]: 43: Hoare triple {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(2 == ~__BLAST_NONDET~0); {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,050 INFO L290 TraceCheckUtils]: 44: Hoare triple {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(3 == ~__BLAST_NONDET~0); {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,050 INFO L290 TraceCheckUtils]: 45: Hoare triple {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(4 == ~__BLAST_NONDET~0); {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,050 INFO L290 TraceCheckUtils]: 46: Hoare triple {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume 8 == ~__BLAST_NONDET~0; {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,051 INFO L272 TraceCheckUtils]: 47: Hoare triple {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call #t~ret176 := KbFilter_InternIoCtl(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {26190#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:29:50,051 INFO L290 TraceCheckUtils]: 48: Hoare triple {26190#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~2.base, ~irpStack~2.offset;havoc ~devExt~2.base, ~devExt~2.offset;havoc ~hookKeyboard~0.base, ~hookKeyboard~0.offset;havoc ~connectData~0.base, ~connectData~0.offset;havoc ~status~2;havoc ~tmp~2;~status~2 := 0;call #t~mem51.base, #t~mem51.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~2.base, ~devExt~2.offset := #t~mem51.base, #t~mem51.offset;havoc #t~mem51.base, #t~mem51.offset;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4);call #t~mem52.base, #t~mem52.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~2.base, ~irpStack~2.offset := #t~mem52.base, #t~mem52.offset;havoc #t~mem52.base, #t~mem52.offset;call #t~mem53 := read~int(~irpStack~2.base, 12 + ~irpStack~2.offset, 4); {26129#true} is VALID [2022-04-28 08:29:50,051 INFO L290 TraceCheckUtils]: 49: Hoare triple {26129#true} assume #t~mem53 % 4294967296 == ~bitwiseOr(~bitwiseOr(720896, 512), 3) % 4294967296;havoc #t~mem53; {26129#true} is VALID [2022-04-28 08:29:50,051 INFO L290 TraceCheckUtils]: 50: Hoare triple {26129#true} call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~devExt~2.base, 20 + ~devExt~2.offset, 4); {26129#true} is VALID [2022-04-28 08:29:50,052 INFO L290 TraceCheckUtils]: 51: Hoare triple {26129#true} assume 0 != (#t~mem62.base + #t~mem62.offset) % 4294967296;havoc #t~mem62.base, #t~mem62.offset;~status~2 := -1073741757; {26129#true} is VALID [2022-04-28 08:29:50,052 INFO L290 TraceCheckUtils]: 52: Hoare triple {26129#true} assume !(~status~2 >= 0);call write~int(~status~2, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~2; {26129#true} is VALID [2022-04-28 08:29:50,052 INFO L272 TraceCheckUtils]: 53: Hoare triple {26129#true} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {26196#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:29:50,052 INFO L290 TraceCheckUtils]: 54: Hoare triple {26196#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {26129#true} is VALID [2022-04-28 08:29:50,053 INFO L290 TraceCheckUtils]: 55: Hoare triple {26129#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {26197#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:29:50,053 INFO L290 TraceCheckUtils]: 56: Hoare triple {26197#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {26197#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:29:50,054 INFO L284 TraceCheckUtils]: 57: Hoare quadruple {26197#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {26129#true} #1248#return; {26195#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:29:50,054 INFO L290 TraceCheckUtils]: 58: Hoare triple {26195#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~2; {26195#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:29:50,054 INFO L290 TraceCheckUtils]: 59: Hoare triple {26195#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {26195#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:29:50,055 INFO L284 TraceCheckUtils]: 60: Hoare quadruple {26195#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {26137#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #1234#return; {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,056 INFO L290 TraceCheckUtils]: 61: Hoare triple {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -2147483648 <= #t~ret176 && #t~ret176 <= 2147483647;~status~5 := #t~ret176;havoc #t~ret176; {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,056 INFO L290 TraceCheckUtils]: 62: Hoare triple {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume 0 != ~we_should_unload~0; {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,056 INFO L290 TraceCheckUtils]: 63: Hoare triple {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,057 INFO L290 TraceCheckUtils]: 64: Hoare triple {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,057 INFO L290 TraceCheckUtils]: 65: Hoare triple {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(~s~0 == ~UNLOADED~0); {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,057 INFO L290 TraceCheckUtils]: 66: Hoare triple {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(-1 == ~status~5); {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,058 INFO L290 TraceCheckUtils]: 67: Hoare triple {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~SKIP2~0; {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:29:50,058 INFO L290 TraceCheckUtils]: 68: Hoare triple {26174#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(~s~0 != ~IPC~0); {26130#false} is VALID [2022-04-28 08:29:50,058 INFO L290 TraceCheckUtils]: 69: Hoare triple {26130#false} assume 1 == ~pended~0; {26130#false} is VALID [2022-04-28 08:29:50,058 INFO L290 TraceCheckUtils]: 70: Hoare triple {26130#false} assume 259 != ~status~5; {26130#false} is VALID [2022-04-28 08:29:50,058 INFO L272 TraceCheckUtils]: 71: Hoare triple {26130#false} call errorFn(); {26130#false} is VALID [2022-04-28 08:29:50,058 INFO L290 TraceCheckUtils]: 72: Hoare triple {26130#false} assume !false; {26130#false} is VALID [2022-04-28 08:29:50,059 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:29:50,059 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:29:50,059 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [844195751] [2022-04-28 08:29:50,059 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [844195751] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:29:50,059 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:29:50,059 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:29:50,059 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:29:50,059 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1476295305] [2022-04-28 08:29:50,059 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1476295305] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:29:50,059 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:29:50,059 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:29:50,059 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2037225373] [2022-04-28 08:29:50,059 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:29:50,060 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.7857142857142856) internal successors, (53), 7 states have internal predecessors, (53), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) Word has length 73 [2022-04-28 08:29:50,060 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:29:50,060 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 3.7857142857142856) internal successors, (53), 7 states have internal predecessors, (53), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:29:50,122 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:29:50,122 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-28 08:29:50,122 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:29:50,123 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-28 08:29:50,123 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=145, Unknown=0, NotChecked=0, Total=182 [2022-04-28 08:29:50,123 INFO L87 Difference]: Start difference. First operand 386 states and 511 transitions. Second operand has 14 states, 14 states have (on average 3.7857142857142856) internal successors, (53), 7 states have internal predecessors, (53), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:29:52,313 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:30:01,814 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:30:01,814 INFO L93 Difference]: Finished difference Result 417 states and 549 transitions. [2022-04-28 08:30:01,814 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-04-28 08:30:01,814 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.7857142857142856) internal successors, (53), 7 states have internal predecessors, (53), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) Word has length 73 [2022-04-28 08:30:01,814 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:30:01,815 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.7857142857142856) internal successors, (53), 7 states have internal predecessors, (53), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:30:01,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 456 transitions. [2022-04-28 08:30:01,820 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.7857142857142856) internal successors, (53), 7 states have internal predecessors, (53), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:30:01,823 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 456 transitions. [2022-04-28 08:30:01,823 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 18 states and 456 transitions. [2022-04-28 08:30:02,253 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 456 edges. 456 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:30:02,262 INFO L225 Difference]: With dead ends: 417 [2022-04-28 08:30:02,262 INFO L226 Difference]: Without dead ends: 409 [2022-04-28 08:30:02,262 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 125 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=190, Invalid=566, Unknown=0, NotChecked=0, Total=756 [2022-04-28 08:30:02,263 INFO L413 NwaCegarLoop]: 277 mSDtfsCounter, 1018 mSDsluCounter, 354 mSDsCounter, 0 mSdLazyCounter, 1582 mSolverCounterSat, 332 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1030 SdHoareTripleChecker+Valid, 631 SdHoareTripleChecker+Invalid, 1915 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 332 IncrementalHoareTripleChecker+Valid, 1582 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.6s IncrementalHoareTripleChecker+Time [2022-04-28 08:30:02,263 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1030 Valid, 631 Invalid, 1915 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [332 Valid, 1582 Invalid, 1 Unknown, 0 Unchecked, 5.6s Time] [2022-04-28 08:30:02,263 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 409 states. [2022-04-28 08:30:02,545 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 409 to 387. [2022-04-28 08:30:02,545 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:30:02,546 INFO L82 GeneralOperation]: Start isEquivalent. First operand 409 states. Second operand has 387 states, 310 states have (on average 1.3741935483870968) internal successors, (426), 315 states have internal predecessors, (426), 42 states have call successors, (42), 32 states have call predecessors, (42), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) [2022-04-28 08:30:02,547 INFO L74 IsIncluded]: Start isIncluded. First operand 409 states. Second operand has 387 states, 310 states have (on average 1.3741935483870968) internal successors, (426), 315 states have internal predecessors, (426), 42 states have call successors, (42), 32 states have call predecessors, (42), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) [2022-04-28 08:30:02,547 INFO L87 Difference]: Start difference. First operand 409 states. Second operand has 387 states, 310 states have (on average 1.3741935483870968) internal successors, (426), 315 states have internal predecessors, (426), 42 states have call successors, (42), 32 states have call predecessors, (42), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) [2022-04-28 08:30:02,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:30:02,555 INFO L93 Difference]: Finished difference Result 409 states and 540 transitions. [2022-04-28 08:30:02,555 INFO L276 IsEmpty]: Start isEmpty. Operand 409 states and 540 transitions. [2022-04-28 08:30:02,555 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:30:02,555 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:30:02,556 INFO L74 IsIncluded]: Start isIncluded. First operand has 387 states, 310 states have (on average 1.3741935483870968) internal successors, (426), 315 states have internal predecessors, (426), 42 states have call successors, (42), 32 states have call predecessors, (42), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) Second operand 409 states. [2022-04-28 08:30:02,556 INFO L87 Difference]: Start difference. First operand has 387 states, 310 states have (on average 1.3741935483870968) internal successors, (426), 315 states have internal predecessors, (426), 42 states have call successors, (42), 32 states have call predecessors, (42), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) Second operand 409 states. [2022-04-28 08:30:02,563 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:30:02,564 INFO L93 Difference]: Finished difference Result 409 states and 540 transitions. [2022-04-28 08:30:02,564 INFO L276 IsEmpty]: Start isEmpty. Operand 409 states and 540 transitions. [2022-04-28 08:30:02,564 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:30:02,564 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:30:02,564 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:30:02,564 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:30:02,565 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 387 states, 310 states have (on average 1.3741935483870968) internal successors, (426), 315 states have internal predecessors, (426), 42 states have call successors, (42), 32 states have call predecessors, (42), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) [2022-04-28 08:30:02,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 387 states to 387 states and 512 transitions. [2022-04-28 08:30:02,592 INFO L78 Accepts]: Start accepts. Automaton has 387 states and 512 transitions. Word has length 73 [2022-04-28 08:30:02,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:30:02,592 INFO L495 AbstractCegarLoop]: Abstraction has 387 states and 512 transitions. [2022-04-28 08:30:02,592 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.7857142857142856) internal successors, (53), 7 states have internal predecessors, (53), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:30:02,592 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 387 states and 512 transitions. [2022-04-28 08:30:03,184 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 512 edges. 512 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:30:03,184 INFO L276 IsEmpty]: Start isEmpty. Operand 387 states and 512 transitions. [2022-04-28 08:30:03,195 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-04-28 08:30:03,195 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:30:03,196 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:30:03,196 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-04-28 08:30:03,196 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:30:03,196 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:30:03,196 INFO L85 PathProgramCache]: Analyzing trace with hash 1821545128, now seen corresponding path program 1 times [2022-04-28 08:30:03,196 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:30:03,197 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [159579198] [2022-04-28 08:30:03,197 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:30:03,197 INFO L85 PathProgramCache]: Analyzing trace with hash 1821545128, now seen corresponding path program 2 times [2022-04-28 08:30:03,197 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:30:03,197 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1908648718] [2022-04-28 08:30:03,197 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:30:03,197 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:30:03,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:03,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:30:03,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:03,310 INFO L290 TraceCheckUtils]: 0: Hoare triple {28704#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {28659#true} is VALID [2022-04-28 08:30:03,310 INFO L290 TraceCheckUtils]: 1: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,310 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28659#true} {28659#true} #1270#return; {28659#true} is VALID [2022-04-28 08:30:03,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:30:03,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:03,338 INFO L290 TraceCheckUtils]: 0: Hoare triple {28705#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28659#true} is VALID [2022-04-28 08:30:03,338 INFO L290 TraceCheckUtils]: 1: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,338 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28659#true} {28659#true} #1216#return; {28659#true} is VALID [2022-04-28 08:30:03,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:30:03,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:03,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:30:03,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:03,361 INFO L290 TraceCheckUtils]: 0: Hoare triple {28659#true} ~cond := #in~cond; {28659#true} is VALID [2022-04-28 08:30:03,361 INFO L290 TraceCheckUtils]: 1: Hoare triple {28659#true} assume !(0 == ~cond); {28659#true} is VALID [2022-04-28 08:30:03,361 INFO L290 TraceCheckUtils]: 2: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,362 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {28659#true} {28659#true} #1254#return; {28659#true} is VALID [2022-04-28 08:30:03,362 INFO L290 TraceCheckUtils]: 0: Hoare triple {28706#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {28659#true} is VALID [2022-04-28 08:30:03,362 INFO L272 TraceCheckUtils]: 1: Hoare triple {28659#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {28659#true} is VALID [2022-04-28 08:30:03,362 INFO L290 TraceCheckUtils]: 2: Hoare triple {28659#true} ~cond := #in~cond; {28659#true} is VALID [2022-04-28 08:30:03,362 INFO L290 TraceCheckUtils]: 3: Hoare triple {28659#true} assume !(0 == ~cond); {28659#true} is VALID [2022-04-28 08:30:03,362 INFO L290 TraceCheckUtils]: 4: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,362 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {28659#true} {28659#true} #1254#return; {28659#true} is VALID [2022-04-28 08:30:03,362 INFO L290 TraceCheckUtils]: 6: Hoare triple {28659#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {28659#true} is VALID [2022-04-28 08:30:03,362 INFO L290 TraceCheckUtils]: 7: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,362 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {28659#true} {28659#true} #1218#return; {28659#true} is VALID [2022-04-28 08:30:03,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:30:03,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:03,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:30:03,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:03,383 INFO L290 TraceCheckUtils]: 0: Hoare triple {28711#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {28659#true} is VALID [2022-04-28 08:30:03,383 INFO L290 TraceCheckUtils]: 1: Hoare triple {28659#true} assume !(0 == ~__BLAST_NONDET~5); {28659#true} is VALID [2022-04-28 08:30:03,383 INFO L290 TraceCheckUtils]: 2: Hoare triple {28659#true} #res := -1073741823; {28659#true} is VALID [2022-04-28 08:30:03,383 INFO L290 TraceCheckUtils]: 3: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,384 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {28659#true} {28659#true} #1176#return; {28659#true} is VALID [2022-04-28 08:30:03,384 INFO L290 TraceCheckUtils]: 0: Hoare triple {28711#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {28659#true} is VALID [2022-04-28 08:30:03,385 INFO L272 TraceCheckUtils]: 1: Hoare triple {28659#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {28711#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:30:03,385 INFO L290 TraceCheckUtils]: 2: Hoare triple {28711#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {28659#true} is VALID [2022-04-28 08:30:03,385 INFO L290 TraceCheckUtils]: 3: Hoare triple {28659#true} assume !(0 == ~__BLAST_NONDET~5); {28659#true} is VALID [2022-04-28 08:30:03,385 INFO L290 TraceCheckUtils]: 4: Hoare triple {28659#true} #res := -1073741823; {28659#true} is VALID [2022-04-28 08:30:03,385 INFO L290 TraceCheckUtils]: 5: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,385 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {28659#true} {28659#true} #1176#return; {28659#true} is VALID [2022-04-28 08:30:03,385 INFO L290 TraceCheckUtils]: 7: Hoare triple {28659#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {28659#true} is VALID [2022-04-28 08:30:03,385 INFO L290 TraceCheckUtils]: 8: Hoare triple {28659#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {28659#true} is VALID [2022-04-28 08:30:03,385 INFO L290 TraceCheckUtils]: 9: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,385 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {28659#true} {28659#true} #1220#return; {28659#true} is VALID [2022-04-28 08:30:03,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:30:03,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:03,403 INFO L290 TraceCheckUtils]: 0: Hoare triple {28717#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28659#true} is VALID [2022-04-28 08:30:03,403 INFO L290 TraceCheckUtils]: 1: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,403 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28659#true} {28659#true} #1222#return; {28659#true} is VALID [2022-04-28 08:30:03,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-04-28 08:30:03,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:03,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 08:30:03,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:03,432 INFO L290 TraceCheckUtils]: 0: Hoare triple {28723#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {28659#true} is VALID [2022-04-28 08:30:03,432 INFO L290 TraceCheckUtils]: 1: Hoare triple {28659#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {28659#true} is VALID [2022-04-28 08:30:03,432 INFO L290 TraceCheckUtils]: 2: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,432 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {28659#true} {28659#true} #1248#return; {28659#true} is VALID [2022-04-28 08:30:03,432 INFO L290 TraceCheckUtils]: 0: Hoare triple {28718#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~2.base, ~irpStack~2.offset;havoc ~devExt~2.base, ~devExt~2.offset;havoc ~hookKeyboard~0.base, ~hookKeyboard~0.offset;havoc ~connectData~0.base, ~connectData~0.offset;havoc ~status~2;havoc ~tmp~2;~status~2 := 0;call #t~mem51.base, #t~mem51.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~2.base, ~devExt~2.offset := #t~mem51.base, #t~mem51.offset;havoc #t~mem51.base, #t~mem51.offset;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4);call #t~mem52.base, #t~mem52.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~2.base, ~irpStack~2.offset := #t~mem52.base, #t~mem52.offset;havoc #t~mem52.base, #t~mem52.offset;call #t~mem53 := read~int(~irpStack~2.base, 12 + ~irpStack~2.offset, 4); {28659#true} is VALID [2022-04-28 08:30:03,432 INFO L290 TraceCheckUtils]: 1: Hoare triple {28659#true} assume #t~mem53 % 4294967296 == ~bitwiseOr(~bitwiseOr(720896, 512), 3) % 4294967296;havoc #t~mem53; {28659#true} is VALID [2022-04-28 08:30:03,432 INFO L290 TraceCheckUtils]: 2: Hoare triple {28659#true} call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~devExt~2.base, 20 + ~devExt~2.offset, 4); {28659#true} is VALID [2022-04-28 08:30:03,432 INFO L290 TraceCheckUtils]: 3: Hoare triple {28659#true} assume 0 != (#t~mem62.base + #t~mem62.offset) % 4294967296;havoc #t~mem62.base, #t~mem62.offset;~status~2 := -1073741757; {28659#true} is VALID [2022-04-28 08:30:03,432 INFO L290 TraceCheckUtils]: 4: Hoare triple {28659#true} assume !(~status~2 >= 0);call write~int(~status~2, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~2; {28659#true} is VALID [2022-04-28 08:30:03,433 INFO L272 TraceCheckUtils]: 5: Hoare triple {28659#true} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {28723#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:03,433 INFO L290 TraceCheckUtils]: 6: Hoare triple {28723#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {28659#true} is VALID [2022-04-28 08:30:03,433 INFO L290 TraceCheckUtils]: 7: Hoare triple {28659#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {28659#true} is VALID [2022-04-28 08:30:03,433 INFO L290 TraceCheckUtils]: 8: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,433 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {28659#true} {28659#true} #1248#return; {28659#true} is VALID [2022-04-28 08:30:03,433 INFO L290 TraceCheckUtils]: 10: Hoare triple {28659#true} #res := ~status~2; {28659#true} is VALID [2022-04-28 08:30:03,433 INFO L290 TraceCheckUtils]: 11: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,433 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {28659#true} {28659#true} #1234#return; {28659#true} is VALID [2022-04-28 08:30:03,434 INFO L272 TraceCheckUtils]: 0: Hoare triple {28659#true} call ULTIMATE.init(); {28704#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:30:03,434 INFO L290 TraceCheckUtils]: 1: Hoare triple {28704#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {28659#true} is VALID [2022-04-28 08:30:03,435 INFO L290 TraceCheckUtils]: 2: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,435 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {28659#true} {28659#true} #1270#return; {28659#true} is VALID [2022-04-28 08:30:03,435 INFO L272 TraceCheckUtils]: 4: Hoare triple {28659#true} call #t~ret213 := main(); {28659#true} is VALID [2022-04-28 08:30:03,435 INFO L290 TraceCheckUtils]: 5: Hoare triple {28659#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {28659#true} is VALID [2022-04-28 08:30:03,436 INFO L272 TraceCheckUtils]: 6: Hoare triple {28659#true} call _BLAST_init(); {28705#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:30:03,436 INFO L290 TraceCheckUtils]: 7: Hoare triple {28705#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28659#true} is VALID [2022-04-28 08:30:03,436 INFO L290 TraceCheckUtils]: 8: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,436 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {28659#true} {28659#true} #1216#return; {28659#true} is VALID [2022-04-28 08:30:03,436 INFO L272 TraceCheckUtils]: 10: Hoare triple {28659#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {28706#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:30:03,437 INFO L290 TraceCheckUtils]: 11: Hoare triple {28706#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {28659#true} is VALID [2022-04-28 08:30:03,437 INFO L272 TraceCheckUtils]: 12: Hoare triple {28659#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {28659#true} is VALID [2022-04-28 08:30:03,437 INFO L290 TraceCheckUtils]: 13: Hoare triple {28659#true} ~cond := #in~cond; {28659#true} is VALID [2022-04-28 08:30:03,437 INFO L290 TraceCheckUtils]: 14: Hoare triple {28659#true} assume !(0 == ~cond); {28659#true} is VALID [2022-04-28 08:30:03,437 INFO L290 TraceCheckUtils]: 15: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,437 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {28659#true} {28659#true} #1254#return; {28659#true} is VALID [2022-04-28 08:30:03,437 INFO L290 TraceCheckUtils]: 17: Hoare triple {28659#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {28659#true} is VALID [2022-04-28 08:30:03,437 INFO L290 TraceCheckUtils]: 18: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,437 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {28659#true} {28659#true} #1218#return; {28659#true} is VALID [2022-04-28 08:30:03,437 INFO L290 TraceCheckUtils]: 20: Hoare triple {28659#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {28659#true} is VALID [2022-04-28 08:30:03,437 INFO L290 TraceCheckUtils]: 21: Hoare triple {28659#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {28659#true} is VALID [2022-04-28 08:30:03,437 INFO L290 TraceCheckUtils]: 22: Hoare triple {28659#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {28659#true} is VALID [2022-04-28 08:30:03,438 INFO L272 TraceCheckUtils]: 23: Hoare triple {28659#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {28711#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:30:03,438 INFO L290 TraceCheckUtils]: 24: Hoare triple {28711#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {28659#true} is VALID [2022-04-28 08:30:03,439 INFO L272 TraceCheckUtils]: 25: Hoare triple {28659#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {28711#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:30:03,439 INFO L290 TraceCheckUtils]: 26: Hoare triple {28711#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {28659#true} is VALID [2022-04-28 08:30:03,439 INFO L290 TraceCheckUtils]: 27: Hoare triple {28659#true} assume !(0 == ~__BLAST_NONDET~5); {28659#true} is VALID [2022-04-28 08:30:03,439 INFO L290 TraceCheckUtils]: 28: Hoare triple {28659#true} #res := -1073741823; {28659#true} is VALID [2022-04-28 08:30:03,440 INFO L290 TraceCheckUtils]: 29: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,440 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {28659#true} {28659#true} #1176#return; {28659#true} is VALID [2022-04-28 08:30:03,440 INFO L290 TraceCheckUtils]: 31: Hoare triple {28659#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {28659#true} is VALID [2022-04-28 08:30:03,440 INFO L290 TraceCheckUtils]: 32: Hoare triple {28659#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {28659#true} is VALID [2022-04-28 08:30:03,440 INFO L290 TraceCheckUtils]: 33: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,440 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {28659#true} {28659#true} #1220#return; {28659#true} is VALID [2022-04-28 08:30:03,440 INFO L290 TraceCheckUtils]: 35: Hoare triple {28659#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {28659#true} is VALID [2022-04-28 08:30:03,440 INFO L272 TraceCheckUtils]: 36: Hoare triple {28659#true} call stub_driver_init(); {28717#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:30:03,441 INFO L290 TraceCheckUtils]: 37: Hoare triple {28717#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28659#true} is VALID [2022-04-28 08:30:03,441 INFO L290 TraceCheckUtils]: 38: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,441 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {28659#true} {28659#true} #1222#return; {28659#true} is VALID [2022-04-28 08:30:03,441 INFO L290 TraceCheckUtils]: 40: Hoare triple {28659#true} assume !!(~status~5 >= 0); {28659#true} is VALID [2022-04-28 08:30:03,441 INFO L290 TraceCheckUtils]: 41: Hoare triple {28659#true} assume !(0 == ~__BLAST_NONDET~0); {28659#true} is VALID [2022-04-28 08:30:03,441 INFO L290 TraceCheckUtils]: 42: Hoare triple {28659#true} assume !(1 == ~__BLAST_NONDET~0); {28659#true} is VALID [2022-04-28 08:30:03,441 INFO L290 TraceCheckUtils]: 43: Hoare triple {28659#true} assume !(2 == ~__BLAST_NONDET~0); {28659#true} is VALID [2022-04-28 08:30:03,441 INFO L290 TraceCheckUtils]: 44: Hoare triple {28659#true} assume !(3 == ~__BLAST_NONDET~0); {28659#true} is VALID [2022-04-28 08:30:03,441 INFO L290 TraceCheckUtils]: 45: Hoare triple {28659#true} assume !(4 == ~__BLAST_NONDET~0); {28659#true} is VALID [2022-04-28 08:30:03,441 INFO L290 TraceCheckUtils]: 46: Hoare triple {28659#true} assume 8 == ~__BLAST_NONDET~0; {28659#true} is VALID [2022-04-28 08:30:03,442 INFO L272 TraceCheckUtils]: 47: Hoare triple {28659#true} call #t~ret176 := KbFilter_InternIoCtl(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {28718#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:30:03,442 INFO L290 TraceCheckUtils]: 48: Hoare triple {28718#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~2.base, ~irpStack~2.offset;havoc ~devExt~2.base, ~devExt~2.offset;havoc ~hookKeyboard~0.base, ~hookKeyboard~0.offset;havoc ~connectData~0.base, ~connectData~0.offset;havoc ~status~2;havoc ~tmp~2;~status~2 := 0;call #t~mem51.base, #t~mem51.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~2.base, ~devExt~2.offset := #t~mem51.base, #t~mem51.offset;havoc #t~mem51.base, #t~mem51.offset;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4);call #t~mem52.base, #t~mem52.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~2.base, ~irpStack~2.offset := #t~mem52.base, #t~mem52.offset;havoc #t~mem52.base, #t~mem52.offset;call #t~mem53 := read~int(~irpStack~2.base, 12 + ~irpStack~2.offset, 4); {28659#true} is VALID [2022-04-28 08:30:03,442 INFO L290 TraceCheckUtils]: 49: Hoare triple {28659#true} assume #t~mem53 % 4294967296 == ~bitwiseOr(~bitwiseOr(720896, 512), 3) % 4294967296;havoc #t~mem53; {28659#true} is VALID [2022-04-28 08:30:03,442 INFO L290 TraceCheckUtils]: 50: Hoare triple {28659#true} call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~devExt~2.base, 20 + ~devExt~2.offset, 4); {28659#true} is VALID [2022-04-28 08:30:03,442 INFO L290 TraceCheckUtils]: 51: Hoare triple {28659#true} assume 0 != (#t~mem62.base + #t~mem62.offset) % 4294967296;havoc #t~mem62.base, #t~mem62.offset;~status~2 := -1073741757; {28659#true} is VALID [2022-04-28 08:30:03,442 INFO L290 TraceCheckUtils]: 52: Hoare triple {28659#true} assume !(~status~2 >= 0);call write~int(~status~2, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~2; {28659#true} is VALID [2022-04-28 08:30:03,443 INFO L272 TraceCheckUtils]: 53: Hoare triple {28659#true} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {28723#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:03,443 INFO L290 TraceCheckUtils]: 54: Hoare triple {28723#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {28659#true} is VALID [2022-04-28 08:30:03,443 INFO L290 TraceCheckUtils]: 55: Hoare triple {28659#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {28659#true} is VALID [2022-04-28 08:30:03,443 INFO L290 TraceCheckUtils]: 56: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,443 INFO L284 TraceCheckUtils]: 57: Hoare quadruple {28659#true} {28659#true} #1248#return; {28659#true} is VALID [2022-04-28 08:30:03,443 INFO L290 TraceCheckUtils]: 58: Hoare triple {28659#true} #res := ~status~2; {28659#true} is VALID [2022-04-28 08:30:03,443 INFO L290 TraceCheckUtils]: 59: Hoare triple {28659#true} assume true; {28659#true} is VALID [2022-04-28 08:30:03,443 INFO L284 TraceCheckUtils]: 60: Hoare quadruple {28659#true} {28659#true} #1234#return; {28659#true} is VALID [2022-04-28 08:30:03,443 INFO L290 TraceCheckUtils]: 61: Hoare triple {28659#true} assume -2147483648 <= #t~ret176 && #t~ret176 <= 2147483647;~status~5 := #t~ret176;havoc #t~ret176; {28659#true} is VALID [2022-04-28 08:30:03,444 INFO L290 TraceCheckUtils]: 62: Hoare triple {28659#true} assume 0 != ~we_should_unload~0; {28659#true} is VALID [2022-04-28 08:30:03,444 INFO L290 TraceCheckUtils]: 63: Hoare triple {28659#true} assume !(1 == ~pended~0); {28703#(not (= ~pended~0 1))} is VALID [2022-04-28 08:30:03,444 INFO L290 TraceCheckUtils]: 64: Hoare triple {28703#(not (= ~pended~0 1))} assume !(1 == ~pended~0); {28703#(not (= ~pended~0 1))} is VALID [2022-04-28 08:30:03,444 INFO L290 TraceCheckUtils]: 65: Hoare triple {28703#(not (= ~pended~0 1))} assume !(~s~0 == ~UNLOADED~0); {28703#(not (= ~pended~0 1))} is VALID [2022-04-28 08:30:03,445 INFO L290 TraceCheckUtils]: 66: Hoare triple {28703#(not (= ~pended~0 1))} assume !(-1 == ~status~5); {28703#(not (= ~pended~0 1))} is VALID [2022-04-28 08:30:03,445 INFO L290 TraceCheckUtils]: 67: Hoare triple {28703#(not (= ~pended~0 1))} assume ~s~0 != ~SKIP2~0; {28703#(not (= ~pended~0 1))} is VALID [2022-04-28 08:30:03,445 INFO L290 TraceCheckUtils]: 68: Hoare triple {28703#(not (= ~pended~0 1))} assume ~s~0 != ~IPC~0; {28703#(not (= ~pended~0 1))} is VALID [2022-04-28 08:30:03,445 INFO L290 TraceCheckUtils]: 69: Hoare triple {28703#(not (= ~pended~0 1))} assume !(~s~0 != ~DC~0); {28703#(not (= ~pended~0 1))} is VALID [2022-04-28 08:30:03,445 INFO L290 TraceCheckUtils]: 70: Hoare triple {28703#(not (= ~pended~0 1))} assume 1 == ~pended~0; {28660#false} is VALID [2022-04-28 08:30:03,446 INFO L290 TraceCheckUtils]: 71: Hoare triple {28660#false} assume 259 != ~status~5; {28660#false} is VALID [2022-04-28 08:30:03,446 INFO L272 TraceCheckUtils]: 72: Hoare triple {28660#false} call errorFn(); {28660#false} is VALID [2022-04-28 08:30:03,446 INFO L290 TraceCheckUtils]: 73: Hoare triple {28660#false} assume !false; {28660#false} is VALID [2022-04-28 08:30:03,446 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:30:03,446 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:30:03,446 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1908648718] [2022-04-28 08:30:03,446 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1908648718] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:30:03,446 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:30:03,446 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:30:03,446 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:30:03,447 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [159579198] [2022-04-28 08:30:03,447 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [159579198] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:30:03,447 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:30:03,447 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:30:03,447 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [62240999] [2022-04-28 08:30:03,447 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:30:03,447 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 3 states have internal predecessors, (54), 2 states have call successors, (11), 9 states have call predecessors, (11), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 74 [2022-04-28 08:30:03,448 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:30:03,448 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 5.4) internal successors, (54), 3 states have internal predecessors, (54), 2 states have call successors, (11), 9 states have call predecessors, (11), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2022-04-28 08:30:03,496 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:30:03,496 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-28 08:30:03,496 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:30:03,497 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-28 08:30:03,497 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=64, Unknown=0, NotChecked=0, Total=90 [2022-04-28 08:30:03,497 INFO L87 Difference]: Start difference. First operand 387 states and 512 transitions. Second operand has 10 states, 10 states have (on average 5.4) internal successors, (54), 3 states have internal predecessors, (54), 2 states have call successors, (11), 9 states have call predecessors, (11), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2022-04-28 08:30:05,467 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.08s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:30:07,472 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:30:10,966 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:30:16,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:30:16,800 INFO L93 Difference]: Finished difference Result 419 states and 554 transitions. [2022-04-28 08:30:16,800 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 08:30:16,800 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 3 states have internal predecessors, (54), 2 states have call successors, (11), 9 states have call predecessors, (11), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 74 [2022-04-28 08:30:16,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:30:16,800 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.4) internal successors, (54), 3 states have internal predecessors, (54), 2 states have call successors, (11), 9 states have call predecessors, (11), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2022-04-28 08:30:16,802 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 436 transitions. [2022-04-28 08:30:16,802 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.4) internal successors, (54), 3 states have internal predecessors, (54), 2 states have call successors, (11), 9 states have call predecessors, (11), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2022-04-28 08:30:16,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 436 transitions. [2022-04-28 08:30:16,805 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 436 transitions. [2022-04-28 08:30:17,319 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 436 edges. 436 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:30:17,339 INFO L225 Difference]: With dead ends: 419 [2022-04-28 08:30:17,339 INFO L226 Difference]: Without dead ends: 396 [2022-04-28 08:30:17,340 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=105, Invalid=237, Unknown=0, NotChecked=0, Total=342 [2022-04-28 08:30:17,340 INFO L413 NwaCegarLoop]: 273 mSDtfsCounter, 973 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 776 mSolverCounterSat, 323 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 983 SdHoareTripleChecker+Valid, 477 SdHoareTripleChecker+Invalid, 1101 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 323 IncrementalHoareTripleChecker+Valid, 776 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.2s IncrementalHoareTripleChecker+Time [2022-04-28 08:30:17,340 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [983 Valid, 477 Invalid, 1101 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [323 Valid, 776 Invalid, 2 Unknown, 0 Unchecked, 8.2s Time] [2022-04-28 08:30:17,341 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 396 states. [2022-04-28 08:30:17,750 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 396 to 381. [2022-04-28 08:30:17,750 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:30:17,751 INFO L82 GeneralOperation]: Start isEquivalent. First operand 396 states. Second operand has 381 states, 305 states have (on average 1.3639344262295081) internal successors, (416), 309 states have internal predecessors, (416), 41 states have call successors, (41), 32 states have call predecessors, (41), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) [2022-04-28 08:30:17,751 INFO L74 IsIncluded]: Start isIncluded. First operand 396 states. Second operand has 381 states, 305 states have (on average 1.3639344262295081) internal successors, (416), 309 states have internal predecessors, (416), 41 states have call successors, (41), 32 states have call predecessors, (41), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) [2022-04-28 08:30:17,752 INFO L87 Difference]: Start difference. First operand 396 states. Second operand has 381 states, 305 states have (on average 1.3639344262295081) internal successors, (416), 309 states have internal predecessors, (416), 41 states have call successors, (41), 32 states have call predecessors, (41), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) [2022-04-28 08:30:17,758 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:30:17,758 INFO L93 Difference]: Finished difference Result 396 states and 522 transitions. [2022-04-28 08:30:17,758 INFO L276 IsEmpty]: Start isEmpty. Operand 396 states and 522 transitions. [2022-04-28 08:30:17,759 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:30:17,759 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:30:17,759 INFO L74 IsIncluded]: Start isIncluded. First operand has 381 states, 305 states have (on average 1.3639344262295081) internal successors, (416), 309 states have internal predecessors, (416), 41 states have call successors, (41), 32 states have call predecessors, (41), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) Second operand 396 states. [2022-04-28 08:30:17,760 INFO L87 Difference]: Start difference. First operand has 381 states, 305 states have (on average 1.3639344262295081) internal successors, (416), 309 states have internal predecessors, (416), 41 states have call successors, (41), 32 states have call predecessors, (41), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) Second operand 396 states. [2022-04-28 08:30:17,766 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:30:17,766 INFO L93 Difference]: Finished difference Result 396 states and 522 transitions. [2022-04-28 08:30:17,766 INFO L276 IsEmpty]: Start isEmpty. Operand 396 states and 522 transitions. [2022-04-28 08:30:17,766 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:30:17,766 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:30:17,767 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:30:17,767 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:30:17,767 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 381 states, 305 states have (on average 1.3639344262295081) internal successors, (416), 309 states have internal predecessors, (416), 41 states have call successors, (41), 32 states have call predecessors, (41), 34 states have return successors, (44), 39 states have call predecessors, (44), 36 states have call successors, (44) [2022-04-28 08:30:17,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 381 states to 381 states and 501 transitions. [2022-04-28 08:30:17,774 INFO L78 Accepts]: Start accepts. Automaton has 381 states and 501 transitions. Word has length 74 [2022-04-28 08:30:17,774 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:30:17,774 INFO L495 AbstractCegarLoop]: Abstraction has 381 states and 501 transitions. [2022-04-28 08:30:17,774 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 3 states have internal predecessors, (54), 2 states have call successors, (11), 9 states have call predecessors, (11), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2022-04-28 08:30:17,774 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 381 states and 501 transitions. [2022-04-28 08:30:18,544 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 501 edges. 501 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:30:18,545 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states and 501 transitions. [2022-04-28 08:30:18,545 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2022-04-28 08:30:18,545 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:30:18,545 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:30:18,546 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-04-28 08:30:18,546 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:30:18,546 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:30:18,546 INFO L85 PathProgramCache]: Analyzing trace with hash 937494245, now seen corresponding path program 1 times [2022-04-28 08:30:18,546 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:30:18,546 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [339067598] [2022-04-28 08:30:18,546 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:30:18,546 INFO L85 PathProgramCache]: Analyzing trace with hash 937494245, now seen corresponding path program 2 times [2022-04-28 08:30:18,546 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:30:18,547 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1914311425] [2022-04-28 08:30:18,547 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:30:18,547 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:30:18,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:18,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:30:18,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:18,723 INFO L290 TraceCheckUtils]: 0: Hoare triple {31186#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {31141#true} is VALID [2022-04-28 08:30:18,723 INFO L290 TraceCheckUtils]: 1: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,723 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31141#true} {31141#true} #1270#return; {31141#true} is VALID [2022-04-28 08:30:18,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:30:18,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:18,756 INFO L290 TraceCheckUtils]: 0: Hoare triple {31187#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31141#true} is VALID [2022-04-28 08:30:18,756 INFO L290 TraceCheckUtils]: 1: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,756 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31141#true} {31141#true} #1216#return; {31141#true} is VALID [2022-04-28 08:30:18,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:30:18,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:18,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:30:18,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:18,781 INFO L290 TraceCheckUtils]: 0: Hoare triple {31141#true} ~cond := #in~cond; {31141#true} is VALID [2022-04-28 08:30:18,781 INFO L290 TraceCheckUtils]: 1: Hoare triple {31141#true} assume !(0 == ~cond); {31141#true} is VALID [2022-04-28 08:30:18,782 INFO L290 TraceCheckUtils]: 2: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,782 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {31141#true} {31141#true} #1254#return; {31141#true} is VALID [2022-04-28 08:30:18,782 INFO L290 TraceCheckUtils]: 0: Hoare triple {31188#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {31141#true} is VALID [2022-04-28 08:30:18,782 INFO L272 TraceCheckUtils]: 1: Hoare triple {31141#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {31141#true} is VALID [2022-04-28 08:30:18,782 INFO L290 TraceCheckUtils]: 2: Hoare triple {31141#true} ~cond := #in~cond; {31141#true} is VALID [2022-04-28 08:30:18,782 INFO L290 TraceCheckUtils]: 3: Hoare triple {31141#true} assume !(0 == ~cond); {31141#true} is VALID [2022-04-28 08:30:18,782 INFO L290 TraceCheckUtils]: 4: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,782 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {31141#true} {31141#true} #1254#return; {31141#true} is VALID [2022-04-28 08:30:18,782 INFO L290 TraceCheckUtils]: 6: Hoare triple {31141#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {31141#true} is VALID [2022-04-28 08:30:18,782 INFO L290 TraceCheckUtils]: 7: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,782 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {31141#true} {31141#true} #1218#return; {31141#true} is VALID [2022-04-28 08:30:18,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:30:18,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:18,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:30:18,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:18,808 INFO L290 TraceCheckUtils]: 0: Hoare triple {31193#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {31141#true} is VALID [2022-04-28 08:30:18,808 INFO L290 TraceCheckUtils]: 1: Hoare triple {31141#true} assume !(0 == ~__BLAST_NONDET~5); {31141#true} is VALID [2022-04-28 08:30:18,808 INFO L290 TraceCheckUtils]: 2: Hoare triple {31141#true} #res := -1073741823; {31141#true} is VALID [2022-04-28 08:30:18,808 INFO L290 TraceCheckUtils]: 3: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,808 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {31141#true} {31141#true} #1176#return; {31141#true} is VALID [2022-04-28 08:30:18,808 INFO L290 TraceCheckUtils]: 0: Hoare triple {31193#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {31141#true} is VALID [2022-04-28 08:30:18,820 INFO L272 TraceCheckUtils]: 1: Hoare triple {31141#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {31193#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:30:18,820 INFO L290 TraceCheckUtils]: 2: Hoare triple {31193#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {31141#true} is VALID [2022-04-28 08:30:18,821 INFO L290 TraceCheckUtils]: 3: Hoare triple {31141#true} assume !(0 == ~__BLAST_NONDET~5); {31141#true} is VALID [2022-04-28 08:30:18,821 INFO L290 TraceCheckUtils]: 4: Hoare triple {31141#true} #res := -1073741823; {31141#true} is VALID [2022-04-28 08:30:18,821 INFO L290 TraceCheckUtils]: 5: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,821 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {31141#true} {31141#true} #1176#return; {31141#true} is VALID [2022-04-28 08:30:18,821 INFO L290 TraceCheckUtils]: 7: Hoare triple {31141#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {31141#true} is VALID [2022-04-28 08:30:18,821 INFO L290 TraceCheckUtils]: 8: Hoare triple {31141#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {31141#true} is VALID [2022-04-28 08:30:18,821 INFO L290 TraceCheckUtils]: 9: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,821 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {31141#true} {31141#true} #1220#return; {31141#true} is VALID [2022-04-28 08:30:18,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:30:18,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:18,841 INFO L290 TraceCheckUtils]: 0: Hoare triple {31199#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31141#true} is VALID [2022-04-28 08:30:18,841 INFO L290 TraceCheckUtils]: 1: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,841 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31141#true} {31141#true} #1222#return; {31141#true} is VALID [2022-04-28 08:30:18,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-04-28 08:30:18,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:18,849 INFO L290 TraceCheckUtils]: 0: Hoare triple {31188#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {31141#true} is VALID [2022-04-28 08:30:18,849 INFO L290 TraceCheckUtils]: 1: Hoare triple {31141#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {31141#true} is VALID [2022-04-28 08:30:18,849 INFO L290 TraceCheckUtils]: 2: Hoare triple {31141#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {31141#true} is VALID [2022-04-28 08:30:18,849 INFO L290 TraceCheckUtils]: 3: Hoare triple {31141#true} assume #res.base == dest.base && #res.offset == dest.offset; {31141#true} is VALID [2022-04-28 08:30:18,849 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {31141#true} {31141#true} #1186#return; {31141#true} is VALID [2022-04-28 08:30:18,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-04-28 08:30:18,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:18,876 INFO L290 TraceCheckUtils]: 0: Hoare triple {31200#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {31141#true} is VALID [2022-04-28 08:30:18,877 INFO L290 TraceCheckUtils]: 1: Hoare triple {31141#true} assume !(0 != ~compRegistered~0); {31201#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:30:18,877 INFO L290 TraceCheckUtils]: 2: Hoare triple {31201#(<= ~compRegistered~0 0)} assume 0 == ~__BLAST_NONDET~11; {31201#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:30:18,877 INFO L290 TraceCheckUtils]: 3: Hoare triple {31201#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {31201#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:30:18,878 INFO L290 TraceCheckUtils]: 4: Hoare triple {31201#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {31201#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:30:18,878 INFO L290 TraceCheckUtils]: 5: Hoare triple {31201#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {31201#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:30:18,878 INFO L290 TraceCheckUtils]: 6: Hoare triple {31201#(<= ~compRegistered~0 0)} assume true; {31201#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:30:18,879 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {31201#(<= ~compRegistered~0 0)} {31177#(= ~compRegistered~0 1)} #1192#return; {31142#false} is VALID [2022-04-28 08:30:18,880 INFO L272 TraceCheckUtils]: 0: Hoare triple {31141#true} call ULTIMATE.init(); {31186#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:30:18,880 INFO L290 TraceCheckUtils]: 1: Hoare triple {31186#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {31141#true} is VALID [2022-04-28 08:30:18,880 INFO L290 TraceCheckUtils]: 2: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,880 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {31141#true} {31141#true} #1270#return; {31141#true} is VALID [2022-04-28 08:30:18,881 INFO L272 TraceCheckUtils]: 4: Hoare triple {31141#true} call #t~ret213 := main(); {31141#true} is VALID [2022-04-28 08:30:18,881 INFO L290 TraceCheckUtils]: 5: Hoare triple {31141#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {31141#true} is VALID [2022-04-28 08:30:18,882 INFO L272 TraceCheckUtils]: 6: Hoare triple {31141#true} call _BLAST_init(); {31187#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:30:18,882 INFO L290 TraceCheckUtils]: 7: Hoare triple {31187#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31141#true} is VALID [2022-04-28 08:30:18,882 INFO L290 TraceCheckUtils]: 8: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,882 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {31141#true} {31141#true} #1216#return; {31141#true} is VALID [2022-04-28 08:30:18,882 INFO L272 TraceCheckUtils]: 10: Hoare triple {31141#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {31188#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:30:18,883 INFO L290 TraceCheckUtils]: 11: Hoare triple {31188#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {31141#true} is VALID [2022-04-28 08:30:18,883 INFO L272 TraceCheckUtils]: 12: Hoare triple {31141#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {31141#true} is VALID [2022-04-28 08:30:18,883 INFO L290 TraceCheckUtils]: 13: Hoare triple {31141#true} ~cond := #in~cond; {31141#true} is VALID [2022-04-28 08:30:18,883 INFO L290 TraceCheckUtils]: 14: Hoare triple {31141#true} assume !(0 == ~cond); {31141#true} is VALID [2022-04-28 08:30:18,883 INFO L290 TraceCheckUtils]: 15: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,883 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {31141#true} {31141#true} #1254#return; {31141#true} is VALID [2022-04-28 08:30:18,883 INFO L290 TraceCheckUtils]: 17: Hoare triple {31141#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {31141#true} is VALID [2022-04-28 08:30:18,883 INFO L290 TraceCheckUtils]: 18: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,883 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {31141#true} {31141#true} #1218#return; {31141#true} is VALID [2022-04-28 08:30:18,883 INFO L290 TraceCheckUtils]: 20: Hoare triple {31141#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {31141#true} is VALID [2022-04-28 08:30:18,883 INFO L290 TraceCheckUtils]: 21: Hoare triple {31141#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {31141#true} is VALID [2022-04-28 08:30:18,883 INFO L290 TraceCheckUtils]: 22: Hoare triple {31141#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {31141#true} is VALID [2022-04-28 08:30:18,884 INFO L272 TraceCheckUtils]: 23: Hoare triple {31141#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {31193#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:30:18,884 INFO L290 TraceCheckUtils]: 24: Hoare triple {31193#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {31141#true} is VALID [2022-04-28 08:30:18,885 INFO L272 TraceCheckUtils]: 25: Hoare triple {31141#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {31193#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:30:18,885 INFO L290 TraceCheckUtils]: 26: Hoare triple {31193#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {31141#true} is VALID [2022-04-28 08:30:18,886 INFO L290 TraceCheckUtils]: 27: Hoare triple {31141#true} assume !(0 == ~__BLAST_NONDET~5); {31141#true} is VALID [2022-04-28 08:30:18,886 INFO L290 TraceCheckUtils]: 28: Hoare triple {31141#true} #res := -1073741823; {31141#true} is VALID [2022-04-28 08:30:18,886 INFO L290 TraceCheckUtils]: 29: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,886 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {31141#true} {31141#true} #1176#return; {31141#true} is VALID [2022-04-28 08:30:18,886 INFO L290 TraceCheckUtils]: 31: Hoare triple {31141#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {31141#true} is VALID [2022-04-28 08:30:18,886 INFO L290 TraceCheckUtils]: 32: Hoare triple {31141#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {31141#true} is VALID [2022-04-28 08:30:18,886 INFO L290 TraceCheckUtils]: 33: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,886 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {31141#true} {31141#true} #1220#return; {31141#true} is VALID [2022-04-28 08:30:18,886 INFO L290 TraceCheckUtils]: 35: Hoare triple {31141#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {31141#true} is VALID [2022-04-28 08:30:18,887 INFO L272 TraceCheckUtils]: 36: Hoare triple {31141#true} call stub_driver_init(); {31199#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:30:18,887 INFO L290 TraceCheckUtils]: 37: Hoare triple {31199#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31141#true} is VALID [2022-04-28 08:30:18,887 INFO L290 TraceCheckUtils]: 38: Hoare triple {31141#true} assume true; {31141#true} is VALID [2022-04-28 08:30:18,887 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {31141#true} {31141#true} #1222#return; {31141#true} is VALID [2022-04-28 08:30:18,887 INFO L290 TraceCheckUtils]: 40: Hoare triple {31141#true} assume !!(~status~5 >= 0); {31141#true} is VALID [2022-04-28 08:30:18,887 INFO L290 TraceCheckUtils]: 41: Hoare triple {31141#true} assume !(0 == ~__BLAST_NONDET~0); {31141#true} is VALID [2022-04-28 08:30:18,887 INFO L290 TraceCheckUtils]: 42: Hoare triple {31141#true} assume !(1 == ~__BLAST_NONDET~0); {31141#true} is VALID [2022-04-28 08:30:18,887 INFO L290 TraceCheckUtils]: 43: Hoare triple {31141#true} assume !(2 == ~__BLAST_NONDET~0); {31141#true} is VALID [2022-04-28 08:30:18,887 INFO L290 TraceCheckUtils]: 44: Hoare triple {31141#true} assume 3 == ~__BLAST_NONDET~0; {31141#true} is VALID [2022-04-28 08:30:18,887 INFO L272 TraceCheckUtils]: 45: Hoare triple {31141#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {31141#true} is VALID [2022-04-28 08:30:18,887 INFO L290 TraceCheckUtils]: 46: Hoare triple {31141#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {31141#true} is VALID [2022-04-28 08:30:18,888 INFO L290 TraceCheckUtils]: 47: Hoare triple {31141#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {31141#true} is VALID [2022-04-28 08:30:18,888 INFO L290 TraceCheckUtils]: 48: Hoare triple {31141#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {31141#true} is VALID [2022-04-28 08:30:18,888 INFO L272 TraceCheckUtils]: 49: Hoare triple {31141#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {31188#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:30:18,888 INFO L290 TraceCheckUtils]: 50: Hoare triple {31188#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {31141#true} is VALID [2022-04-28 08:30:18,909 INFO L290 TraceCheckUtils]: 51: Hoare triple {31141#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {31141#true} is VALID [2022-04-28 08:30:18,909 INFO L290 TraceCheckUtils]: 52: Hoare triple {31141#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {31141#true} is VALID [2022-04-28 08:30:18,909 INFO L290 TraceCheckUtils]: 53: Hoare triple {31141#true} assume #res.base == dest.base && #res.offset == dest.offset; {31141#true} is VALID [2022-04-28 08:30:18,909 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {31141#true} {31141#true} #1186#return; {31141#true} is VALID [2022-04-28 08:30:18,909 INFO L290 TraceCheckUtils]: 55: Hoare triple {31141#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {31141#true} is VALID [2022-04-28 08:30:18,910 INFO L290 TraceCheckUtils]: 56: Hoare triple {31141#true} assume !(~s~0 != ~NP~0); {31141#true} is VALID [2022-04-28 08:30:18,910 INFO L290 TraceCheckUtils]: 57: Hoare triple {31141#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {31177#(= ~compRegistered~0 1)} is VALID [2022-04-28 08:30:18,911 INFO L290 TraceCheckUtils]: 58: Hoare triple {31177#(= ~compRegistered~0 1)} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {31177#(= ~compRegistered~0 1)} is VALID [2022-04-28 08:30:18,911 INFO L272 TraceCheckUtils]: 59: Hoare triple {31177#(= ~compRegistered~0 1)} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {31200#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:30:18,911 INFO L290 TraceCheckUtils]: 60: Hoare triple {31200#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {31141#true} is VALID [2022-04-28 08:30:18,912 INFO L290 TraceCheckUtils]: 61: Hoare triple {31141#true} assume !(0 != ~compRegistered~0); {31201#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:30:18,912 INFO L290 TraceCheckUtils]: 62: Hoare triple {31201#(<= ~compRegistered~0 0)} assume 0 == ~__BLAST_NONDET~11; {31201#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:30:18,912 INFO L290 TraceCheckUtils]: 63: Hoare triple {31201#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {31201#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:30:18,912 INFO L290 TraceCheckUtils]: 64: Hoare triple {31201#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {31201#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:30:18,913 INFO L290 TraceCheckUtils]: 65: Hoare triple {31201#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {31201#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:30:18,913 INFO L290 TraceCheckUtils]: 66: Hoare triple {31201#(<= ~compRegistered~0 0)} assume true; {31201#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:30:18,914 INFO L284 TraceCheckUtils]: 67: Hoare quadruple {31201#(<= ~compRegistered~0 0)} {31177#(= ~compRegistered~0 1)} #1192#return; {31142#false} is VALID [2022-04-28 08:30:18,914 INFO L290 TraceCheckUtils]: 68: Hoare triple {31142#false} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {31142#false} is VALID [2022-04-28 08:30:18,914 INFO L290 TraceCheckUtils]: 69: Hoare triple {31142#false} assume !(259 == ~status~3); {31142#false} is VALID [2022-04-28 08:30:18,914 INFO L290 TraceCheckUtils]: 70: Hoare triple {31142#false} assume !(~status~3 >= 0); {31142#false} is VALID [2022-04-28 08:30:18,914 INFO L290 TraceCheckUtils]: 71: Hoare triple {31142#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {31142#false} is VALID [2022-04-28 08:30:18,914 INFO L272 TraceCheckUtils]: 72: Hoare triple {31142#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {31142#false} is VALID [2022-04-28 08:30:18,914 INFO L290 TraceCheckUtils]: 73: Hoare triple {31142#false} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {31142#false} is VALID [2022-04-28 08:30:18,914 INFO L290 TraceCheckUtils]: 74: Hoare triple {31142#false} assume !(~s~0 == ~NP~0); {31142#false} is VALID [2022-04-28 08:30:18,914 INFO L272 TraceCheckUtils]: 75: Hoare triple {31142#false} call errorFn(); {31142#false} is VALID [2022-04-28 08:30:18,914 INFO L290 TraceCheckUtils]: 76: Hoare triple {31142#false} assume !false; {31142#false} is VALID [2022-04-28 08:30:18,915 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:30:18,915 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:30:18,915 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1914311425] [2022-04-28 08:30:18,915 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1914311425] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:30:18,915 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:30:18,915 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:30:18,916 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:30:18,916 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [339067598] [2022-04-28 08:30:18,916 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [339067598] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:30:18,916 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:30:18,916 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:30:18,916 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1505809744] [2022-04-28 08:30:18,916 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:30:18,917 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.5) internal successors, (55), 4 states have internal predecessors, (55), 3 states have call successors, (13), 8 states have call predecessors, (13), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 77 [2022-04-28 08:30:18,917 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:30:18,917 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 5.5) internal successors, (55), 4 states have internal predecessors, (55), 3 states have call successors, (13), 8 states have call predecessors, (13), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:30:18,980 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 77 edges. 77 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:30:18,980 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-28 08:30:18,980 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:30:18,981 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-28 08:30:18,981 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=66, Unknown=0, NotChecked=0, Total=90 [2022-04-28 08:30:18,982 INFO L87 Difference]: Start difference. First operand 381 states and 501 transitions. Second operand has 10 states, 10 states have (on average 5.5) internal successors, (55), 4 states have internal predecessors, (55), 3 states have call successors, (13), 8 states have call predecessors, (13), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:30:21,153 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:30:27,305 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:30:27,305 INFO L93 Difference]: Finished difference Result 437 states and 561 transitions. [2022-04-28 08:30:27,306 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-28 08:30:27,306 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.5) internal successors, (55), 4 states have internal predecessors, (55), 3 states have call successors, (13), 8 states have call predecessors, (13), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 77 [2022-04-28 08:30:27,306 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:30:27,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.5) internal successors, (55), 4 states have internal predecessors, (55), 3 states have call successors, (13), 8 states have call predecessors, (13), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:30:27,308 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 493 transitions. [2022-04-28 08:30:27,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.5) internal successors, (55), 4 states have internal predecessors, (55), 3 states have call successors, (13), 8 states have call predecessors, (13), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:30:27,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 493 transitions. [2022-04-28 08:30:27,311 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 493 transitions. [2022-04-28 08:30:27,845 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 493 edges. 493 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:30:27,852 INFO L225 Difference]: With dead ends: 437 [2022-04-28 08:30:27,852 INFO L226 Difference]: Without dead ends: 374 [2022-04-28 08:30:27,852 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 53 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=103, Invalid=277, Unknown=0, NotChecked=0, Total=380 [2022-04-28 08:30:27,853 INFO L413 NwaCegarLoop]: 312 mSDtfsCounter, 975 mSDsluCounter, 253 mSDsCounter, 0 mSdLazyCounter, 841 mSolverCounterSat, 318 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 985 SdHoareTripleChecker+Valid, 565 SdHoareTripleChecker+Invalid, 1160 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 318 IncrementalHoareTripleChecker+Valid, 841 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.3s IncrementalHoareTripleChecker+Time [2022-04-28 08:30:27,853 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [985 Valid, 565 Invalid, 1160 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [318 Valid, 841 Invalid, 1 Unknown, 0 Unchecked, 4.3s Time] [2022-04-28 08:30:27,853 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 374 states. [2022-04-28 08:30:28,282 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 374 to 345. [2022-04-28 08:30:28,282 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:30:28,284 INFO L82 GeneralOperation]: Start isEquivalent. First operand 374 states. Second operand has 345 states, 274 states have (on average 1.3503649635036497) internal successors, (370), 278 states have internal predecessors, (370), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (39), 36 states have call predecessors, (39), 33 states have call successors, (39) [2022-04-28 08:30:28,284 INFO L74 IsIncluded]: Start isIncluded. First operand 374 states. Second operand has 345 states, 274 states have (on average 1.3503649635036497) internal successors, (370), 278 states have internal predecessors, (370), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (39), 36 states have call predecessors, (39), 33 states have call successors, (39) [2022-04-28 08:30:28,284 INFO L87 Difference]: Start difference. First operand 374 states. Second operand has 345 states, 274 states have (on average 1.3503649635036497) internal successors, (370), 278 states have internal predecessors, (370), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (39), 36 states have call predecessors, (39), 33 states have call successors, (39) [2022-04-28 08:30:28,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:30:28,290 INFO L93 Difference]: Finished difference Result 374 states and 482 transitions. [2022-04-28 08:30:28,290 INFO L276 IsEmpty]: Start isEmpty. Operand 374 states and 482 transitions. [2022-04-28 08:30:28,290 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:30:28,290 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:30:28,291 INFO L74 IsIncluded]: Start isIncluded. First operand has 345 states, 274 states have (on average 1.3503649635036497) internal successors, (370), 278 states have internal predecessors, (370), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (39), 36 states have call predecessors, (39), 33 states have call successors, (39) Second operand 374 states. [2022-04-28 08:30:28,291 INFO L87 Difference]: Start difference. First operand has 345 states, 274 states have (on average 1.3503649635036497) internal successors, (370), 278 states have internal predecessors, (370), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (39), 36 states have call predecessors, (39), 33 states have call successors, (39) Second operand 374 states. [2022-04-28 08:30:28,297 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:30:28,297 INFO L93 Difference]: Finished difference Result 374 states and 482 transitions. [2022-04-28 08:30:28,297 INFO L276 IsEmpty]: Start isEmpty. Operand 374 states and 482 transitions. [2022-04-28 08:30:28,297 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:30:28,297 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:30:28,297 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:30:28,297 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:30:28,298 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 345 states, 274 states have (on average 1.3503649635036497) internal successors, (370), 278 states have internal predecessors, (370), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (39), 36 states have call predecessors, (39), 33 states have call successors, (39) [2022-04-28 08:30:28,323 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 345 states to 345 states and 447 transitions. [2022-04-28 08:30:28,323 INFO L78 Accepts]: Start accepts. Automaton has 345 states and 447 transitions. Word has length 77 [2022-04-28 08:30:28,323 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:30:28,323 INFO L495 AbstractCegarLoop]: Abstraction has 345 states and 447 transitions. [2022-04-28 08:30:28,323 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.5) internal successors, (55), 4 states have internal predecessors, (55), 3 states have call successors, (13), 8 states have call predecessors, (13), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:30:28,323 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 345 states and 447 transitions. [2022-04-28 08:30:28,966 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 447 edges. 447 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:30:28,967 INFO L276 IsEmpty]: Start isEmpty. Operand 345 states and 447 transitions. [2022-04-28 08:30:28,971 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-04-28 08:30:28,972 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:30:28,972 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:30:28,972 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-04-28 08:30:28,972 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:30:28,972 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:30:28,972 INFO L85 PathProgramCache]: Analyzing trace with hash 641442499, now seen corresponding path program 1 times [2022-04-28 08:30:28,972 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:30:28,972 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [29063932] [2022-04-28 08:30:28,972 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:30:28,973 INFO L85 PathProgramCache]: Analyzing trace with hash 641442499, now seen corresponding path program 2 times [2022-04-28 08:30:28,973 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:30:28,973 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1801042201] [2022-04-28 08:30:28,973 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:30:28,973 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:30:29,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:29,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:30:29,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:29,161 INFO L290 TraceCheckUtils]: 0: Hoare triple {33587#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {33541#true} is VALID [2022-04-28 08:30:29,162 INFO L290 TraceCheckUtils]: 1: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,162 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33541#true} {33541#true} #1270#return; {33541#true} is VALID [2022-04-28 08:30:29,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:30:29,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:29,188 INFO L290 TraceCheckUtils]: 0: Hoare triple {33588#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33541#true} is VALID [2022-04-28 08:30:29,188 INFO L290 TraceCheckUtils]: 1: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,188 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33541#true} {33541#true} #1216#return; {33541#true} is VALID [2022-04-28 08:30:29,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:30:29,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:29,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:30:29,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:29,213 INFO L290 TraceCheckUtils]: 0: Hoare triple {33541#true} ~cond := #in~cond; {33541#true} is VALID [2022-04-28 08:30:29,213 INFO L290 TraceCheckUtils]: 1: Hoare triple {33541#true} assume !(0 == ~cond); {33541#true} is VALID [2022-04-28 08:30:29,213 INFO L290 TraceCheckUtils]: 2: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,213 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {33541#true} {33541#true} #1254#return; {33541#true} is VALID [2022-04-28 08:30:29,213 INFO L290 TraceCheckUtils]: 0: Hoare triple {33589#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {33541#true} is VALID [2022-04-28 08:30:29,213 INFO L272 TraceCheckUtils]: 1: Hoare triple {33541#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {33541#true} is VALID [2022-04-28 08:30:29,213 INFO L290 TraceCheckUtils]: 2: Hoare triple {33541#true} ~cond := #in~cond; {33541#true} is VALID [2022-04-28 08:30:29,213 INFO L290 TraceCheckUtils]: 3: Hoare triple {33541#true} assume !(0 == ~cond); {33541#true} is VALID [2022-04-28 08:30:29,213 INFO L290 TraceCheckUtils]: 4: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,213 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {33541#true} {33541#true} #1254#return; {33541#true} is VALID [2022-04-28 08:30:29,214 INFO L290 TraceCheckUtils]: 6: Hoare triple {33541#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {33541#true} is VALID [2022-04-28 08:30:29,214 INFO L290 TraceCheckUtils]: 7: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,214 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {33541#true} {33541#true} #1218#return; {33541#true} is VALID [2022-04-28 08:30:29,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:30:29,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:29,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:30:29,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:29,236 INFO L290 TraceCheckUtils]: 0: Hoare triple {33594#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {33541#true} is VALID [2022-04-28 08:30:29,236 INFO L290 TraceCheckUtils]: 1: Hoare triple {33541#true} assume !(0 == ~__BLAST_NONDET~5); {33541#true} is VALID [2022-04-28 08:30:29,236 INFO L290 TraceCheckUtils]: 2: Hoare triple {33541#true} #res := -1073741823; {33541#true} is VALID [2022-04-28 08:30:29,237 INFO L290 TraceCheckUtils]: 3: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,237 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {33541#true} {33541#true} #1176#return; {33541#true} is VALID [2022-04-28 08:30:29,237 INFO L290 TraceCheckUtils]: 0: Hoare triple {33594#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {33541#true} is VALID [2022-04-28 08:30:29,238 INFO L272 TraceCheckUtils]: 1: Hoare triple {33541#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {33594#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:30:29,238 INFO L290 TraceCheckUtils]: 2: Hoare triple {33594#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {33541#true} is VALID [2022-04-28 08:30:29,238 INFO L290 TraceCheckUtils]: 3: Hoare triple {33541#true} assume !(0 == ~__BLAST_NONDET~5); {33541#true} is VALID [2022-04-28 08:30:29,238 INFO L290 TraceCheckUtils]: 4: Hoare triple {33541#true} #res := -1073741823; {33541#true} is VALID [2022-04-28 08:30:29,238 INFO L290 TraceCheckUtils]: 5: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,238 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {33541#true} {33541#true} #1176#return; {33541#true} is VALID [2022-04-28 08:30:29,238 INFO L290 TraceCheckUtils]: 7: Hoare triple {33541#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {33541#true} is VALID [2022-04-28 08:30:29,238 INFO L290 TraceCheckUtils]: 8: Hoare triple {33541#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {33541#true} is VALID [2022-04-28 08:30:29,238 INFO L290 TraceCheckUtils]: 9: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,238 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {33541#true} {33541#true} #1220#return; {33541#true} is VALID [2022-04-28 08:30:29,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:30:29,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:29,256 INFO L290 TraceCheckUtils]: 0: Hoare triple {33600#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33541#true} is VALID [2022-04-28 08:30:29,256 INFO L290 TraceCheckUtils]: 1: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,256 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33541#true} {33541#true} #1222#return; {33541#true} is VALID [2022-04-28 08:30:29,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-04-28 08:30:29,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:29,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 08:30:29,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:29,310 INFO L290 TraceCheckUtils]: 0: Hoare triple {33608#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {33541#true} is VALID [2022-04-28 08:30:29,310 INFO L290 TraceCheckUtils]: 1: Hoare triple {33541#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {33541#true} is VALID [2022-04-28 08:30:29,310 INFO L290 TraceCheckUtils]: 2: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,311 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {33541#true} {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} #1248#return; {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} is VALID [2022-04-28 08:30:29,311 INFO L290 TraceCheckUtils]: 0: Hoare triple {33601#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~2.base, ~irpStack~2.offset;havoc ~devExt~2.base, ~devExt~2.offset;havoc ~hookKeyboard~0.base, ~hookKeyboard~0.offset;havoc ~connectData~0.base, ~connectData~0.offset;havoc ~status~2;havoc ~tmp~2;~status~2 := 0;call #t~mem51.base, #t~mem51.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~2.base, ~devExt~2.offset := #t~mem51.base, #t~mem51.offset;havoc #t~mem51.base, #t~mem51.offset;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4);call #t~mem52.base, #t~mem52.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~2.base, ~irpStack~2.offset := #t~mem52.base, #t~mem52.offset;havoc #t~mem52.base, #t~mem52.offset;call #t~mem53 := read~int(~irpStack~2.base, 12 + ~irpStack~2.offset, 4); {33541#true} is VALID [2022-04-28 08:30:29,311 INFO L290 TraceCheckUtils]: 1: Hoare triple {33541#true} assume #t~mem53 % 4294967296 == ~bitwiseOr(~bitwiseOr(720896, 512), 3) % 4294967296;havoc #t~mem53; {33541#true} is VALID [2022-04-28 08:30:29,311 INFO L290 TraceCheckUtils]: 2: Hoare triple {33541#true} call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~devExt~2.base, 20 + ~devExt~2.offset, 4); {33541#true} is VALID [2022-04-28 08:30:29,311 INFO L290 TraceCheckUtils]: 3: Hoare triple {33541#true} assume 0 != (#t~mem62.base + #t~mem62.offset) % 4294967296;havoc #t~mem62.base, #t~mem62.offset;~status~2 := -1073741757; {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} is VALID [2022-04-28 08:30:29,312 INFO L290 TraceCheckUtils]: 4: Hoare triple {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} assume !(~status~2 >= 0);call write~int(~status~2, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~2; {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} is VALID [2022-04-28 08:30:29,312 INFO L272 TraceCheckUtils]: 5: Hoare triple {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {33608#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:29,312 INFO L290 TraceCheckUtils]: 6: Hoare triple {33608#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {33541#true} is VALID [2022-04-28 08:30:29,312 INFO L290 TraceCheckUtils]: 7: Hoare triple {33541#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {33541#true} is VALID [2022-04-28 08:30:29,312 INFO L290 TraceCheckUtils]: 8: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,313 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {33541#true} {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} #1248#return; {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} is VALID [2022-04-28 08:30:29,313 INFO L290 TraceCheckUtils]: 10: Hoare triple {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} #res := ~status~2; {33607#(<= (+ 1073741757 |KbFilter_InternIoCtl_#res|) 0)} is VALID [2022-04-28 08:30:29,313 INFO L290 TraceCheckUtils]: 11: Hoare triple {33607#(<= (+ 1073741757 |KbFilter_InternIoCtl_#res|) 0)} assume true; {33607#(<= (+ 1073741757 |KbFilter_InternIoCtl_#res|) 0)} is VALID [2022-04-28 08:30:29,314 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {33607#(<= (+ 1073741757 |KbFilter_InternIoCtl_#res|) 0)} {33541#true} #1234#return; {33585#(not (= 259 |main_#t~ret176|))} is VALID [2022-04-28 08:30:29,315 INFO L272 TraceCheckUtils]: 0: Hoare triple {33541#true} call ULTIMATE.init(); {33587#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:30:29,315 INFO L290 TraceCheckUtils]: 1: Hoare triple {33587#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {33541#true} is VALID [2022-04-28 08:30:29,315 INFO L290 TraceCheckUtils]: 2: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,315 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {33541#true} {33541#true} #1270#return; {33541#true} is VALID [2022-04-28 08:30:29,315 INFO L272 TraceCheckUtils]: 4: Hoare triple {33541#true} call #t~ret213 := main(); {33541#true} is VALID [2022-04-28 08:30:29,316 INFO L290 TraceCheckUtils]: 5: Hoare triple {33541#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {33541#true} is VALID [2022-04-28 08:30:29,316 INFO L272 TraceCheckUtils]: 6: Hoare triple {33541#true} call _BLAST_init(); {33588#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:30:29,316 INFO L290 TraceCheckUtils]: 7: Hoare triple {33588#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33541#true} is VALID [2022-04-28 08:30:29,316 INFO L290 TraceCheckUtils]: 8: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,317 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {33541#true} {33541#true} #1216#return; {33541#true} is VALID [2022-04-28 08:30:29,317 INFO L272 TraceCheckUtils]: 10: Hoare triple {33541#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {33589#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:30:29,317 INFO L290 TraceCheckUtils]: 11: Hoare triple {33589#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {33541#true} is VALID [2022-04-28 08:30:29,317 INFO L272 TraceCheckUtils]: 12: Hoare triple {33541#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {33541#true} is VALID [2022-04-28 08:30:29,317 INFO L290 TraceCheckUtils]: 13: Hoare triple {33541#true} ~cond := #in~cond; {33541#true} is VALID [2022-04-28 08:30:29,318 INFO L290 TraceCheckUtils]: 14: Hoare triple {33541#true} assume !(0 == ~cond); {33541#true} is VALID [2022-04-28 08:30:29,318 INFO L290 TraceCheckUtils]: 15: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,318 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {33541#true} {33541#true} #1254#return; {33541#true} is VALID [2022-04-28 08:30:29,318 INFO L290 TraceCheckUtils]: 17: Hoare triple {33541#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {33541#true} is VALID [2022-04-28 08:30:29,318 INFO L290 TraceCheckUtils]: 18: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,318 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {33541#true} {33541#true} #1218#return; {33541#true} is VALID [2022-04-28 08:30:29,318 INFO L290 TraceCheckUtils]: 20: Hoare triple {33541#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {33541#true} is VALID [2022-04-28 08:30:29,318 INFO L290 TraceCheckUtils]: 21: Hoare triple {33541#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {33541#true} is VALID [2022-04-28 08:30:29,318 INFO L290 TraceCheckUtils]: 22: Hoare triple {33541#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {33541#true} is VALID [2022-04-28 08:30:29,319 INFO L272 TraceCheckUtils]: 23: Hoare triple {33541#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {33594#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:30:29,319 INFO L290 TraceCheckUtils]: 24: Hoare triple {33594#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {33541#true} is VALID [2022-04-28 08:30:29,320 INFO L272 TraceCheckUtils]: 25: Hoare triple {33541#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {33594#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:30:29,320 INFO L290 TraceCheckUtils]: 26: Hoare triple {33594#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {33541#true} is VALID [2022-04-28 08:30:29,320 INFO L290 TraceCheckUtils]: 27: Hoare triple {33541#true} assume !(0 == ~__BLAST_NONDET~5); {33541#true} is VALID [2022-04-28 08:30:29,320 INFO L290 TraceCheckUtils]: 28: Hoare triple {33541#true} #res := -1073741823; {33541#true} is VALID [2022-04-28 08:30:29,320 INFO L290 TraceCheckUtils]: 29: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,320 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {33541#true} {33541#true} #1176#return; {33541#true} is VALID [2022-04-28 08:30:29,320 INFO L290 TraceCheckUtils]: 31: Hoare triple {33541#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {33541#true} is VALID [2022-04-28 08:30:29,320 INFO L290 TraceCheckUtils]: 32: Hoare triple {33541#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {33541#true} is VALID [2022-04-28 08:30:29,320 INFO L290 TraceCheckUtils]: 33: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,320 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {33541#true} {33541#true} #1220#return; {33541#true} is VALID [2022-04-28 08:30:29,321 INFO L290 TraceCheckUtils]: 35: Hoare triple {33541#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {33541#true} is VALID [2022-04-28 08:30:29,321 INFO L272 TraceCheckUtils]: 36: Hoare triple {33541#true} call stub_driver_init(); {33600#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:30:29,321 INFO L290 TraceCheckUtils]: 37: Hoare triple {33600#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33541#true} is VALID [2022-04-28 08:30:29,321 INFO L290 TraceCheckUtils]: 38: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,321 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {33541#true} {33541#true} #1222#return; {33541#true} is VALID [2022-04-28 08:30:29,321 INFO L290 TraceCheckUtils]: 40: Hoare triple {33541#true} assume !!(~status~5 >= 0); {33541#true} is VALID [2022-04-28 08:30:29,321 INFO L290 TraceCheckUtils]: 41: Hoare triple {33541#true} assume !(0 == ~__BLAST_NONDET~0); {33541#true} is VALID [2022-04-28 08:30:29,322 INFO L290 TraceCheckUtils]: 42: Hoare triple {33541#true} assume !(1 == ~__BLAST_NONDET~0); {33541#true} is VALID [2022-04-28 08:30:29,322 INFO L290 TraceCheckUtils]: 43: Hoare triple {33541#true} assume !(2 == ~__BLAST_NONDET~0); {33541#true} is VALID [2022-04-28 08:30:29,322 INFO L290 TraceCheckUtils]: 44: Hoare triple {33541#true} assume !(3 == ~__BLAST_NONDET~0); {33541#true} is VALID [2022-04-28 08:30:29,322 INFO L290 TraceCheckUtils]: 45: Hoare triple {33541#true} assume !(4 == ~__BLAST_NONDET~0); {33541#true} is VALID [2022-04-28 08:30:29,322 INFO L290 TraceCheckUtils]: 46: Hoare triple {33541#true} assume 8 == ~__BLAST_NONDET~0; {33541#true} is VALID [2022-04-28 08:30:29,323 INFO L272 TraceCheckUtils]: 47: Hoare triple {33541#true} call #t~ret176 := KbFilter_InternIoCtl(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {33601#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:30:29,323 INFO L290 TraceCheckUtils]: 48: Hoare triple {33601#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~2.base, ~irpStack~2.offset;havoc ~devExt~2.base, ~devExt~2.offset;havoc ~hookKeyboard~0.base, ~hookKeyboard~0.offset;havoc ~connectData~0.base, ~connectData~0.offset;havoc ~status~2;havoc ~tmp~2;~status~2 := 0;call #t~mem51.base, #t~mem51.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~2.base, ~devExt~2.offset := #t~mem51.base, #t~mem51.offset;havoc #t~mem51.base, #t~mem51.offset;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4);call #t~mem52.base, #t~mem52.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~2.base, ~irpStack~2.offset := #t~mem52.base, #t~mem52.offset;havoc #t~mem52.base, #t~mem52.offset;call #t~mem53 := read~int(~irpStack~2.base, 12 + ~irpStack~2.offset, 4); {33541#true} is VALID [2022-04-28 08:30:29,323 INFO L290 TraceCheckUtils]: 49: Hoare triple {33541#true} assume #t~mem53 % 4294967296 == ~bitwiseOr(~bitwiseOr(720896, 512), 3) % 4294967296;havoc #t~mem53; {33541#true} is VALID [2022-04-28 08:30:29,323 INFO L290 TraceCheckUtils]: 50: Hoare triple {33541#true} call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~devExt~2.base, 20 + ~devExt~2.offset, 4); {33541#true} is VALID [2022-04-28 08:30:29,323 INFO L290 TraceCheckUtils]: 51: Hoare triple {33541#true} assume 0 != (#t~mem62.base + #t~mem62.offset) % 4294967296;havoc #t~mem62.base, #t~mem62.offset;~status~2 := -1073741757; {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} is VALID [2022-04-28 08:30:29,323 INFO L290 TraceCheckUtils]: 52: Hoare triple {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} assume !(~status~2 >= 0);call write~int(~status~2, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~2; {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} is VALID [2022-04-28 08:30:29,324 INFO L272 TraceCheckUtils]: 53: Hoare triple {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {33608#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:29,324 INFO L290 TraceCheckUtils]: 54: Hoare triple {33608#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {33541#true} is VALID [2022-04-28 08:30:29,324 INFO L290 TraceCheckUtils]: 55: Hoare triple {33541#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {33541#true} is VALID [2022-04-28 08:30:29,324 INFO L290 TraceCheckUtils]: 56: Hoare triple {33541#true} assume true; {33541#true} is VALID [2022-04-28 08:30:29,325 INFO L284 TraceCheckUtils]: 57: Hoare quadruple {33541#true} {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} #1248#return; {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} is VALID [2022-04-28 08:30:29,325 INFO L290 TraceCheckUtils]: 58: Hoare triple {33602#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~2) 0)} #res := ~status~2; {33607#(<= (+ 1073741757 |KbFilter_InternIoCtl_#res|) 0)} is VALID [2022-04-28 08:30:29,325 INFO L290 TraceCheckUtils]: 59: Hoare triple {33607#(<= (+ 1073741757 |KbFilter_InternIoCtl_#res|) 0)} assume true; {33607#(<= (+ 1073741757 |KbFilter_InternIoCtl_#res|) 0)} is VALID [2022-04-28 08:30:29,326 INFO L284 TraceCheckUtils]: 60: Hoare quadruple {33607#(<= (+ 1073741757 |KbFilter_InternIoCtl_#res|) 0)} {33541#true} #1234#return; {33585#(not (= 259 |main_#t~ret176|))} is VALID [2022-04-28 08:30:29,326 INFO L290 TraceCheckUtils]: 61: Hoare triple {33585#(not (= 259 |main_#t~ret176|))} assume -2147483648 <= #t~ret176 && #t~ret176 <= 2147483647;~status~5 := #t~ret176;havoc #t~ret176; {33586#(not (= main_~status~5 259))} is VALID [2022-04-28 08:30:29,326 INFO L290 TraceCheckUtils]: 62: Hoare triple {33586#(not (= main_~status~5 259))} assume 0 != ~we_should_unload~0; {33586#(not (= main_~status~5 259))} is VALID [2022-04-28 08:30:29,327 INFO L290 TraceCheckUtils]: 63: Hoare triple {33586#(not (= main_~status~5 259))} assume !(1 == ~pended~0); {33586#(not (= main_~status~5 259))} is VALID [2022-04-28 08:30:29,327 INFO L290 TraceCheckUtils]: 64: Hoare triple {33586#(not (= main_~status~5 259))} assume !(1 == ~pended~0); {33586#(not (= main_~status~5 259))} is VALID [2022-04-28 08:30:29,327 INFO L290 TraceCheckUtils]: 65: Hoare triple {33586#(not (= main_~status~5 259))} assume !(~s~0 == ~UNLOADED~0); {33586#(not (= main_~status~5 259))} is VALID [2022-04-28 08:30:29,327 INFO L290 TraceCheckUtils]: 66: Hoare triple {33586#(not (= main_~status~5 259))} assume !(-1 == ~status~5); {33586#(not (= main_~status~5 259))} is VALID [2022-04-28 08:30:29,328 INFO L290 TraceCheckUtils]: 67: Hoare triple {33586#(not (= main_~status~5 259))} assume ~s~0 != ~SKIP2~0; {33586#(not (= main_~status~5 259))} is VALID [2022-04-28 08:30:29,328 INFO L290 TraceCheckUtils]: 68: Hoare triple {33586#(not (= main_~status~5 259))} assume ~s~0 != ~IPC~0; {33586#(not (= main_~status~5 259))} is VALID [2022-04-28 08:30:29,328 INFO L290 TraceCheckUtils]: 69: Hoare triple {33586#(not (= main_~status~5 259))} assume !(~s~0 != ~DC~0); {33586#(not (= main_~status~5 259))} is VALID [2022-04-28 08:30:29,328 INFO L290 TraceCheckUtils]: 70: Hoare triple {33586#(not (= main_~status~5 259))} assume !(1 == ~pended~0); {33586#(not (= main_~status~5 259))} is VALID [2022-04-28 08:30:29,329 INFO L290 TraceCheckUtils]: 71: Hoare triple {33586#(not (= main_~status~5 259))} assume ~s~0 == ~DC~0; {33586#(not (= main_~status~5 259))} is VALID [2022-04-28 08:30:29,329 INFO L290 TraceCheckUtils]: 72: Hoare triple {33586#(not (= main_~status~5 259))} assume 259 == ~status~5; {33542#false} is VALID [2022-04-28 08:30:29,329 INFO L272 TraceCheckUtils]: 73: Hoare triple {33542#false} call errorFn(); {33542#false} is VALID [2022-04-28 08:30:29,329 INFO L290 TraceCheckUtils]: 74: Hoare triple {33542#false} assume !false; {33542#false} is VALID [2022-04-28 08:30:29,329 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:30:29,330 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:30:29,330 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1801042201] [2022-04-28 08:30:29,330 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1801042201] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:30:29,330 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:30:29,330 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-28 08:30:29,330 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:30:29,330 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [29063932] [2022-04-28 08:30:29,330 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [29063932] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:30:29,330 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:30:29,330 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-28 08:30:29,330 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [476714710] [2022-04-28 08:30:29,330 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:30:29,331 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 4.230769230769231) internal successors, (55), 5 states have internal predecessors, (55), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) Word has length 75 [2022-04-28 08:30:29,332 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:30:29,332 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 13 states, 13 states have (on average 4.230769230769231) internal successors, (55), 5 states have internal predecessors, (55), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:30:29,382 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 75 edges. 75 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:30:29,382 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-04-28 08:30:29,382 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:30:29,383 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-04-28 08:30:29,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=124, Unknown=0, NotChecked=0, Total=156 [2022-04-28 08:30:29,383 INFO L87 Difference]: Start difference. First operand 345 states and 447 transitions. Second operand has 13 states, 13 states have (on average 4.230769230769231) internal successors, (55), 5 states have internal predecessors, (55), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:30:31,510 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:30:42,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:30:42,926 INFO L93 Difference]: Finished difference Result 417 states and 534 transitions. [2022-04-28 08:30:42,926 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-04-28 08:30:42,926 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 4.230769230769231) internal successors, (55), 5 states have internal predecessors, (55), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) Word has length 75 [2022-04-28 08:30:42,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:30:42,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 4.230769230769231) internal successors, (55), 5 states have internal predecessors, (55), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:30:42,939 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 480 transitions. [2022-04-28 08:30:42,939 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 4.230769230769231) internal successors, (55), 5 states have internal predecessors, (55), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:30:42,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 480 transitions. [2022-04-28 08:30:42,941 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 16 states and 480 transitions. [2022-04-28 08:30:43,354 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 480 edges. 480 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:30:43,361 INFO L225 Difference]: With dead ends: 417 [2022-04-28 08:30:43,361 INFO L226 Difference]: Without dead ends: 359 [2022-04-28 08:30:43,362 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 36 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=74, Invalid=268, Unknown=0, NotChecked=0, Total=342 [2022-04-28 08:30:43,362 INFO L413 NwaCegarLoop]: 279 mSDtfsCounter, 677 mSDsluCounter, 511 mSDsCounter, 0 mSdLazyCounter, 1803 mSolverCounterSat, 241 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 680 SdHoareTripleChecker+Valid, 790 SdHoareTripleChecker+Invalid, 2045 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 241 IncrementalHoareTripleChecker+Valid, 1803 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.8s IncrementalHoareTripleChecker+Time [2022-04-28 08:30:43,362 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [680 Valid, 790 Invalid, 2045 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [241 Valid, 1803 Invalid, 1 Unknown, 0 Unchecked, 6.8s Time] [2022-04-28 08:30:43,362 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 359 states. [2022-04-28 08:30:43,789 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 359 to 344. [2022-04-28 08:30:43,789 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:30:43,790 INFO L82 GeneralOperation]: Start isEquivalent. First operand 359 states. Second operand has 344 states, 273 states have (on average 1.336996336996337) internal successors, (365), 277 states have internal predecessors, (365), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (39), 36 states have call predecessors, (39), 33 states have call successors, (39) [2022-04-28 08:30:43,790 INFO L74 IsIncluded]: Start isIncluded. First operand 359 states. Second operand has 344 states, 273 states have (on average 1.336996336996337) internal successors, (365), 277 states have internal predecessors, (365), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (39), 36 states have call predecessors, (39), 33 states have call successors, (39) [2022-04-28 08:30:43,791 INFO L87 Difference]: Start difference. First operand 359 states. Second operand has 344 states, 273 states have (on average 1.336996336996337) internal successors, (365), 277 states have internal predecessors, (365), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (39), 36 states have call predecessors, (39), 33 states have call successors, (39) [2022-04-28 08:30:43,796 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:30:43,796 INFO L93 Difference]: Finished difference Result 359 states and 463 transitions. [2022-04-28 08:30:43,796 INFO L276 IsEmpty]: Start isEmpty. Operand 359 states and 463 transitions. [2022-04-28 08:30:43,796 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:30:43,796 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:30:43,797 INFO L74 IsIncluded]: Start isIncluded. First operand has 344 states, 273 states have (on average 1.336996336996337) internal successors, (365), 277 states have internal predecessors, (365), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (39), 36 states have call predecessors, (39), 33 states have call successors, (39) Second operand 359 states. [2022-04-28 08:30:43,797 INFO L87 Difference]: Start difference. First operand has 344 states, 273 states have (on average 1.336996336996337) internal successors, (365), 277 states have internal predecessors, (365), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (39), 36 states have call predecessors, (39), 33 states have call successors, (39) Second operand 359 states. [2022-04-28 08:30:43,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:30:43,802 INFO L93 Difference]: Finished difference Result 359 states and 463 transitions. [2022-04-28 08:30:43,802 INFO L276 IsEmpty]: Start isEmpty. Operand 359 states and 463 transitions. [2022-04-28 08:30:43,803 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:30:43,803 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:30:43,803 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:30:43,803 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:30:43,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 344 states, 273 states have (on average 1.336996336996337) internal successors, (365), 277 states have internal predecessors, (365), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (39), 36 states have call predecessors, (39), 33 states have call successors, (39) [2022-04-28 08:30:43,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 344 states to 344 states and 442 transitions. [2022-04-28 08:30:43,809 INFO L78 Accepts]: Start accepts. Automaton has 344 states and 442 transitions. Word has length 75 [2022-04-28 08:30:43,809 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:30:43,809 INFO L495 AbstractCegarLoop]: Abstraction has 344 states and 442 transitions. [2022-04-28 08:30:43,810 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 4.230769230769231) internal successors, (55), 5 states have internal predecessors, (55), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:30:43,810 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 344 states and 442 transitions. [2022-04-28 08:30:44,548 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 442 edges. 442 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:30:44,548 INFO L276 IsEmpty]: Start isEmpty. Operand 344 states and 442 transitions. [2022-04-28 08:30:44,549 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2022-04-28 08:30:44,549 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:30:44,550 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:30:44,550 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-04-28 08:30:44,550 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:30:44,550 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:30:44,550 INFO L85 PathProgramCache]: Analyzing trace with hash 476602328, now seen corresponding path program 1 times [2022-04-28 08:30:44,550 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:30:44,550 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1231284344] [2022-04-28 08:30:44,550 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:30:44,551 INFO L85 PathProgramCache]: Analyzing trace with hash 476602328, now seen corresponding path program 2 times [2022-04-28 08:30:44,551 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:30:44,551 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [34189430] [2022-04-28 08:30:44,551 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:30:44,551 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:30:44,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:44,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:30:44,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:44,662 INFO L290 TraceCheckUtils]: 0: Hoare triple {35914#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {35865#true} is VALID [2022-04-28 08:30:44,662 INFO L290 TraceCheckUtils]: 1: Hoare triple {35865#true} assume true; {35865#true} is VALID [2022-04-28 08:30:44,663 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {35865#true} {35865#true} #1270#return; {35865#true} is VALID [2022-04-28 08:30:44,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:30:44,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:44,689 INFO L290 TraceCheckUtils]: 0: Hoare triple {35915#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,689 INFO L290 TraceCheckUtils]: 1: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} assume true; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,689 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {35873#(not (= ~SKIP1~0 ~NP~0))} {35865#true} #1216#return; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:30:44,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:44,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:30:44,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:44,723 INFO L290 TraceCheckUtils]: 0: Hoare triple {35865#true} ~cond := #in~cond; {35865#true} is VALID [2022-04-28 08:30:44,723 INFO L290 TraceCheckUtils]: 1: Hoare triple {35865#true} assume !(0 == ~cond); {35865#true} is VALID [2022-04-28 08:30:44,723 INFO L290 TraceCheckUtils]: 2: Hoare triple {35865#true} assume true; {35865#true} is VALID [2022-04-28 08:30:44,723 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {35865#true} {35865#true} #1254#return; {35865#true} is VALID [2022-04-28 08:30:44,723 INFO L290 TraceCheckUtils]: 0: Hoare triple {35916#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {35865#true} is VALID [2022-04-28 08:30:44,723 INFO L272 TraceCheckUtils]: 1: Hoare triple {35865#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {35865#true} is VALID [2022-04-28 08:30:44,724 INFO L290 TraceCheckUtils]: 2: Hoare triple {35865#true} ~cond := #in~cond; {35865#true} is VALID [2022-04-28 08:30:44,724 INFO L290 TraceCheckUtils]: 3: Hoare triple {35865#true} assume !(0 == ~cond); {35865#true} is VALID [2022-04-28 08:30:44,724 INFO L290 TraceCheckUtils]: 4: Hoare triple {35865#true} assume true; {35865#true} is VALID [2022-04-28 08:30:44,724 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {35865#true} {35865#true} #1254#return; {35865#true} is VALID [2022-04-28 08:30:44,724 INFO L290 TraceCheckUtils]: 6: Hoare triple {35865#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {35865#true} is VALID [2022-04-28 08:30:44,724 INFO L290 TraceCheckUtils]: 7: Hoare triple {35865#true} assume true; {35865#true} is VALID [2022-04-28 08:30:44,725 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {35865#true} {35873#(not (= ~SKIP1~0 ~NP~0))} #1218#return; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:30:44,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:44,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:30:44,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:44,747 INFO L290 TraceCheckUtils]: 0: Hoare triple {35921#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {35865#true} is VALID [2022-04-28 08:30:44,747 INFO L290 TraceCheckUtils]: 1: Hoare triple {35865#true} assume !(0 == ~__BLAST_NONDET~5); {35865#true} is VALID [2022-04-28 08:30:44,747 INFO L290 TraceCheckUtils]: 2: Hoare triple {35865#true} #res := -1073741823; {35865#true} is VALID [2022-04-28 08:30:44,747 INFO L290 TraceCheckUtils]: 3: Hoare triple {35865#true} assume true; {35865#true} is VALID [2022-04-28 08:30:44,748 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {35865#true} {35865#true} #1176#return; {35865#true} is VALID [2022-04-28 08:30:44,748 INFO L290 TraceCheckUtils]: 0: Hoare triple {35921#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {35865#true} is VALID [2022-04-28 08:30:44,749 INFO L272 TraceCheckUtils]: 1: Hoare triple {35865#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {35921#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:30:44,749 INFO L290 TraceCheckUtils]: 2: Hoare triple {35921#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {35865#true} is VALID [2022-04-28 08:30:44,749 INFO L290 TraceCheckUtils]: 3: Hoare triple {35865#true} assume !(0 == ~__BLAST_NONDET~5); {35865#true} is VALID [2022-04-28 08:30:44,749 INFO L290 TraceCheckUtils]: 4: Hoare triple {35865#true} #res := -1073741823; {35865#true} is VALID [2022-04-28 08:30:44,749 INFO L290 TraceCheckUtils]: 5: Hoare triple {35865#true} assume true; {35865#true} is VALID [2022-04-28 08:30:44,749 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {35865#true} {35865#true} #1176#return; {35865#true} is VALID [2022-04-28 08:30:44,749 INFO L290 TraceCheckUtils]: 7: Hoare triple {35865#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {35865#true} is VALID [2022-04-28 08:30:44,749 INFO L290 TraceCheckUtils]: 8: Hoare triple {35865#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {35865#true} is VALID [2022-04-28 08:30:44,749 INFO L290 TraceCheckUtils]: 9: Hoare triple {35865#true} assume true; {35865#true} is VALID [2022-04-28 08:30:44,750 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {35865#true} {35873#(not (= ~SKIP1~0 ~NP~0))} #1220#return; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:30:44,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:44,769 INFO L290 TraceCheckUtils]: 0: Hoare triple {35927#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {35865#true} is VALID [2022-04-28 08:30:44,769 INFO L290 TraceCheckUtils]: 1: Hoare triple {35865#true} assume true; {35865#true} is VALID [2022-04-28 08:30:44,769 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {35865#true} {35873#(not (= ~SKIP1~0 ~NP~0))} #1222#return; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-04-28 08:30:44,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:44,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 08:30:44,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:30:44,842 INFO L290 TraceCheckUtils]: 0: Hoare triple {35939#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet204 && #t~nondet204 <= 2147483647;~__BLAST_NONDET~16 := #t~nondet204;havoc #t~nondet204;havoc ~compRetStatus~1;havoc ~returnVal~0;~lcontext~1.base, ~lcontext~1.offset := 0, 0;havoc ~tmp~12; {35940#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,843 INFO L290 TraceCheckUtils]: 1: Hoare triple {35940#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {35940#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,843 INFO L290 TraceCheckUtils]: 2: Hoare triple {35940#(= ~s~0 |old(~s~0)|)} assume 0 == ~__BLAST_NONDET~16; {35940#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,843 INFO L290 TraceCheckUtils]: 3: Hoare triple {35940#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {35940#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,844 INFO L290 TraceCheckUtils]: 4: Hoare triple {35940#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {35941#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,844 INFO L290 TraceCheckUtils]: 5: Hoare triple {35941#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {35941#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,844 INFO L290 TraceCheckUtils]: 6: Hoare triple {35941#(= ~NP~0 |old(~s~0)|)} assume true; {35941#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,845 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {35941#(= ~NP~0 |old(~s~0)|)} {35929#(= ~SKIP1~0 ~s~0)} #1268#return; {35938#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 08:30:44,845 INFO L290 TraceCheckUtils]: 0: Hoare triple {35928#(and (= |old(#length)| |#length|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~4.base, ~irpStack~4.offset;havoc ~devExt~4.base, ~devExt~4.offset;call ~#powerState~0.base, ~#powerState~0.offset := #Ultimate.allocOnStack(4);havoc ~powerType~0;havoc ~tmp~3;call #t~mem123.base, #t~mem123.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~4.base, ~devExt~4.offset := #t~mem123.base, #t~mem123.offset;havoc #t~mem123.base, #t~mem123.offset;call #t~mem124.base, #t~mem124.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~4.base, ~irpStack~4.offset := #t~mem124.base, #t~mem124.offset;havoc #t~mem124.base, #t~mem124.offset;call #t~mem125 := read~int(~irpStack~4.base, 8 + ~irpStack~4.offset, 4);~powerType~0 := #t~mem125;havoc #t~mem125;call #t~mem126 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call #t~mem127 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call write~int(#t~mem126, ~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem127, ~#powerState~0.base, ~#powerState~0.offset, 4);havoc #t~mem126;havoc #t~mem127;call #t~mem128 := read~int(~irpStack~4.base, 1 + ~irpStack~4.offset, 1); {35865#true} is VALID [2022-04-28 08:30:44,845 INFO L290 TraceCheckUtils]: 1: Hoare triple {35865#true} assume 2 == #t~mem128 % 256;havoc #t~mem128; {35865#true} is VALID [2022-04-28 08:30:44,849 INFO L290 TraceCheckUtils]: 2: Hoare triple {35865#true} assume 1 == ~powerType~0;call #t~mem132 := read~int(~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem132, ~devExt~4.base, 48 + ~devExt~4.offset, 4);havoc #t~mem132; {35865#true} is VALID [2022-04-28 08:30:44,849 INFO L290 TraceCheckUtils]: 3: Hoare triple {35865#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {35929#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:30:44,850 INFO L290 TraceCheckUtils]: 4: Hoare triple {35929#(= ~SKIP1~0 ~s~0)} call #t~mem133 := read~int(~Irp.base, 35 + ~Irp.offset, 1);call write~int((if (1 + #t~mem133) % 256 <= 127 then (1 + #t~mem133) % 256 else (1 + #t~mem133) % 256 - 256), ~Irp.base, 35 + ~Irp.offset, 1);havoc #t~mem133;call #t~mem134.base, #t~mem134.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);call write~$Pointer$(#t~mem134.base, 36 + #t~mem134.offset, ~Irp.base, 96 + ~Irp.offset, 4);havoc #t~mem134.base, #t~mem134.offset;call #t~mem135.base, #t~mem135.offset := read~$Pointer$(~devExt~4.base, 8 + ~devExt~4.offset, 4); {35929#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:30:44,851 INFO L272 TraceCheckUtils]: 5: Hoare triple {35929#(= ~SKIP1~0 ~s~0)} call #t~ret136 := PoCallDriver(#t~mem135.base, #t~mem135.offset, ~Irp.base, ~Irp.offset); {35939#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:30:44,851 INFO L290 TraceCheckUtils]: 6: Hoare triple {35939#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet204 && #t~nondet204 <= 2147483647;~__BLAST_NONDET~16 := #t~nondet204;havoc #t~nondet204;havoc ~compRetStatus~1;havoc ~returnVal~0;~lcontext~1.base, ~lcontext~1.offset := 0, 0;havoc ~tmp~12; {35940#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,851 INFO L290 TraceCheckUtils]: 7: Hoare triple {35940#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {35940#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,852 INFO L290 TraceCheckUtils]: 8: Hoare triple {35940#(= ~s~0 |old(~s~0)|)} assume 0 == ~__BLAST_NONDET~16; {35940#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,852 INFO L290 TraceCheckUtils]: 9: Hoare triple {35940#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {35940#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,852 INFO L290 TraceCheckUtils]: 10: Hoare triple {35940#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {35941#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,853 INFO L290 TraceCheckUtils]: 11: Hoare triple {35941#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {35941#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,853 INFO L290 TraceCheckUtils]: 12: Hoare triple {35941#(= ~NP~0 |old(~s~0)|)} assume true; {35941#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,854 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {35941#(= ~NP~0 |old(~s~0)|)} {35929#(= ~SKIP1~0 ~s~0)} #1268#return; {35938#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 08:30:44,854 INFO L290 TraceCheckUtils]: 14: Hoare triple {35938#(= ~SKIP1~0 ~NP~0)} assume -2147483648 <= #t~ret136 && #t~ret136 <= 2147483647;~tmp~3 := #t~ret136;havoc #t~mem135.base, #t~mem135.offset;havoc #t~ret136;#res := ~tmp~3;call ULTIMATE.dealloc(~#powerState~0.base, ~#powerState~0.offset);havoc ~#powerState~0.base, ~#powerState~0.offset; {35938#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 08:30:44,854 INFO L290 TraceCheckUtils]: 15: Hoare triple {35938#(= ~SKIP1~0 ~NP~0)} assume true; {35938#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 08:30:44,855 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {35938#(= ~SKIP1~0 ~NP~0)} {35873#(not (= ~SKIP1~0 ~NP~0))} #1232#return; {35866#false} is VALID [2022-04-28 08:30:44,856 INFO L272 TraceCheckUtils]: 0: Hoare triple {35865#true} call ULTIMATE.init(); {35914#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:30:44,856 INFO L290 TraceCheckUtils]: 1: Hoare triple {35914#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {35865#true} is VALID [2022-04-28 08:30:44,856 INFO L290 TraceCheckUtils]: 2: Hoare triple {35865#true} assume true; {35865#true} is VALID [2022-04-28 08:30:44,856 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {35865#true} {35865#true} #1270#return; {35865#true} is VALID [2022-04-28 08:30:44,856 INFO L272 TraceCheckUtils]: 4: Hoare triple {35865#true} call #t~ret213 := main(); {35865#true} is VALID [2022-04-28 08:30:44,856 INFO L290 TraceCheckUtils]: 5: Hoare triple {35865#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {35865#true} is VALID [2022-04-28 08:30:44,857 INFO L272 TraceCheckUtils]: 6: Hoare triple {35865#true} call _BLAST_init(); {35915#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:30:44,858 INFO L290 TraceCheckUtils]: 7: Hoare triple {35915#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,858 INFO L290 TraceCheckUtils]: 8: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} assume true; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,859 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {35873#(not (= ~SKIP1~0 ~NP~0))} {35865#true} #1216#return; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,859 INFO L272 TraceCheckUtils]: 10: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {35916#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:30:44,859 INFO L290 TraceCheckUtils]: 11: Hoare triple {35916#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {35865#true} is VALID [2022-04-28 08:30:44,859 INFO L272 TraceCheckUtils]: 12: Hoare triple {35865#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {35865#true} is VALID [2022-04-28 08:30:44,860 INFO L290 TraceCheckUtils]: 13: Hoare triple {35865#true} ~cond := #in~cond; {35865#true} is VALID [2022-04-28 08:30:44,860 INFO L290 TraceCheckUtils]: 14: Hoare triple {35865#true} assume !(0 == ~cond); {35865#true} is VALID [2022-04-28 08:30:44,860 INFO L290 TraceCheckUtils]: 15: Hoare triple {35865#true} assume true; {35865#true} is VALID [2022-04-28 08:30:44,860 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {35865#true} {35865#true} #1254#return; {35865#true} is VALID [2022-04-28 08:30:44,860 INFO L290 TraceCheckUtils]: 17: Hoare triple {35865#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {35865#true} is VALID [2022-04-28 08:30:44,860 INFO L290 TraceCheckUtils]: 18: Hoare triple {35865#true} assume true; {35865#true} is VALID [2022-04-28 08:30:44,860 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {35865#true} {35873#(not (= ~SKIP1~0 ~NP~0))} #1218#return; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,861 INFO L290 TraceCheckUtils]: 20: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,861 INFO L290 TraceCheckUtils]: 21: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,861 INFO L290 TraceCheckUtils]: 22: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,862 INFO L272 TraceCheckUtils]: 23: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {35921#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:30:44,862 INFO L290 TraceCheckUtils]: 24: Hoare triple {35921#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {35865#true} is VALID [2022-04-28 08:30:44,863 INFO L272 TraceCheckUtils]: 25: Hoare triple {35865#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {35921#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:30:44,863 INFO L290 TraceCheckUtils]: 26: Hoare triple {35921#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {35865#true} is VALID [2022-04-28 08:30:44,863 INFO L290 TraceCheckUtils]: 27: Hoare triple {35865#true} assume !(0 == ~__BLAST_NONDET~5); {35865#true} is VALID [2022-04-28 08:30:44,863 INFO L290 TraceCheckUtils]: 28: Hoare triple {35865#true} #res := -1073741823; {35865#true} is VALID [2022-04-28 08:30:44,863 INFO L290 TraceCheckUtils]: 29: Hoare triple {35865#true} assume true; {35865#true} is VALID [2022-04-28 08:30:44,863 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {35865#true} {35865#true} #1176#return; {35865#true} is VALID [2022-04-28 08:30:44,864 INFO L290 TraceCheckUtils]: 31: Hoare triple {35865#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {35865#true} is VALID [2022-04-28 08:30:44,864 INFO L290 TraceCheckUtils]: 32: Hoare triple {35865#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {35865#true} is VALID [2022-04-28 08:30:44,864 INFO L290 TraceCheckUtils]: 33: Hoare triple {35865#true} assume true; {35865#true} is VALID [2022-04-28 08:30:44,864 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {35865#true} {35873#(not (= ~SKIP1~0 ~NP~0))} #1220#return; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,864 INFO L290 TraceCheckUtils]: 35: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,865 INFO L272 TraceCheckUtils]: 36: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} call stub_driver_init(); {35927#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:30:44,865 INFO L290 TraceCheckUtils]: 37: Hoare triple {35927#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {35865#true} is VALID [2022-04-28 08:30:44,865 INFO L290 TraceCheckUtils]: 38: Hoare triple {35865#true} assume true; {35865#true} is VALID [2022-04-28 08:30:44,866 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {35865#true} {35873#(not (= ~SKIP1~0 ~NP~0))} #1222#return; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,866 INFO L290 TraceCheckUtils]: 40: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} assume !!(~status~5 >= 0); {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,866 INFO L290 TraceCheckUtils]: 41: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} assume !(0 == ~__BLAST_NONDET~0); {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,866 INFO L290 TraceCheckUtils]: 42: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} assume !(1 == ~__BLAST_NONDET~0); {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,867 INFO L290 TraceCheckUtils]: 43: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} assume !(2 == ~__BLAST_NONDET~0); {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,867 INFO L290 TraceCheckUtils]: 44: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} assume !(3 == ~__BLAST_NONDET~0); {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,867 INFO L290 TraceCheckUtils]: 45: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} assume 4 == ~__BLAST_NONDET~0; {35873#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:30:44,868 INFO L272 TraceCheckUtils]: 46: Hoare triple {35873#(not (= ~SKIP1~0 ~NP~0))} call #t~ret175 := KbFilter_Power(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {35928#(and (= |old(#length)| |#length|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:30:44,868 INFO L290 TraceCheckUtils]: 47: Hoare triple {35928#(and (= |old(#length)| |#length|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~4.base, ~irpStack~4.offset;havoc ~devExt~4.base, ~devExt~4.offset;call ~#powerState~0.base, ~#powerState~0.offset := #Ultimate.allocOnStack(4);havoc ~powerType~0;havoc ~tmp~3;call #t~mem123.base, #t~mem123.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~4.base, ~devExt~4.offset := #t~mem123.base, #t~mem123.offset;havoc #t~mem123.base, #t~mem123.offset;call #t~mem124.base, #t~mem124.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~4.base, ~irpStack~4.offset := #t~mem124.base, #t~mem124.offset;havoc #t~mem124.base, #t~mem124.offset;call #t~mem125 := read~int(~irpStack~4.base, 8 + ~irpStack~4.offset, 4);~powerType~0 := #t~mem125;havoc #t~mem125;call #t~mem126 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call #t~mem127 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call write~int(#t~mem126, ~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem127, ~#powerState~0.base, ~#powerState~0.offset, 4);havoc #t~mem126;havoc #t~mem127;call #t~mem128 := read~int(~irpStack~4.base, 1 + ~irpStack~4.offset, 1); {35865#true} is VALID [2022-04-28 08:30:44,868 INFO L290 TraceCheckUtils]: 48: Hoare triple {35865#true} assume 2 == #t~mem128 % 256;havoc #t~mem128; {35865#true} is VALID [2022-04-28 08:30:44,868 INFO L290 TraceCheckUtils]: 49: Hoare triple {35865#true} assume 1 == ~powerType~0;call #t~mem132 := read~int(~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem132, ~devExt~4.base, 48 + ~devExt~4.offset, 4);havoc #t~mem132; {35865#true} is VALID [2022-04-28 08:30:44,868 INFO L290 TraceCheckUtils]: 50: Hoare triple {35865#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {35929#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:30:44,869 INFO L290 TraceCheckUtils]: 51: Hoare triple {35929#(= ~SKIP1~0 ~s~0)} call #t~mem133 := read~int(~Irp.base, 35 + ~Irp.offset, 1);call write~int((if (1 + #t~mem133) % 256 <= 127 then (1 + #t~mem133) % 256 else (1 + #t~mem133) % 256 - 256), ~Irp.base, 35 + ~Irp.offset, 1);havoc #t~mem133;call #t~mem134.base, #t~mem134.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);call write~$Pointer$(#t~mem134.base, 36 + #t~mem134.offset, ~Irp.base, 96 + ~Irp.offset, 4);havoc #t~mem134.base, #t~mem134.offset;call #t~mem135.base, #t~mem135.offset := read~$Pointer$(~devExt~4.base, 8 + ~devExt~4.offset, 4); {35929#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:30:44,870 INFO L272 TraceCheckUtils]: 52: Hoare triple {35929#(= ~SKIP1~0 ~s~0)} call #t~ret136 := PoCallDriver(#t~mem135.base, #t~mem135.offset, ~Irp.base, ~Irp.offset); {35939#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:30:44,870 INFO L290 TraceCheckUtils]: 53: Hoare triple {35939#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet204 && #t~nondet204 <= 2147483647;~__BLAST_NONDET~16 := #t~nondet204;havoc #t~nondet204;havoc ~compRetStatus~1;havoc ~returnVal~0;~lcontext~1.base, ~lcontext~1.offset := 0, 0;havoc ~tmp~12; {35940#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,870 INFO L290 TraceCheckUtils]: 54: Hoare triple {35940#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {35940#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,871 INFO L290 TraceCheckUtils]: 55: Hoare triple {35940#(= ~s~0 |old(~s~0)|)} assume 0 == ~__BLAST_NONDET~16; {35940#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,871 INFO L290 TraceCheckUtils]: 56: Hoare triple {35940#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {35940#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,871 INFO L290 TraceCheckUtils]: 57: Hoare triple {35940#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {35941#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,871 INFO L290 TraceCheckUtils]: 58: Hoare triple {35941#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {35941#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,872 INFO L290 TraceCheckUtils]: 59: Hoare triple {35941#(= ~NP~0 |old(~s~0)|)} assume true; {35941#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:30:44,872 INFO L284 TraceCheckUtils]: 60: Hoare quadruple {35941#(= ~NP~0 |old(~s~0)|)} {35929#(= ~SKIP1~0 ~s~0)} #1268#return; {35938#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 08:30:44,873 INFO L290 TraceCheckUtils]: 61: Hoare triple {35938#(= ~SKIP1~0 ~NP~0)} assume -2147483648 <= #t~ret136 && #t~ret136 <= 2147483647;~tmp~3 := #t~ret136;havoc #t~mem135.base, #t~mem135.offset;havoc #t~ret136;#res := ~tmp~3;call ULTIMATE.dealloc(~#powerState~0.base, ~#powerState~0.offset);havoc ~#powerState~0.base, ~#powerState~0.offset; {35938#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 08:30:44,873 INFO L290 TraceCheckUtils]: 62: Hoare triple {35938#(= ~SKIP1~0 ~NP~0)} assume true; {35938#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 08:30:44,874 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {35938#(= ~SKIP1~0 ~NP~0)} {35873#(not (= ~SKIP1~0 ~NP~0))} #1232#return; {35866#false} is VALID [2022-04-28 08:30:44,874 INFO L290 TraceCheckUtils]: 64: Hoare triple {35866#false} assume -2147483648 <= #t~ret175 && #t~ret175 <= 2147483647;~status~5 := #t~ret175;havoc #t~ret175; {35866#false} is VALID [2022-04-28 08:30:44,874 INFO L290 TraceCheckUtils]: 65: Hoare triple {35866#false} assume 0 != ~we_should_unload~0; {35866#false} is VALID [2022-04-28 08:30:44,874 INFO L290 TraceCheckUtils]: 66: Hoare triple {35866#false} assume !(1 == ~pended~0); {35866#false} is VALID [2022-04-28 08:30:44,874 INFO L290 TraceCheckUtils]: 67: Hoare triple {35866#false} assume !(1 == ~pended~0); {35866#false} is VALID [2022-04-28 08:30:44,874 INFO L290 TraceCheckUtils]: 68: Hoare triple {35866#false} assume !(~s~0 == ~UNLOADED~0); {35866#false} is VALID [2022-04-28 08:30:44,874 INFO L290 TraceCheckUtils]: 69: Hoare triple {35866#false} assume !(-1 == ~status~5); {35866#false} is VALID [2022-04-28 08:30:44,874 INFO L290 TraceCheckUtils]: 70: Hoare triple {35866#false} assume !(~s~0 != ~SKIP2~0); {35866#false} is VALID [2022-04-28 08:30:44,874 INFO L290 TraceCheckUtils]: 71: Hoare triple {35866#false} assume !(1 == ~pended~0); {35866#false} is VALID [2022-04-28 08:30:44,874 INFO L290 TraceCheckUtils]: 72: Hoare triple {35866#false} assume ~s~0 == ~DC~0; {35866#false} is VALID [2022-04-28 08:30:44,874 INFO L290 TraceCheckUtils]: 73: Hoare triple {35866#false} assume 259 == ~status~5; {35866#false} is VALID [2022-04-28 08:30:44,874 INFO L272 TraceCheckUtils]: 74: Hoare triple {35866#false} call errorFn(); {35866#false} is VALID [2022-04-28 08:30:44,874 INFO L290 TraceCheckUtils]: 75: Hoare triple {35866#false} assume !false; {35866#false} is VALID [2022-04-28 08:30:44,875 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:30:44,875 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:30:44,875 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [34189430] [2022-04-28 08:30:44,875 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [34189430] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:30:44,875 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:30:44,875 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:30:44,875 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:30:44,875 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1231284344] [2022-04-28 08:30:44,875 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1231284344] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:30:44,875 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:30:44,875 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:30:44,876 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [790979618] [2022-04-28 08:30:44,876 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:30:44,876 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 4.0) internal successors, (56), 7 states have internal predecessors, (56), 4 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) Word has length 76 [2022-04-28 08:30:44,876 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:30:44,876 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 4.0) internal successors, (56), 7 states have internal predecessors, (56), 4 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-04-28 08:30:44,930 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:30:44,930 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-28 08:30:44,930 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:30:44,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-28 08:30:44,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=142, Unknown=0, NotChecked=0, Total=182 [2022-04-28 08:30:44,931 INFO L87 Difference]: Start difference. First operand 344 states and 442 transitions. Second operand has 14 states, 14 states have (on average 4.0) internal successors, (56), 7 states have internal predecessors, (56), 4 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-04-28 08:30:47,222 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:30:59,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:30:59,779 INFO L93 Difference]: Finished difference Result 422 states and 536 transitions. [2022-04-28 08:30:59,779 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-04-28 08:30:59,779 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 4.0) internal successors, (56), 7 states have internal predecessors, (56), 4 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) Word has length 76 [2022-04-28 08:30:59,779 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:30:59,780 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 4.0) internal successors, (56), 7 states have internal predecessors, (56), 4 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-04-28 08:30:59,782 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 508 transitions. [2022-04-28 08:30:59,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 4.0) internal successors, (56), 7 states have internal predecessors, (56), 4 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-04-28 08:30:59,785 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 508 transitions. [2022-04-28 08:30:59,785 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 24 states and 508 transitions. [2022-04-28 08:31:00,290 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 508 edges. 508 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:31:00,297 INFO L225 Difference]: With dead ends: 422 [2022-04-28 08:31:00,297 INFO L226 Difference]: Without dead ends: 379 [2022-04-28 08:31:00,298 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 230 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=260, Invalid=930, Unknown=0, NotChecked=0, Total=1190 [2022-04-28 08:31:00,298 INFO L413 NwaCegarLoop]: 303 mSDtfsCounter, 848 mSDsluCounter, 471 mSDsCounter, 0 mSdLazyCounter, 2049 mSolverCounterSat, 309 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 853 SdHoareTripleChecker+Valid, 774 SdHoareTripleChecker+Invalid, 2359 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 309 IncrementalHoareTripleChecker+Valid, 2049 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.0s IncrementalHoareTripleChecker+Time [2022-04-28 08:31:00,298 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [853 Valid, 774 Invalid, 2359 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [309 Valid, 2049 Invalid, 1 Unknown, 0 Unchecked, 7.0s Time] [2022-04-28 08:31:00,299 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 379 states. [2022-04-28 08:31:00,658 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 379 to 344. [2022-04-28 08:31:00,659 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:31:00,659 INFO L82 GeneralOperation]: Start isEquivalent. First operand 379 states. Second operand has 344 states, 273 states have (on average 1.3296703296703296) internal successors, (363), 277 states have internal predecessors, (363), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (38), 36 states have call predecessors, (38), 33 states have call successors, (38) [2022-04-28 08:31:00,659 INFO L74 IsIncluded]: Start isIncluded. First operand 379 states. Second operand has 344 states, 273 states have (on average 1.3296703296703296) internal successors, (363), 277 states have internal predecessors, (363), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (38), 36 states have call predecessors, (38), 33 states have call successors, (38) [2022-04-28 08:31:00,660 INFO L87 Difference]: Start difference. First operand 379 states. Second operand has 344 states, 273 states have (on average 1.3296703296703296) internal successors, (363), 277 states have internal predecessors, (363), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (38), 36 states have call predecessors, (38), 33 states have call successors, (38) [2022-04-28 08:31:00,665 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:31:00,665 INFO L93 Difference]: Finished difference Result 379 states and 484 transitions. [2022-04-28 08:31:00,665 INFO L276 IsEmpty]: Start isEmpty. Operand 379 states and 484 transitions. [2022-04-28 08:31:00,666 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:31:00,666 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:31:00,666 INFO L74 IsIncluded]: Start isIncluded. First operand has 344 states, 273 states have (on average 1.3296703296703296) internal successors, (363), 277 states have internal predecessors, (363), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (38), 36 states have call predecessors, (38), 33 states have call successors, (38) Second operand 379 states. [2022-04-28 08:31:00,666 INFO L87 Difference]: Start difference. First operand has 344 states, 273 states have (on average 1.3296703296703296) internal successors, (363), 277 states have internal predecessors, (363), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (38), 36 states have call predecessors, (38), 33 states have call successors, (38) Second operand 379 states. [2022-04-28 08:31:00,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:31:00,672 INFO L93 Difference]: Finished difference Result 379 states and 484 transitions. [2022-04-28 08:31:00,672 INFO L276 IsEmpty]: Start isEmpty. Operand 379 states and 484 transitions. [2022-04-28 08:31:00,672 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:31:00,672 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:31:00,672 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:31:00,672 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:31:00,673 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 344 states, 273 states have (on average 1.3296703296703296) internal successors, (363), 277 states have internal predecessors, (363), 38 states have call successors, (38), 30 states have call predecessors, (38), 32 states have return successors, (38), 36 states have call predecessors, (38), 33 states have call successors, (38) [2022-04-28 08:31:00,679 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 344 states to 344 states and 439 transitions. [2022-04-28 08:31:00,679 INFO L78 Accepts]: Start accepts. Automaton has 344 states and 439 transitions. Word has length 76 [2022-04-28 08:31:00,679 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:31:00,679 INFO L495 AbstractCegarLoop]: Abstraction has 344 states and 439 transitions. [2022-04-28 08:31:00,679 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 4.0) internal successors, (56), 7 states have internal predecessors, (56), 4 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-04-28 08:31:00,679 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 344 states and 439 transitions. [2022-04-28 08:31:01,426 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 439 edges. 439 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:31:01,426 INFO L276 IsEmpty]: Start isEmpty. Operand 344 states and 439 transitions. [2022-04-28 08:31:01,427 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2022-04-28 08:31:01,427 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:31:01,427 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:31:01,427 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-04-28 08:31:01,427 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:31:01,428 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:31:01,428 INFO L85 PathProgramCache]: Analyzing trace with hash 1346047832, now seen corresponding path program 1 times [2022-04-28 08:31:01,428 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:31:01,428 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1453019319] [2022-04-28 08:31:01,428 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:31:01,428 INFO L85 PathProgramCache]: Analyzing trace with hash 1346047832, now seen corresponding path program 2 times [2022-04-28 08:31:01,428 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:31:01,428 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1664018160] [2022-04-28 08:31:01,428 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:31:01,429 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:31:01,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:01,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:31:01,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:01,552 INFO L290 TraceCheckUtils]: 0: Hoare triple {38325#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {38280#true} is VALID [2022-04-28 08:31:01,553 INFO L290 TraceCheckUtils]: 1: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,553 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {38280#true} {38280#true} #1270#return; {38280#true} is VALID [2022-04-28 08:31:01,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:31:01,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:01,587 INFO L290 TraceCheckUtils]: 0: Hoare triple {38326#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {38280#true} is VALID [2022-04-28 08:31:01,587 INFO L290 TraceCheckUtils]: 1: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,587 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {38280#true} {38280#true} #1216#return; {38280#true} is VALID [2022-04-28 08:31:01,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:31:01,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:01,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:31:01,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:01,614 INFO L290 TraceCheckUtils]: 0: Hoare triple {38280#true} ~cond := #in~cond; {38280#true} is VALID [2022-04-28 08:31:01,615 INFO L290 TraceCheckUtils]: 1: Hoare triple {38280#true} assume !(0 == ~cond); {38280#true} is VALID [2022-04-28 08:31:01,615 INFO L290 TraceCheckUtils]: 2: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,615 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {38280#true} {38280#true} #1254#return; {38280#true} is VALID [2022-04-28 08:31:01,615 INFO L290 TraceCheckUtils]: 0: Hoare triple {38327#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {38280#true} is VALID [2022-04-28 08:31:01,615 INFO L272 TraceCheckUtils]: 1: Hoare triple {38280#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {38280#true} is VALID [2022-04-28 08:31:01,615 INFO L290 TraceCheckUtils]: 2: Hoare triple {38280#true} ~cond := #in~cond; {38280#true} is VALID [2022-04-28 08:31:01,615 INFO L290 TraceCheckUtils]: 3: Hoare triple {38280#true} assume !(0 == ~cond); {38280#true} is VALID [2022-04-28 08:31:01,615 INFO L290 TraceCheckUtils]: 4: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,615 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {38280#true} {38280#true} #1254#return; {38280#true} is VALID [2022-04-28 08:31:01,615 INFO L290 TraceCheckUtils]: 6: Hoare triple {38280#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {38280#true} is VALID [2022-04-28 08:31:01,615 INFO L290 TraceCheckUtils]: 7: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,616 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {38280#true} {38280#true} #1218#return; {38280#true} is VALID [2022-04-28 08:31:01,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:31:01,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:01,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:31:01,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:01,637 INFO L290 TraceCheckUtils]: 0: Hoare triple {38332#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {38280#true} is VALID [2022-04-28 08:31:01,638 INFO L290 TraceCheckUtils]: 1: Hoare triple {38280#true} assume !(0 == ~__BLAST_NONDET~5); {38280#true} is VALID [2022-04-28 08:31:01,638 INFO L290 TraceCheckUtils]: 2: Hoare triple {38280#true} #res := -1073741823; {38280#true} is VALID [2022-04-28 08:31:01,638 INFO L290 TraceCheckUtils]: 3: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,638 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {38280#true} {38280#true} #1176#return; {38280#true} is VALID [2022-04-28 08:31:01,638 INFO L290 TraceCheckUtils]: 0: Hoare triple {38332#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {38280#true} is VALID [2022-04-28 08:31:01,639 INFO L272 TraceCheckUtils]: 1: Hoare triple {38280#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {38332#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:31:01,639 INFO L290 TraceCheckUtils]: 2: Hoare triple {38332#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {38280#true} is VALID [2022-04-28 08:31:01,639 INFO L290 TraceCheckUtils]: 3: Hoare triple {38280#true} assume !(0 == ~__BLAST_NONDET~5); {38280#true} is VALID [2022-04-28 08:31:01,639 INFO L290 TraceCheckUtils]: 4: Hoare triple {38280#true} #res := -1073741823; {38280#true} is VALID [2022-04-28 08:31:01,639 INFO L290 TraceCheckUtils]: 5: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,639 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {38280#true} {38280#true} #1176#return; {38280#true} is VALID [2022-04-28 08:31:01,639 INFO L290 TraceCheckUtils]: 7: Hoare triple {38280#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {38280#true} is VALID [2022-04-28 08:31:01,640 INFO L290 TraceCheckUtils]: 8: Hoare triple {38280#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {38280#true} is VALID [2022-04-28 08:31:01,640 INFO L290 TraceCheckUtils]: 9: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,640 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {38280#true} {38280#true} #1220#return; {38280#true} is VALID [2022-04-28 08:31:01,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:31:01,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:01,656 INFO L290 TraceCheckUtils]: 0: Hoare triple {38338#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {38280#true} is VALID [2022-04-28 08:31:01,657 INFO L290 TraceCheckUtils]: 1: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,657 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {38280#true} {38280#true} #1222#return; {38280#true} is VALID [2022-04-28 08:31:01,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-04-28 08:31:01,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:01,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:31:01,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:01,699 INFO L290 TraceCheckUtils]: 0: Hoare triple {38345#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {38280#true} is VALID [2022-04-28 08:31:01,699 INFO L290 TraceCheckUtils]: 1: Hoare triple {38280#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {38280#true} is VALID [2022-04-28 08:31:01,699 INFO L290 TraceCheckUtils]: 2: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,699 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {38280#true} {38281#false} #1248#return; {38281#false} is VALID [2022-04-28 08:31:01,700 INFO L290 TraceCheckUtils]: 0: Hoare triple {38339#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~2.base, ~irpStack~2.offset;havoc ~devExt~2.base, ~devExt~2.offset;havoc ~hookKeyboard~0.base, ~hookKeyboard~0.offset;havoc ~connectData~0.base, ~connectData~0.offset;havoc ~status~2;havoc ~tmp~2;~status~2 := 0;call #t~mem51.base, #t~mem51.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~2.base, ~devExt~2.offset := #t~mem51.base, #t~mem51.offset;havoc #t~mem51.base, #t~mem51.offset;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4);call #t~mem52.base, #t~mem52.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~2.base, ~irpStack~2.offset := #t~mem52.base, #t~mem52.offset;havoc #t~mem52.base, #t~mem52.offset;call #t~mem53 := read~int(~irpStack~2.base, 12 + ~irpStack~2.offset, 4); {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} is VALID [2022-04-28 08:31:01,700 INFO L290 TraceCheckUtils]: 1: Hoare triple {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} assume #t~mem53 % 4294967296 == ~bitwiseOr(~bitwiseOr(720896, 512), 3) % 4294967296;havoc #t~mem53; {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} is VALID [2022-04-28 08:31:01,701 INFO L290 TraceCheckUtils]: 2: Hoare triple {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~devExt~2.base, 20 + ~devExt~2.offset, 4); {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} is VALID [2022-04-28 08:31:01,701 INFO L290 TraceCheckUtils]: 3: Hoare triple {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} assume !(0 != (#t~mem62.base + #t~mem62.offset) % 4294967296);havoc #t~mem62.base, #t~mem62.offset;call #t~mem63 := read~int(~irpStack~2.base, 8 + ~irpStack~2.offset, 4); {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} is VALID [2022-04-28 08:31:01,701 INFO L290 TraceCheckUtils]: 4: Hoare triple {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} assume !(#t~mem63 % 4294967296 < 8);havoc #t~mem63;call #t~mem64.base, #t~mem64.offset := read~$Pointer$(~irpStack~2.base, 16 + ~irpStack~2.offset, 4);~connectData~0.base, ~connectData~0.offset := #t~mem64.base, #t~mem64.offset;havoc #t~mem64.base, #t~mem64.offset;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~connectData~0.base, ~connectData~0.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~connectData~0.base, 4 + ~connectData~0.offset, 4);call write~$Pointer$(#t~mem65.base, #t~mem65.offset, ~devExt~2.base, 16 + ~devExt~2.offset, 4);call write~$Pointer$(#t~mem66.base, #t~mem66.offset, ~devExt~2.base, 20 + ~devExt~2.offset, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset;call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~devExt~2.base, ~devExt~2.offset, 4);call write~$Pointer$(#t~mem67.base, #t~mem67.offset, ~connectData~0.base, ~connectData~0.offset, 4);havoc #t~mem67.base, #t~mem67.offset;call write~$Pointer$(#funAddr~KbFilter_ServiceCallback.base, #funAddr~KbFilter_ServiceCallback.offset, ~connectData~0.base, 4 + ~connectData~0.offset, 4); {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} is VALID [2022-04-28 08:31:01,702 INFO L290 TraceCheckUtils]: 5: Hoare triple {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} assume !(~status~2 >= 0);call write~int(~status~2, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~2; {38281#false} is VALID [2022-04-28 08:31:01,702 INFO L272 TraceCheckUtils]: 6: Hoare triple {38281#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {38345#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:31:01,702 INFO L290 TraceCheckUtils]: 7: Hoare triple {38345#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {38280#true} is VALID [2022-04-28 08:31:01,702 INFO L290 TraceCheckUtils]: 8: Hoare triple {38280#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {38280#true} is VALID [2022-04-28 08:31:01,702 INFO L290 TraceCheckUtils]: 9: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,702 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {38280#true} {38281#false} #1248#return; {38281#false} is VALID [2022-04-28 08:31:01,702 INFO L290 TraceCheckUtils]: 11: Hoare triple {38281#false} #res := ~status~2; {38281#false} is VALID [2022-04-28 08:31:01,702 INFO L290 TraceCheckUtils]: 12: Hoare triple {38281#false} assume true; {38281#false} is VALID [2022-04-28 08:31:01,702 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {38281#false} {38280#true} #1234#return; {38281#false} is VALID [2022-04-28 08:31:01,703 INFO L272 TraceCheckUtils]: 0: Hoare triple {38280#true} call ULTIMATE.init(); {38325#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:31:01,703 INFO L290 TraceCheckUtils]: 1: Hoare triple {38325#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {38280#true} is VALID [2022-04-28 08:31:01,704 INFO L290 TraceCheckUtils]: 2: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,704 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {38280#true} {38280#true} #1270#return; {38280#true} is VALID [2022-04-28 08:31:01,704 INFO L272 TraceCheckUtils]: 4: Hoare triple {38280#true} call #t~ret213 := main(); {38280#true} is VALID [2022-04-28 08:31:01,704 INFO L290 TraceCheckUtils]: 5: Hoare triple {38280#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {38280#true} is VALID [2022-04-28 08:31:01,705 INFO L272 TraceCheckUtils]: 6: Hoare triple {38280#true} call _BLAST_init(); {38326#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:31:01,705 INFO L290 TraceCheckUtils]: 7: Hoare triple {38326#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {38280#true} is VALID [2022-04-28 08:31:01,705 INFO L290 TraceCheckUtils]: 8: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,705 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {38280#true} {38280#true} #1216#return; {38280#true} is VALID [2022-04-28 08:31:01,706 INFO L272 TraceCheckUtils]: 10: Hoare triple {38280#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {38327#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:31:01,706 INFO L290 TraceCheckUtils]: 11: Hoare triple {38327#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {38280#true} is VALID [2022-04-28 08:31:01,706 INFO L272 TraceCheckUtils]: 12: Hoare triple {38280#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {38280#true} is VALID [2022-04-28 08:31:01,706 INFO L290 TraceCheckUtils]: 13: Hoare triple {38280#true} ~cond := #in~cond; {38280#true} is VALID [2022-04-28 08:31:01,706 INFO L290 TraceCheckUtils]: 14: Hoare triple {38280#true} assume !(0 == ~cond); {38280#true} is VALID [2022-04-28 08:31:01,706 INFO L290 TraceCheckUtils]: 15: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,706 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {38280#true} {38280#true} #1254#return; {38280#true} is VALID [2022-04-28 08:31:01,706 INFO L290 TraceCheckUtils]: 17: Hoare triple {38280#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {38280#true} is VALID [2022-04-28 08:31:01,706 INFO L290 TraceCheckUtils]: 18: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,706 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {38280#true} {38280#true} #1218#return; {38280#true} is VALID [2022-04-28 08:31:01,706 INFO L290 TraceCheckUtils]: 20: Hoare triple {38280#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {38280#true} is VALID [2022-04-28 08:31:01,706 INFO L290 TraceCheckUtils]: 21: Hoare triple {38280#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {38280#true} is VALID [2022-04-28 08:31:01,706 INFO L290 TraceCheckUtils]: 22: Hoare triple {38280#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {38280#true} is VALID [2022-04-28 08:31:01,707 INFO L272 TraceCheckUtils]: 23: Hoare triple {38280#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {38332#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:31:01,707 INFO L290 TraceCheckUtils]: 24: Hoare triple {38332#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {38280#true} is VALID [2022-04-28 08:31:01,708 INFO L272 TraceCheckUtils]: 25: Hoare triple {38280#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {38332#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:31:01,708 INFO L290 TraceCheckUtils]: 26: Hoare triple {38332#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {38280#true} is VALID [2022-04-28 08:31:01,708 INFO L290 TraceCheckUtils]: 27: Hoare triple {38280#true} assume !(0 == ~__BLAST_NONDET~5); {38280#true} is VALID [2022-04-28 08:31:01,709 INFO L290 TraceCheckUtils]: 28: Hoare triple {38280#true} #res := -1073741823; {38280#true} is VALID [2022-04-28 08:31:01,709 INFO L290 TraceCheckUtils]: 29: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,709 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {38280#true} {38280#true} #1176#return; {38280#true} is VALID [2022-04-28 08:31:01,709 INFO L290 TraceCheckUtils]: 31: Hoare triple {38280#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {38280#true} is VALID [2022-04-28 08:31:01,709 INFO L290 TraceCheckUtils]: 32: Hoare triple {38280#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {38280#true} is VALID [2022-04-28 08:31:01,709 INFO L290 TraceCheckUtils]: 33: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,709 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {38280#true} {38280#true} #1220#return; {38280#true} is VALID [2022-04-28 08:31:01,709 INFO L290 TraceCheckUtils]: 35: Hoare triple {38280#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {38280#true} is VALID [2022-04-28 08:31:01,710 INFO L272 TraceCheckUtils]: 36: Hoare triple {38280#true} call stub_driver_init(); {38338#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:31:01,710 INFO L290 TraceCheckUtils]: 37: Hoare triple {38338#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {38280#true} is VALID [2022-04-28 08:31:01,710 INFO L290 TraceCheckUtils]: 38: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,710 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {38280#true} {38280#true} #1222#return; {38280#true} is VALID [2022-04-28 08:31:01,710 INFO L290 TraceCheckUtils]: 40: Hoare triple {38280#true} assume !!(~status~5 >= 0); {38280#true} is VALID [2022-04-28 08:31:01,710 INFO L290 TraceCheckUtils]: 41: Hoare triple {38280#true} assume !(0 == ~__BLAST_NONDET~0); {38280#true} is VALID [2022-04-28 08:31:01,710 INFO L290 TraceCheckUtils]: 42: Hoare triple {38280#true} assume !(1 == ~__BLAST_NONDET~0); {38280#true} is VALID [2022-04-28 08:31:01,710 INFO L290 TraceCheckUtils]: 43: Hoare triple {38280#true} assume !(2 == ~__BLAST_NONDET~0); {38280#true} is VALID [2022-04-28 08:31:01,710 INFO L290 TraceCheckUtils]: 44: Hoare triple {38280#true} assume !(3 == ~__BLAST_NONDET~0); {38280#true} is VALID [2022-04-28 08:31:01,710 INFO L290 TraceCheckUtils]: 45: Hoare triple {38280#true} assume !(4 == ~__BLAST_NONDET~0); {38280#true} is VALID [2022-04-28 08:31:01,710 INFO L290 TraceCheckUtils]: 46: Hoare triple {38280#true} assume 8 == ~__BLAST_NONDET~0; {38280#true} is VALID [2022-04-28 08:31:01,711 INFO L272 TraceCheckUtils]: 47: Hoare triple {38280#true} call #t~ret176 := KbFilter_InternIoCtl(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {38339#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:31:01,712 INFO L290 TraceCheckUtils]: 48: Hoare triple {38339#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~2.base, ~irpStack~2.offset;havoc ~devExt~2.base, ~devExt~2.offset;havoc ~hookKeyboard~0.base, ~hookKeyboard~0.offset;havoc ~connectData~0.base, ~connectData~0.offset;havoc ~status~2;havoc ~tmp~2;~status~2 := 0;call #t~mem51.base, #t~mem51.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~2.base, ~devExt~2.offset := #t~mem51.base, #t~mem51.offset;havoc #t~mem51.base, #t~mem51.offset;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4);call #t~mem52.base, #t~mem52.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~2.base, ~irpStack~2.offset := #t~mem52.base, #t~mem52.offset;havoc #t~mem52.base, #t~mem52.offset;call #t~mem53 := read~int(~irpStack~2.base, 12 + ~irpStack~2.offset, 4); {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} is VALID [2022-04-28 08:31:01,712 INFO L290 TraceCheckUtils]: 49: Hoare triple {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} assume #t~mem53 % 4294967296 == ~bitwiseOr(~bitwiseOr(720896, 512), 3) % 4294967296;havoc #t~mem53; {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} is VALID [2022-04-28 08:31:01,712 INFO L290 TraceCheckUtils]: 50: Hoare triple {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~devExt~2.base, 20 + ~devExt~2.offset, 4); {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} is VALID [2022-04-28 08:31:01,713 INFO L290 TraceCheckUtils]: 51: Hoare triple {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} assume !(0 != (#t~mem62.base + #t~mem62.offset) % 4294967296);havoc #t~mem62.base, #t~mem62.offset;call #t~mem63 := read~int(~irpStack~2.base, 8 + ~irpStack~2.offset, 4); {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} is VALID [2022-04-28 08:31:01,713 INFO L290 TraceCheckUtils]: 52: Hoare triple {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} assume !(#t~mem63 % 4294967296 < 8);havoc #t~mem63;call #t~mem64.base, #t~mem64.offset := read~$Pointer$(~irpStack~2.base, 16 + ~irpStack~2.offset, 4);~connectData~0.base, ~connectData~0.offset := #t~mem64.base, #t~mem64.offset;havoc #t~mem64.base, #t~mem64.offset;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~connectData~0.base, ~connectData~0.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~connectData~0.base, 4 + ~connectData~0.offset, 4);call write~$Pointer$(#t~mem65.base, #t~mem65.offset, ~devExt~2.base, 16 + ~devExt~2.offset, 4);call write~$Pointer$(#t~mem66.base, #t~mem66.offset, ~devExt~2.base, 20 + ~devExt~2.offset, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset;call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~devExt~2.base, ~devExt~2.offset, 4);call write~$Pointer$(#t~mem67.base, #t~mem67.offset, ~connectData~0.base, ~connectData~0.offset, 4);havoc #t~mem67.base, #t~mem67.offset;call write~$Pointer$(#funAddr~KbFilter_ServiceCallback.base, #funAddr~KbFilter_ServiceCallback.offset, ~connectData~0.base, 4 + ~connectData~0.offset, 4); {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} is VALID [2022-04-28 08:31:01,713 INFO L290 TraceCheckUtils]: 53: Hoare triple {38340#(<= 0 KbFilter_InternIoCtl_~status~2)} assume !(~status~2 >= 0);call write~int(~status~2, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~2; {38281#false} is VALID [2022-04-28 08:31:01,713 INFO L272 TraceCheckUtils]: 54: Hoare triple {38281#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {38345#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:31:01,713 INFO L290 TraceCheckUtils]: 55: Hoare triple {38345#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {38280#true} is VALID [2022-04-28 08:31:01,713 INFO L290 TraceCheckUtils]: 56: Hoare triple {38280#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {38280#true} is VALID [2022-04-28 08:31:01,713 INFO L290 TraceCheckUtils]: 57: Hoare triple {38280#true} assume true; {38280#true} is VALID [2022-04-28 08:31:01,713 INFO L284 TraceCheckUtils]: 58: Hoare quadruple {38280#true} {38281#false} #1248#return; {38281#false} is VALID [2022-04-28 08:31:01,714 INFO L290 TraceCheckUtils]: 59: Hoare triple {38281#false} #res := ~status~2; {38281#false} is VALID [2022-04-28 08:31:01,714 INFO L290 TraceCheckUtils]: 60: Hoare triple {38281#false} assume true; {38281#false} is VALID [2022-04-28 08:31:01,714 INFO L284 TraceCheckUtils]: 61: Hoare quadruple {38281#false} {38280#true} #1234#return; {38281#false} is VALID [2022-04-28 08:31:01,714 INFO L290 TraceCheckUtils]: 62: Hoare triple {38281#false} assume -2147483648 <= #t~ret176 && #t~ret176 <= 2147483647;~status~5 := #t~ret176;havoc #t~ret176; {38281#false} is VALID [2022-04-28 08:31:01,714 INFO L290 TraceCheckUtils]: 63: Hoare triple {38281#false} assume 0 != ~we_should_unload~0; {38281#false} is VALID [2022-04-28 08:31:01,714 INFO L290 TraceCheckUtils]: 64: Hoare triple {38281#false} assume !(1 == ~pended~0); {38281#false} is VALID [2022-04-28 08:31:01,714 INFO L290 TraceCheckUtils]: 65: Hoare triple {38281#false} assume !(1 == ~pended~0); {38281#false} is VALID [2022-04-28 08:31:01,714 INFO L290 TraceCheckUtils]: 66: Hoare triple {38281#false} assume !(~s~0 == ~UNLOADED~0); {38281#false} is VALID [2022-04-28 08:31:01,714 INFO L290 TraceCheckUtils]: 67: Hoare triple {38281#false} assume !(-1 == ~status~5); {38281#false} is VALID [2022-04-28 08:31:01,714 INFO L290 TraceCheckUtils]: 68: Hoare triple {38281#false} assume ~s~0 != ~SKIP2~0; {38281#false} is VALID [2022-04-28 08:31:01,714 INFO L290 TraceCheckUtils]: 69: Hoare triple {38281#false} assume ~s~0 != ~IPC~0; {38281#false} is VALID [2022-04-28 08:31:01,714 INFO L290 TraceCheckUtils]: 70: Hoare triple {38281#false} assume !(~s~0 != ~DC~0); {38281#false} is VALID [2022-04-28 08:31:01,714 INFO L290 TraceCheckUtils]: 71: Hoare triple {38281#false} assume !(1 == ~pended~0); {38281#false} is VALID [2022-04-28 08:31:01,714 INFO L290 TraceCheckUtils]: 72: Hoare triple {38281#false} assume ~s~0 == ~DC~0; {38281#false} is VALID [2022-04-28 08:31:01,715 INFO L290 TraceCheckUtils]: 73: Hoare triple {38281#false} assume 259 == ~status~5; {38281#false} is VALID [2022-04-28 08:31:01,715 INFO L272 TraceCheckUtils]: 74: Hoare triple {38281#false} call errorFn(); {38281#false} is VALID [2022-04-28 08:31:01,715 INFO L290 TraceCheckUtils]: 75: Hoare triple {38281#false} assume !false; {38281#false} is VALID [2022-04-28 08:31:01,715 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:31:01,715 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:31:01,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1664018160] [2022-04-28 08:31:01,717 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1664018160] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:31:01,717 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:31:01,717 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:31:01,717 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:31:01,717 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1453019319] [2022-04-28 08:31:01,717 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1453019319] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:31:01,717 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:31:01,717 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:31:01,717 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [327585746] [2022-04-28 08:31:01,717 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:31:01,718 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.6) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 76 [2022-04-28 08:31:01,718 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:31:01,718 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 5.6) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:31:01,790 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:31:01,790 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-28 08:31:01,790 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:31:01,790 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-28 08:31:01,790 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=64, Unknown=0, NotChecked=0, Total=90 [2022-04-28 08:31:01,791 INFO L87 Difference]: Start difference. First operand 344 states and 439 transitions. Second operand has 10 states, 10 states have (on average 5.6) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:31:03,939 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:31:10,064 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:31:10,064 INFO L93 Difference]: Finished difference Result 378 states and 480 transitions. [2022-04-28 08:31:10,064 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 08:31:10,064 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.6) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 76 [2022-04-28 08:31:10,064 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:31:10,064 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.6) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:31:10,067 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 427 transitions. [2022-04-28 08:31:10,067 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.6) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:31:10,069 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 427 transitions. [2022-04-28 08:31:10,069 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 427 transitions. [2022-04-28 08:31:10,422 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 427 edges. 427 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:31:10,428 INFO L225 Difference]: With dead ends: 378 [2022-04-28 08:31:10,428 INFO L226 Difference]: Without dead ends: 355 [2022-04-28 08:31:10,428 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=57, Invalid=125, Unknown=0, NotChecked=0, Total=182 [2022-04-28 08:31:10,428 INFO L413 NwaCegarLoop]: 271 mSDtfsCounter, 460 mSDsluCounter, 324 mSDsCounter, 0 mSdLazyCounter, 1111 mSolverCounterSat, 161 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 463 SdHoareTripleChecker+Valid, 595 SdHoareTripleChecker+Invalid, 1273 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 161 IncrementalHoareTripleChecker+Valid, 1111 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.4s IncrementalHoareTripleChecker+Time [2022-04-28 08:31:10,429 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [463 Valid, 595 Invalid, 1273 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [161 Valid, 1111 Invalid, 1 Unknown, 0 Unchecked, 4.4s Time] [2022-04-28 08:31:10,429 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 355 states. [2022-04-28 08:31:10,904 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 355 to 335. [2022-04-28 08:31:10,904 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:31:10,905 INFO L82 GeneralOperation]: Start isEquivalent. First operand 355 states. Second operand has 335 states, 267 states have (on average 1.3333333333333333) internal successors, (356), 271 states have internal predecessors, (356), 37 states have call successors, (37), 29 states have call predecessors, (37), 30 states have return successors, (36), 34 states have call predecessors, (36), 32 states have call successors, (36) [2022-04-28 08:31:10,905 INFO L74 IsIncluded]: Start isIncluded. First operand 355 states. Second operand has 335 states, 267 states have (on average 1.3333333333333333) internal successors, (356), 271 states have internal predecessors, (356), 37 states have call successors, (37), 29 states have call predecessors, (37), 30 states have return successors, (36), 34 states have call predecessors, (36), 32 states have call successors, (36) [2022-04-28 08:31:10,905 INFO L87 Difference]: Start difference. First operand 355 states. Second operand has 335 states, 267 states have (on average 1.3333333333333333) internal successors, (356), 271 states have internal predecessors, (356), 37 states have call successors, (37), 29 states have call predecessors, (37), 30 states have return successors, (36), 34 states have call predecessors, (36), 32 states have call successors, (36) [2022-04-28 08:31:10,910 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:31:10,910 INFO L93 Difference]: Finished difference Result 355 states and 456 transitions. [2022-04-28 08:31:10,911 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 456 transitions. [2022-04-28 08:31:10,911 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:31:10,911 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:31:10,911 INFO L74 IsIncluded]: Start isIncluded. First operand has 335 states, 267 states have (on average 1.3333333333333333) internal successors, (356), 271 states have internal predecessors, (356), 37 states have call successors, (37), 29 states have call predecessors, (37), 30 states have return successors, (36), 34 states have call predecessors, (36), 32 states have call successors, (36) Second operand 355 states. [2022-04-28 08:31:10,912 INFO L87 Difference]: Start difference. First operand has 335 states, 267 states have (on average 1.3333333333333333) internal successors, (356), 271 states have internal predecessors, (356), 37 states have call successors, (37), 29 states have call predecessors, (37), 30 states have return successors, (36), 34 states have call predecessors, (36), 32 states have call successors, (36) Second operand 355 states. [2022-04-28 08:31:10,917 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:31:10,917 INFO L93 Difference]: Finished difference Result 355 states and 456 transitions. [2022-04-28 08:31:10,917 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 456 transitions. [2022-04-28 08:31:10,917 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:31:10,917 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:31:10,917 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:31:10,917 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:31:10,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 335 states, 267 states have (on average 1.3333333333333333) internal successors, (356), 271 states have internal predecessors, (356), 37 states have call successors, (37), 29 states have call predecessors, (37), 30 states have return successors, (36), 34 states have call predecessors, (36), 32 states have call successors, (36) [2022-04-28 08:31:10,924 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 335 states to 335 states and 429 transitions. [2022-04-28 08:31:10,924 INFO L78 Accepts]: Start accepts. Automaton has 335 states and 429 transitions. Word has length 76 [2022-04-28 08:31:10,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:31:10,924 INFO L495 AbstractCegarLoop]: Abstraction has 335 states and 429 transitions. [2022-04-28 08:31:10,924 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.6) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:31:10,924 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 335 states and 429 transitions. [2022-04-28 08:31:11,617 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 429 edges. 429 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:31:11,617 INFO L276 IsEmpty]: Start isEmpty. Operand 335 states and 429 transitions. [2022-04-28 08:31:11,618 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2022-04-28 08:31:11,618 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:31:11,618 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:31:11,618 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-04-28 08:31:11,618 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:31:11,619 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:31:11,619 INFO L85 PathProgramCache]: Analyzing trace with hash 2131421, now seen corresponding path program 1 times [2022-04-28 08:31:11,619 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:31:11,619 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [230506098] [2022-04-28 08:31:11,619 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:31:11,619 INFO L85 PathProgramCache]: Analyzing trace with hash 2131421, now seen corresponding path program 2 times [2022-04-28 08:31:11,619 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:31:11,619 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [336478397] [2022-04-28 08:31:11,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:31:11,619 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:31:11,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:11,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:31:11,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:11,744 INFO L290 TraceCheckUtils]: 0: Hoare triple {40546#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {40494#true} is VALID [2022-04-28 08:31:11,745 INFO L290 TraceCheckUtils]: 1: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,745 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {40494#true} {40494#true} #1270#return; {40494#true} is VALID [2022-04-28 08:31:11,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:31:11,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:11,774 INFO L290 TraceCheckUtils]: 0: Hoare triple {40547#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {40494#true} is VALID [2022-04-28 08:31:11,774 INFO L290 TraceCheckUtils]: 1: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,774 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {40494#true} {40494#true} #1216#return; {40494#true} is VALID [2022-04-28 08:31:11,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:31:11,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:11,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:31:11,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:11,798 INFO L290 TraceCheckUtils]: 0: Hoare triple {40494#true} ~cond := #in~cond; {40494#true} is VALID [2022-04-28 08:31:11,798 INFO L290 TraceCheckUtils]: 1: Hoare triple {40494#true} assume !(0 == ~cond); {40494#true} is VALID [2022-04-28 08:31:11,798 INFO L290 TraceCheckUtils]: 2: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,798 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {40494#true} {40494#true} #1254#return; {40494#true} is VALID [2022-04-28 08:31:11,799 INFO L290 TraceCheckUtils]: 0: Hoare triple {40548#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {40494#true} is VALID [2022-04-28 08:31:11,799 INFO L272 TraceCheckUtils]: 1: Hoare triple {40494#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {40494#true} is VALID [2022-04-28 08:31:11,799 INFO L290 TraceCheckUtils]: 2: Hoare triple {40494#true} ~cond := #in~cond; {40494#true} is VALID [2022-04-28 08:31:11,799 INFO L290 TraceCheckUtils]: 3: Hoare triple {40494#true} assume !(0 == ~cond); {40494#true} is VALID [2022-04-28 08:31:11,799 INFO L290 TraceCheckUtils]: 4: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,799 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {40494#true} {40494#true} #1254#return; {40494#true} is VALID [2022-04-28 08:31:11,799 INFO L290 TraceCheckUtils]: 6: Hoare triple {40494#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {40494#true} is VALID [2022-04-28 08:31:11,799 INFO L290 TraceCheckUtils]: 7: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,799 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {40494#true} {40494#true} #1218#return; {40494#true} is VALID [2022-04-28 08:31:11,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:31:11,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:11,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:31:11,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:11,820 INFO L290 TraceCheckUtils]: 0: Hoare triple {40553#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {40494#true} is VALID [2022-04-28 08:31:11,820 INFO L290 TraceCheckUtils]: 1: Hoare triple {40494#true} assume !(0 == ~__BLAST_NONDET~5); {40494#true} is VALID [2022-04-28 08:31:11,820 INFO L290 TraceCheckUtils]: 2: Hoare triple {40494#true} #res := -1073741823; {40494#true} is VALID [2022-04-28 08:31:11,820 INFO L290 TraceCheckUtils]: 3: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,820 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {40494#true} {40494#true} #1176#return; {40494#true} is VALID [2022-04-28 08:31:11,820 INFO L290 TraceCheckUtils]: 0: Hoare triple {40553#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {40494#true} is VALID [2022-04-28 08:31:11,821 INFO L272 TraceCheckUtils]: 1: Hoare triple {40494#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {40553#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:31:11,822 INFO L290 TraceCheckUtils]: 2: Hoare triple {40553#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {40494#true} is VALID [2022-04-28 08:31:11,822 INFO L290 TraceCheckUtils]: 3: Hoare triple {40494#true} assume !(0 == ~__BLAST_NONDET~5); {40494#true} is VALID [2022-04-28 08:31:11,822 INFO L290 TraceCheckUtils]: 4: Hoare triple {40494#true} #res := -1073741823; {40494#true} is VALID [2022-04-28 08:31:11,822 INFO L290 TraceCheckUtils]: 5: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,822 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {40494#true} {40494#true} #1176#return; {40494#true} is VALID [2022-04-28 08:31:11,822 INFO L290 TraceCheckUtils]: 7: Hoare triple {40494#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {40494#true} is VALID [2022-04-28 08:31:11,822 INFO L290 TraceCheckUtils]: 8: Hoare triple {40494#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {40494#true} is VALID [2022-04-28 08:31:11,822 INFO L290 TraceCheckUtils]: 9: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,822 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {40494#true} {40494#true} #1220#return; {40494#true} is VALID [2022-04-28 08:31:11,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:31:11,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:11,839 INFO L290 TraceCheckUtils]: 0: Hoare triple {40559#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {40494#true} is VALID [2022-04-28 08:31:11,840 INFO L290 TraceCheckUtils]: 1: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,840 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {40494#true} {40494#true} #1222#return; {40494#true} is VALID [2022-04-28 08:31:11,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-04-28 08:31:11,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:11,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 08:31:11,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:11,935 INFO L290 TraceCheckUtils]: 0: Hoare triple {40573#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet204 && #t~nondet204 <= 2147483647;~__BLAST_NONDET~16 := #t~nondet204;havoc #t~nondet204;havoc ~compRetStatus~1;havoc ~returnVal~0;~lcontext~1.base, ~lcontext~1.offset := 0, 0;havoc ~tmp~12; {40494#true} is VALID [2022-04-28 08:31:11,935 INFO L290 TraceCheckUtils]: 1: Hoare triple {40494#true} assume !(0 != ~compRegistered~0); {40494#true} is VALID [2022-04-28 08:31:11,935 INFO L290 TraceCheckUtils]: 2: Hoare triple {40494#true} assume 0 == ~__BLAST_NONDET~16; {40494#true} is VALID [2022-04-28 08:31:11,935 INFO L290 TraceCheckUtils]: 3: Hoare triple {40494#true} ~returnVal~0 := 0; {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} is VALID [2022-04-28 08:31:11,936 INFO L290 TraceCheckUtils]: 4: Hoare triple {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} assume !(~s~0 == ~NP~0); {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} is VALID [2022-04-28 08:31:11,936 INFO L290 TraceCheckUtils]: 5: Hoare triple {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} assume !(~s~0 == ~MPR1~0); {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} is VALID [2022-04-28 08:31:11,936 INFO L290 TraceCheckUtils]: 6: Hoare triple {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} is VALID [2022-04-28 08:31:11,937 INFO L290 TraceCheckUtils]: 7: Hoare triple {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} #res := ~returnVal~0; {40575#(and (<= |PoCallDriver_#res| 0) (<= 0 |PoCallDriver_#res|))} is VALID [2022-04-28 08:31:11,937 INFO L290 TraceCheckUtils]: 8: Hoare triple {40575#(and (<= |PoCallDriver_#res| 0) (<= 0 |PoCallDriver_#res|))} assume true; {40575#(and (<= |PoCallDriver_#res| 0) (<= 0 |PoCallDriver_#res|))} is VALID [2022-04-28 08:31:11,938 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {40575#(and (<= |PoCallDriver_#res| 0) (<= 0 |PoCallDriver_#res|))} {40494#true} #1268#return; {40571#(= |KbFilter_Power_#t~ret136| 0)} is VALID [2022-04-28 08:31:11,938 INFO L290 TraceCheckUtils]: 0: Hoare triple {40560#(and (= |old(#length)| |#length|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~4.base, ~irpStack~4.offset;havoc ~devExt~4.base, ~devExt~4.offset;call ~#powerState~0.base, ~#powerState~0.offset := #Ultimate.allocOnStack(4);havoc ~powerType~0;havoc ~tmp~3;call #t~mem123.base, #t~mem123.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~4.base, ~devExt~4.offset := #t~mem123.base, #t~mem123.offset;havoc #t~mem123.base, #t~mem123.offset;call #t~mem124.base, #t~mem124.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~4.base, ~irpStack~4.offset := #t~mem124.base, #t~mem124.offset;havoc #t~mem124.base, #t~mem124.offset;call #t~mem125 := read~int(~irpStack~4.base, 8 + ~irpStack~4.offset, 4);~powerType~0 := #t~mem125;havoc #t~mem125;call #t~mem126 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call #t~mem127 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call write~int(#t~mem126, ~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem127, ~#powerState~0.base, ~#powerState~0.offset, 4);havoc #t~mem126;havoc #t~mem127;call #t~mem128 := read~int(~irpStack~4.base, 1 + ~irpStack~4.offset, 1); {40494#true} is VALID [2022-04-28 08:31:11,939 INFO L290 TraceCheckUtils]: 1: Hoare triple {40494#true} assume 2 == #t~mem128 % 256;havoc #t~mem128; {40494#true} is VALID [2022-04-28 08:31:11,939 INFO L290 TraceCheckUtils]: 2: Hoare triple {40494#true} assume 1 == ~powerType~0;call #t~mem132 := read~int(~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem132, ~devExt~4.base, 48 + ~devExt~4.offset, 4);havoc #t~mem132; {40494#true} is VALID [2022-04-28 08:31:11,939 INFO L290 TraceCheckUtils]: 3: Hoare triple {40494#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {40494#true} is VALID [2022-04-28 08:31:11,939 INFO L290 TraceCheckUtils]: 4: Hoare triple {40494#true} call #t~mem133 := read~int(~Irp.base, 35 + ~Irp.offset, 1);call write~int((if (1 + #t~mem133) % 256 <= 127 then (1 + #t~mem133) % 256 else (1 + #t~mem133) % 256 - 256), ~Irp.base, 35 + ~Irp.offset, 1);havoc #t~mem133;call #t~mem134.base, #t~mem134.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);call write~$Pointer$(#t~mem134.base, 36 + #t~mem134.offset, ~Irp.base, 96 + ~Irp.offset, 4);havoc #t~mem134.base, #t~mem134.offset;call #t~mem135.base, #t~mem135.offset := read~$Pointer$(~devExt~4.base, 8 + ~devExt~4.offset, 4); {40494#true} is VALID [2022-04-28 08:31:11,940 INFO L272 TraceCheckUtils]: 5: Hoare triple {40494#true} call #t~ret136 := PoCallDriver(#t~mem135.base, #t~mem135.offset, ~Irp.base, ~Irp.offset); {40573#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:31:11,940 INFO L290 TraceCheckUtils]: 6: Hoare triple {40573#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet204 && #t~nondet204 <= 2147483647;~__BLAST_NONDET~16 := #t~nondet204;havoc #t~nondet204;havoc ~compRetStatus~1;havoc ~returnVal~0;~lcontext~1.base, ~lcontext~1.offset := 0, 0;havoc ~tmp~12; {40494#true} is VALID [2022-04-28 08:31:11,940 INFO L290 TraceCheckUtils]: 7: Hoare triple {40494#true} assume !(0 != ~compRegistered~0); {40494#true} is VALID [2022-04-28 08:31:11,940 INFO L290 TraceCheckUtils]: 8: Hoare triple {40494#true} assume 0 == ~__BLAST_NONDET~16; {40494#true} is VALID [2022-04-28 08:31:11,940 INFO L290 TraceCheckUtils]: 9: Hoare triple {40494#true} ~returnVal~0 := 0; {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} is VALID [2022-04-28 08:31:11,941 INFO L290 TraceCheckUtils]: 10: Hoare triple {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} assume !(~s~0 == ~NP~0); {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} is VALID [2022-04-28 08:31:11,941 INFO L290 TraceCheckUtils]: 11: Hoare triple {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} assume !(~s~0 == ~MPR1~0); {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} is VALID [2022-04-28 08:31:11,941 INFO L290 TraceCheckUtils]: 12: Hoare triple {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} is VALID [2022-04-28 08:31:11,942 INFO L290 TraceCheckUtils]: 13: Hoare triple {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} #res := ~returnVal~0; {40575#(and (<= |PoCallDriver_#res| 0) (<= 0 |PoCallDriver_#res|))} is VALID [2022-04-28 08:31:11,953 INFO L290 TraceCheckUtils]: 14: Hoare triple {40575#(and (<= |PoCallDriver_#res| 0) (<= 0 |PoCallDriver_#res|))} assume true; {40575#(and (<= |PoCallDriver_#res| 0) (<= 0 |PoCallDriver_#res|))} is VALID [2022-04-28 08:31:11,954 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {40575#(and (<= |PoCallDriver_#res| 0) (<= 0 |PoCallDriver_#res|))} {40494#true} #1268#return; {40571#(= |KbFilter_Power_#t~ret136| 0)} is VALID [2022-04-28 08:31:11,955 INFO L290 TraceCheckUtils]: 16: Hoare triple {40571#(= |KbFilter_Power_#t~ret136| 0)} assume -2147483648 <= #t~ret136 && #t~ret136 <= 2147483647;~tmp~3 := #t~ret136;havoc #t~mem135.base, #t~mem135.offset;havoc #t~ret136;#res := ~tmp~3;call ULTIMATE.dealloc(~#powerState~0.base, ~#powerState~0.offset);havoc ~#powerState~0.base, ~#powerState~0.offset; {40572#(= |KbFilter_Power_#res| 0)} is VALID [2022-04-28 08:31:11,955 INFO L290 TraceCheckUtils]: 17: Hoare triple {40572#(= |KbFilter_Power_#res| 0)} assume true; {40572#(= |KbFilter_Power_#res| 0)} is VALID [2022-04-28 08:31:11,956 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {40572#(= |KbFilter_Power_#res| 0)} {40494#true} #1232#return; {40544#(= 0 |main_#t~ret175|)} is VALID [2022-04-28 08:31:11,959 INFO L272 TraceCheckUtils]: 0: Hoare triple {40494#true} call ULTIMATE.init(); {40546#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:31:11,960 INFO L290 TraceCheckUtils]: 1: Hoare triple {40546#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {40494#true} is VALID [2022-04-28 08:31:11,960 INFO L290 TraceCheckUtils]: 2: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,960 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {40494#true} {40494#true} #1270#return; {40494#true} is VALID [2022-04-28 08:31:11,960 INFO L272 TraceCheckUtils]: 4: Hoare triple {40494#true} call #t~ret213 := main(); {40494#true} is VALID [2022-04-28 08:31:11,960 INFO L290 TraceCheckUtils]: 5: Hoare triple {40494#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {40494#true} is VALID [2022-04-28 08:31:11,961 INFO L272 TraceCheckUtils]: 6: Hoare triple {40494#true} call _BLAST_init(); {40547#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:31:11,961 INFO L290 TraceCheckUtils]: 7: Hoare triple {40547#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {40494#true} is VALID [2022-04-28 08:31:11,961 INFO L290 TraceCheckUtils]: 8: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,961 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {40494#true} {40494#true} #1216#return; {40494#true} is VALID [2022-04-28 08:31:11,962 INFO L272 TraceCheckUtils]: 10: Hoare triple {40494#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {40548#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:31:11,962 INFO L290 TraceCheckUtils]: 11: Hoare triple {40548#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {40494#true} is VALID [2022-04-28 08:31:11,962 INFO L272 TraceCheckUtils]: 12: Hoare triple {40494#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {40494#true} is VALID [2022-04-28 08:31:11,962 INFO L290 TraceCheckUtils]: 13: Hoare triple {40494#true} ~cond := #in~cond; {40494#true} is VALID [2022-04-28 08:31:11,962 INFO L290 TraceCheckUtils]: 14: Hoare triple {40494#true} assume !(0 == ~cond); {40494#true} is VALID [2022-04-28 08:31:11,962 INFO L290 TraceCheckUtils]: 15: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,962 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {40494#true} {40494#true} #1254#return; {40494#true} is VALID [2022-04-28 08:31:11,962 INFO L290 TraceCheckUtils]: 17: Hoare triple {40494#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {40494#true} is VALID [2022-04-28 08:31:11,963 INFO L290 TraceCheckUtils]: 18: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,963 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {40494#true} {40494#true} #1218#return; {40494#true} is VALID [2022-04-28 08:31:11,963 INFO L290 TraceCheckUtils]: 20: Hoare triple {40494#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {40494#true} is VALID [2022-04-28 08:31:11,963 INFO L290 TraceCheckUtils]: 21: Hoare triple {40494#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {40494#true} is VALID [2022-04-28 08:31:11,963 INFO L290 TraceCheckUtils]: 22: Hoare triple {40494#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {40494#true} is VALID [2022-04-28 08:31:11,964 INFO L272 TraceCheckUtils]: 23: Hoare triple {40494#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {40553#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:31:11,964 INFO L290 TraceCheckUtils]: 24: Hoare triple {40553#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {40494#true} is VALID [2022-04-28 08:31:11,965 INFO L272 TraceCheckUtils]: 25: Hoare triple {40494#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {40553#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:31:11,965 INFO L290 TraceCheckUtils]: 26: Hoare triple {40553#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {40494#true} is VALID [2022-04-28 08:31:11,965 INFO L290 TraceCheckUtils]: 27: Hoare triple {40494#true} assume !(0 == ~__BLAST_NONDET~5); {40494#true} is VALID [2022-04-28 08:31:11,965 INFO L290 TraceCheckUtils]: 28: Hoare triple {40494#true} #res := -1073741823; {40494#true} is VALID [2022-04-28 08:31:11,965 INFO L290 TraceCheckUtils]: 29: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,965 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {40494#true} {40494#true} #1176#return; {40494#true} is VALID [2022-04-28 08:31:11,965 INFO L290 TraceCheckUtils]: 31: Hoare triple {40494#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {40494#true} is VALID [2022-04-28 08:31:11,966 INFO L290 TraceCheckUtils]: 32: Hoare triple {40494#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {40494#true} is VALID [2022-04-28 08:31:11,966 INFO L290 TraceCheckUtils]: 33: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,966 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {40494#true} {40494#true} #1220#return; {40494#true} is VALID [2022-04-28 08:31:11,966 INFO L290 TraceCheckUtils]: 35: Hoare triple {40494#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {40494#true} is VALID [2022-04-28 08:31:11,966 INFO L272 TraceCheckUtils]: 36: Hoare triple {40494#true} call stub_driver_init(); {40559#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:31:11,966 INFO L290 TraceCheckUtils]: 37: Hoare triple {40559#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {40494#true} is VALID [2022-04-28 08:31:11,967 INFO L290 TraceCheckUtils]: 38: Hoare triple {40494#true} assume true; {40494#true} is VALID [2022-04-28 08:31:11,967 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {40494#true} {40494#true} #1222#return; {40494#true} is VALID [2022-04-28 08:31:11,967 INFO L290 TraceCheckUtils]: 40: Hoare triple {40494#true} assume !!(~status~5 >= 0); {40494#true} is VALID [2022-04-28 08:31:11,967 INFO L290 TraceCheckUtils]: 41: Hoare triple {40494#true} assume !(0 == ~__BLAST_NONDET~0); {40494#true} is VALID [2022-04-28 08:31:11,967 INFO L290 TraceCheckUtils]: 42: Hoare triple {40494#true} assume !(1 == ~__BLAST_NONDET~0); {40494#true} is VALID [2022-04-28 08:31:11,967 INFO L290 TraceCheckUtils]: 43: Hoare triple {40494#true} assume !(2 == ~__BLAST_NONDET~0); {40494#true} is VALID [2022-04-28 08:31:11,967 INFO L290 TraceCheckUtils]: 44: Hoare triple {40494#true} assume !(3 == ~__BLAST_NONDET~0); {40494#true} is VALID [2022-04-28 08:31:11,967 INFO L290 TraceCheckUtils]: 45: Hoare triple {40494#true} assume 4 == ~__BLAST_NONDET~0; {40494#true} is VALID [2022-04-28 08:31:11,968 INFO L272 TraceCheckUtils]: 46: Hoare triple {40494#true} call #t~ret175 := KbFilter_Power(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {40560#(and (= |old(#length)| |#length|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:31:11,968 INFO L290 TraceCheckUtils]: 47: Hoare triple {40560#(and (= |old(#length)| |#length|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~4.base, ~irpStack~4.offset;havoc ~devExt~4.base, ~devExt~4.offset;call ~#powerState~0.base, ~#powerState~0.offset := #Ultimate.allocOnStack(4);havoc ~powerType~0;havoc ~tmp~3;call #t~mem123.base, #t~mem123.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~4.base, ~devExt~4.offset := #t~mem123.base, #t~mem123.offset;havoc #t~mem123.base, #t~mem123.offset;call #t~mem124.base, #t~mem124.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~4.base, ~irpStack~4.offset := #t~mem124.base, #t~mem124.offset;havoc #t~mem124.base, #t~mem124.offset;call #t~mem125 := read~int(~irpStack~4.base, 8 + ~irpStack~4.offset, 4);~powerType~0 := #t~mem125;havoc #t~mem125;call #t~mem126 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call #t~mem127 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call write~int(#t~mem126, ~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem127, ~#powerState~0.base, ~#powerState~0.offset, 4);havoc #t~mem126;havoc #t~mem127;call #t~mem128 := read~int(~irpStack~4.base, 1 + ~irpStack~4.offset, 1); {40494#true} is VALID [2022-04-28 08:31:11,968 INFO L290 TraceCheckUtils]: 48: Hoare triple {40494#true} assume 2 == #t~mem128 % 256;havoc #t~mem128; {40494#true} is VALID [2022-04-28 08:31:11,968 INFO L290 TraceCheckUtils]: 49: Hoare triple {40494#true} assume 1 == ~powerType~0;call #t~mem132 := read~int(~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem132, ~devExt~4.base, 48 + ~devExt~4.offset, 4);havoc #t~mem132; {40494#true} is VALID [2022-04-28 08:31:11,968 INFO L290 TraceCheckUtils]: 50: Hoare triple {40494#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {40494#true} is VALID [2022-04-28 08:31:11,968 INFO L290 TraceCheckUtils]: 51: Hoare triple {40494#true} call #t~mem133 := read~int(~Irp.base, 35 + ~Irp.offset, 1);call write~int((if (1 + #t~mem133) % 256 <= 127 then (1 + #t~mem133) % 256 else (1 + #t~mem133) % 256 - 256), ~Irp.base, 35 + ~Irp.offset, 1);havoc #t~mem133;call #t~mem134.base, #t~mem134.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);call write~$Pointer$(#t~mem134.base, 36 + #t~mem134.offset, ~Irp.base, 96 + ~Irp.offset, 4);havoc #t~mem134.base, #t~mem134.offset;call #t~mem135.base, #t~mem135.offset := read~$Pointer$(~devExt~4.base, 8 + ~devExt~4.offset, 4); {40494#true} is VALID [2022-04-28 08:31:11,969 INFO L272 TraceCheckUtils]: 52: Hoare triple {40494#true} call #t~ret136 := PoCallDriver(#t~mem135.base, #t~mem135.offset, ~Irp.base, ~Irp.offset); {40573#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:31:11,969 INFO L290 TraceCheckUtils]: 53: Hoare triple {40573#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet204 && #t~nondet204 <= 2147483647;~__BLAST_NONDET~16 := #t~nondet204;havoc #t~nondet204;havoc ~compRetStatus~1;havoc ~returnVal~0;~lcontext~1.base, ~lcontext~1.offset := 0, 0;havoc ~tmp~12; {40494#true} is VALID [2022-04-28 08:31:11,969 INFO L290 TraceCheckUtils]: 54: Hoare triple {40494#true} assume !(0 != ~compRegistered~0); {40494#true} is VALID [2022-04-28 08:31:11,969 INFO L290 TraceCheckUtils]: 55: Hoare triple {40494#true} assume 0 == ~__BLAST_NONDET~16; {40494#true} is VALID [2022-04-28 08:31:11,969 INFO L290 TraceCheckUtils]: 56: Hoare triple {40494#true} ~returnVal~0 := 0; {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} is VALID [2022-04-28 08:31:11,970 INFO L290 TraceCheckUtils]: 57: Hoare triple {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} assume !(~s~0 == ~NP~0); {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} is VALID [2022-04-28 08:31:11,970 INFO L290 TraceCheckUtils]: 58: Hoare triple {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} assume !(~s~0 == ~MPR1~0); {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} is VALID [2022-04-28 08:31:11,970 INFO L290 TraceCheckUtils]: 59: Hoare triple {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} is VALID [2022-04-28 08:31:11,971 INFO L290 TraceCheckUtils]: 60: Hoare triple {40574#(and (<= 0 PoCallDriver_~returnVal~0) (<= PoCallDriver_~returnVal~0 0))} #res := ~returnVal~0; {40575#(and (<= |PoCallDriver_#res| 0) (<= 0 |PoCallDriver_#res|))} is VALID [2022-04-28 08:31:11,971 INFO L290 TraceCheckUtils]: 61: Hoare triple {40575#(and (<= |PoCallDriver_#res| 0) (<= 0 |PoCallDriver_#res|))} assume true; {40575#(and (<= |PoCallDriver_#res| 0) (<= 0 |PoCallDriver_#res|))} is VALID [2022-04-28 08:31:11,972 INFO L284 TraceCheckUtils]: 62: Hoare quadruple {40575#(and (<= |PoCallDriver_#res| 0) (<= 0 |PoCallDriver_#res|))} {40494#true} #1268#return; {40571#(= |KbFilter_Power_#t~ret136| 0)} is VALID [2022-04-28 08:31:11,972 INFO L290 TraceCheckUtils]: 63: Hoare triple {40571#(= |KbFilter_Power_#t~ret136| 0)} assume -2147483648 <= #t~ret136 && #t~ret136 <= 2147483647;~tmp~3 := #t~ret136;havoc #t~mem135.base, #t~mem135.offset;havoc #t~ret136;#res := ~tmp~3;call ULTIMATE.dealloc(~#powerState~0.base, ~#powerState~0.offset);havoc ~#powerState~0.base, ~#powerState~0.offset; {40572#(= |KbFilter_Power_#res| 0)} is VALID [2022-04-28 08:31:11,973 INFO L290 TraceCheckUtils]: 64: Hoare triple {40572#(= |KbFilter_Power_#res| 0)} assume true; {40572#(= |KbFilter_Power_#res| 0)} is VALID [2022-04-28 08:31:11,973 INFO L284 TraceCheckUtils]: 65: Hoare quadruple {40572#(= |KbFilter_Power_#res| 0)} {40494#true} #1232#return; {40544#(= 0 |main_#t~ret175|)} is VALID [2022-04-28 08:31:11,974 INFO L290 TraceCheckUtils]: 66: Hoare triple {40544#(= 0 |main_#t~ret175|)} assume -2147483648 <= #t~ret175 && #t~ret175 <= 2147483647;~status~5 := #t~ret175;havoc #t~ret175; {40545#(= main_~status~5 0)} is VALID [2022-04-28 08:31:11,974 INFO L290 TraceCheckUtils]: 67: Hoare triple {40545#(= main_~status~5 0)} assume 0 != ~we_should_unload~0; {40545#(= main_~status~5 0)} is VALID [2022-04-28 08:31:11,974 INFO L290 TraceCheckUtils]: 68: Hoare triple {40545#(= main_~status~5 0)} assume !(1 == ~pended~0); {40545#(= main_~status~5 0)} is VALID [2022-04-28 08:31:11,974 INFO L290 TraceCheckUtils]: 69: Hoare triple {40545#(= main_~status~5 0)} assume !(1 == ~pended~0); {40545#(= main_~status~5 0)} is VALID [2022-04-28 08:31:11,975 INFO L290 TraceCheckUtils]: 70: Hoare triple {40545#(= main_~status~5 0)} assume !(~s~0 == ~UNLOADED~0); {40545#(= main_~status~5 0)} is VALID [2022-04-28 08:31:11,975 INFO L290 TraceCheckUtils]: 71: Hoare triple {40545#(= main_~status~5 0)} assume !(-1 == ~status~5); {40545#(= main_~status~5 0)} is VALID [2022-04-28 08:31:11,975 INFO L290 TraceCheckUtils]: 72: Hoare triple {40545#(= main_~status~5 0)} assume !(~s~0 != ~SKIP2~0); {40545#(= main_~status~5 0)} is VALID [2022-04-28 08:31:11,975 INFO L290 TraceCheckUtils]: 73: Hoare triple {40545#(= main_~status~5 0)} assume !(1 == ~pended~0); {40545#(= main_~status~5 0)} is VALID [2022-04-28 08:31:11,976 INFO L290 TraceCheckUtils]: 74: Hoare triple {40545#(= main_~status~5 0)} assume ~s~0 == ~DC~0; {40545#(= main_~status~5 0)} is VALID [2022-04-28 08:31:11,976 INFO L290 TraceCheckUtils]: 75: Hoare triple {40545#(= main_~status~5 0)} assume 259 == ~status~5; {40495#false} is VALID [2022-04-28 08:31:11,976 INFO L272 TraceCheckUtils]: 76: Hoare triple {40495#false} call errorFn(); {40495#false} is VALID [2022-04-28 08:31:11,976 INFO L290 TraceCheckUtils]: 77: Hoare triple {40495#false} assume !false; {40495#false} is VALID [2022-04-28 08:31:11,976 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:31:11,976 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:31:11,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [336478397] [2022-04-28 08:31:11,976 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [336478397] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:31:11,977 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:31:11,977 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 08:31:11,977 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:31:11,977 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [230506098] [2022-04-28 08:31:11,977 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [230506098] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:31:11,977 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:31:11,977 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 08:31:11,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [320691067] [2022-04-28 08:31:11,977 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:31:11,977 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 3.8666666666666667) internal successors, (58), 6 states have internal predecessors, (58), 2 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 1 states have call successors, (9) Word has length 78 [2022-04-28 08:31:11,978 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:31:11,978 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 3.8666666666666667) internal successors, (58), 6 states have internal predecessors, (58), 2 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 1 states have call successors, (9) [2022-04-28 08:31:12,040 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 78 edges. 78 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:31:12,040 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-28 08:31:12,040 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:31:12,040 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-28 08:31:12,040 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=173, Unknown=0, NotChecked=0, Total=210 [2022-04-28 08:31:12,041 INFO L87 Difference]: Start difference. First operand 335 states and 429 transitions. Second operand has 15 states, 15 states have (on average 3.8666666666666667) internal successors, (58), 6 states have internal predecessors, (58), 2 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 1 states have call successors, (9) [2022-04-28 08:31:17,013 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:31:19,035 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:31:21,051 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:31:23,067 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:31:25,086 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:31:27,109 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:31:29,134 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:31:31,153 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:31:33,174 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:31:45,120 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:31:45,120 INFO L93 Difference]: Finished difference Result 398 states and 505 transitions. [2022-04-28 08:31:45,120 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-04-28 08:31:45,120 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 3.8666666666666667) internal successors, (58), 6 states have internal predecessors, (58), 2 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 1 states have call successors, (9) Word has length 78 [2022-04-28 08:31:45,120 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:31:45,120 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 3.8666666666666667) internal successors, (58), 6 states have internal predecessors, (58), 2 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 1 states have call successors, (9) [2022-04-28 08:31:45,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 444 transitions. [2022-04-28 08:31:45,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 3.8666666666666667) internal successors, (58), 6 states have internal predecessors, (58), 2 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 1 states have call successors, (9) [2022-04-28 08:31:45,125 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 444 transitions. [2022-04-28 08:31:45,125 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 16 states and 444 transitions. [2022-04-28 08:31:45,545 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 444 edges. 444 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:31:45,551 INFO L225 Difference]: With dead ends: 398 [2022-04-28 08:31:45,551 INFO L226 Difference]: Without dead ends: 354 [2022-04-28 08:31:45,552 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=79, Invalid=301, Unknown=0, NotChecked=0, Total=380 [2022-04-28 08:31:45,553 INFO L413 NwaCegarLoop]: 269 mSDtfsCounter, 732 mSDsluCounter, 713 mSDsCounter, 0 mSdLazyCounter, 2499 mSolverCounterSat, 247 mSolverCounterUnsat, 9 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 24.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 736 SdHoareTripleChecker+Valid, 982 SdHoareTripleChecker+Invalid, 2755 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 247 IncrementalHoareTripleChecker+Valid, 2499 IncrementalHoareTripleChecker+Invalid, 9 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 24.2s IncrementalHoareTripleChecker+Time [2022-04-28 08:31:45,553 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [736 Valid, 982 Invalid, 2755 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [247 Valid, 2499 Invalid, 9 Unknown, 0 Unchecked, 24.2s Time] [2022-04-28 08:31:45,554 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 354 states. [2022-04-28 08:31:46,028 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 354 to 334. [2022-04-28 08:31:46,029 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:31:46,029 INFO L82 GeneralOperation]: Start isEquivalent. First operand 354 states. Second operand has 334 states, 266 states have (on average 1.330827067669173) internal successors, (354), 270 states have internal predecessors, (354), 37 states have call successors, (37), 29 states have call predecessors, (37), 30 states have return successors, (36), 34 states have call predecessors, (36), 32 states have call successors, (36) [2022-04-28 08:31:46,029 INFO L74 IsIncluded]: Start isIncluded. First operand 354 states. Second operand has 334 states, 266 states have (on average 1.330827067669173) internal successors, (354), 270 states have internal predecessors, (354), 37 states have call successors, (37), 29 states have call predecessors, (37), 30 states have return successors, (36), 34 states have call predecessors, (36), 32 states have call successors, (36) [2022-04-28 08:31:46,030 INFO L87 Difference]: Start difference. First operand 354 states. Second operand has 334 states, 266 states have (on average 1.330827067669173) internal successors, (354), 270 states have internal predecessors, (354), 37 states have call successors, (37), 29 states have call predecessors, (37), 30 states have return successors, (36), 34 states have call predecessors, (36), 32 states have call successors, (36) [2022-04-28 08:31:46,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:31:46,035 INFO L93 Difference]: Finished difference Result 354 states and 454 transitions. [2022-04-28 08:31:46,035 INFO L276 IsEmpty]: Start isEmpty. Operand 354 states and 454 transitions. [2022-04-28 08:31:46,035 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:31:46,035 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:31:46,036 INFO L74 IsIncluded]: Start isIncluded. First operand has 334 states, 266 states have (on average 1.330827067669173) internal successors, (354), 270 states have internal predecessors, (354), 37 states have call successors, (37), 29 states have call predecessors, (37), 30 states have return successors, (36), 34 states have call predecessors, (36), 32 states have call successors, (36) Second operand 354 states. [2022-04-28 08:31:46,036 INFO L87 Difference]: Start difference. First operand has 334 states, 266 states have (on average 1.330827067669173) internal successors, (354), 270 states have internal predecessors, (354), 37 states have call successors, (37), 29 states have call predecessors, (37), 30 states have return successors, (36), 34 states have call predecessors, (36), 32 states have call successors, (36) Second operand 354 states. [2022-04-28 08:31:46,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:31:46,041 INFO L93 Difference]: Finished difference Result 354 states and 454 transitions. [2022-04-28 08:31:46,041 INFO L276 IsEmpty]: Start isEmpty. Operand 354 states and 454 transitions. [2022-04-28 08:31:46,041 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:31:46,041 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:31:46,041 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:31:46,041 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:31:46,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 334 states, 266 states have (on average 1.330827067669173) internal successors, (354), 270 states have internal predecessors, (354), 37 states have call successors, (37), 29 states have call predecessors, (37), 30 states have return successors, (36), 34 states have call predecessors, (36), 32 states have call successors, (36) [2022-04-28 08:31:46,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 334 states to 334 states and 427 transitions. [2022-04-28 08:31:46,048 INFO L78 Accepts]: Start accepts. Automaton has 334 states and 427 transitions. Word has length 78 [2022-04-28 08:31:46,048 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:31:46,048 INFO L495 AbstractCegarLoop]: Abstraction has 334 states and 427 transitions. [2022-04-28 08:31:46,048 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 3.8666666666666667) internal successors, (58), 6 states have internal predecessors, (58), 2 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 1 states have call successors, (9) [2022-04-28 08:31:46,048 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 334 states and 427 transitions. [2022-04-28 08:31:46,745 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 427 edges. 427 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:31:46,746 INFO L276 IsEmpty]: Start isEmpty. Operand 334 states and 427 transitions. [2022-04-28 08:31:46,759 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-04-28 08:31:46,759 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:31:46,759 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:31:46,759 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-04-28 08:31:46,759 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:31:46,760 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:31:46,760 INFO L85 PathProgramCache]: Analyzing trace with hash -1889602735, now seen corresponding path program 1 times [2022-04-28 08:31:46,760 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:31:46,760 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [65070465] [2022-04-28 08:31:46,760 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:31:46,760 INFO L85 PathProgramCache]: Analyzing trace with hash -1889602735, now seen corresponding path program 2 times [2022-04-28 08:31:46,760 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:31:46,760 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1329960161] [2022-04-28 08:31:46,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:31:46,760 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:31:46,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:46,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:31:46,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:46,898 INFO L290 TraceCheckUtils]: 0: Hoare triple {42816#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {42762#true} is VALID [2022-04-28 08:31:46,898 INFO L290 TraceCheckUtils]: 1: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:46,898 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {42762#true} {42762#true} #1270#return; {42762#true} is VALID [2022-04-28 08:31:46,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:31:46,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:46,936 INFO L290 TraceCheckUtils]: 0: Hoare triple {42817#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {42762#true} is VALID [2022-04-28 08:31:46,936 INFO L290 TraceCheckUtils]: 1: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:46,936 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {42762#true} {42762#true} #1216#return; {42762#true} is VALID [2022-04-28 08:31:46,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:31:46,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:46,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:31:46,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:46,962 INFO L290 TraceCheckUtils]: 0: Hoare triple {42762#true} ~cond := #in~cond; {42762#true} is VALID [2022-04-28 08:31:46,962 INFO L290 TraceCheckUtils]: 1: Hoare triple {42762#true} assume !(0 == ~cond); {42762#true} is VALID [2022-04-28 08:31:46,962 INFO L290 TraceCheckUtils]: 2: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:46,962 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {42762#true} {42762#true} #1254#return; {42762#true} is VALID [2022-04-28 08:31:46,962 INFO L290 TraceCheckUtils]: 0: Hoare triple {42818#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {42762#true} is VALID [2022-04-28 08:31:46,962 INFO L272 TraceCheckUtils]: 1: Hoare triple {42762#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {42762#true} is VALID [2022-04-28 08:31:46,963 INFO L290 TraceCheckUtils]: 2: Hoare triple {42762#true} ~cond := #in~cond; {42762#true} is VALID [2022-04-28 08:31:46,963 INFO L290 TraceCheckUtils]: 3: Hoare triple {42762#true} assume !(0 == ~cond); {42762#true} is VALID [2022-04-28 08:31:46,963 INFO L290 TraceCheckUtils]: 4: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:46,963 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {42762#true} {42762#true} #1254#return; {42762#true} is VALID [2022-04-28 08:31:46,963 INFO L290 TraceCheckUtils]: 6: Hoare triple {42762#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {42762#true} is VALID [2022-04-28 08:31:46,963 INFO L290 TraceCheckUtils]: 7: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:46,963 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {42762#true} {42762#true} #1218#return; {42762#true} is VALID [2022-04-28 08:31:46,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:31:46,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:46,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:31:46,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:46,984 INFO L290 TraceCheckUtils]: 0: Hoare triple {42823#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {42762#true} is VALID [2022-04-28 08:31:46,985 INFO L290 TraceCheckUtils]: 1: Hoare triple {42762#true} assume !(0 == ~__BLAST_NONDET~5); {42762#true} is VALID [2022-04-28 08:31:46,985 INFO L290 TraceCheckUtils]: 2: Hoare triple {42762#true} #res := -1073741823; {42762#true} is VALID [2022-04-28 08:31:46,985 INFO L290 TraceCheckUtils]: 3: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:46,985 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {42762#true} {42762#true} #1176#return; {42762#true} is VALID [2022-04-28 08:31:46,985 INFO L290 TraceCheckUtils]: 0: Hoare triple {42823#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {42762#true} is VALID [2022-04-28 08:31:46,986 INFO L272 TraceCheckUtils]: 1: Hoare triple {42762#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {42823#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:31:46,986 INFO L290 TraceCheckUtils]: 2: Hoare triple {42823#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {42762#true} is VALID [2022-04-28 08:31:46,986 INFO L290 TraceCheckUtils]: 3: Hoare triple {42762#true} assume !(0 == ~__BLAST_NONDET~5); {42762#true} is VALID [2022-04-28 08:31:46,986 INFO L290 TraceCheckUtils]: 4: Hoare triple {42762#true} #res := -1073741823; {42762#true} is VALID [2022-04-28 08:31:46,986 INFO L290 TraceCheckUtils]: 5: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:46,986 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {42762#true} {42762#true} #1176#return; {42762#true} is VALID [2022-04-28 08:31:46,986 INFO L290 TraceCheckUtils]: 7: Hoare triple {42762#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {42762#true} is VALID [2022-04-28 08:31:46,987 INFO L290 TraceCheckUtils]: 8: Hoare triple {42762#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {42762#true} is VALID [2022-04-28 08:31:46,987 INFO L290 TraceCheckUtils]: 9: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:46,987 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {42762#true} {42762#true} #1220#return; {42762#true} is VALID [2022-04-28 08:31:47,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:31:47,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:47,004 INFO L290 TraceCheckUtils]: 0: Hoare triple {42829#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {42762#true} is VALID [2022-04-28 08:31:47,004 INFO L290 TraceCheckUtils]: 1: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:47,005 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {42762#true} {42762#true} #1222#return; {42762#true} is VALID [2022-04-28 08:31:47,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-04-28 08:31:47,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:47,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:31:47,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:31:47,150 INFO L290 TraceCheckUtils]: 0: Hoare triple {42844#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {42762#true} is VALID [2022-04-28 08:31:47,150 INFO L290 TraceCheckUtils]: 1: Hoare triple {42762#true} assume !(0 != ~compRegistered~0); {42762#true} is VALID [2022-04-28 08:31:47,150 INFO L290 TraceCheckUtils]: 2: Hoare triple {42762#true} assume 0 == ~__BLAST_NONDET~11; {42762#true} is VALID [2022-04-28 08:31:47,151 INFO L290 TraceCheckUtils]: 3: Hoare triple {42762#true} ~returnVal2~0 := 0; {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:31:47,151 INFO L290 TraceCheckUtils]: 4: Hoare triple {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:31:47,151 INFO L290 TraceCheckUtils]: 5: Hoare triple {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:31:47,152 INFO L290 TraceCheckUtils]: 6: Hoare triple {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:31:47,152 INFO L290 TraceCheckUtils]: 7: Hoare triple {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {42846#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:31:47,152 INFO L290 TraceCheckUtils]: 8: Hoare triple {42846#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {42846#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:31:47,153 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {42846#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {42762#true} #1200#return; {42841#(= |KbFilter_PnP_#t~ret114| 0)} is VALID [2022-04-28 08:31:47,153 INFO L290 TraceCheckUtils]: 0: Hoare triple {42830#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {42762#true} is VALID [2022-04-28 08:31:47,153 INFO L290 TraceCheckUtils]: 1: Hoare triple {42762#true} assume !(0 == #t~mem81 % 256);havoc #t~mem81;call #t~mem82 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {42762#true} is VALID [2022-04-28 08:31:47,153 INFO L290 TraceCheckUtils]: 2: Hoare triple {42762#true} assume 23 == #t~mem82 % 256;havoc #t~mem82; {42762#true} is VALID [2022-04-28 08:31:47,154 INFO L290 TraceCheckUtils]: 3: Hoare triple {42762#true} call write~int(1, ~devExt~3.base, 53 + ~devExt~3.offset, 1); {42762#true} is VALID [2022-04-28 08:31:47,154 INFO L290 TraceCheckUtils]: 4: Hoare triple {42762#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {42762#true} is VALID [2022-04-28 08:31:47,154 INFO L290 TraceCheckUtils]: 5: Hoare triple {42762#true} call #t~mem111 := read~int(~Irp.base, 35 + ~Irp.offset, 1);call write~int((if (1 + #t~mem111) % 256 <= 127 then (1 + #t~mem111) % 256 else (1 + #t~mem111) % 256 - 256), ~Irp.base, 35 + ~Irp.offset, 1);havoc #t~mem111;call #t~mem112.base, #t~mem112.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);call write~$Pointer$(#t~mem112.base, 36 + #t~mem112.offset, ~Irp.base, 96 + ~Irp.offset, 4);havoc #t~mem112.base, #t~mem112.offset;call #t~mem113.base, #t~mem113.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {42762#true} is VALID [2022-04-28 08:31:47,154 INFO L272 TraceCheckUtils]: 6: Hoare triple {42762#true} call #t~ret114 := IofCallDriver(#t~mem113.base, #t~mem113.offset, ~Irp.base, ~Irp.offset); {42844#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:31:47,155 INFO L290 TraceCheckUtils]: 7: Hoare triple {42844#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {42762#true} is VALID [2022-04-28 08:31:47,155 INFO L290 TraceCheckUtils]: 8: Hoare triple {42762#true} assume !(0 != ~compRegistered~0); {42762#true} is VALID [2022-04-28 08:31:47,155 INFO L290 TraceCheckUtils]: 9: Hoare triple {42762#true} assume 0 == ~__BLAST_NONDET~11; {42762#true} is VALID [2022-04-28 08:31:47,155 INFO L290 TraceCheckUtils]: 10: Hoare triple {42762#true} ~returnVal2~0 := 0; {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:31:47,155 INFO L290 TraceCheckUtils]: 11: Hoare triple {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:31:47,156 INFO L290 TraceCheckUtils]: 12: Hoare triple {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:31:47,156 INFO L290 TraceCheckUtils]: 13: Hoare triple {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:31:47,156 INFO L290 TraceCheckUtils]: 14: Hoare triple {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {42846#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:31:47,157 INFO L290 TraceCheckUtils]: 15: Hoare triple {42846#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {42846#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:31:47,158 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {42846#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {42762#true} #1200#return; {42841#(= |KbFilter_PnP_#t~ret114| 0)} is VALID [2022-04-28 08:31:47,158 INFO L290 TraceCheckUtils]: 17: Hoare triple {42841#(= |KbFilter_PnP_#t~ret114| 0)} assume -2147483648 <= #t~ret114 && #t~ret114 <= 2147483647;~status~3 := #t~ret114;havoc #t~mem113.base, #t~mem113.offset;havoc #t~ret114; {42842#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:31:47,158 INFO L290 TraceCheckUtils]: 18: Hoare triple {42842#(= KbFilter_PnP_~status~3 0)} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {42843#(= |KbFilter_PnP_#res| 0)} is VALID [2022-04-28 08:31:47,159 INFO L290 TraceCheckUtils]: 19: Hoare triple {42843#(= |KbFilter_PnP_#res| 0)} assume true; {42843#(= |KbFilter_PnP_#res| 0)} is VALID [2022-04-28 08:31:47,159 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {42843#(= |KbFilter_PnP_#res| 0)} {42762#true} #1230#return; {42814#(= 0 |main_#t~ret174|)} is VALID [2022-04-28 08:31:47,160 INFO L272 TraceCheckUtils]: 0: Hoare triple {42762#true} call ULTIMATE.init(); {42816#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:31:47,161 INFO L290 TraceCheckUtils]: 1: Hoare triple {42816#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {42762#true} is VALID [2022-04-28 08:31:47,161 INFO L290 TraceCheckUtils]: 2: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:47,161 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {42762#true} {42762#true} #1270#return; {42762#true} is VALID [2022-04-28 08:31:47,161 INFO L272 TraceCheckUtils]: 4: Hoare triple {42762#true} call #t~ret213 := main(); {42762#true} is VALID [2022-04-28 08:31:47,161 INFO L290 TraceCheckUtils]: 5: Hoare triple {42762#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {42762#true} is VALID [2022-04-28 08:31:47,162 INFO L272 TraceCheckUtils]: 6: Hoare triple {42762#true} call _BLAST_init(); {42817#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:31:47,162 INFO L290 TraceCheckUtils]: 7: Hoare triple {42817#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {42762#true} is VALID [2022-04-28 08:31:47,162 INFO L290 TraceCheckUtils]: 8: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:47,162 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {42762#true} {42762#true} #1216#return; {42762#true} is VALID [2022-04-28 08:31:47,163 INFO L272 TraceCheckUtils]: 10: Hoare triple {42762#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {42818#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:31:47,163 INFO L290 TraceCheckUtils]: 11: Hoare triple {42818#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {42762#true} is VALID [2022-04-28 08:31:47,163 INFO L272 TraceCheckUtils]: 12: Hoare triple {42762#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {42762#true} is VALID [2022-04-28 08:31:47,163 INFO L290 TraceCheckUtils]: 13: Hoare triple {42762#true} ~cond := #in~cond; {42762#true} is VALID [2022-04-28 08:31:47,163 INFO L290 TraceCheckUtils]: 14: Hoare triple {42762#true} assume !(0 == ~cond); {42762#true} is VALID [2022-04-28 08:31:47,163 INFO L290 TraceCheckUtils]: 15: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:47,163 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {42762#true} {42762#true} #1254#return; {42762#true} is VALID [2022-04-28 08:31:47,163 INFO L290 TraceCheckUtils]: 17: Hoare triple {42762#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {42762#true} is VALID [2022-04-28 08:31:47,163 INFO L290 TraceCheckUtils]: 18: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:47,163 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {42762#true} {42762#true} #1218#return; {42762#true} is VALID [2022-04-28 08:31:47,163 INFO L290 TraceCheckUtils]: 20: Hoare triple {42762#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {42762#true} is VALID [2022-04-28 08:31:47,164 INFO L290 TraceCheckUtils]: 21: Hoare triple {42762#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {42762#true} is VALID [2022-04-28 08:31:47,164 INFO L290 TraceCheckUtils]: 22: Hoare triple {42762#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {42762#true} is VALID [2022-04-28 08:31:47,164 INFO L272 TraceCheckUtils]: 23: Hoare triple {42762#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {42823#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:31:47,164 INFO L290 TraceCheckUtils]: 24: Hoare triple {42823#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {42762#true} is VALID [2022-04-28 08:31:47,166 INFO L272 TraceCheckUtils]: 25: Hoare triple {42762#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {42823#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:31:47,166 INFO L290 TraceCheckUtils]: 26: Hoare triple {42823#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {42762#true} is VALID [2022-04-28 08:31:47,166 INFO L290 TraceCheckUtils]: 27: Hoare triple {42762#true} assume !(0 == ~__BLAST_NONDET~5); {42762#true} is VALID [2022-04-28 08:31:47,166 INFO L290 TraceCheckUtils]: 28: Hoare triple {42762#true} #res := -1073741823; {42762#true} is VALID [2022-04-28 08:31:47,166 INFO L290 TraceCheckUtils]: 29: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:47,166 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {42762#true} {42762#true} #1176#return; {42762#true} is VALID [2022-04-28 08:31:47,166 INFO L290 TraceCheckUtils]: 31: Hoare triple {42762#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {42762#true} is VALID [2022-04-28 08:31:47,166 INFO L290 TraceCheckUtils]: 32: Hoare triple {42762#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {42762#true} is VALID [2022-04-28 08:31:47,166 INFO L290 TraceCheckUtils]: 33: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:47,166 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {42762#true} {42762#true} #1220#return; {42762#true} is VALID [2022-04-28 08:31:47,166 INFO L290 TraceCheckUtils]: 35: Hoare triple {42762#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {42762#true} is VALID [2022-04-28 08:31:47,167 INFO L272 TraceCheckUtils]: 36: Hoare triple {42762#true} call stub_driver_init(); {42829#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:31:47,167 INFO L290 TraceCheckUtils]: 37: Hoare triple {42829#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {42762#true} is VALID [2022-04-28 08:31:47,167 INFO L290 TraceCheckUtils]: 38: Hoare triple {42762#true} assume true; {42762#true} is VALID [2022-04-28 08:31:47,167 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {42762#true} {42762#true} #1222#return; {42762#true} is VALID [2022-04-28 08:31:47,167 INFO L290 TraceCheckUtils]: 40: Hoare triple {42762#true} assume !!(~status~5 >= 0); {42762#true} is VALID [2022-04-28 08:31:47,167 INFO L290 TraceCheckUtils]: 41: Hoare triple {42762#true} assume !(0 == ~__BLAST_NONDET~0); {42762#true} is VALID [2022-04-28 08:31:47,167 INFO L290 TraceCheckUtils]: 42: Hoare triple {42762#true} assume !(1 == ~__BLAST_NONDET~0); {42762#true} is VALID [2022-04-28 08:31:47,167 INFO L290 TraceCheckUtils]: 43: Hoare triple {42762#true} assume !(2 == ~__BLAST_NONDET~0); {42762#true} is VALID [2022-04-28 08:31:47,167 INFO L290 TraceCheckUtils]: 44: Hoare triple {42762#true} assume 3 == ~__BLAST_NONDET~0; {42762#true} is VALID [2022-04-28 08:31:47,169 INFO L272 TraceCheckUtils]: 45: Hoare triple {42762#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {42830#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:31:47,169 INFO L290 TraceCheckUtils]: 46: Hoare triple {42830#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {42762#true} is VALID [2022-04-28 08:31:47,169 INFO L290 TraceCheckUtils]: 47: Hoare triple {42762#true} assume !(0 == #t~mem81 % 256);havoc #t~mem81;call #t~mem82 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {42762#true} is VALID [2022-04-28 08:31:47,169 INFO L290 TraceCheckUtils]: 48: Hoare triple {42762#true} assume 23 == #t~mem82 % 256;havoc #t~mem82; {42762#true} is VALID [2022-04-28 08:31:47,169 INFO L290 TraceCheckUtils]: 49: Hoare triple {42762#true} call write~int(1, ~devExt~3.base, 53 + ~devExt~3.offset, 1); {42762#true} is VALID [2022-04-28 08:31:47,169 INFO L290 TraceCheckUtils]: 50: Hoare triple {42762#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {42762#true} is VALID [2022-04-28 08:31:47,169 INFO L290 TraceCheckUtils]: 51: Hoare triple {42762#true} call #t~mem111 := read~int(~Irp.base, 35 + ~Irp.offset, 1);call write~int((if (1 + #t~mem111) % 256 <= 127 then (1 + #t~mem111) % 256 else (1 + #t~mem111) % 256 - 256), ~Irp.base, 35 + ~Irp.offset, 1);havoc #t~mem111;call #t~mem112.base, #t~mem112.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);call write~$Pointer$(#t~mem112.base, 36 + #t~mem112.offset, ~Irp.base, 96 + ~Irp.offset, 4);havoc #t~mem112.base, #t~mem112.offset;call #t~mem113.base, #t~mem113.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {42762#true} is VALID [2022-04-28 08:31:47,170 INFO L272 TraceCheckUtils]: 52: Hoare triple {42762#true} call #t~ret114 := IofCallDriver(#t~mem113.base, #t~mem113.offset, ~Irp.base, ~Irp.offset); {42844#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:31:47,170 INFO L290 TraceCheckUtils]: 53: Hoare triple {42844#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {42762#true} is VALID [2022-04-28 08:31:47,170 INFO L290 TraceCheckUtils]: 54: Hoare triple {42762#true} assume !(0 != ~compRegistered~0); {42762#true} is VALID [2022-04-28 08:31:47,170 INFO L290 TraceCheckUtils]: 55: Hoare triple {42762#true} assume 0 == ~__BLAST_NONDET~11; {42762#true} is VALID [2022-04-28 08:31:47,170 INFO L290 TraceCheckUtils]: 56: Hoare triple {42762#true} ~returnVal2~0 := 0; {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:31:47,171 INFO L290 TraceCheckUtils]: 57: Hoare triple {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:31:47,171 INFO L290 TraceCheckUtils]: 58: Hoare triple {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:31:47,171 INFO L290 TraceCheckUtils]: 59: Hoare triple {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:31:47,172 INFO L290 TraceCheckUtils]: 60: Hoare triple {42845#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {42846#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:31:47,172 INFO L290 TraceCheckUtils]: 61: Hoare triple {42846#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {42846#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:31:47,173 INFO L284 TraceCheckUtils]: 62: Hoare quadruple {42846#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {42762#true} #1200#return; {42841#(= |KbFilter_PnP_#t~ret114| 0)} is VALID [2022-04-28 08:31:47,173 INFO L290 TraceCheckUtils]: 63: Hoare triple {42841#(= |KbFilter_PnP_#t~ret114| 0)} assume -2147483648 <= #t~ret114 && #t~ret114 <= 2147483647;~status~3 := #t~ret114;havoc #t~mem113.base, #t~mem113.offset;havoc #t~ret114; {42842#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:31:47,173 INFO L290 TraceCheckUtils]: 64: Hoare triple {42842#(= KbFilter_PnP_~status~3 0)} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {42843#(= |KbFilter_PnP_#res| 0)} is VALID [2022-04-28 08:31:47,174 INFO L290 TraceCheckUtils]: 65: Hoare triple {42843#(= |KbFilter_PnP_#res| 0)} assume true; {42843#(= |KbFilter_PnP_#res| 0)} is VALID [2022-04-28 08:31:47,174 INFO L284 TraceCheckUtils]: 66: Hoare quadruple {42843#(= |KbFilter_PnP_#res| 0)} {42762#true} #1230#return; {42814#(= 0 |main_#t~ret174|)} is VALID [2022-04-28 08:31:47,175 INFO L290 TraceCheckUtils]: 67: Hoare triple {42814#(= 0 |main_#t~ret174|)} assume -2147483648 <= #t~ret174 && #t~ret174 <= 2147483647;~status~5 := #t~ret174;havoc #t~ret174; {42815#(= main_~status~5 0)} is VALID [2022-04-28 08:31:47,175 INFO L290 TraceCheckUtils]: 68: Hoare triple {42815#(= main_~status~5 0)} assume 0 != ~we_should_unload~0; {42815#(= main_~status~5 0)} is VALID [2022-04-28 08:31:47,175 INFO L290 TraceCheckUtils]: 69: Hoare triple {42815#(= main_~status~5 0)} assume !(1 == ~pended~0); {42815#(= main_~status~5 0)} is VALID [2022-04-28 08:31:47,176 INFO L290 TraceCheckUtils]: 70: Hoare triple {42815#(= main_~status~5 0)} assume !(1 == ~pended~0); {42815#(= main_~status~5 0)} is VALID [2022-04-28 08:31:47,176 INFO L290 TraceCheckUtils]: 71: Hoare triple {42815#(= main_~status~5 0)} assume !(~s~0 == ~UNLOADED~0); {42815#(= main_~status~5 0)} is VALID [2022-04-28 08:31:47,176 INFO L290 TraceCheckUtils]: 72: Hoare triple {42815#(= main_~status~5 0)} assume !(-1 == ~status~5); {42815#(= main_~status~5 0)} is VALID [2022-04-28 08:31:47,176 INFO L290 TraceCheckUtils]: 73: Hoare triple {42815#(= main_~status~5 0)} assume !(~s~0 != ~SKIP2~0); {42815#(= main_~status~5 0)} is VALID [2022-04-28 08:31:47,177 INFO L290 TraceCheckUtils]: 74: Hoare triple {42815#(= main_~status~5 0)} assume !(1 == ~pended~0); {42815#(= main_~status~5 0)} is VALID [2022-04-28 08:31:47,177 INFO L290 TraceCheckUtils]: 75: Hoare triple {42815#(= main_~status~5 0)} assume ~s~0 == ~DC~0; {42815#(= main_~status~5 0)} is VALID [2022-04-28 08:31:47,177 INFO L290 TraceCheckUtils]: 76: Hoare triple {42815#(= main_~status~5 0)} assume 259 == ~status~5; {42763#false} is VALID [2022-04-28 08:31:47,177 INFO L272 TraceCheckUtils]: 77: Hoare triple {42763#false} call errorFn(); {42763#false} is VALID [2022-04-28 08:31:47,177 INFO L290 TraceCheckUtils]: 78: Hoare triple {42763#false} assume !false; {42763#false} is VALID [2022-04-28 08:31:47,178 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:31:47,178 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:31:47,178 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1329960161] [2022-04-28 08:31:47,178 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1329960161] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:31:47,178 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:31:47,178 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [16] imperfect sequences [] total 16 [2022-04-28 08:31:47,178 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:31:47,178 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [65070465] [2022-04-28 08:31:47,178 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [65070465] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:31:47,178 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:31:47,178 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [16] imperfect sequences [] total 16 [2022-04-28 08:31:47,179 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [800018055] [2022-04-28 08:31:47,179 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:31:47,179 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 3.6875) internal successors, (59), 7 states have internal predecessors, (59), 2 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 1 states have call successors, (9) Word has length 79 [2022-04-28 08:31:47,179 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:31:47,179 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 16 states, 16 states have (on average 3.6875) internal successors, (59), 7 states have internal predecessors, (59), 2 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 1 states have call successors, (9) [2022-04-28 08:31:47,247 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 79 edges. 79 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:31:47,247 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-04-28 08:31:47,247 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:31:47,247 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-04-28 08:31:47,248 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-04-28 08:31:47,248 INFO L87 Difference]: Start difference. First operand 334 states and 427 transitions. Second operand has 16 states, 16 states have (on average 3.6875) internal successors, (59), 7 states have internal predecessors, (59), 2 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 1 states have call successors, (9) [2022-04-28 08:31:49,404 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:32:04,769 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:32:04,769 INFO L93 Difference]: Finished difference Result 475 states and 607 transitions. [2022-04-28 08:32:04,769 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-04-28 08:32:04,783 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 3.6875) internal successors, (59), 7 states have internal predecessors, (59), 2 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 1 states have call successors, (9) Word has length 79 [2022-04-28 08:32:04,783 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:32:04,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 16 states have (on average 3.6875) internal successors, (59), 7 states have internal predecessors, (59), 2 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 1 states have call successors, (9) [2022-04-28 08:32:04,786 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 510 transitions. [2022-04-28 08:32:04,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 16 states have (on average 3.6875) internal successors, (59), 7 states have internal predecessors, (59), 2 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 1 states have call successors, (9) [2022-04-28 08:32:04,790 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 510 transitions. [2022-04-28 08:32:04,790 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 19 states and 510 transitions. [2022-04-28 08:32:05,186 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 510 edges. 510 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:32:05,207 INFO L225 Difference]: With dead ends: 475 [2022-04-28 08:32:05,207 INFO L226 Difference]: Without dead ends: 367 [2022-04-28 08:32:05,207 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 92 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=117, Invalid=585, Unknown=0, NotChecked=0, Total=702 [2022-04-28 08:32:05,208 INFO L413 NwaCegarLoop]: 265 mSDtfsCounter, 647 mSDsluCounter, 725 mSDsCounter, 0 mSdLazyCounter, 2621 mSolverCounterSat, 216 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 657 SdHoareTripleChecker+Valid, 990 SdHoareTripleChecker+Invalid, 2838 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 216 IncrementalHoareTripleChecker+Valid, 2621 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.5s IncrementalHoareTripleChecker+Time [2022-04-28 08:32:05,208 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [657 Valid, 990 Invalid, 2838 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [216 Valid, 2621 Invalid, 1 Unknown, 0 Unchecked, 8.5s Time] [2022-04-28 08:32:05,208 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 367 states. [2022-04-28 08:32:05,629 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 367 to 338. [2022-04-28 08:32:05,629 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:32:05,629 INFO L82 GeneralOperation]: Start isEquivalent. First operand 367 states. Second operand has 338 states, 270 states have (on average 1.3296296296296297) internal successors, (359), 275 states have internal predecessors, (359), 36 states have call successors, (36), 29 states have call predecessors, (36), 31 states have return successors, (37), 33 states have call predecessors, (37), 31 states have call successors, (37) [2022-04-28 08:32:05,630 INFO L74 IsIncluded]: Start isIncluded. First operand 367 states. Second operand has 338 states, 270 states have (on average 1.3296296296296297) internal successors, (359), 275 states have internal predecessors, (359), 36 states have call successors, (36), 29 states have call predecessors, (36), 31 states have return successors, (37), 33 states have call predecessors, (37), 31 states have call successors, (37) [2022-04-28 08:32:05,630 INFO L87 Difference]: Start difference. First operand 367 states. Second operand has 338 states, 270 states have (on average 1.3296296296296297) internal successors, (359), 275 states have internal predecessors, (359), 36 states have call successors, (36), 29 states have call predecessors, (36), 31 states have return successors, (37), 33 states have call predecessors, (37), 31 states have call successors, (37) [2022-04-28 08:32:05,635 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:32:05,635 INFO L93 Difference]: Finished difference Result 367 states and 469 transitions. [2022-04-28 08:32:05,635 INFO L276 IsEmpty]: Start isEmpty. Operand 367 states and 469 transitions. [2022-04-28 08:32:05,636 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:32:05,636 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:32:05,636 INFO L74 IsIncluded]: Start isIncluded. First operand has 338 states, 270 states have (on average 1.3296296296296297) internal successors, (359), 275 states have internal predecessors, (359), 36 states have call successors, (36), 29 states have call predecessors, (36), 31 states have return successors, (37), 33 states have call predecessors, (37), 31 states have call successors, (37) Second operand 367 states. [2022-04-28 08:32:05,636 INFO L87 Difference]: Start difference. First operand has 338 states, 270 states have (on average 1.3296296296296297) internal successors, (359), 275 states have internal predecessors, (359), 36 states have call successors, (36), 29 states have call predecessors, (36), 31 states have return successors, (37), 33 states have call predecessors, (37), 31 states have call successors, (37) Second operand 367 states. [2022-04-28 08:32:05,641 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:32:05,641 INFO L93 Difference]: Finished difference Result 367 states and 469 transitions. [2022-04-28 08:32:05,641 INFO L276 IsEmpty]: Start isEmpty. Operand 367 states and 469 transitions. [2022-04-28 08:32:05,642 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:32:05,642 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:32:05,642 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:32:05,642 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:32:05,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 338 states, 270 states have (on average 1.3296296296296297) internal successors, (359), 275 states have internal predecessors, (359), 36 states have call successors, (36), 29 states have call predecessors, (36), 31 states have return successors, (37), 33 states have call predecessors, (37), 31 states have call successors, (37) [2022-04-28 08:32:05,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 338 states to 338 states and 432 transitions. [2022-04-28 08:32:05,647 INFO L78 Accepts]: Start accepts. Automaton has 338 states and 432 transitions. Word has length 79 [2022-04-28 08:32:05,647 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:32:05,648 INFO L495 AbstractCegarLoop]: Abstraction has 338 states and 432 transitions. [2022-04-28 08:32:05,648 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 3.6875) internal successors, (59), 7 states have internal predecessors, (59), 2 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 1 states have call successors, (9) [2022-04-28 08:32:05,648 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 338 states and 432 transitions. [2022-04-28 08:32:06,381 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 432 edges. 432 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:32:06,381 INFO L276 IsEmpty]: Start isEmpty. Operand 338 states and 432 transitions. [2022-04-28 08:32:06,382 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-04-28 08:32:06,382 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:32:06,382 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:32:06,382 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-04-28 08:32:06,382 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:32:06,382 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:32:06,383 INFO L85 PathProgramCache]: Analyzing trace with hash -2045108737, now seen corresponding path program 1 times [2022-04-28 08:32:06,383 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:32:06,383 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1274908524] [2022-04-28 08:32:06,383 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:32:06,383 INFO L85 PathProgramCache]: Analyzing trace with hash -2045108737, now seen corresponding path program 2 times [2022-04-28 08:32:06,383 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:32:06,383 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1620224761] [2022-04-28 08:32:06,383 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:32:06,383 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:32:06,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:06,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:32:06,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:06,527 INFO L290 TraceCheckUtils]: 0: Hoare triple {45288#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {45235#true} is VALID [2022-04-28 08:32:06,527 INFO L290 TraceCheckUtils]: 1: Hoare triple {45235#true} assume true; {45235#true} is VALID [2022-04-28 08:32:06,529 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {45235#true} {45235#true} #1270#return; {45235#true} is VALID [2022-04-28 08:32:06,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:32:06,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:06,567 INFO L290 TraceCheckUtils]: 0: Hoare triple {45289#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,568 INFO L290 TraceCheckUtils]: 1: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume true; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,568 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} {45235#true} #1216#return; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:32:06,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:06,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:32:06,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:06,595 INFO L290 TraceCheckUtils]: 0: Hoare triple {45235#true} ~cond := #in~cond; {45235#true} is VALID [2022-04-28 08:32:06,595 INFO L290 TraceCheckUtils]: 1: Hoare triple {45235#true} assume !(0 == ~cond); {45235#true} is VALID [2022-04-28 08:32:06,595 INFO L290 TraceCheckUtils]: 2: Hoare triple {45235#true} assume true; {45235#true} is VALID [2022-04-28 08:32:06,595 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {45235#true} {45235#true} #1254#return; {45235#true} is VALID [2022-04-28 08:32:06,595 INFO L290 TraceCheckUtils]: 0: Hoare triple {45290#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {45235#true} is VALID [2022-04-28 08:32:06,595 INFO L272 TraceCheckUtils]: 1: Hoare triple {45235#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {45235#true} is VALID [2022-04-28 08:32:06,595 INFO L290 TraceCheckUtils]: 2: Hoare triple {45235#true} ~cond := #in~cond; {45235#true} is VALID [2022-04-28 08:32:06,595 INFO L290 TraceCheckUtils]: 3: Hoare triple {45235#true} assume !(0 == ~cond); {45235#true} is VALID [2022-04-28 08:32:06,595 INFO L290 TraceCheckUtils]: 4: Hoare triple {45235#true} assume true; {45235#true} is VALID [2022-04-28 08:32:06,595 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {45235#true} {45235#true} #1254#return; {45235#true} is VALID [2022-04-28 08:32:06,595 INFO L290 TraceCheckUtils]: 6: Hoare triple {45235#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {45235#true} is VALID [2022-04-28 08:32:06,595 INFO L290 TraceCheckUtils]: 7: Hoare triple {45235#true} assume true; {45235#true} is VALID [2022-04-28 08:32:06,596 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {45235#true} {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} #1218#return; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:32:06,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:06,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:32:06,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:06,620 INFO L290 TraceCheckUtils]: 0: Hoare triple {45295#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {45235#true} is VALID [2022-04-28 08:32:06,620 INFO L290 TraceCheckUtils]: 1: Hoare triple {45235#true} assume !(0 == ~__BLAST_NONDET~5); {45235#true} is VALID [2022-04-28 08:32:06,620 INFO L290 TraceCheckUtils]: 2: Hoare triple {45235#true} #res := -1073741823; {45235#true} is VALID [2022-04-28 08:32:06,620 INFO L290 TraceCheckUtils]: 3: Hoare triple {45235#true} assume true; {45235#true} is VALID [2022-04-28 08:32:06,620 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {45235#true} {45235#true} #1176#return; {45235#true} is VALID [2022-04-28 08:32:06,620 INFO L290 TraceCheckUtils]: 0: Hoare triple {45295#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {45235#true} is VALID [2022-04-28 08:32:06,621 INFO L272 TraceCheckUtils]: 1: Hoare triple {45235#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {45295#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:32:06,621 INFO L290 TraceCheckUtils]: 2: Hoare triple {45295#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {45235#true} is VALID [2022-04-28 08:32:06,621 INFO L290 TraceCheckUtils]: 3: Hoare triple {45235#true} assume !(0 == ~__BLAST_NONDET~5); {45235#true} is VALID [2022-04-28 08:32:06,621 INFO L290 TraceCheckUtils]: 4: Hoare triple {45235#true} #res := -1073741823; {45235#true} is VALID [2022-04-28 08:32:06,621 INFO L290 TraceCheckUtils]: 5: Hoare triple {45235#true} assume true; {45235#true} is VALID [2022-04-28 08:32:06,622 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {45235#true} {45235#true} #1176#return; {45235#true} is VALID [2022-04-28 08:32:06,622 INFO L290 TraceCheckUtils]: 7: Hoare triple {45235#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {45235#true} is VALID [2022-04-28 08:32:06,622 INFO L290 TraceCheckUtils]: 8: Hoare triple {45235#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {45235#true} is VALID [2022-04-28 08:32:06,622 INFO L290 TraceCheckUtils]: 9: Hoare triple {45235#true} assume true; {45235#true} is VALID [2022-04-28 08:32:06,622 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {45235#true} {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} #1220#return; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:32:06,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:06,641 INFO L290 TraceCheckUtils]: 0: Hoare triple {45301#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {45235#true} is VALID [2022-04-28 08:32:06,641 INFO L290 TraceCheckUtils]: 1: Hoare triple {45235#true} assume true; {45235#true} is VALID [2022-04-28 08:32:06,641 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {45235#true} {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} #1222#return; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-04-28 08:32:06,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:06,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 08:32:06,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:06,708 INFO L290 TraceCheckUtils]: 0: Hoare triple {45315#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet204 && #t~nondet204 <= 2147483647;~__BLAST_NONDET~16 := #t~nondet204;havoc #t~nondet204;havoc ~compRetStatus~1;havoc ~returnVal~0;~lcontext~1.base, ~lcontext~1.offset := 0, 0;havoc ~tmp~12; {45235#true} is VALID [2022-04-28 08:32:06,708 INFO L290 TraceCheckUtils]: 1: Hoare triple {45235#true} assume !(0 != ~compRegistered~0); {45235#true} is VALID [2022-04-28 08:32:06,709 INFO L290 TraceCheckUtils]: 2: Hoare triple {45235#true} assume !(0 == ~__BLAST_NONDET~16); {45235#true} is VALID [2022-04-28 08:32:06,709 INFO L290 TraceCheckUtils]: 3: Hoare triple {45235#true} assume 1 == ~__BLAST_NONDET~16; {45235#true} is VALID [2022-04-28 08:32:06,709 INFO L290 TraceCheckUtils]: 4: Hoare triple {45235#true} ~returnVal~0 := -1073741823; {45235#true} is VALID [2022-04-28 08:32:06,709 INFO L290 TraceCheckUtils]: 5: Hoare triple {45235#true} assume !(~s~0 == ~NP~0); {45235#true} is VALID [2022-04-28 08:32:06,709 INFO L290 TraceCheckUtils]: 6: Hoare triple {45235#true} assume !(~s~0 == ~MPR1~0); {45235#true} is VALID [2022-04-28 08:32:06,710 INFO L290 TraceCheckUtils]: 7: Hoare triple {45235#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,710 INFO L290 TraceCheckUtils]: 8: Hoare triple {45314#(<= ~SKIP2~0 ~s~0)} #res := ~returnVal~0; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,711 INFO L290 TraceCheckUtils]: 9: Hoare triple {45314#(<= ~SKIP2~0 ~s~0)} assume true; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,711 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {45314#(<= ~SKIP2~0 ~s~0)} {45235#true} #1268#return; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,712 INFO L290 TraceCheckUtils]: 0: Hoare triple {45302#(and (= |old(#length)| |#length|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~4.base, ~irpStack~4.offset;havoc ~devExt~4.base, ~devExt~4.offset;call ~#powerState~0.base, ~#powerState~0.offset := #Ultimate.allocOnStack(4);havoc ~powerType~0;havoc ~tmp~3;call #t~mem123.base, #t~mem123.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~4.base, ~devExt~4.offset := #t~mem123.base, #t~mem123.offset;havoc #t~mem123.base, #t~mem123.offset;call #t~mem124.base, #t~mem124.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~4.base, ~irpStack~4.offset := #t~mem124.base, #t~mem124.offset;havoc #t~mem124.base, #t~mem124.offset;call #t~mem125 := read~int(~irpStack~4.base, 8 + ~irpStack~4.offset, 4);~powerType~0 := #t~mem125;havoc #t~mem125;call #t~mem126 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call #t~mem127 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call write~int(#t~mem126, ~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem127, ~#powerState~0.base, ~#powerState~0.offset, 4);havoc #t~mem126;havoc #t~mem127;call #t~mem128 := read~int(~irpStack~4.base, 1 + ~irpStack~4.offset, 1); {45235#true} is VALID [2022-04-28 08:32:06,712 INFO L290 TraceCheckUtils]: 1: Hoare triple {45235#true} assume 2 == #t~mem128 % 256;havoc #t~mem128; {45235#true} is VALID [2022-04-28 08:32:06,712 INFO L290 TraceCheckUtils]: 2: Hoare triple {45235#true} assume 1 == ~powerType~0;call #t~mem132 := read~int(~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem132, ~devExt~4.base, 48 + ~devExt~4.offset, 4);havoc #t~mem132; {45235#true} is VALID [2022-04-28 08:32:06,712 INFO L290 TraceCheckUtils]: 3: Hoare triple {45235#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {45235#true} is VALID [2022-04-28 08:32:06,712 INFO L290 TraceCheckUtils]: 4: Hoare triple {45235#true} call #t~mem133 := read~int(~Irp.base, 35 + ~Irp.offset, 1);call write~int((if (1 + #t~mem133) % 256 <= 127 then (1 + #t~mem133) % 256 else (1 + #t~mem133) % 256 - 256), ~Irp.base, 35 + ~Irp.offset, 1);havoc #t~mem133;call #t~mem134.base, #t~mem134.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);call write~$Pointer$(#t~mem134.base, 36 + #t~mem134.offset, ~Irp.base, 96 + ~Irp.offset, 4);havoc #t~mem134.base, #t~mem134.offset;call #t~mem135.base, #t~mem135.offset := read~$Pointer$(~devExt~4.base, 8 + ~devExt~4.offset, 4); {45235#true} is VALID [2022-04-28 08:32:06,713 INFO L272 TraceCheckUtils]: 5: Hoare triple {45235#true} call #t~ret136 := PoCallDriver(#t~mem135.base, #t~mem135.offset, ~Irp.base, ~Irp.offset); {45315#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:06,713 INFO L290 TraceCheckUtils]: 6: Hoare triple {45315#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet204 && #t~nondet204 <= 2147483647;~__BLAST_NONDET~16 := #t~nondet204;havoc #t~nondet204;havoc ~compRetStatus~1;havoc ~returnVal~0;~lcontext~1.base, ~lcontext~1.offset := 0, 0;havoc ~tmp~12; {45235#true} is VALID [2022-04-28 08:32:06,713 INFO L290 TraceCheckUtils]: 7: Hoare triple {45235#true} assume !(0 != ~compRegistered~0); {45235#true} is VALID [2022-04-28 08:32:06,713 INFO L290 TraceCheckUtils]: 8: Hoare triple {45235#true} assume !(0 == ~__BLAST_NONDET~16); {45235#true} is VALID [2022-04-28 08:32:06,713 INFO L290 TraceCheckUtils]: 9: Hoare triple {45235#true} assume 1 == ~__BLAST_NONDET~16; {45235#true} is VALID [2022-04-28 08:32:06,713 INFO L290 TraceCheckUtils]: 10: Hoare triple {45235#true} ~returnVal~0 := -1073741823; {45235#true} is VALID [2022-04-28 08:32:06,713 INFO L290 TraceCheckUtils]: 11: Hoare triple {45235#true} assume !(~s~0 == ~NP~0); {45235#true} is VALID [2022-04-28 08:32:06,713 INFO L290 TraceCheckUtils]: 12: Hoare triple {45235#true} assume !(~s~0 == ~MPR1~0); {45235#true} is VALID [2022-04-28 08:32:06,713 INFO L290 TraceCheckUtils]: 13: Hoare triple {45235#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,714 INFO L290 TraceCheckUtils]: 14: Hoare triple {45314#(<= ~SKIP2~0 ~s~0)} #res := ~returnVal~0; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,714 INFO L290 TraceCheckUtils]: 15: Hoare triple {45314#(<= ~SKIP2~0 ~s~0)} assume true; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,715 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {45314#(<= ~SKIP2~0 ~s~0)} {45235#true} #1268#return; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,715 INFO L290 TraceCheckUtils]: 17: Hoare triple {45314#(<= ~SKIP2~0 ~s~0)} assume -2147483648 <= #t~ret136 && #t~ret136 <= 2147483647;~tmp~3 := #t~ret136;havoc #t~mem135.base, #t~mem135.offset;havoc #t~ret136;#res := ~tmp~3;call ULTIMATE.dealloc(~#powerState~0.base, ~#powerState~0.offset);havoc ~#powerState~0.base, ~#powerState~0.offset; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,715 INFO L290 TraceCheckUtils]: 18: Hoare triple {45314#(<= ~SKIP2~0 ~s~0)} assume true; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,716 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {45314#(<= ~SKIP2~0 ~s~0)} {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} #1232#return; {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-04-28 08:32:06,717 INFO L272 TraceCheckUtils]: 0: Hoare triple {45235#true} call ULTIMATE.init(); {45288#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:32:06,717 INFO L290 TraceCheckUtils]: 1: Hoare triple {45288#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {45235#true} is VALID [2022-04-28 08:32:06,717 INFO L290 TraceCheckUtils]: 2: Hoare triple {45235#true} assume true; {45235#true} is VALID [2022-04-28 08:32:06,717 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {45235#true} {45235#true} #1270#return; {45235#true} is VALID [2022-04-28 08:32:06,718 INFO L272 TraceCheckUtils]: 4: Hoare triple {45235#true} call #t~ret213 := main(); {45235#true} is VALID [2022-04-28 08:32:06,718 INFO L290 TraceCheckUtils]: 5: Hoare triple {45235#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {45235#true} is VALID [2022-04-28 08:32:06,718 INFO L272 TraceCheckUtils]: 6: Hoare triple {45235#true} call _BLAST_init(); {45289#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:06,719 INFO L290 TraceCheckUtils]: 7: Hoare triple {45289#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,719 INFO L290 TraceCheckUtils]: 8: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume true; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,720 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} {45235#true} #1216#return; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,721 INFO L272 TraceCheckUtils]: 10: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {45290#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:32:06,721 INFO L290 TraceCheckUtils]: 11: Hoare triple {45290#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {45235#true} is VALID [2022-04-28 08:32:06,721 INFO L272 TraceCheckUtils]: 12: Hoare triple {45235#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {45235#true} is VALID [2022-04-28 08:32:06,721 INFO L290 TraceCheckUtils]: 13: Hoare triple {45235#true} ~cond := #in~cond; {45235#true} is VALID [2022-04-28 08:32:06,721 INFO L290 TraceCheckUtils]: 14: Hoare triple {45235#true} assume !(0 == ~cond); {45235#true} is VALID [2022-04-28 08:32:06,721 INFO L290 TraceCheckUtils]: 15: Hoare triple {45235#true} assume true; {45235#true} is VALID [2022-04-28 08:32:06,721 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {45235#true} {45235#true} #1254#return; {45235#true} is VALID [2022-04-28 08:32:06,721 INFO L290 TraceCheckUtils]: 17: Hoare triple {45235#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {45235#true} is VALID [2022-04-28 08:32:06,721 INFO L290 TraceCheckUtils]: 18: Hoare triple {45235#true} assume true; {45235#true} is VALID [2022-04-28 08:32:06,722 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {45235#true} {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} #1218#return; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,722 INFO L290 TraceCheckUtils]: 20: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,723 INFO L290 TraceCheckUtils]: 21: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,723 INFO L290 TraceCheckUtils]: 22: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,724 INFO L272 TraceCheckUtils]: 23: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {45295#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:32:06,724 INFO L290 TraceCheckUtils]: 24: Hoare triple {45295#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {45235#true} is VALID [2022-04-28 08:32:06,725 INFO L272 TraceCheckUtils]: 25: Hoare triple {45235#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {45295#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:32:06,725 INFO L290 TraceCheckUtils]: 26: Hoare triple {45295#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {45235#true} is VALID [2022-04-28 08:32:06,725 INFO L290 TraceCheckUtils]: 27: Hoare triple {45235#true} assume !(0 == ~__BLAST_NONDET~5); {45235#true} is VALID [2022-04-28 08:32:06,725 INFO L290 TraceCheckUtils]: 28: Hoare triple {45235#true} #res := -1073741823; {45235#true} is VALID [2022-04-28 08:32:06,725 INFO L290 TraceCheckUtils]: 29: Hoare triple {45235#true} assume true; {45235#true} is VALID [2022-04-28 08:32:06,726 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {45235#true} {45235#true} #1176#return; {45235#true} is VALID [2022-04-28 08:32:06,726 INFO L290 TraceCheckUtils]: 31: Hoare triple {45235#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {45235#true} is VALID [2022-04-28 08:32:06,726 INFO L290 TraceCheckUtils]: 32: Hoare triple {45235#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {45235#true} is VALID [2022-04-28 08:32:06,726 INFO L290 TraceCheckUtils]: 33: Hoare triple {45235#true} assume true; {45235#true} is VALID [2022-04-28 08:32:06,726 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {45235#true} {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} #1220#return; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,727 INFO L290 TraceCheckUtils]: 35: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,727 INFO L272 TraceCheckUtils]: 36: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} call stub_driver_init(); {45301#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:06,728 INFO L290 TraceCheckUtils]: 37: Hoare triple {45301#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {45235#true} is VALID [2022-04-28 08:32:06,728 INFO L290 TraceCheckUtils]: 38: Hoare triple {45235#true} assume true; {45235#true} is VALID [2022-04-28 08:32:06,728 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {45235#true} {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} #1222#return; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,728 INFO L290 TraceCheckUtils]: 40: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume !!(~status~5 >= 0); {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,729 INFO L290 TraceCheckUtils]: 41: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume !(0 == ~__BLAST_NONDET~0); {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,729 INFO L290 TraceCheckUtils]: 42: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume !(1 == ~__BLAST_NONDET~0); {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,729 INFO L290 TraceCheckUtils]: 43: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume !(2 == ~__BLAST_NONDET~0); {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,729 INFO L290 TraceCheckUtils]: 44: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume !(3 == ~__BLAST_NONDET~0); {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,730 INFO L290 TraceCheckUtils]: 45: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume 4 == ~__BLAST_NONDET~0; {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:32:06,731 INFO L272 TraceCheckUtils]: 46: Hoare triple {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} call #t~ret175 := KbFilter_Power(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {45302#(and (= |old(#length)| |#length|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:06,731 INFO L290 TraceCheckUtils]: 47: Hoare triple {45302#(and (= |old(#length)| |#length|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~4.base, ~irpStack~4.offset;havoc ~devExt~4.base, ~devExt~4.offset;call ~#powerState~0.base, ~#powerState~0.offset := #Ultimate.allocOnStack(4);havoc ~powerType~0;havoc ~tmp~3;call #t~mem123.base, #t~mem123.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~4.base, ~devExt~4.offset := #t~mem123.base, #t~mem123.offset;havoc #t~mem123.base, #t~mem123.offset;call #t~mem124.base, #t~mem124.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~4.base, ~irpStack~4.offset := #t~mem124.base, #t~mem124.offset;havoc #t~mem124.base, #t~mem124.offset;call #t~mem125 := read~int(~irpStack~4.base, 8 + ~irpStack~4.offset, 4);~powerType~0 := #t~mem125;havoc #t~mem125;call #t~mem126 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call #t~mem127 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call write~int(#t~mem126, ~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem127, ~#powerState~0.base, ~#powerState~0.offset, 4);havoc #t~mem126;havoc #t~mem127;call #t~mem128 := read~int(~irpStack~4.base, 1 + ~irpStack~4.offset, 1); {45235#true} is VALID [2022-04-28 08:32:06,731 INFO L290 TraceCheckUtils]: 48: Hoare triple {45235#true} assume 2 == #t~mem128 % 256;havoc #t~mem128; {45235#true} is VALID [2022-04-28 08:32:06,731 INFO L290 TraceCheckUtils]: 49: Hoare triple {45235#true} assume 1 == ~powerType~0;call #t~mem132 := read~int(~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem132, ~devExt~4.base, 48 + ~devExt~4.offset, 4);havoc #t~mem132; {45235#true} is VALID [2022-04-28 08:32:06,731 INFO L290 TraceCheckUtils]: 50: Hoare triple {45235#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {45235#true} is VALID [2022-04-28 08:32:06,731 INFO L290 TraceCheckUtils]: 51: Hoare triple {45235#true} call #t~mem133 := read~int(~Irp.base, 35 + ~Irp.offset, 1);call write~int((if (1 + #t~mem133) % 256 <= 127 then (1 + #t~mem133) % 256 else (1 + #t~mem133) % 256 - 256), ~Irp.base, 35 + ~Irp.offset, 1);havoc #t~mem133;call #t~mem134.base, #t~mem134.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);call write~$Pointer$(#t~mem134.base, 36 + #t~mem134.offset, ~Irp.base, 96 + ~Irp.offset, 4);havoc #t~mem134.base, #t~mem134.offset;call #t~mem135.base, #t~mem135.offset := read~$Pointer$(~devExt~4.base, 8 + ~devExt~4.offset, 4); {45235#true} is VALID [2022-04-28 08:32:06,732 INFO L272 TraceCheckUtils]: 52: Hoare triple {45235#true} call #t~ret136 := PoCallDriver(#t~mem135.base, #t~mem135.offset, ~Irp.base, ~Irp.offset); {45315#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:06,732 INFO L290 TraceCheckUtils]: 53: Hoare triple {45315#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet204 && #t~nondet204 <= 2147483647;~__BLAST_NONDET~16 := #t~nondet204;havoc #t~nondet204;havoc ~compRetStatus~1;havoc ~returnVal~0;~lcontext~1.base, ~lcontext~1.offset := 0, 0;havoc ~tmp~12; {45235#true} is VALID [2022-04-28 08:32:06,732 INFO L290 TraceCheckUtils]: 54: Hoare triple {45235#true} assume !(0 != ~compRegistered~0); {45235#true} is VALID [2022-04-28 08:32:06,732 INFO L290 TraceCheckUtils]: 55: Hoare triple {45235#true} assume !(0 == ~__BLAST_NONDET~16); {45235#true} is VALID [2022-04-28 08:32:06,732 INFO L290 TraceCheckUtils]: 56: Hoare triple {45235#true} assume 1 == ~__BLAST_NONDET~16; {45235#true} is VALID [2022-04-28 08:32:06,732 INFO L290 TraceCheckUtils]: 57: Hoare triple {45235#true} ~returnVal~0 := -1073741823; {45235#true} is VALID [2022-04-28 08:32:06,732 INFO L290 TraceCheckUtils]: 58: Hoare triple {45235#true} assume !(~s~0 == ~NP~0); {45235#true} is VALID [2022-04-28 08:32:06,732 INFO L290 TraceCheckUtils]: 59: Hoare triple {45235#true} assume !(~s~0 == ~MPR1~0); {45235#true} is VALID [2022-04-28 08:32:06,733 INFO L290 TraceCheckUtils]: 60: Hoare triple {45235#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,733 INFO L290 TraceCheckUtils]: 61: Hoare triple {45314#(<= ~SKIP2~0 ~s~0)} #res := ~returnVal~0; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,733 INFO L290 TraceCheckUtils]: 62: Hoare triple {45314#(<= ~SKIP2~0 ~s~0)} assume true; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,734 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {45314#(<= ~SKIP2~0 ~s~0)} {45235#true} #1268#return; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,734 INFO L290 TraceCheckUtils]: 64: Hoare triple {45314#(<= ~SKIP2~0 ~s~0)} assume -2147483648 <= #t~ret136 && #t~ret136 <= 2147483647;~tmp~3 := #t~ret136;havoc #t~mem135.base, #t~mem135.offset;havoc #t~ret136;#res := ~tmp~3;call ULTIMATE.dealloc(~#powerState~0.base, ~#powerState~0.offset);havoc ~#powerState~0.base, ~#powerState~0.offset; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,734 INFO L290 TraceCheckUtils]: 65: Hoare triple {45314#(<= ~SKIP2~0 ~s~0)} assume true; {45314#(<= ~SKIP2~0 ~s~0)} is VALID [2022-04-28 08:32:06,735 INFO L284 TraceCheckUtils]: 66: Hoare quadruple {45314#(<= ~SKIP2~0 ~s~0)} {45243#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} #1232#return; {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-04-28 08:32:06,736 INFO L290 TraceCheckUtils]: 67: Hoare triple {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume -2147483648 <= #t~ret175 && #t~ret175 <= 2147483647;~status~5 := #t~ret175;havoc #t~ret175; {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-04-28 08:32:06,736 INFO L290 TraceCheckUtils]: 68: Hoare triple {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume 0 != ~we_should_unload~0; {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-04-28 08:32:06,736 INFO L290 TraceCheckUtils]: 69: Hoare triple {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume !(1 == ~pended~0); {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-04-28 08:32:06,737 INFO L290 TraceCheckUtils]: 70: Hoare triple {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume !(1 == ~pended~0); {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-04-28 08:32:06,737 INFO L290 TraceCheckUtils]: 71: Hoare triple {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume !(~s~0 == ~UNLOADED~0); {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-04-28 08:32:06,737 INFO L290 TraceCheckUtils]: 72: Hoare triple {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume !(-1 == ~status~5); {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-04-28 08:32:06,738 INFO L290 TraceCheckUtils]: 73: Hoare triple {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume !(~s~0 != ~SKIP2~0); {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-04-28 08:32:06,738 INFO L290 TraceCheckUtils]: 74: Hoare triple {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume !(1 == ~pended~0); {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-04-28 08:32:06,738 INFO L290 TraceCheckUtils]: 75: Hoare triple {45287#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume ~s~0 == ~DC~0; {45236#false} is VALID [2022-04-28 08:32:06,738 INFO L290 TraceCheckUtils]: 76: Hoare triple {45236#false} assume 259 == ~status~5; {45236#false} is VALID [2022-04-28 08:32:06,738 INFO L272 TraceCheckUtils]: 77: Hoare triple {45236#false} call errorFn(); {45236#false} is VALID [2022-04-28 08:32:06,738 INFO L290 TraceCheckUtils]: 78: Hoare triple {45236#false} assume !false; {45236#false} is VALID [2022-04-28 08:32:06,739 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:32:06,739 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:32:06,739 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1620224761] [2022-04-28 08:32:06,739 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1620224761] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:32:06,739 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:32:06,739 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:32:06,739 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:32:06,739 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1274908524] [2022-04-28 08:32:06,739 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1274908524] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:32:06,739 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:32:06,739 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:32:06,739 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1613567252] [2022-04-28 08:32:06,740 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:32:06,740 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.916666666666667) internal successors, (59), 5 states have internal predecessors, (59), 3 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) Word has length 79 [2022-04-28 08:32:06,740 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:32:06,740 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 4.916666666666667) internal successors, (59), 5 states have internal predecessors, (59), 3 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:32:06,803 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 79 edges. 79 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:32:06,803 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 08:32:06,803 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:32:06,804 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 08:32:06,804 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=101, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:32:06,804 INFO L87 Difference]: Start difference. First operand 338 states and 432 transitions. Second operand has 12 states, 12 states have (on average 4.916666666666667) internal successors, (59), 5 states have internal predecessors, (59), 3 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:32:08,979 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:32:20,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:32:20,522 INFO L93 Difference]: Finished difference Result 429 states and 546 transitions. [2022-04-28 08:32:20,522 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-04-28 08:32:20,522 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.916666666666667) internal successors, (59), 5 states have internal predecessors, (59), 3 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) Word has length 79 [2022-04-28 08:32:20,522 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:32:20,522 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 4.916666666666667) internal successors, (59), 5 states have internal predecessors, (59), 3 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:32:20,546 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 471 transitions. [2022-04-28 08:32:20,546 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 4.916666666666667) internal successors, (59), 5 states have internal predecessors, (59), 3 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:32:20,548 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 471 transitions. [2022-04-28 08:32:20,550 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 21 states and 471 transitions. [2022-04-28 08:32:21,113 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 471 edges. 471 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:32:21,119 INFO L225 Difference]: With dead ends: 429 [2022-04-28 08:32:21,119 INFO L226 Difference]: Without dead ends: 376 [2022-04-28 08:32:21,120 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 18 SyntacticMatches, 1 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 148 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=210, Invalid=602, Unknown=0, NotChecked=0, Total=812 [2022-04-28 08:32:21,121 INFO L413 NwaCegarLoop]: 275 mSDtfsCounter, 1009 mSDsluCounter, 296 mSDsCounter, 0 mSdLazyCounter, 1276 mSolverCounterSat, 332 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1024 SdHoareTripleChecker+Valid, 571 SdHoareTripleChecker+Invalid, 1609 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 332 IncrementalHoareTripleChecker+Valid, 1276 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.8s IncrementalHoareTripleChecker+Time [2022-04-28 08:32:21,121 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1024 Valid, 571 Invalid, 1609 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [332 Valid, 1276 Invalid, 1 Unknown, 0 Unchecked, 5.8s Time] [2022-04-28 08:32:21,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 376 states. [2022-04-28 08:32:21,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 376 to 329. [2022-04-28 08:32:21,569 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:32:21,569 INFO L82 GeneralOperation]: Start isEquivalent. First operand 376 states. Second operand has 329 states, 262 states have (on average 1.3244274809160306) internal successors, (347), 266 states have internal predecessors, (347), 36 states have call successors, (36), 29 states have call predecessors, (36), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:32:21,570 INFO L74 IsIncluded]: Start isIncluded. First operand 376 states. Second operand has 329 states, 262 states have (on average 1.3244274809160306) internal successors, (347), 266 states have internal predecessors, (347), 36 states have call successors, (36), 29 states have call predecessors, (36), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:32:21,570 INFO L87 Difference]: Start difference. First operand 376 states. Second operand has 329 states, 262 states have (on average 1.3244274809160306) internal successors, (347), 266 states have internal predecessors, (347), 36 states have call successors, (36), 29 states have call predecessors, (36), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:32:21,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:32:21,575 INFO L93 Difference]: Finished difference Result 376 states and 482 transitions. [2022-04-28 08:32:21,575 INFO L276 IsEmpty]: Start isEmpty. Operand 376 states and 482 transitions. [2022-04-28 08:32:21,575 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:32:21,575 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:32:21,576 INFO L74 IsIncluded]: Start isIncluded. First operand has 329 states, 262 states have (on average 1.3244274809160306) internal successors, (347), 266 states have internal predecessors, (347), 36 states have call successors, (36), 29 states have call predecessors, (36), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) Second operand 376 states. [2022-04-28 08:32:21,576 INFO L87 Difference]: Start difference. First operand has 329 states, 262 states have (on average 1.3244274809160306) internal successors, (347), 266 states have internal predecessors, (347), 36 states have call successors, (36), 29 states have call predecessors, (36), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) Second operand 376 states. [2022-04-28 08:32:21,581 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:32:21,581 INFO L93 Difference]: Finished difference Result 376 states and 482 transitions. [2022-04-28 08:32:21,581 INFO L276 IsEmpty]: Start isEmpty. Operand 376 states and 482 transitions. [2022-04-28 08:32:21,581 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:32:21,581 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:32:21,581 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:32:21,581 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:32:21,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 329 states, 262 states have (on average 1.3244274809160306) internal successors, (347), 266 states have internal predecessors, (347), 36 states have call successors, (36), 29 states have call predecessors, (36), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:32:21,587 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 329 states to 329 states and 418 transitions. [2022-04-28 08:32:21,587 INFO L78 Accepts]: Start accepts. Automaton has 329 states and 418 transitions. Word has length 79 [2022-04-28 08:32:21,587 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:32:21,587 INFO L495 AbstractCegarLoop]: Abstraction has 329 states and 418 transitions. [2022-04-28 08:32:21,587 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.916666666666667) internal successors, (59), 5 states have internal predecessors, (59), 3 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:32:21,587 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 329 states and 418 transitions. [2022-04-28 08:32:22,345 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 418 edges. 418 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:32:22,345 INFO L276 IsEmpty]: Start isEmpty. Operand 329 states and 418 transitions. [2022-04-28 08:32:22,345 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2022-04-28 08:32:22,345 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:32:22,346 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:32:22,346 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-04-28 08:32:22,346 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:32:22,346 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:32:22,346 INFO L85 PathProgramCache]: Analyzing trace with hash -1773831806, now seen corresponding path program 1 times [2022-04-28 08:32:22,346 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:32:22,346 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [587572806] [2022-04-28 08:32:22,346 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:32:22,346 INFO L85 PathProgramCache]: Analyzing trace with hash -1773831806, now seen corresponding path program 2 times [2022-04-28 08:32:22,347 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:32:22,347 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [535905570] [2022-04-28 08:32:22,347 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:32:22,347 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:32:22,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:22,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:32:22,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:22,469 INFO L290 TraceCheckUtils]: 0: Hoare triple {47673#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {47625#true} is VALID [2022-04-28 08:32:22,469 INFO L290 TraceCheckUtils]: 1: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,470 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {47625#true} {47625#true} #1270#return; {47625#true} is VALID [2022-04-28 08:32:22,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:32:22,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:22,494 INFO L290 TraceCheckUtils]: 0: Hoare triple {47674#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {47625#true} is VALID [2022-04-28 08:32:22,494 INFO L290 TraceCheckUtils]: 1: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,494 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {47625#true} {47625#true} #1216#return; {47625#true} is VALID [2022-04-28 08:32:22,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:32:22,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:22,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:32:22,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:22,520 INFO L290 TraceCheckUtils]: 0: Hoare triple {47625#true} ~cond := #in~cond; {47625#true} is VALID [2022-04-28 08:32:22,520 INFO L290 TraceCheckUtils]: 1: Hoare triple {47625#true} assume !(0 == ~cond); {47625#true} is VALID [2022-04-28 08:32:22,520 INFO L290 TraceCheckUtils]: 2: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,520 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {47625#true} {47625#true} #1254#return; {47625#true} is VALID [2022-04-28 08:32:22,520 INFO L290 TraceCheckUtils]: 0: Hoare triple {47675#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {47625#true} is VALID [2022-04-28 08:32:22,520 INFO L272 TraceCheckUtils]: 1: Hoare triple {47625#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {47625#true} is VALID [2022-04-28 08:32:22,520 INFO L290 TraceCheckUtils]: 2: Hoare triple {47625#true} ~cond := #in~cond; {47625#true} is VALID [2022-04-28 08:32:22,520 INFO L290 TraceCheckUtils]: 3: Hoare triple {47625#true} assume !(0 == ~cond); {47625#true} is VALID [2022-04-28 08:32:22,520 INFO L290 TraceCheckUtils]: 4: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,521 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {47625#true} {47625#true} #1254#return; {47625#true} is VALID [2022-04-28 08:32:22,521 INFO L290 TraceCheckUtils]: 6: Hoare triple {47625#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {47625#true} is VALID [2022-04-28 08:32:22,521 INFO L290 TraceCheckUtils]: 7: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,521 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {47625#true} {47625#true} #1218#return; {47625#true} is VALID [2022-04-28 08:32:22,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:32:22,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:22,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:32:22,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:22,543 INFO L290 TraceCheckUtils]: 0: Hoare triple {47680#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {47625#true} is VALID [2022-04-28 08:32:22,543 INFO L290 TraceCheckUtils]: 1: Hoare triple {47625#true} assume !(0 == ~__BLAST_NONDET~5); {47625#true} is VALID [2022-04-28 08:32:22,544 INFO L290 TraceCheckUtils]: 2: Hoare triple {47625#true} #res := -1073741823; {47625#true} is VALID [2022-04-28 08:32:22,544 INFO L290 TraceCheckUtils]: 3: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,544 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {47625#true} {47625#true} #1176#return; {47625#true} is VALID [2022-04-28 08:32:22,544 INFO L290 TraceCheckUtils]: 0: Hoare triple {47680#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {47625#true} is VALID [2022-04-28 08:32:22,545 INFO L272 TraceCheckUtils]: 1: Hoare triple {47625#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {47680#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:32:22,545 INFO L290 TraceCheckUtils]: 2: Hoare triple {47680#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {47625#true} is VALID [2022-04-28 08:32:22,545 INFO L290 TraceCheckUtils]: 3: Hoare triple {47625#true} assume !(0 == ~__BLAST_NONDET~5); {47625#true} is VALID [2022-04-28 08:32:22,545 INFO L290 TraceCheckUtils]: 4: Hoare triple {47625#true} #res := -1073741823; {47625#true} is VALID [2022-04-28 08:32:22,545 INFO L290 TraceCheckUtils]: 5: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,545 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {47625#true} {47625#true} #1176#return; {47625#true} is VALID [2022-04-28 08:32:22,545 INFO L290 TraceCheckUtils]: 7: Hoare triple {47625#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {47625#true} is VALID [2022-04-28 08:32:22,545 INFO L290 TraceCheckUtils]: 8: Hoare triple {47625#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {47625#true} is VALID [2022-04-28 08:32:22,545 INFO L290 TraceCheckUtils]: 9: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,546 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {47625#true} {47625#true} #1220#return; {47625#true} is VALID [2022-04-28 08:32:22,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:32:22,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:22,563 INFO L290 TraceCheckUtils]: 0: Hoare triple {47686#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {47625#true} is VALID [2022-04-28 08:32:22,563 INFO L290 TraceCheckUtils]: 1: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,563 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {47625#true} {47625#true} #1222#return; {47625#true} is VALID [2022-04-28 08:32:22,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-04-28 08:32:22,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:22,569 INFO L290 TraceCheckUtils]: 0: Hoare triple {47675#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {47625#true} is VALID [2022-04-28 08:32:22,569 INFO L290 TraceCheckUtils]: 1: Hoare triple {47625#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {47625#true} is VALID [2022-04-28 08:32:22,569 INFO L290 TraceCheckUtils]: 2: Hoare triple {47625#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {47625#true} is VALID [2022-04-28 08:32:22,569 INFO L290 TraceCheckUtils]: 3: Hoare triple {47625#true} assume #res.base == dest.base && #res.offset == dest.offset; {47625#true} is VALID [2022-04-28 08:32:22,569 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {47625#true} {47625#true} #1186#return; {47625#true} is VALID [2022-04-28 08:32:22,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-04-28 08:32:22,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:22,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:32:22,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:22,586 INFO L290 TraceCheckUtils]: 0: Hoare triple {47687#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {47625#true} is VALID [2022-04-28 08:32:22,586 INFO L290 TraceCheckUtils]: 1: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,586 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {47625#true} {47625#true} #1174#return; {47625#true} is VALID [2022-04-28 08:32:22,586 INFO L290 TraceCheckUtils]: 0: Hoare triple {47687#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {47625#true} is VALID [2022-04-28 08:32:22,587 INFO L272 TraceCheckUtils]: 1: Hoare triple {47625#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {47687#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:32:22,587 INFO L290 TraceCheckUtils]: 2: Hoare triple {47687#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {47625#true} is VALID [2022-04-28 08:32:22,587 INFO L290 TraceCheckUtils]: 3: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,587 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {47625#true} {47625#true} #1174#return; {47625#true} is VALID [2022-04-28 08:32:22,587 INFO L290 TraceCheckUtils]: 5: Hoare triple {47625#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {47625#true} is VALID [2022-04-28 08:32:22,587 INFO L290 TraceCheckUtils]: 6: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,587 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {47625#true} {47625#true} #1210#return; {47625#true} is VALID [2022-04-28 08:32:22,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-04-28 08:32:22,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:22,606 INFO L290 TraceCheckUtils]: 0: Hoare triple {47691#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:32:22,606 INFO L290 TraceCheckUtils]: 1: Hoare triple {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:32:22,606 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {47625#true} #1212#return; {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:32:22,607 INFO L272 TraceCheckUtils]: 0: Hoare triple {47625#true} call ULTIMATE.init(); {47673#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:32:22,607 INFO L290 TraceCheckUtils]: 1: Hoare triple {47673#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {47625#true} is VALID [2022-04-28 08:32:22,608 INFO L290 TraceCheckUtils]: 2: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,608 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {47625#true} {47625#true} #1270#return; {47625#true} is VALID [2022-04-28 08:32:22,608 INFO L272 TraceCheckUtils]: 4: Hoare triple {47625#true} call #t~ret213 := main(); {47625#true} is VALID [2022-04-28 08:32:22,608 INFO L290 TraceCheckUtils]: 5: Hoare triple {47625#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {47625#true} is VALID [2022-04-28 08:32:22,608 INFO L272 TraceCheckUtils]: 6: Hoare triple {47625#true} call _BLAST_init(); {47674#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:22,609 INFO L290 TraceCheckUtils]: 7: Hoare triple {47674#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {47625#true} is VALID [2022-04-28 08:32:22,609 INFO L290 TraceCheckUtils]: 8: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,609 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {47625#true} {47625#true} #1216#return; {47625#true} is VALID [2022-04-28 08:32:22,609 INFO L272 TraceCheckUtils]: 10: Hoare triple {47625#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {47675#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:32:22,609 INFO L290 TraceCheckUtils]: 11: Hoare triple {47675#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {47625#true} is VALID [2022-04-28 08:32:22,609 INFO L272 TraceCheckUtils]: 12: Hoare triple {47625#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {47625#true} is VALID [2022-04-28 08:32:22,609 INFO L290 TraceCheckUtils]: 13: Hoare triple {47625#true} ~cond := #in~cond; {47625#true} is VALID [2022-04-28 08:32:22,610 INFO L290 TraceCheckUtils]: 14: Hoare triple {47625#true} assume !(0 == ~cond); {47625#true} is VALID [2022-04-28 08:32:22,610 INFO L290 TraceCheckUtils]: 15: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,610 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {47625#true} {47625#true} #1254#return; {47625#true} is VALID [2022-04-28 08:32:22,610 INFO L290 TraceCheckUtils]: 17: Hoare triple {47625#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {47625#true} is VALID [2022-04-28 08:32:22,610 INFO L290 TraceCheckUtils]: 18: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,610 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {47625#true} {47625#true} #1218#return; {47625#true} is VALID [2022-04-28 08:32:22,610 INFO L290 TraceCheckUtils]: 20: Hoare triple {47625#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {47625#true} is VALID [2022-04-28 08:32:22,610 INFO L290 TraceCheckUtils]: 21: Hoare triple {47625#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {47625#true} is VALID [2022-04-28 08:32:22,610 INFO L290 TraceCheckUtils]: 22: Hoare triple {47625#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {47625#true} is VALID [2022-04-28 08:32:22,611 INFO L272 TraceCheckUtils]: 23: Hoare triple {47625#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {47680#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:32:22,611 INFO L290 TraceCheckUtils]: 24: Hoare triple {47680#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {47625#true} is VALID [2022-04-28 08:32:22,612 INFO L272 TraceCheckUtils]: 25: Hoare triple {47625#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {47680#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:32:22,612 INFO L290 TraceCheckUtils]: 26: Hoare triple {47680#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {47625#true} is VALID [2022-04-28 08:32:22,612 INFO L290 TraceCheckUtils]: 27: Hoare triple {47625#true} assume !(0 == ~__BLAST_NONDET~5); {47625#true} is VALID [2022-04-28 08:32:22,612 INFO L290 TraceCheckUtils]: 28: Hoare triple {47625#true} #res := -1073741823; {47625#true} is VALID [2022-04-28 08:32:22,612 INFO L290 TraceCheckUtils]: 29: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,612 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {47625#true} {47625#true} #1176#return; {47625#true} is VALID [2022-04-28 08:32:22,612 INFO L290 TraceCheckUtils]: 31: Hoare triple {47625#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {47625#true} is VALID [2022-04-28 08:32:22,612 INFO L290 TraceCheckUtils]: 32: Hoare triple {47625#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {47625#true} is VALID [2022-04-28 08:32:22,612 INFO L290 TraceCheckUtils]: 33: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,612 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {47625#true} {47625#true} #1220#return; {47625#true} is VALID [2022-04-28 08:32:22,612 INFO L290 TraceCheckUtils]: 35: Hoare triple {47625#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {47625#true} is VALID [2022-04-28 08:32:22,613 INFO L272 TraceCheckUtils]: 36: Hoare triple {47625#true} call stub_driver_init(); {47686#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:22,613 INFO L290 TraceCheckUtils]: 37: Hoare triple {47686#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {47625#true} is VALID [2022-04-28 08:32:22,614 INFO L290 TraceCheckUtils]: 38: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,614 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {47625#true} {47625#true} #1222#return; {47625#true} is VALID [2022-04-28 08:32:22,614 INFO L290 TraceCheckUtils]: 40: Hoare triple {47625#true} assume !!(~status~5 >= 0); {47625#true} is VALID [2022-04-28 08:32:22,614 INFO L290 TraceCheckUtils]: 41: Hoare triple {47625#true} assume !(0 == ~__BLAST_NONDET~0); {47625#true} is VALID [2022-04-28 08:32:22,614 INFO L290 TraceCheckUtils]: 42: Hoare triple {47625#true} assume !(1 == ~__BLAST_NONDET~0); {47625#true} is VALID [2022-04-28 08:32:22,614 INFO L290 TraceCheckUtils]: 43: Hoare triple {47625#true} assume !(2 == ~__BLAST_NONDET~0); {47625#true} is VALID [2022-04-28 08:32:22,614 INFO L290 TraceCheckUtils]: 44: Hoare triple {47625#true} assume 3 == ~__BLAST_NONDET~0; {47625#true} is VALID [2022-04-28 08:32:22,614 INFO L272 TraceCheckUtils]: 45: Hoare triple {47625#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {47625#true} is VALID [2022-04-28 08:32:22,615 INFO L290 TraceCheckUtils]: 46: Hoare triple {47625#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {47625#true} is VALID [2022-04-28 08:32:22,615 INFO L290 TraceCheckUtils]: 47: Hoare triple {47625#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {47625#true} is VALID [2022-04-28 08:32:22,615 INFO L290 TraceCheckUtils]: 48: Hoare triple {47625#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {47625#true} is VALID [2022-04-28 08:32:22,615 INFO L272 TraceCheckUtils]: 49: Hoare triple {47625#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {47675#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:32:22,615 INFO L290 TraceCheckUtils]: 50: Hoare triple {47675#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {47625#true} is VALID [2022-04-28 08:32:22,616 INFO L290 TraceCheckUtils]: 51: Hoare triple {47625#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {47625#true} is VALID [2022-04-28 08:32:22,616 INFO L290 TraceCheckUtils]: 52: Hoare triple {47625#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {47625#true} is VALID [2022-04-28 08:32:22,616 INFO L290 TraceCheckUtils]: 53: Hoare triple {47625#true} assume #res.base == dest.base && #res.offset == dest.offset; {47625#true} is VALID [2022-04-28 08:32:22,616 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {47625#true} {47625#true} #1186#return; {47625#true} is VALID [2022-04-28 08:32:22,616 INFO L290 TraceCheckUtils]: 55: Hoare triple {47625#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {47625#true} is VALID [2022-04-28 08:32:22,616 INFO L290 TraceCheckUtils]: 56: Hoare triple {47625#true} assume !(~s~0 != ~NP~0); {47625#true} is VALID [2022-04-28 08:32:22,616 INFO L290 TraceCheckUtils]: 57: Hoare triple {47625#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {47625#true} is VALID [2022-04-28 08:32:22,616 INFO L290 TraceCheckUtils]: 58: Hoare triple {47625#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {47625#true} is VALID [2022-04-28 08:32:22,616 INFO L272 TraceCheckUtils]: 59: Hoare triple {47625#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {47625#true} is VALID [2022-04-28 08:32:22,616 INFO L290 TraceCheckUtils]: 60: Hoare triple {47625#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {47625#true} is VALID [2022-04-28 08:32:22,616 INFO L290 TraceCheckUtils]: 61: Hoare triple {47625#true} assume 0 != ~compRegistered~0; {47625#true} is VALID [2022-04-28 08:32:22,617 INFO L272 TraceCheckUtils]: 62: Hoare triple {47625#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {47687#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:32:22,617 INFO L290 TraceCheckUtils]: 63: Hoare triple {47687#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {47625#true} is VALID [2022-04-28 08:32:22,617 INFO L272 TraceCheckUtils]: 64: Hoare triple {47625#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {47687#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:32:22,617 INFO L290 TraceCheckUtils]: 65: Hoare triple {47687#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {47625#true} is VALID [2022-04-28 08:32:22,617 INFO L290 TraceCheckUtils]: 66: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,618 INFO L284 TraceCheckUtils]: 67: Hoare quadruple {47625#true} {47625#true} #1174#return; {47625#true} is VALID [2022-04-28 08:32:22,618 INFO L290 TraceCheckUtils]: 68: Hoare triple {47625#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {47625#true} is VALID [2022-04-28 08:32:22,618 INFO L290 TraceCheckUtils]: 69: Hoare triple {47625#true} assume true; {47625#true} is VALID [2022-04-28 08:32:22,618 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {47625#true} {47625#true} #1210#return; {47625#true} is VALID [2022-04-28 08:32:22,618 INFO L290 TraceCheckUtils]: 71: Hoare triple {47625#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {47625#true} is VALID [2022-04-28 08:32:22,618 INFO L290 TraceCheckUtils]: 72: Hoare triple {47625#true} assume -1073741802 == ~compRetStatus~0; {47625#true} is VALID [2022-04-28 08:32:22,618 INFO L272 TraceCheckUtils]: 73: Hoare triple {47625#true} call stubMoreProcessingRequired(); {47691#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:22,618 INFO L290 TraceCheckUtils]: 74: Hoare triple {47691#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:32:22,619 INFO L290 TraceCheckUtils]: 75: Hoare triple {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:32:22,619 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {47625#true} #1212#return; {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:32:22,619 INFO L290 TraceCheckUtils]: 77: Hoare triple {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume 0 == ~__BLAST_NONDET~11; {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:32:22,620 INFO L290 TraceCheckUtils]: 78: Hoare triple {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} ~returnVal2~0 := 0; {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:32:22,620 INFO L290 TraceCheckUtils]: 79: Hoare triple {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~NP~0); {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:32:22,620 INFO L290 TraceCheckUtils]: 80: Hoare triple {47672#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~MPR1~0); {47626#false} is VALID [2022-04-28 08:32:22,620 INFO L290 TraceCheckUtils]: 81: Hoare triple {47626#false} assume !(~s~0 == ~SKIP1~0); {47626#false} is VALID [2022-04-28 08:32:22,620 INFO L272 TraceCheckUtils]: 82: Hoare triple {47626#false} call errorFn(); {47626#false} is VALID [2022-04-28 08:32:22,620 INFO L290 TraceCheckUtils]: 83: Hoare triple {47626#false} assume !false; {47626#false} is VALID [2022-04-28 08:32:22,621 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:32:22,621 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:32:22,621 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [535905570] [2022-04-28 08:32:22,621 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [535905570] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:32:22,621 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:32:22,621 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:32:22,621 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:32:22,621 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [587572806] [2022-04-28 08:32:22,621 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [587572806] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:32:22,621 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:32:22,621 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:32:22,621 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1225775213] [2022-04-28 08:32:22,622 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:32:22,622 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.8) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) Word has length 84 [2022-04-28 08:32:22,622 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:32:22,622 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 5.8) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-04-28 08:32:22,679 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:32:22,680 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-28 08:32:22,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:32:22,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-28 08:32:22,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-28 08:32:22,680 INFO L87 Difference]: Start difference. First operand 329 states and 418 transitions. Second operand has 10 states, 10 states have (on average 5.8) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-04-28 08:32:24,850 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:32:32,626 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:32:32,626 INFO L93 Difference]: Finished difference Result 416 states and 527 transitions. [2022-04-28 08:32:32,626 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-04-28 08:32:32,626 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.8) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) Word has length 84 [2022-04-28 08:32:32,626 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:32:32,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.8) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-04-28 08:32:32,638 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 452 transitions. [2022-04-28 08:32:32,639 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.8) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-04-28 08:32:32,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 452 transitions. [2022-04-28 08:32:32,641 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 16 states and 452 transitions. [2022-04-28 08:32:33,066 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 452 edges. 452 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:32:33,072 INFO L225 Difference]: With dead ends: 416 [2022-04-28 08:32:33,072 INFO L226 Difference]: Without dead ends: 357 [2022-04-28 08:32:33,072 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=105, Invalid=237, Unknown=0, NotChecked=0, Total=342 [2022-04-28 08:32:33,073 INFO L413 NwaCegarLoop]: 264 mSDtfsCounter, 731 mSDsluCounter, 276 mSDsCounter, 0 mSdLazyCounter, 767 mSolverCounterSat, 255 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 734 SdHoareTripleChecker+Valid, 540 SdHoareTripleChecker+Invalid, 1023 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 255 IncrementalHoareTripleChecker+Valid, 767 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.8s IncrementalHoareTripleChecker+Time [2022-04-28 08:32:33,073 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [734 Valid, 540 Invalid, 1023 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [255 Valid, 767 Invalid, 1 Unknown, 0 Unchecked, 5.8s Time] [2022-04-28 08:32:33,073 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 357 states. [2022-04-28 08:32:33,595 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 357 to 327. [2022-04-28 08:32:33,595 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:32:33,596 INFO L82 GeneralOperation]: Start isEquivalent. First operand 357 states. Second operand has 327 states, 261 states have (on average 1.314176245210728) internal successors, (343), 264 states have internal predecessors, (343), 35 states have call successors, (35), 29 states have call predecessors, (35), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:32:33,596 INFO L74 IsIncluded]: Start isIncluded. First operand 357 states. Second operand has 327 states, 261 states have (on average 1.314176245210728) internal successors, (343), 264 states have internal predecessors, (343), 35 states have call successors, (35), 29 states have call predecessors, (35), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:32:33,596 INFO L87 Difference]: Start difference. First operand 357 states. Second operand has 327 states, 261 states have (on average 1.314176245210728) internal successors, (343), 264 states have internal predecessors, (343), 35 states have call successors, (35), 29 states have call predecessors, (35), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:32:33,602 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:32:33,602 INFO L93 Difference]: Finished difference Result 357 states and 452 transitions. [2022-04-28 08:32:33,602 INFO L276 IsEmpty]: Start isEmpty. Operand 357 states and 452 transitions. [2022-04-28 08:32:33,603 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:32:33,603 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:32:33,603 INFO L74 IsIncluded]: Start isIncluded. First operand has 327 states, 261 states have (on average 1.314176245210728) internal successors, (343), 264 states have internal predecessors, (343), 35 states have call successors, (35), 29 states have call predecessors, (35), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) Second operand 357 states. [2022-04-28 08:32:33,603 INFO L87 Difference]: Start difference. First operand has 327 states, 261 states have (on average 1.314176245210728) internal successors, (343), 264 states have internal predecessors, (343), 35 states have call successors, (35), 29 states have call predecessors, (35), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) Second operand 357 states. [2022-04-28 08:32:33,608 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:32:33,609 INFO L93 Difference]: Finished difference Result 357 states and 452 transitions. [2022-04-28 08:32:33,609 INFO L276 IsEmpty]: Start isEmpty. Operand 357 states and 452 transitions. [2022-04-28 08:32:33,609 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:32:33,609 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:32:33,609 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:32:33,609 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:32:33,610 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 327 states, 261 states have (on average 1.314176245210728) internal successors, (343), 264 states have internal predecessors, (343), 35 states have call successors, (35), 29 states have call predecessors, (35), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:32:33,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 327 states to 327 states and 413 transitions. [2022-04-28 08:32:33,615 INFO L78 Accepts]: Start accepts. Automaton has 327 states and 413 transitions. Word has length 84 [2022-04-28 08:32:33,615 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:32:33,616 INFO L495 AbstractCegarLoop]: Abstraction has 327 states and 413 transitions. [2022-04-28 08:32:33,616 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.8) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-04-28 08:32:33,616 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 327 states and 413 transitions. [2022-04-28 08:32:34,289 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 413 edges. 413 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:32:34,289 INFO L276 IsEmpty]: Start isEmpty. Operand 327 states and 413 transitions. [2022-04-28 08:32:34,289 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2022-04-28 08:32:34,290 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:32:34,290 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:32:34,290 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-04-28 08:32:34,290 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:32:34,290 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:32:34,290 INFO L85 PathProgramCache]: Analyzing trace with hash -1690581556, now seen corresponding path program 1 times [2022-04-28 08:32:34,290 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:32:34,290 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [2010910436] [2022-04-28 08:32:34,291 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:32:34,291 INFO L85 PathProgramCache]: Analyzing trace with hash -1690581556, now seen corresponding path program 2 times [2022-04-28 08:32:34,291 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:32:34,291 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [760971905] [2022-04-28 08:32:34,291 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:32:34,291 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:32:34,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:34,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:32:34,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:34,418 INFO L290 TraceCheckUtils]: 0: Hoare triple {49969#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {49917#true} is VALID [2022-04-28 08:32:34,418 INFO L290 TraceCheckUtils]: 1: Hoare triple {49917#true} assume true; {49917#true} is VALID [2022-04-28 08:32:34,418 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {49917#true} {49917#true} #1270#return; {49917#true} is VALID [2022-04-28 08:32:34,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:32:34,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:34,459 INFO L290 TraceCheckUtils]: 0: Hoare triple {49970#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {49971#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:32:34,460 INFO L290 TraceCheckUtils]: 1: Hoare triple {49971#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {49971#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:32:34,460 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {49971#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {49917#true} #1216#return; {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:32:34,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:34,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:32:34,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:34,487 INFO L290 TraceCheckUtils]: 0: Hoare triple {49917#true} ~cond := #in~cond; {49917#true} is VALID [2022-04-28 08:32:34,487 INFO L290 TraceCheckUtils]: 1: Hoare triple {49917#true} assume !(0 == ~cond); {49917#true} is VALID [2022-04-28 08:32:34,487 INFO L290 TraceCheckUtils]: 2: Hoare triple {49917#true} assume true; {49917#true} is VALID [2022-04-28 08:32:34,487 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {49917#true} {49917#true} #1254#return; {49917#true} is VALID [2022-04-28 08:32:34,487 INFO L290 TraceCheckUtils]: 0: Hoare triple {49972#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {49917#true} is VALID [2022-04-28 08:32:34,488 INFO L272 TraceCheckUtils]: 1: Hoare triple {49917#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {49917#true} is VALID [2022-04-28 08:32:34,488 INFO L290 TraceCheckUtils]: 2: Hoare triple {49917#true} ~cond := #in~cond; {49917#true} is VALID [2022-04-28 08:32:34,488 INFO L290 TraceCheckUtils]: 3: Hoare triple {49917#true} assume !(0 == ~cond); {49917#true} is VALID [2022-04-28 08:32:34,488 INFO L290 TraceCheckUtils]: 4: Hoare triple {49917#true} assume true; {49917#true} is VALID [2022-04-28 08:32:34,488 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {49917#true} {49917#true} #1254#return; {49917#true} is VALID [2022-04-28 08:32:34,488 INFO L290 TraceCheckUtils]: 6: Hoare triple {49917#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {49917#true} is VALID [2022-04-28 08:32:34,488 INFO L290 TraceCheckUtils]: 7: Hoare triple {49917#true} assume true; {49917#true} is VALID [2022-04-28 08:32:34,489 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {49917#true} {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1218#return; {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:32:34,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:34,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:32:34,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:34,513 INFO L290 TraceCheckUtils]: 0: Hoare triple {49977#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {49917#true} is VALID [2022-04-28 08:32:34,513 INFO L290 TraceCheckUtils]: 1: Hoare triple {49917#true} assume !(0 == ~__BLAST_NONDET~5); {49917#true} is VALID [2022-04-28 08:32:34,513 INFO L290 TraceCheckUtils]: 2: Hoare triple {49917#true} #res := -1073741823; {49917#true} is VALID [2022-04-28 08:32:34,513 INFO L290 TraceCheckUtils]: 3: Hoare triple {49917#true} assume true; {49917#true} is VALID [2022-04-28 08:32:34,513 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {49917#true} {49917#true} #1176#return; {49917#true} is VALID [2022-04-28 08:32:34,513 INFO L290 TraceCheckUtils]: 0: Hoare triple {49977#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {49917#true} is VALID [2022-04-28 08:32:34,514 INFO L272 TraceCheckUtils]: 1: Hoare triple {49917#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {49977#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:32:34,514 INFO L290 TraceCheckUtils]: 2: Hoare triple {49977#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {49917#true} is VALID [2022-04-28 08:32:34,514 INFO L290 TraceCheckUtils]: 3: Hoare triple {49917#true} assume !(0 == ~__BLAST_NONDET~5); {49917#true} is VALID [2022-04-28 08:32:34,514 INFO L290 TraceCheckUtils]: 4: Hoare triple {49917#true} #res := -1073741823; {49917#true} is VALID [2022-04-28 08:32:34,514 INFO L290 TraceCheckUtils]: 5: Hoare triple {49917#true} assume true; {49917#true} is VALID [2022-04-28 08:32:34,515 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {49917#true} {49917#true} #1176#return; {49917#true} is VALID [2022-04-28 08:32:34,515 INFO L290 TraceCheckUtils]: 7: Hoare triple {49917#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {49917#true} is VALID [2022-04-28 08:32:34,515 INFO L290 TraceCheckUtils]: 8: Hoare triple {49917#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {49917#true} is VALID [2022-04-28 08:32:34,515 INFO L290 TraceCheckUtils]: 9: Hoare triple {49917#true} assume true; {49917#true} is VALID [2022-04-28 08:32:34,515 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {49917#true} {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1220#return; {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:32:34,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:34,535 INFO L290 TraceCheckUtils]: 0: Hoare triple {49983#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {49917#true} is VALID [2022-04-28 08:32:34,535 INFO L290 TraceCheckUtils]: 1: Hoare triple {49917#true} assume true; {49917#true} is VALID [2022-04-28 08:32:34,535 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {49917#true} {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1222#return; {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-04-28 08:32:34,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:34,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 08:32:34,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:34,590 INFO L290 TraceCheckUtils]: 0: Hoare triple {49996#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet204 && #t~nondet204 <= 2147483647;~__BLAST_NONDET~16 := #t~nondet204;havoc #t~nondet204;havoc ~compRetStatus~1;havoc ~returnVal~0;~lcontext~1.base, ~lcontext~1.offset := 0, 0;havoc ~tmp~12; {49917#true} is VALID [2022-04-28 08:32:34,590 INFO L290 TraceCheckUtils]: 1: Hoare triple {49917#true} assume !(0 != ~compRegistered~0); {49917#true} is VALID [2022-04-28 08:32:34,590 INFO L290 TraceCheckUtils]: 2: Hoare triple {49917#true} assume !(0 == ~__BLAST_NONDET~16); {49917#true} is VALID [2022-04-28 08:32:34,590 INFO L290 TraceCheckUtils]: 3: Hoare triple {49917#true} assume 1 == ~__BLAST_NONDET~16; {49917#true} is VALID [2022-04-28 08:32:34,591 INFO L290 TraceCheckUtils]: 4: Hoare triple {49917#true} ~returnVal~0 := -1073741823; {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} is VALID [2022-04-28 08:32:34,591 INFO L290 TraceCheckUtils]: 5: Hoare triple {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} assume !(~s~0 == ~NP~0); {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} is VALID [2022-04-28 08:32:34,591 INFO L290 TraceCheckUtils]: 6: Hoare triple {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} assume ~s~0 == ~MPR1~0; {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} is VALID [2022-04-28 08:32:34,592 INFO L290 TraceCheckUtils]: 7: Hoare triple {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} assume 259 == ~returnVal~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {49918#false} is VALID [2022-04-28 08:32:34,592 INFO L290 TraceCheckUtils]: 8: Hoare triple {49918#false} #res := ~returnVal~0; {49918#false} is VALID [2022-04-28 08:32:34,592 INFO L290 TraceCheckUtils]: 9: Hoare triple {49918#false} assume true; {49918#false} is VALID [2022-04-28 08:32:34,592 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {49918#false} {49917#true} #1268#return; {49918#false} is VALID [2022-04-28 08:32:34,592 INFO L290 TraceCheckUtils]: 0: Hoare triple {49984#(and (= |old(#length)| |#length|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~4.base, ~irpStack~4.offset;havoc ~devExt~4.base, ~devExt~4.offset;call ~#powerState~0.base, ~#powerState~0.offset := #Ultimate.allocOnStack(4);havoc ~powerType~0;havoc ~tmp~3;call #t~mem123.base, #t~mem123.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~4.base, ~devExt~4.offset := #t~mem123.base, #t~mem123.offset;havoc #t~mem123.base, #t~mem123.offset;call #t~mem124.base, #t~mem124.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~4.base, ~irpStack~4.offset := #t~mem124.base, #t~mem124.offset;havoc #t~mem124.base, #t~mem124.offset;call #t~mem125 := read~int(~irpStack~4.base, 8 + ~irpStack~4.offset, 4);~powerType~0 := #t~mem125;havoc #t~mem125;call #t~mem126 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call #t~mem127 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call write~int(#t~mem126, ~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem127, ~#powerState~0.base, ~#powerState~0.offset, 4);havoc #t~mem126;havoc #t~mem127;call #t~mem128 := read~int(~irpStack~4.base, 1 + ~irpStack~4.offset, 1); {49917#true} is VALID [2022-04-28 08:32:34,592 INFO L290 TraceCheckUtils]: 1: Hoare triple {49917#true} assume 2 == #t~mem128 % 256;havoc #t~mem128; {49917#true} is VALID [2022-04-28 08:32:34,592 INFO L290 TraceCheckUtils]: 2: Hoare triple {49917#true} assume 1 == ~powerType~0;call #t~mem132 := read~int(~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem132, ~devExt~4.base, 48 + ~devExt~4.offset, 4);havoc #t~mem132; {49917#true} is VALID [2022-04-28 08:32:34,592 INFO L290 TraceCheckUtils]: 3: Hoare triple {49917#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {49917#true} is VALID [2022-04-28 08:32:34,592 INFO L290 TraceCheckUtils]: 4: Hoare triple {49917#true} call #t~mem133 := read~int(~Irp.base, 35 + ~Irp.offset, 1);call write~int((if (1 + #t~mem133) % 256 <= 127 then (1 + #t~mem133) % 256 else (1 + #t~mem133) % 256 - 256), ~Irp.base, 35 + ~Irp.offset, 1);havoc #t~mem133;call #t~mem134.base, #t~mem134.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);call write~$Pointer$(#t~mem134.base, 36 + #t~mem134.offset, ~Irp.base, 96 + ~Irp.offset, 4);havoc #t~mem134.base, #t~mem134.offset;call #t~mem135.base, #t~mem135.offset := read~$Pointer$(~devExt~4.base, 8 + ~devExt~4.offset, 4); {49917#true} is VALID [2022-04-28 08:32:34,593 INFO L272 TraceCheckUtils]: 5: Hoare triple {49917#true} call #t~ret136 := PoCallDriver(#t~mem135.base, #t~mem135.offset, ~Irp.base, ~Irp.offset); {49996#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:34,593 INFO L290 TraceCheckUtils]: 6: Hoare triple {49996#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet204 && #t~nondet204 <= 2147483647;~__BLAST_NONDET~16 := #t~nondet204;havoc #t~nondet204;havoc ~compRetStatus~1;havoc ~returnVal~0;~lcontext~1.base, ~lcontext~1.offset := 0, 0;havoc ~tmp~12; {49917#true} is VALID [2022-04-28 08:32:34,593 INFO L290 TraceCheckUtils]: 7: Hoare triple {49917#true} assume !(0 != ~compRegistered~0); {49917#true} is VALID [2022-04-28 08:32:34,593 INFO L290 TraceCheckUtils]: 8: Hoare triple {49917#true} assume !(0 == ~__BLAST_NONDET~16); {49917#true} is VALID [2022-04-28 08:32:34,593 INFO L290 TraceCheckUtils]: 9: Hoare triple {49917#true} assume 1 == ~__BLAST_NONDET~16; {49917#true} is VALID [2022-04-28 08:32:34,594 INFO L290 TraceCheckUtils]: 10: Hoare triple {49917#true} ~returnVal~0 := -1073741823; {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} is VALID [2022-04-28 08:32:34,594 INFO L290 TraceCheckUtils]: 11: Hoare triple {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} assume !(~s~0 == ~NP~0); {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} is VALID [2022-04-28 08:32:34,594 INFO L290 TraceCheckUtils]: 12: Hoare triple {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} assume ~s~0 == ~MPR1~0; {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} is VALID [2022-04-28 08:32:34,594 INFO L290 TraceCheckUtils]: 13: Hoare triple {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} assume 259 == ~returnVal~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {49918#false} is VALID [2022-04-28 08:32:34,594 INFO L290 TraceCheckUtils]: 14: Hoare triple {49918#false} #res := ~returnVal~0; {49918#false} is VALID [2022-04-28 08:32:34,595 INFO L290 TraceCheckUtils]: 15: Hoare triple {49918#false} assume true; {49918#false} is VALID [2022-04-28 08:32:34,595 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {49918#false} {49917#true} #1268#return; {49918#false} is VALID [2022-04-28 08:32:34,595 INFO L290 TraceCheckUtils]: 17: Hoare triple {49918#false} assume -2147483648 <= #t~ret136 && #t~ret136 <= 2147483647;~tmp~3 := #t~ret136;havoc #t~mem135.base, #t~mem135.offset;havoc #t~ret136;#res := ~tmp~3;call ULTIMATE.dealloc(~#powerState~0.base, ~#powerState~0.offset);havoc ~#powerState~0.base, ~#powerState~0.offset; {49918#false} is VALID [2022-04-28 08:32:34,595 INFO L290 TraceCheckUtils]: 18: Hoare triple {49918#false} assume true; {49918#false} is VALID [2022-04-28 08:32:34,595 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {49918#false} {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1232#return; {49918#false} is VALID [2022-04-28 08:32:34,596 INFO L272 TraceCheckUtils]: 0: Hoare triple {49917#true} call ULTIMATE.init(); {49969#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:32:34,596 INFO L290 TraceCheckUtils]: 1: Hoare triple {49969#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {49917#true} is VALID [2022-04-28 08:32:34,596 INFO L290 TraceCheckUtils]: 2: Hoare triple {49917#true} assume true; {49917#true} is VALID [2022-04-28 08:32:34,596 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {49917#true} {49917#true} #1270#return; {49917#true} is VALID [2022-04-28 08:32:34,596 INFO L272 TraceCheckUtils]: 4: Hoare triple {49917#true} call #t~ret213 := main(); {49917#true} is VALID [2022-04-28 08:32:34,596 INFO L290 TraceCheckUtils]: 5: Hoare triple {49917#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {49917#true} is VALID [2022-04-28 08:32:34,597 INFO L272 TraceCheckUtils]: 6: Hoare triple {49917#true} call _BLAST_init(); {49970#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:34,598 INFO L290 TraceCheckUtils]: 7: Hoare triple {49970#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {49971#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:32:34,598 INFO L290 TraceCheckUtils]: 8: Hoare triple {49971#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {49971#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:32:34,599 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {49971#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {49917#true} #1216#return; {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,599 INFO L272 TraceCheckUtils]: 10: Hoare triple {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {49972#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:32:34,600 INFO L290 TraceCheckUtils]: 11: Hoare triple {49972#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {49917#true} is VALID [2022-04-28 08:32:34,600 INFO L272 TraceCheckUtils]: 12: Hoare triple {49917#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {49917#true} is VALID [2022-04-28 08:32:34,600 INFO L290 TraceCheckUtils]: 13: Hoare triple {49917#true} ~cond := #in~cond; {49917#true} is VALID [2022-04-28 08:32:34,600 INFO L290 TraceCheckUtils]: 14: Hoare triple {49917#true} assume !(0 == ~cond); {49917#true} is VALID [2022-04-28 08:32:34,600 INFO L290 TraceCheckUtils]: 15: Hoare triple {49917#true} assume true; {49917#true} is VALID [2022-04-28 08:32:34,600 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {49917#true} {49917#true} #1254#return; {49917#true} is VALID [2022-04-28 08:32:34,600 INFO L290 TraceCheckUtils]: 17: Hoare triple {49917#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {49917#true} is VALID [2022-04-28 08:32:34,600 INFO L290 TraceCheckUtils]: 18: Hoare triple {49917#true} assume true; {49917#true} is VALID [2022-04-28 08:32:34,601 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {49917#true} {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1218#return; {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,602 INFO L290 TraceCheckUtils]: 20: Hoare triple {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,602 INFO L290 TraceCheckUtils]: 21: Hoare triple {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,603 INFO L290 TraceCheckUtils]: 22: Hoare triple {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,603 INFO L272 TraceCheckUtils]: 23: Hoare triple {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {49977#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:32:34,604 INFO L290 TraceCheckUtils]: 24: Hoare triple {49977#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {49917#true} is VALID [2022-04-28 08:32:34,605 INFO L272 TraceCheckUtils]: 25: Hoare triple {49917#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {49977#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:32:34,605 INFO L290 TraceCheckUtils]: 26: Hoare triple {49977#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {49917#true} is VALID [2022-04-28 08:32:34,605 INFO L290 TraceCheckUtils]: 27: Hoare triple {49917#true} assume !(0 == ~__BLAST_NONDET~5); {49917#true} is VALID [2022-04-28 08:32:34,605 INFO L290 TraceCheckUtils]: 28: Hoare triple {49917#true} #res := -1073741823; {49917#true} is VALID [2022-04-28 08:32:34,605 INFO L290 TraceCheckUtils]: 29: Hoare triple {49917#true} assume true; {49917#true} is VALID [2022-04-28 08:32:34,605 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {49917#true} {49917#true} #1176#return; {49917#true} is VALID [2022-04-28 08:32:34,605 INFO L290 TraceCheckUtils]: 31: Hoare triple {49917#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {49917#true} is VALID [2022-04-28 08:32:34,605 INFO L290 TraceCheckUtils]: 32: Hoare triple {49917#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {49917#true} is VALID [2022-04-28 08:32:34,605 INFO L290 TraceCheckUtils]: 33: Hoare triple {49917#true} assume true; {49917#true} is VALID [2022-04-28 08:32:34,606 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {49917#true} {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1220#return; {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,606 INFO L290 TraceCheckUtils]: 35: Hoare triple {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,607 INFO L272 TraceCheckUtils]: 36: Hoare triple {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call stub_driver_init(); {49983#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:34,607 INFO L290 TraceCheckUtils]: 37: Hoare triple {49983#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {49917#true} is VALID [2022-04-28 08:32:34,607 INFO L290 TraceCheckUtils]: 38: Hoare triple {49917#true} assume true; {49917#true} is VALID [2022-04-28 08:32:34,607 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {49917#true} {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1222#return; {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,608 INFO L290 TraceCheckUtils]: 40: Hoare triple {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !!(~status~5 >= 0); {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,608 INFO L290 TraceCheckUtils]: 41: Hoare triple {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~__BLAST_NONDET~0); {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,608 INFO L290 TraceCheckUtils]: 42: Hoare triple {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(1 == ~__BLAST_NONDET~0); {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,609 INFO L290 TraceCheckUtils]: 43: Hoare triple {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(2 == ~__BLAST_NONDET~0); {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,609 INFO L290 TraceCheckUtils]: 44: Hoare triple {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(3 == ~__BLAST_NONDET~0); {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,609 INFO L290 TraceCheckUtils]: 45: Hoare triple {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 4 == ~__BLAST_NONDET~0; {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:34,610 INFO L272 TraceCheckUtils]: 46: Hoare triple {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret175 := KbFilter_Power(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {49984#(and (= |old(#length)| |#length|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:34,610 INFO L290 TraceCheckUtils]: 47: Hoare triple {49984#(and (= |old(#length)| |#length|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~4.base, ~irpStack~4.offset;havoc ~devExt~4.base, ~devExt~4.offset;call ~#powerState~0.base, ~#powerState~0.offset := #Ultimate.allocOnStack(4);havoc ~powerType~0;havoc ~tmp~3;call #t~mem123.base, #t~mem123.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~4.base, ~devExt~4.offset := #t~mem123.base, #t~mem123.offset;havoc #t~mem123.base, #t~mem123.offset;call #t~mem124.base, #t~mem124.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~4.base, ~irpStack~4.offset := #t~mem124.base, #t~mem124.offset;havoc #t~mem124.base, #t~mem124.offset;call #t~mem125 := read~int(~irpStack~4.base, 8 + ~irpStack~4.offset, 4);~powerType~0 := #t~mem125;havoc #t~mem125;call #t~mem126 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call #t~mem127 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call write~int(#t~mem126, ~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem127, ~#powerState~0.base, ~#powerState~0.offset, 4);havoc #t~mem126;havoc #t~mem127;call #t~mem128 := read~int(~irpStack~4.base, 1 + ~irpStack~4.offset, 1); {49917#true} is VALID [2022-04-28 08:32:34,610 INFO L290 TraceCheckUtils]: 48: Hoare triple {49917#true} assume 2 == #t~mem128 % 256;havoc #t~mem128; {49917#true} is VALID [2022-04-28 08:32:34,610 INFO L290 TraceCheckUtils]: 49: Hoare triple {49917#true} assume 1 == ~powerType~0;call #t~mem132 := read~int(~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem132, ~devExt~4.base, 48 + ~devExt~4.offset, 4);havoc #t~mem132; {49917#true} is VALID [2022-04-28 08:32:34,610 INFO L290 TraceCheckUtils]: 50: Hoare triple {49917#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {49917#true} is VALID [2022-04-28 08:32:34,611 INFO L290 TraceCheckUtils]: 51: Hoare triple {49917#true} call #t~mem133 := read~int(~Irp.base, 35 + ~Irp.offset, 1);call write~int((if (1 + #t~mem133) % 256 <= 127 then (1 + #t~mem133) % 256 else (1 + #t~mem133) % 256 - 256), ~Irp.base, 35 + ~Irp.offset, 1);havoc #t~mem133;call #t~mem134.base, #t~mem134.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);call write~$Pointer$(#t~mem134.base, 36 + #t~mem134.offset, ~Irp.base, 96 + ~Irp.offset, 4);havoc #t~mem134.base, #t~mem134.offset;call #t~mem135.base, #t~mem135.offset := read~$Pointer$(~devExt~4.base, 8 + ~devExt~4.offset, 4); {49917#true} is VALID [2022-04-28 08:32:34,611 INFO L272 TraceCheckUtils]: 52: Hoare triple {49917#true} call #t~ret136 := PoCallDriver(#t~mem135.base, #t~mem135.offset, ~Irp.base, ~Irp.offset); {49996#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:34,611 INFO L290 TraceCheckUtils]: 53: Hoare triple {49996#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet204 && #t~nondet204 <= 2147483647;~__BLAST_NONDET~16 := #t~nondet204;havoc #t~nondet204;havoc ~compRetStatus~1;havoc ~returnVal~0;~lcontext~1.base, ~lcontext~1.offset := 0, 0;havoc ~tmp~12; {49917#true} is VALID [2022-04-28 08:32:34,611 INFO L290 TraceCheckUtils]: 54: Hoare triple {49917#true} assume !(0 != ~compRegistered~0); {49917#true} is VALID [2022-04-28 08:32:34,611 INFO L290 TraceCheckUtils]: 55: Hoare triple {49917#true} assume !(0 == ~__BLAST_NONDET~16); {49917#true} is VALID [2022-04-28 08:32:34,612 INFO L290 TraceCheckUtils]: 56: Hoare triple {49917#true} assume 1 == ~__BLAST_NONDET~16; {49917#true} is VALID [2022-04-28 08:32:34,612 INFO L290 TraceCheckUtils]: 57: Hoare triple {49917#true} ~returnVal~0 := -1073741823; {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} is VALID [2022-04-28 08:32:34,612 INFO L290 TraceCheckUtils]: 58: Hoare triple {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} assume !(~s~0 == ~NP~0); {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} is VALID [2022-04-28 08:32:34,612 INFO L290 TraceCheckUtils]: 59: Hoare triple {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} assume ~s~0 == ~MPR1~0; {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} is VALID [2022-04-28 08:32:34,613 INFO L290 TraceCheckUtils]: 60: Hoare triple {49997#(<= (+ 1073741823 PoCallDriver_~returnVal~0) 0)} assume 259 == ~returnVal~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {49918#false} is VALID [2022-04-28 08:32:34,613 INFO L290 TraceCheckUtils]: 61: Hoare triple {49918#false} #res := ~returnVal~0; {49918#false} is VALID [2022-04-28 08:32:34,613 INFO L290 TraceCheckUtils]: 62: Hoare triple {49918#false} assume true; {49918#false} is VALID [2022-04-28 08:32:34,613 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {49918#false} {49917#true} #1268#return; {49918#false} is VALID [2022-04-28 08:32:34,613 INFO L290 TraceCheckUtils]: 64: Hoare triple {49918#false} assume -2147483648 <= #t~ret136 && #t~ret136 <= 2147483647;~tmp~3 := #t~ret136;havoc #t~mem135.base, #t~mem135.offset;havoc #t~ret136;#res := ~tmp~3;call ULTIMATE.dealloc(~#powerState~0.base, ~#powerState~0.offset);havoc ~#powerState~0.base, ~#powerState~0.offset; {49918#false} is VALID [2022-04-28 08:32:34,613 INFO L290 TraceCheckUtils]: 65: Hoare triple {49918#false} assume true; {49918#false} is VALID [2022-04-28 08:32:34,613 INFO L284 TraceCheckUtils]: 66: Hoare quadruple {49918#false} {49925#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1232#return; {49918#false} is VALID [2022-04-28 08:32:34,613 INFO L290 TraceCheckUtils]: 67: Hoare triple {49918#false} assume -2147483648 <= #t~ret175 && #t~ret175 <= 2147483647;~status~5 := #t~ret175;havoc #t~ret175; {49918#false} is VALID [2022-04-28 08:32:34,613 INFO L290 TraceCheckUtils]: 68: Hoare triple {49918#false} assume 0 != ~we_should_unload~0; {49918#false} is VALID [2022-04-28 08:32:34,613 INFO L290 TraceCheckUtils]: 69: Hoare triple {49918#false} assume !(1 == ~pended~0); {49918#false} is VALID [2022-04-28 08:32:34,613 INFO L290 TraceCheckUtils]: 70: Hoare triple {49918#false} assume !(1 == ~pended~0); {49918#false} is VALID [2022-04-28 08:32:34,613 INFO L290 TraceCheckUtils]: 71: Hoare triple {49918#false} assume !(~s~0 == ~UNLOADED~0); {49918#false} is VALID [2022-04-28 08:32:34,614 INFO L290 TraceCheckUtils]: 72: Hoare triple {49918#false} assume !(-1 == ~status~5); {49918#false} is VALID [2022-04-28 08:32:34,614 INFO L290 TraceCheckUtils]: 73: Hoare triple {49918#false} assume ~s~0 != ~SKIP2~0; {49918#false} is VALID [2022-04-28 08:32:34,614 INFO L290 TraceCheckUtils]: 74: Hoare triple {49918#false} assume !(~s~0 != ~IPC~0); {49918#false} is VALID [2022-04-28 08:32:34,614 INFO L290 TraceCheckUtils]: 75: Hoare triple {49918#false} assume !(1 == ~pended~0); {49918#false} is VALID [2022-04-28 08:32:34,614 INFO L290 TraceCheckUtils]: 76: Hoare triple {49918#false} assume ~s~0 == ~DC~0; {49918#false} is VALID [2022-04-28 08:32:34,614 INFO L290 TraceCheckUtils]: 77: Hoare triple {49918#false} assume 259 == ~status~5; {49918#false} is VALID [2022-04-28 08:32:34,614 INFO L272 TraceCheckUtils]: 78: Hoare triple {49918#false} call errorFn(); {49918#false} is VALID [2022-04-28 08:32:34,614 INFO L290 TraceCheckUtils]: 79: Hoare triple {49918#false} assume !false; {49918#false} is VALID [2022-04-28 08:32:34,615 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:32:34,615 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:32:34,615 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [760971905] [2022-04-28 08:32:34,615 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [760971905] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:32:34,615 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:32:34,615 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:32:34,616 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:32:34,616 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [2010910436] [2022-04-28 08:32:34,616 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [2010910436] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:32:34,616 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:32:34,616 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:32:34,616 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1157813225] [2022-04-28 08:32:34,616 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:32:34,616 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 5.0) internal successors, (60), 5 states have internal predecessors, (60), 3 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) Word has length 80 [2022-04-28 08:32:34,617 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:32:34,617 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 5.0) internal successors, (60), 5 states have internal predecessors, (60), 3 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:32:34,681 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:32:34,681 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 08:32:34,681 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:32:34,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 08:32:34,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:32:34,682 INFO L87 Difference]: Start difference. First operand 327 states and 413 transitions. Second operand has 12 states, 12 states have (on average 5.0) internal successors, (60), 5 states have internal predecessors, (60), 3 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:32:36,790 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:32:46,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:32:46,129 INFO L93 Difference]: Finished difference Result 371 states and 465 transitions. [2022-04-28 08:32:46,129 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-28 08:32:46,129 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 5.0) internal successors, (60), 5 states have internal predecessors, (60), 3 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) Word has length 80 [2022-04-28 08:32:46,130 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:32:46,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 5.0) internal successors, (60), 5 states have internal predecessors, (60), 3 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:32:46,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 400 transitions. [2022-04-28 08:32:46,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 5.0) internal successors, (60), 5 states have internal predecessors, (60), 3 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:32:46,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 400 transitions. [2022-04-28 08:32:46,134 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 400 transitions. [2022-04-28 08:32:46,639 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 400 edges. 400 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:32:46,645 INFO L225 Difference]: With dead ends: 371 [2022-04-28 08:32:46,645 INFO L226 Difference]: Without dead ends: 346 [2022-04-28 08:32:46,645 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 61 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=127, Invalid=293, Unknown=0, NotChecked=0, Total=420 [2022-04-28 08:32:46,646 INFO L413 NwaCegarLoop]: 260 mSDtfsCounter, 792 mSDsluCounter, 318 mSDsCounter, 0 mSdLazyCounter, 1031 mSolverCounterSat, 232 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 802 SdHoareTripleChecker+Valid, 578 SdHoareTripleChecker+Invalid, 1264 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 232 IncrementalHoareTripleChecker+Valid, 1031 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.9s IncrementalHoareTripleChecker+Time [2022-04-28 08:32:46,646 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [802 Valid, 578 Invalid, 1264 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [232 Valid, 1031 Invalid, 1 Unknown, 0 Unchecked, 5.9s Time] [2022-04-28 08:32:46,646 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 346 states. [2022-04-28 08:32:47,317 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 346 to 326. [2022-04-28 08:32:47,318 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:32:47,318 INFO L82 GeneralOperation]: Start isEquivalent. First operand 346 states. Second operand has 326 states, 260 states have (on average 1.3115384615384615) internal successors, (341), 263 states have internal predecessors, (341), 35 states have call successors, (35), 29 states have call predecessors, (35), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:32:47,318 INFO L74 IsIncluded]: Start isIncluded. First operand 346 states. Second operand has 326 states, 260 states have (on average 1.3115384615384615) internal successors, (341), 263 states have internal predecessors, (341), 35 states have call successors, (35), 29 states have call predecessors, (35), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:32:47,319 INFO L87 Difference]: Start difference. First operand 346 states. Second operand has 326 states, 260 states have (on average 1.3115384615384615) internal successors, (341), 263 states have internal predecessors, (341), 35 states have call successors, (35), 29 states have call predecessors, (35), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:32:47,323 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:32:47,324 INFO L93 Difference]: Finished difference Result 346 states and 438 transitions. [2022-04-28 08:32:47,324 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 438 transitions. [2022-04-28 08:32:47,324 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:32:47,324 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:32:47,324 INFO L74 IsIncluded]: Start isIncluded. First operand has 326 states, 260 states have (on average 1.3115384615384615) internal successors, (341), 263 states have internal predecessors, (341), 35 states have call successors, (35), 29 states have call predecessors, (35), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) Second operand 346 states. [2022-04-28 08:32:47,325 INFO L87 Difference]: Start difference. First operand has 326 states, 260 states have (on average 1.3115384615384615) internal successors, (341), 263 states have internal predecessors, (341), 35 states have call successors, (35), 29 states have call predecessors, (35), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) Second operand 346 states. [2022-04-28 08:32:47,329 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:32:47,329 INFO L93 Difference]: Finished difference Result 346 states and 438 transitions. [2022-04-28 08:32:47,329 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 438 transitions. [2022-04-28 08:32:47,330 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:32:47,330 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:32:47,330 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:32:47,330 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:32:47,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 326 states, 260 states have (on average 1.3115384615384615) internal successors, (341), 263 states have internal predecessors, (341), 35 states have call successors, (35), 29 states have call predecessors, (35), 30 states have return successors, (35), 33 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:32:47,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 326 states to 326 states and 411 transitions. [2022-04-28 08:32:47,336 INFO L78 Accepts]: Start accepts. Automaton has 326 states and 411 transitions. Word has length 80 [2022-04-28 08:32:47,336 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:32:47,336 INFO L495 AbstractCegarLoop]: Abstraction has 326 states and 411 transitions. [2022-04-28 08:32:47,336 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 5.0) internal successors, (60), 5 states have internal predecessors, (60), 3 states have call successors, (11), 9 states have call predecessors, (11), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2022-04-28 08:32:47,336 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 326 states and 411 transitions. [2022-04-28 08:32:48,097 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 411 edges. 411 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:32:48,097 INFO L276 IsEmpty]: Start isEmpty. Operand 326 states and 411 transitions. [2022-04-28 08:32:48,098 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2022-04-28 08:32:48,098 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:32:48,098 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:32:48,098 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2022-04-28 08:32:48,098 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:32:48,099 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:32:48,099 INFO L85 PathProgramCache]: Analyzing trace with hash 664933900, now seen corresponding path program 1 times [2022-04-28 08:32:48,099 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:32:48,099 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [641476780] [2022-04-28 08:32:48,099 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:32:48,099 INFO L85 PathProgramCache]: Analyzing trace with hash 664933900, now seen corresponding path program 2 times [2022-04-28 08:32:48,099 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:32:48,099 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [31636304] [2022-04-28 08:32:48,099 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:32:48,099 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:32:48,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:48,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:32:48,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:48,262 INFO L290 TraceCheckUtils]: 0: Hoare triple {52161#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {52109#true} is VALID [2022-04-28 08:32:48,262 INFO L290 TraceCheckUtils]: 1: Hoare triple {52109#true} assume true; {52109#true} is VALID [2022-04-28 08:32:48,262 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {52109#true} {52109#true} #1270#return; {52109#true} is VALID [2022-04-28 08:32:48,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:32:48,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:48,301 INFO L290 TraceCheckUtils]: 0: Hoare triple {52162#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {52163#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:32:48,302 INFO L290 TraceCheckUtils]: 1: Hoare triple {52163#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {52163#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:32:48,302 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {52163#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {52109#true} #1216#return; {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:32:48,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:48,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:32:48,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:48,330 INFO L290 TraceCheckUtils]: 0: Hoare triple {52109#true} ~cond := #in~cond; {52109#true} is VALID [2022-04-28 08:32:48,330 INFO L290 TraceCheckUtils]: 1: Hoare triple {52109#true} assume !(0 == ~cond); {52109#true} is VALID [2022-04-28 08:32:48,330 INFO L290 TraceCheckUtils]: 2: Hoare triple {52109#true} assume true; {52109#true} is VALID [2022-04-28 08:32:48,330 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {52109#true} {52109#true} #1254#return; {52109#true} is VALID [2022-04-28 08:32:48,330 INFO L290 TraceCheckUtils]: 0: Hoare triple {52164#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {52109#true} is VALID [2022-04-28 08:32:48,330 INFO L272 TraceCheckUtils]: 1: Hoare triple {52109#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {52109#true} is VALID [2022-04-28 08:32:48,330 INFO L290 TraceCheckUtils]: 2: Hoare triple {52109#true} ~cond := #in~cond; {52109#true} is VALID [2022-04-28 08:32:48,330 INFO L290 TraceCheckUtils]: 3: Hoare triple {52109#true} assume !(0 == ~cond); {52109#true} is VALID [2022-04-28 08:32:48,330 INFO L290 TraceCheckUtils]: 4: Hoare triple {52109#true} assume true; {52109#true} is VALID [2022-04-28 08:32:48,330 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {52109#true} {52109#true} #1254#return; {52109#true} is VALID [2022-04-28 08:32:48,330 INFO L290 TraceCheckUtils]: 6: Hoare triple {52109#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {52109#true} is VALID [2022-04-28 08:32:48,331 INFO L290 TraceCheckUtils]: 7: Hoare triple {52109#true} assume true; {52109#true} is VALID [2022-04-28 08:32:48,331 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {52109#true} {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1218#return; {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:32:48,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:48,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:32:48,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:48,356 INFO L290 TraceCheckUtils]: 0: Hoare triple {52169#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {52109#true} is VALID [2022-04-28 08:32:48,356 INFO L290 TraceCheckUtils]: 1: Hoare triple {52109#true} assume !(0 == ~__BLAST_NONDET~5); {52109#true} is VALID [2022-04-28 08:32:48,356 INFO L290 TraceCheckUtils]: 2: Hoare triple {52109#true} #res := -1073741823; {52109#true} is VALID [2022-04-28 08:32:48,356 INFO L290 TraceCheckUtils]: 3: Hoare triple {52109#true} assume true; {52109#true} is VALID [2022-04-28 08:32:48,356 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {52109#true} {52109#true} #1176#return; {52109#true} is VALID [2022-04-28 08:32:48,356 INFO L290 TraceCheckUtils]: 0: Hoare triple {52169#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {52109#true} is VALID [2022-04-28 08:32:48,357 INFO L272 TraceCheckUtils]: 1: Hoare triple {52109#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {52169#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:32:48,357 INFO L290 TraceCheckUtils]: 2: Hoare triple {52169#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {52109#true} is VALID [2022-04-28 08:32:48,357 INFO L290 TraceCheckUtils]: 3: Hoare triple {52109#true} assume !(0 == ~__BLAST_NONDET~5); {52109#true} is VALID [2022-04-28 08:32:48,358 INFO L290 TraceCheckUtils]: 4: Hoare triple {52109#true} #res := -1073741823; {52109#true} is VALID [2022-04-28 08:32:48,358 INFO L290 TraceCheckUtils]: 5: Hoare triple {52109#true} assume true; {52109#true} is VALID [2022-04-28 08:32:48,358 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {52109#true} {52109#true} #1176#return; {52109#true} is VALID [2022-04-28 08:32:48,358 INFO L290 TraceCheckUtils]: 7: Hoare triple {52109#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {52109#true} is VALID [2022-04-28 08:32:48,358 INFO L290 TraceCheckUtils]: 8: Hoare triple {52109#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {52109#true} is VALID [2022-04-28 08:32:48,358 INFO L290 TraceCheckUtils]: 9: Hoare triple {52109#true} assume true; {52109#true} is VALID [2022-04-28 08:32:48,359 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {52109#true} {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1220#return; {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:32:48,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:48,378 INFO L290 TraceCheckUtils]: 0: Hoare triple {52175#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {52109#true} is VALID [2022-04-28 08:32:48,378 INFO L290 TraceCheckUtils]: 1: Hoare triple {52109#true} assume true; {52109#true} is VALID [2022-04-28 08:32:48,378 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {52109#true} {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1222#return; {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-04-28 08:32:48,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:48,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 08:32:48,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:32:48,463 INFO L290 TraceCheckUtils]: 0: Hoare triple {52190#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet204 && #t~nondet204 <= 2147483647;~__BLAST_NONDET~16 := #t~nondet204;havoc #t~nondet204;havoc ~compRetStatus~1;havoc ~returnVal~0;~lcontext~1.base, ~lcontext~1.offset := 0, 0;havoc ~tmp~12; {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,464 INFO L290 TraceCheckUtils]: 1: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,464 INFO L290 TraceCheckUtils]: 2: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} assume !(0 == ~__BLAST_NONDET~16); {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,464 INFO L290 TraceCheckUtils]: 3: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} assume !(1 == ~__BLAST_NONDET~16); {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,465 INFO L290 TraceCheckUtils]: 4: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 259; {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,465 INFO L290 TraceCheckUtils]: 5: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,465 INFO L290 TraceCheckUtils]: 6: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0; {52192#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,466 INFO L290 TraceCheckUtils]: 7: Hoare triple {52192#(= ~MPR1~0 |old(~s~0)|)} assume 259 == ~returnVal~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {52192#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,466 INFO L290 TraceCheckUtils]: 8: Hoare triple {52192#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {52192#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,466 INFO L290 TraceCheckUtils]: 9: Hoare triple {52192#(= ~MPR1~0 |old(~s~0)|)} assume true; {52192#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,467 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {52192#(= ~MPR1~0 |old(~s~0)|)} {52177#(= ~SKIP1~0 ~s~0)} #1268#return; {52189#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 08:32:48,467 INFO L290 TraceCheckUtils]: 0: Hoare triple {52176#(and (= |old(#length)| |#length|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~4.base, ~irpStack~4.offset;havoc ~devExt~4.base, ~devExt~4.offset;call ~#powerState~0.base, ~#powerState~0.offset := #Ultimate.allocOnStack(4);havoc ~powerType~0;havoc ~tmp~3;call #t~mem123.base, #t~mem123.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~4.base, ~devExt~4.offset := #t~mem123.base, #t~mem123.offset;havoc #t~mem123.base, #t~mem123.offset;call #t~mem124.base, #t~mem124.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~4.base, ~irpStack~4.offset := #t~mem124.base, #t~mem124.offset;havoc #t~mem124.base, #t~mem124.offset;call #t~mem125 := read~int(~irpStack~4.base, 8 + ~irpStack~4.offset, 4);~powerType~0 := #t~mem125;havoc #t~mem125;call #t~mem126 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call #t~mem127 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call write~int(#t~mem126, ~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem127, ~#powerState~0.base, ~#powerState~0.offset, 4);havoc #t~mem126;havoc #t~mem127;call #t~mem128 := read~int(~irpStack~4.base, 1 + ~irpStack~4.offset, 1); {52109#true} is VALID [2022-04-28 08:32:48,467 INFO L290 TraceCheckUtils]: 1: Hoare triple {52109#true} assume 2 == #t~mem128 % 256;havoc #t~mem128; {52109#true} is VALID [2022-04-28 08:32:48,468 INFO L290 TraceCheckUtils]: 2: Hoare triple {52109#true} assume 1 == ~powerType~0;call #t~mem132 := read~int(~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem132, ~devExt~4.base, 48 + ~devExt~4.offset, 4);havoc #t~mem132; {52109#true} is VALID [2022-04-28 08:32:48,468 INFO L290 TraceCheckUtils]: 3: Hoare triple {52109#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {52177#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:32:48,469 INFO L290 TraceCheckUtils]: 4: Hoare triple {52177#(= ~SKIP1~0 ~s~0)} call #t~mem133 := read~int(~Irp.base, 35 + ~Irp.offset, 1);call write~int((if (1 + #t~mem133) % 256 <= 127 then (1 + #t~mem133) % 256 else (1 + #t~mem133) % 256 - 256), ~Irp.base, 35 + ~Irp.offset, 1);havoc #t~mem133;call #t~mem134.base, #t~mem134.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);call write~$Pointer$(#t~mem134.base, 36 + #t~mem134.offset, ~Irp.base, 96 + ~Irp.offset, 4);havoc #t~mem134.base, #t~mem134.offset;call #t~mem135.base, #t~mem135.offset := read~$Pointer$(~devExt~4.base, 8 + ~devExt~4.offset, 4); {52177#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:32:48,469 INFO L272 TraceCheckUtils]: 5: Hoare triple {52177#(= ~SKIP1~0 ~s~0)} call #t~ret136 := PoCallDriver(#t~mem135.base, #t~mem135.offset, ~Irp.base, ~Irp.offset); {52190#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:48,470 INFO L290 TraceCheckUtils]: 6: Hoare triple {52190#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet204 && #t~nondet204 <= 2147483647;~__BLAST_NONDET~16 := #t~nondet204;havoc #t~nondet204;havoc ~compRetStatus~1;havoc ~returnVal~0;~lcontext~1.base, ~lcontext~1.offset := 0, 0;havoc ~tmp~12; {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,470 INFO L290 TraceCheckUtils]: 7: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,470 INFO L290 TraceCheckUtils]: 8: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} assume !(0 == ~__BLAST_NONDET~16); {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,470 INFO L290 TraceCheckUtils]: 9: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} assume !(1 == ~__BLAST_NONDET~16); {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,471 INFO L290 TraceCheckUtils]: 10: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 259; {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,471 INFO L290 TraceCheckUtils]: 11: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,471 INFO L290 TraceCheckUtils]: 12: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0; {52192#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,472 INFO L290 TraceCheckUtils]: 13: Hoare triple {52192#(= ~MPR1~0 |old(~s~0)|)} assume 259 == ~returnVal~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {52192#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,472 INFO L290 TraceCheckUtils]: 14: Hoare triple {52192#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {52192#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,472 INFO L290 TraceCheckUtils]: 15: Hoare triple {52192#(= ~MPR1~0 |old(~s~0)|)} assume true; {52192#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,473 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {52192#(= ~MPR1~0 |old(~s~0)|)} {52177#(= ~SKIP1~0 ~s~0)} #1268#return; {52189#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 08:32:48,473 INFO L290 TraceCheckUtils]: 17: Hoare triple {52189#(= ~MPR1~0 ~SKIP1~0)} assume -2147483648 <= #t~ret136 && #t~ret136 <= 2147483647;~tmp~3 := #t~ret136;havoc #t~mem135.base, #t~mem135.offset;havoc #t~ret136;#res := ~tmp~3;call ULTIMATE.dealloc(~#powerState~0.base, ~#powerState~0.offset);havoc ~#powerState~0.base, ~#powerState~0.offset; {52189#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 08:32:48,473 INFO L290 TraceCheckUtils]: 18: Hoare triple {52189#(= ~MPR1~0 ~SKIP1~0)} assume true; {52189#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 08:32:48,474 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {52189#(= ~MPR1~0 ~SKIP1~0)} {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1232#return; {52110#false} is VALID [2022-04-28 08:32:48,475 INFO L272 TraceCheckUtils]: 0: Hoare triple {52109#true} call ULTIMATE.init(); {52161#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:32:48,476 INFO L290 TraceCheckUtils]: 1: Hoare triple {52161#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {52109#true} is VALID [2022-04-28 08:32:48,476 INFO L290 TraceCheckUtils]: 2: Hoare triple {52109#true} assume true; {52109#true} is VALID [2022-04-28 08:32:48,476 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {52109#true} {52109#true} #1270#return; {52109#true} is VALID [2022-04-28 08:32:48,476 INFO L272 TraceCheckUtils]: 4: Hoare triple {52109#true} call #t~ret213 := main(); {52109#true} is VALID [2022-04-28 08:32:48,476 INFO L290 TraceCheckUtils]: 5: Hoare triple {52109#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {52109#true} is VALID [2022-04-28 08:32:48,477 INFO L272 TraceCheckUtils]: 6: Hoare triple {52109#true} call _BLAST_init(); {52162#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:48,477 INFO L290 TraceCheckUtils]: 7: Hoare triple {52162#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {52163#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:32:48,478 INFO L290 TraceCheckUtils]: 8: Hoare triple {52163#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {52163#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:32:48,478 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {52163#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {52109#true} #1216#return; {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,479 INFO L272 TraceCheckUtils]: 10: Hoare triple {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {52164#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:32:48,479 INFO L290 TraceCheckUtils]: 11: Hoare triple {52164#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {52109#true} is VALID [2022-04-28 08:32:48,479 INFO L272 TraceCheckUtils]: 12: Hoare triple {52109#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {52109#true} is VALID [2022-04-28 08:32:48,479 INFO L290 TraceCheckUtils]: 13: Hoare triple {52109#true} ~cond := #in~cond; {52109#true} is VALID [2022-04-28 08:32:48,479 INFO L290 TraceCheckUtils]: 14: Hoare triple {52109#true} assume !(0 == ~cond); {52109#true} is VALID [2022-04-28 08:32:48,479 INFO L290 TraceCheckUtils]: 15: Hoare triple {52109#true} assume true; {52109#true} is VALID [2022-04-28 08:32:48,479 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {52109#true} {52109#true} #1254#return; {52109#true} is VALID [2022-04-28 08:32:48,479 INFO L290 TraceCheckUtils]: 17: Hoare triple {52109#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {52109#true} is VALID [2022-04-28 08:32:48,479 INFO L290 TraceCheckUtils]: 18: Hoare triple {52109#true} assume true; {52109#true} is VALID [2022-04-28 08:32:48,480 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {52109#true} {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1218#return; {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,480 INFO L290 TraceCheckUtils]: 20: Hoare triple {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,481 INFO L290 TraceCheckUtils]: 21: Hoare triple {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,481 INFO L290 TraceCheckUtils]: 22: Hoare triple {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,482 INFO L272 TraceCheckUtils]: 23: Hoare triple {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {52169#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:32:48,482 INFO L290 TraceCheckUtils]: 24: Hoare triple {52169#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {52109#true} is VALID [2022-04-28 08:32:48,484 INFO L272 TraceCheckUtils]: 25: Hoare triple {52109#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {52169#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:32:48,484 INFO L290 TraceCheckUtils]: 26: Hoare triple {52169#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {52109#true} is VALID [2022-04-28 08:32:48,484 INFO L290 TraceCheckUtils]: 27: Hoare triple {52109#true} assume !(0 == ~__BLAST_NONDET~5); {52109#true} is VALID [2022-04-28 08:32:48,484 INFO L290 TraceCheckUtils]: 28: Hoare triple {52109#true} #res := -1073741823; {52109#true} is VALID [2022-04-28 08:32:48,484 INFO L290 TraceCheckUtils]: 29: Hoare triple {52109#true} assume true; {52109#true} is VALID [2022-04-28 08:32:48,484 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {52109#true} {52109#true} #1176#return; {52109#true} is VALID [2022-04-28 08:32:48,484 INFO L290 TraceCheckUtils]: 31: Hoare triple {52109#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {52109#true} is VALID [2022-04-28 08:32:48,484 INFO L290 TraceCheckUtils]: 32: Hoare triple {52109#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {52109#true} is VALID [2022-04-28 08:32:48,484 INFO L290 TraceCheckUtils]: 33: Hoare triple {52109#true} assume true; {52109#true} is VALID [2022-04-28 08:32:48,485 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {52109#true} {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1220#return; {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,485 INFO L290 TraceCheckUtils]: 35: Hoare triple {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,486 INFO L272 TraceCheckUtils]: 36: Hoare triple {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call stub_driver_init(); {52175#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:48,486 INFO L290 TraceCheckUtils]: 37: Hoare triple {52175#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {52109#true} is VALID [2022-04-28 08:32:48,486 INFO L290 TraceCheckUtils]: 38: Hoare triple {52109#true} assume true; {52109#true} is VALID [2022-04-28 08:32:48,486 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {52109#true} {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1222#return; {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,487 INFO L290 TraceCheckUtils]: 40: Hoare triple {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !!(~status~5 >= 0); {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,487 INFO L290 TraceCheckUtils]: 41: Hoare triple {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~__BLAST_NONDET~0); {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,487 INFO L290 TraceCheckUtils]: 42: Hoare triple {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(1 == ~__BLAST_NONDET~0); {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,488 INFO L290 TraceCheckUtils]: 43: Hoare triple {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(2 == ~__BLAST_NONDET~0); {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,488 INFO L290 TraceCheckUtils]: 44: Hoare triple {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(3 == ~__BLAST_NONDET~0); {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,488 INFO L290 TraceCheckUtils]: 45: Hoare triple {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 4 == ~__BLAST_NONDET~0; {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:32:48,489 INFO L272 TraceCheckUtils]: 46: Hoare triple {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret175 := KbFilter_Power(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {52176#(and (= |old(#length)| |#length|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:48,489 INFO L290 TraceCheckUtils]: 47: Hoare triple {52176#(and (= |old(#length)| |#length|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~irpStack~4.base, ~irpStack~4.offset;havoc ~devExt~4.base, ~devExt~4.offset;call ~#powerState~0.base, ~#powerState~0.offset := #Ultimate.allocOnStack(4);havoc ~powerType~0;havoc ~tmp~3;call #t~mem123.base, #t~mem123.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~4.base, ~devExt~4.offset := #t~mem123.base, #t~mem123.offset;havoc #t~mem123.base, #t~mem123.offset;call #t~mem124.base, #t~mem124.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~4.base, ~irpStack~4.offset := #t~mem124.base, #t~mem124.offset;havoc #t~mem124.base, #t~mem124.offset;call #t~mem125 := read~int(~irpStack~4.base, 8 + ~irpStack~4.offset, 4);~powerType~0 := #t~mem125;havoc #t~mem125;call #t~mem126 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call #t~mem127 := read~int(~irpStack~4.base, 12 + ~irpStack~4.offset, 4);call write~int(#t~mem126, ~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem127, ~#powerState~0.base, ~#powerState~0.offset, 4);havoc #t~mem126;havoc #t~mem127;call #t~mem128 := read~int(~irpStack~4.base, 1 + ~irpStack~4.offset, 1); {52109#true} is VALID [2022-04-28 08:32:48,489 INFO L290 TraceCheckUtils]: 48: Hoare triple {52109#true} assume 2 == #t~mem128 % 256;havoc #t~mem128; {52109#true} is VALID [2022-04-28 08:32:48,490 INFO L290 TraceCheckUtils]: 49: Hoare triple {52109#true} assume 1 == ~powerType~0;call #t~mem132 := read~int(~#powerState~0.base, ~#powerState~0.offset, 4);call write~int(#t~mem132, ~devExt~4.base, 48 + ~devExt~4.offset, 4);havoc #t~mem132; {52109#true} is VALID [2022-04-28 08:32:48,490 INFO L290 TraceCheckUtils]: 50: Hoare triple {52109#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {52177#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:32:48,490 INFO L290 TraceCheckUtils]: 51: Hoare triple {52177#(= ~SKIP1~0 ~s~0)} call #t~mem133 := read~int(~Irp.base, 35 + ~Irp.offset, 1);call write~int((if (1 + #t~mem133) % 256 <= 127 then (1 + #t~mem133) % 256 else (1 + #t~mem133) % 256 - 256), ~Irp.base, 35 + ~Irp.offset, 1);havoc #t~mem133;call #t~mem134.base, #t~mem134.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);call write~$Pointer$(#t~mem134.base, 36 + #t~mem134.offset, ~Irp.base, 96 + ~Irp.offset, 4);havoc #t~mem134.base, #t~mem134.offset;call #t~mem135.base, #t~mem135.offset := read~$Pointer$(~devExt~4.base, 8 + ~devExt~4.offset, 4); {52177#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:32:48,491 INFO L272 TraceCheckUtils]: 52: Hoare triple {52177#(= ~SKIP1~0 ~s~0)} call #t~ret136 := PoCallDriver(#t~mem135.base, #t~mem135.offset, ~Irp.base, ~Irp.offset); {52190#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:32:48,491 INFO L290 TraceCheckUtils]: 53: Hoare triple {52190#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet204 && #t~nondet204 <= 2147483647;~__BLAST_NONDET~16 := #t~nondet204;havoc #t~nondet204;havoc ~compRetStatus~1;havoc ~returnVal~0;~lcontext~1.base, ~lcontext~1.offset := 0, 0;havoc ~tmp~12; {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,492 INFO L290 TraceCheckUtils]: 54: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,492 INFO L290 TraceCheckUtils]: 55: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} assume !(0 == ~__BLAST_NONDET~16); {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,492 INFO L290 TraceCheckUtils]: 56: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} assume !(1 == ~__BLAST_NONDET~16); {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,492 INFO L290 TraceCheckUtils]: 57: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 259; {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,493 INFO L290 TraceCheckUtils]: 58: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {52191#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,493 INFO L290 TraceCheckUtils]: 59: Hoare triple {52191#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0; {52192#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,493 INFO L290 TraceCheckUtils]: 60: Hoare triple {52192#(= ~MPR1~0 |old(~s~0)|)} assume 259 == ~returnVal~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {52192#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,494 INFO L290 TraceCheckUtils]: 61: Hoare triple {52192#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {52192#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,494 INFO L290 TraceCheckUtils]: 62: Hoare triple {52192#(= ~MPR1~0 |old(~s~0)|)} assume true; {52192#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:32:48,495 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {52192#(= ~MPR1~0 |old(~s~0)|)} {52177#(= ~SKIP1~0 ~s~0)} #1268#return; {52189#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 08:32:48,495 INFO L290 TraceCheckUtils]: 64: Hoare triple {52189#(= ~MPR1~0 ~SKIP1~0)} assume -2147483648 <= #t~ret136 && #t~ret136 <= 2147483647;~tmp~3 := #t~ret136;havoc #t~mem135.base, #t~mem135.offset;havoc #t~ret136;#res := ~tmp~3;call ULTIMATE.dealloc(~#powerState~0.base, ~#powerState~0.offset);havoc ~#powerState~0.base, ~#powerState~0.offset; {52189#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 08:32:48,495 INFO L290 TraceCheckUtils]: 65: Hoare triple {52189#(= ~MPR1~0 ~SKIP1~0)} assume true; {52189#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 08:32:48,496 INFO L284 TraceCheckUtils]: 66: Hoare quadruple {52189#(= ~MPR1~0 ~SKIP1~0)} {52117#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #1232#return; {52110#false} is VALID [2022-04-28 08:32:48,496 INFO L290 TraceCheckUtils]: 67: Hoare triple {52110#false} assume -2147483648 <= #t~ret175 && #t~ret175 <= 2147483647;~status~5 := #t~ret175;havoc #t~ret175; {52110#false} is VALID [2022-04-28 08:32:48,496 INFO L290 TraceCheckUtils]: 68: Hoare triple {52110#false} assume 0 != ~we_should_unload~0; {52110#false} is VALID [2022-04-28 08:32:48,496 INFO L290 TraceCheckUtils]: 69: Hoare triple {52110#false} assume !(1 == ~pended~0); {52110#false} is VALID [2022-04-28 08:32:48,496 INFO L290 TraceCheckUtils]: 70: Hoare triple {52110#false} assume !(1 == ~pended~0); {52110#false} is VALID [2022-04-28 08:32:48,496 INFO L290 TraceCheckUtils]: 71: Hoare triple {52110#false} assume !(~s~0 == ~UNLOADED~0); {52110#false} is VALID [2022-04-28 08:32:48,496 INFO L290 TraceCheckUtils]: 72: Hoare triple {52110#false} assume !(-1 == ~status~5); {52110#false} is VALID [2022-04-28 08:32:48,496 INFO L290 TraceCheckUtils]: 73: Hoare triple {52110#false} assume ~s~0 != ~SKIP2~0; {52110#false} is VALID [2022-04-28 08:32:48,496 INFO L290 TraceCheckUtils]: 74: Hoare triple {52110#false} assume !(~s~0 != ~IPC~0); {52110#false} is VALID [2022-04-28 08:32:48,497 INFO L290 TraceCheckUtils]: 75: Hoare triple {52110#false} assume !(1 == ~pended~0); {52110#false} is VALID [2022-04-28 08:32:48,497 INFO L290 TraceCheckUtils]: 76: Hoare triple {52110#false} assume ~s~0 == ~DC~0; {52110#false} is VALID [2022-04-28 08:32:48,497 INFO L290 TraceCheckUtils]: 77: Hoare triple {52110#false} assume 259 == ~status~5; {52110#false} is VALID [2022-04-28 08:32:48,497 INFO L272 TraceCheckUtils]: 78: Hoare triple {52110#false} call errorFn(); {52110#false} is VALID [2022-04-28 08:32:48,497 INFO L290 TraceCheckUtils]: 79: Hoare triple {52110#false} assume !false; {52110#false} is VALID [2022-04-28 08:32:48,497 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:32:48,497 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:32:48,497 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [31636304] [2022-04-28 08:32:48,497 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [31636304] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:32:48,497 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:32:48,498 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 08:32:48,498 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:32:48,498 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [641476780] [2022-04-28 08:32:48,498 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [641476780] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:32:48,498 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:32:48,498 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 08:32:48,498 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [293905230] [2022-04-28 08:32:48,498 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:32:48,498 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 4.0) internal successors, (60), 8 states have internal predecessors, (60), 4 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) Word has length 80 [2022-04-28 08:32:48,499 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:32:48,499 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 4.0) internal successors, (60), 8 states have internal predecessors, (60), 4 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-04-28 08:32:48,566 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:32:48,566 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-28 08:32:48,566 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:32:48,566 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-28 08:32:48,566 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=167, Unknown=0, NotChecked=0, Total=210 [2022-04-28 08:32:48,567 INFO L87 Difference]: Start difference. First operand 326 states and 411 transitions. Second operand has 15 states, 15 states have (on average 4.0) internal successors, (60), 8 states have internal predecessors, (60), 4 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-04-28 08:32:50,812 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:32:58,565 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:33:06,803 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:33:06,804 INFO L93 Difference]: Finished difference Result 353 states and 444 transitions. [2022-04-28 08:33:06,804 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-04-28 08:33:06,804 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 4.0) internal successors, (60), 8 states have internal predecessors, (60), 4 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) Word has length 80 [2022-04-28 08:33:06,804 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:33:06,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 4.0) internal successors, (60), 8 states have internal predecessors, (60), 4 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-04-28 08:33:06,806 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 402 transitions. [2022-04-28 08:33:06,807 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 4.0) internal successors, (60), 8 states have internal predecessors, (60), 4 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-04-28 08:33:06,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 402 transitions. [2022-04-28 08:33:06,809 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 18 states and 402 transitions. [2022-04-28 08:33:07,306 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 402 edges. 402 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:33:07,309 INFO L225 Difference]: With dead ends: 353 [2022-04-28 08:33:07,309 INFO L226 Difference]: Without dead ends: 205 [2022-04-28 08:33:07,310 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 144 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=198, Invalid=672, Unknown=0, NotChecked=0, Total=870 [2022-04-28 08:33:07,310 INFO L413 NwaCegarLoop]: 233 mSDtfsCounter, 1304 mSDsluCounter, 237 mSDsCounter, 0 mSdLazyCounter, 1269 mSolverCounterSat, 414 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1310 SdHoareTripleChecker+Valid, 470 SdHoareTripleChecker+Invalid, 1685 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 414 IncrementalHoareTripleChecker+Valid, 1269 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.3s IncrementalHoareTripleChecker+Time [2022-04-28 08:33:07,310 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1310 Valid, 470 Invalid, 1685 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [414 Valid, 1269 Invalid, 2 Unknown, 0 Unchecked, 10.3s Time] [2022-04-28 08:33:07,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2022-04-28 08:33:07,552 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 186. [2022-04-28 08:33:07,552 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:33:07,552 INFO L82 GeneralOperation]: Start isEquivalent. First operand 205 states. Second operand has 186 states, 141 states have (on average 1.2411347517730495) internal successors, (175), 144 states have internal predecessors, (175), 23 states have call successors, (23), 21 states have call predecessors, (23), 21 states have return successors, (22), 20 states have call predecessors, (22), 19 states have call successors, (22) [2022-04-28 08:33:07,552 INFO L74 IsIncluded]: Start isIncluded. First operand 205 states. Second operand has 186 states, 141 states have (on average 1.2411347517730495) internal successors, (175), 144 states have internal predecessors, (175), 23 states have call successors, (23), 21 states have call predecessors, (23), 21 states have return successors, (22), 20 states have call predecessors, (22), 19 states have call successors, (22) [2022-04-28 08:33:07,553 INFO L87 Difference]: Start difference. First operand 205 states. Second operand has 186 states, 141 states have (on average 1.2411347517730495) internal successors, (175), 144 states have internal predecessors, (175), 23 states have call successors, (23), 21 states have call predecessors, (23), 21 states have return successors, (22), 20 states have call predecessors, (22), 19 states have call successors, (22) [2022-04-28 08:33:07,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:33:07,575 INFO L93 Difference]: Finished difference Result 205 states and 246 transitions. [2022-04-28 08:33:07,575 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 246 transitions. [2022-04-28 08:33:07,575 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:33:07,575 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:33:07,576 INFO L74 IsIncluded]: Start isIncluded. First operand has 186 states, 141 states have (on average 1.2411347517730495) internal successors, (175), 144 states have internal predecessors, (175), 23 states have call successors, (23), 21 states have call predecessors, (23), 21 states have return successors, (22), 20 states have call predecessors, (22), 19 states have call successors, (22) Second operand 205 states. [2022-04-28 08:33:07,576 INFO L87 Difference]: Start difference. First operand has 186 states, 141 states have (on average 1.2411347517730495) internal successors, (175), 144 states have internal predecessors, (175), 23 states have call successors, (23), 21 states have call predecessors, (23), 21 states have return successors, (22), 20 states have call predecessors, (22), 19 states have call successors, (22) Second operand 205 states. [2022-04-28 08:33:07,578 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:33:07,578 INFO L93 Difference]: Finished difference Result 205 states and 246 transitions. [2022-04-28 08:33:07,578 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 246 transitions. [2022-04-28 08:33:07,579 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:33:07,579 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:33:07,579 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:33:07,579 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:33:07,579 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 186 states, 141 states have (on average 1.2411347517730495) internal successors, (175), 144 states have internal predecessors, (175), 23 states have call successors, (23), 21 states have call predecessors, (23), 21 states have return successors, (22), 20 states have call predecessors, (22), 19 states have call successors, (22) [2022-04-28 08:33:07,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 186 states to 186 states and 220 transitions. [2022-04-28 08:33:07,581 INFO L78 Accepts]: Start accepts. Automaton has 186 states and 220 transitions. Word has length 80 [2022-04-28 08:33:07,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:33:07,581 INFO L495 AbstractCegarLoop]: Abstraction has 186 states and 220 transitions. [2022-04-28 08:33:07,581 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 4.0) internal successors, (60), 8 states have internal predecessors, (60), 4 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-04-28 08:33:07,581 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 186 states and 220 transitions. [2022-04-28 08:33:07,991 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 220 edges. 220 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:33:07,992 INFO L276 IsEmpty]: Start isEmpty. Operand 186 states and 220 transitions. [2022-04-28 08:33:07,992 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2022-04-28 08:33:07,992 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:33:07,992 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:33:07,992 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21 [2022-04-28 08:33:07,992 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:33:07,992 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:33:07,993 INFO L85 PathProgramCache]: Analyzing trace with hash 1299022194, now seen corresponding path program 1 times [2022-04-28 08:33:07,993 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:33:07,993 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [80928213] [2022-04-28 08:33:07,993 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:33:07,993 INFO L85 PathProgramCache]: Analyzing trace with hash 1299022194, now seen corresponding path program 2 times [2022-04-28 08:33:07,993 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:33:07,993 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [80947563] [2022-04-28 08:33:07,993 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:33:07,993 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:33:08,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:08,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:33:08,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:08,168 INFO L290 TraceCheckUtils]: 0: Hoare triple {53774#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {53717#true} is VALID [2022-04-28 08:33:08,168 INFO L290 TraceCheckUtils]: 1: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,168 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {53717#true} {53717#true} #1270#return; {53717#true} is VALID [2022-04-28 08:33:08,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:33:08,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:08,198 INFO L290 TraceCheckUtils]: 0: Hoare triple {53775#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {53717#true} is VALID [2022-04-28 08:33:08,198 INFO L290 TraceCheckUtils]: 1: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,198 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {53717#true} {53717#true} #1216#return; {53717#true} is VALID [2022-04-28 08:33:08,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:33:08,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:08,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:33:08,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:08,253 INFO L290 TraceCheckUtils]: 0: Hoare triple {53717#true} ~cond := #in~cond; {53717#true} is VALID [2022-04-28 08:33:08,253 INFO L290 TraceCheckUtils]: 1: Hoare triple {53717#true} assume !(0 == ~cond); {53717#true} is VALID [2022-04-28 08:33:08,253 INFO L290 TraceCheckUtils]: 2: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,253 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {53717#true} {53717#true} #1254#return; {53717#true} is VALID [2022-04-28 08:33:08,253 INFO L290 TraceCheckUtils]: 0: Hoare triple {53776#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {53717#true} is VALID [2022-04-28 08:33:08,253 INFO L272 TraceCheckUtils]: 1: Hoare triple {53717#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {53717#true} is VALID [2022-04-28 08:33:08,253 INFO L290 TraceCheckUtils]: 2: Hoare triple {53717#true} ~cond := #in~cond; {53717#true} is VALID [2022-04-28 08:33:08,253 INFO L290 TraceCheckUtils]: 3: Hoare triple {53717#true} assume !(0 == ~cond); {53717#true} is VALID [2022-04-28 08:33:08,253 INFO L290 TraceCheckUtils]: 4: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,254 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {53717#true} {53717#true} #1254#return; {53717#true} is VALID [2022-04-28 08:33:08,254 INFO L290 TraceCheckUtils]: 6: Hoare triple {53717#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {53717#true} is VALID [2022-04-28 08:33:08,254 INFO L290 TraceCheckUtils]: 7: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,254 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {53717#true} {53717#true} #1218#return; {53717#true} is VALID [2022-04-28 08:33:08,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:33:08,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:08,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:33:08,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:08,287 INFO L290 TraceCheckUtils]: 0: Hoare triple {53781#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {53717#true} is VALID [2022-04-28 08:33:08,287 INFO L290 TraceCheckUtils]: 1: Hoare triple {53717#true} assume !(0 == ~__BLAST_NONDET~5); {53717#true} is VALID [2022-04-28 08:33:08,287 INFO L290 TraceCheckUtils]: 2: Hoare triple {53717#true} #res := -1073741823; {53717#true} is VALID [2022-04-28 08:33:08,287 INFO L290 TraceCheckUtils]: 3: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,287 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {53717#true} {53717#true} #1176#return; {53717#true} is VALID [2022-04-28 08:33:08,287 INFO L290 TraceCheckUtils]: 0: Hoare triple {53781#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {53717#true} is VALID [2022-04-28 08:33:08,288 INFO L272 TraceCheckUtils]: 1: Hoare triple {53717#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {53781#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:33:08,288 INFO L290 TraceCheckUtils]: 2: Hoare triple {53781#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {53717#true} is VALID [2022-04-28 08:33:08,288 INFO L290 TraceCheckUtils]: 3: Hoare triple {53717#true} assume !(0 == ~__BLAST_NONDET~5); {53717#true} is VALID [2022-04-28 08:33:08,289 INFO L290 TraceCheckUtils]: 4: Hoare triple {53717#true} #res := -1073741823; {53717#true} is VALID [2022-04-28 08:33:08,289 INFO L290 TraceCheckUtils]: 5: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,289 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {53717#true} {53717#true} #1176#return; {53717#true} is VALID [2022-04-28 08:33:08,289 INFO L290 TraceCheckUtils]: 7: Hoare triple {53717#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {53717#true} is VALID [2022-04-28 08:33:08,289 INFO L290 TraceCheckUtils]: 8: Hoare triple {53717#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {53717#true} is VALID [2022-04-28 08:33:08,289 INFO L290 TraceCheckUtils]: 9: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,289 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {53717#true} {53717#true} #1220#return; {53717#true} is VALID [2022-04-28 08:33:08,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:33:08,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:08,317 INFO L290 TraceCheckUtils]: 0: Hoare triple {53787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {53717#true} is VALID [2022-04-28 08:33:08,317 INFO L290 TraceCheckUtils]: 1: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,318 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {53717#true} {53717#true} #1222#return; {53717#true} is VALID [2022-04-28 08:33:08,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-04-28 08:33:08,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:08,323 INFO L290 TraceCheckUtils]: 0: Hoare triple {53776#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {53717#true} is VALID [2022-04-28 08:33:08,324 INFO L290 TraceCheckUtils]: 1: Hoare triple {53717#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {53717#true} is VALID [2022-04-28 08:33:08,324 INFO L290 TraceCheckUtils]: 2: Hoare triple {53717#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {53717#true} is VALID [2022-04-28 08:33:08,324 INFO L290 TraceCheckUtils]: 3: Hoare triple {53717#true} assume #res.base == dest.base && #res.offset == dest.offset; {53717#true} is VALID [2022-04-28 08:33:08,324 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {53717#true} {53717#true} #1186#return; {53717#true} is VALID [2022-04-28 08:33:08,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-04-28 08:33:08,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:08,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:33:08,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:08,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:33:08,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:08,396 INFO L290 TraceCheckUtils]: 0: Hoare triple {53799#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {53717#true} is VALID [2022-04-28 08:33:08,396 INFO L290 TraceCheckUtils]: 1: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,396 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {53717#true} {53717#true} #1174#return; {53717#true} is VALID [2022-04-28 08:33:08,396 INFO L290 TraceCheckUtils]: 0: Hoare triple {53799#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {53717#true} is VALID [2022-04-28 08:33:08,397 INFO L272 TraceCheckUtils]: 1: Hoare triple {53717#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {53799#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:08,397 INFO L290 TraceCheckUtils]: 2: Hoare triple {53799#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {53717#true} is VALID [2022-04-28 08:33:08,397 INFO L290 TraceCheckUtils]: 3: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,397 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {53717#true} {53717#true} #1174#return; {53717#true} is VALID [2022-04-28 08:33:08,397 INFO L290 TraceCheckUtils]: 5: Hoare triple {53717#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {53717#true} is VALID [2022-04-28 08:33:08,397 INFO L290 TraceCheckUtils]: 6: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,397 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {53717#true} {53717#true} #1210#return; {53717#true} is VALID [2022-04-28 08:33:08,397 INFO L290 TraceCheckUtils]: 0: Hoare triple {53788#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {53717#true} is VALID [2022-04-28 08:33:08,397 INFO L290 TraceCheckUtils]: 1: Hoare triple {53717#true} assume 0 != ~compRegistered~0; {53717#true} is VALID [2022-04-28 08:33:08,398 INFO L272 TraceCheckUtils]: 2: Hoare triple {53717#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {53799#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:08,398 INFO L290 TraceCheckUtils]: 3: Hoare triple {53799#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {53717#true} is VALID [2022-04-28 08:33:08,399 INFO L272 TraceCheckUtils]: 4: Hoare triple {53717#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {53799#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:08,399 INFO L290 TraceCheckUtils]: 5: Hoare triple {53799#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {53717#true} is VALID [2022-04-28 08:33:08,399 INFO L290 TraceCheckUtils]: 6: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,399 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {53717#true} {53717#true} #1174#return; {53717#true} is VALID [2022-04-28 08:33:08,399 INFO L290 TraceCheckUtils]: 8: Hoare triple {53717#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {53717#true} is VALID [2022-04-28 08:33:08,399 INFO L290 TraceCheckUtils]: 9: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,399 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {53717#true} {53717#true} #1210#return; {53717#true} is VALID [2022-04-28 08:33:08,399 INFO L290 TraceCheckUtils]: 11: Hoare triple {53717#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {53717#true} is VALID [2022-04-28 08:33:08,399 INFO L290 TraceCheckUtils]: 12: Hoare triple {53717#true} assume !(-1073741802 == ~compRetStatus~0); {53717#true} is VALID [2022-04-28 08:33:08,399 INFO L290 TraceCheckUtils]: 13: Hoare triple {53717#true} assume 0 == ~__BLAST_NONDET~11; {53717#true} is VALID [2022-04-28 08:33:08,400 INFO L290 TraceCheckUtils]: 14: Hoare triple {53717#true} ~returnVal2~0 := 0; {53797#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:33:08,400 INFO L290 TraceCheckUtils]: 15: Hoare triple {53797#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {53797#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:33:08,401 INFO L290 TraceCheckUtils]: 16: Hoare triple {53797#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {53798#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:33:08,401 INFO L290 TraceCheckUtils]: 17: Hoare triple {53798#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {53798#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:33:08,402 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {53798#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {53717#true} #1192#return; {53772#(= |KbFilter_PnP_#t~ret109| 0)} is VALID [2022-04-28 08:33:08,403 INFO L272 TraceCheckUtils]: 0: Hoare triple {53717#true} call ULTIMATE.init(); {53774#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:33:08,403 INFO L290 TraceCheckUtils]: 1: Hoare triple {53774#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {53717#true} is VALID [2022-04-28 08:33:08,403 INFO L290 TraceCheckUtils]: 2: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,403 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {53717#true} {53717#true} #1270#return; {53717#true} is VALID [2022-04-28 08:33:08,403 INFO L272 TraceCheckUtils]: 4: Hoare triple {53717#true} call #t~ret213 := main(); {53717#true} is VALID [2022-04-28 08:33:08,403 INFO L290 TraceCheckUtils]: 5: Hoare triple {53717#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {53717#true} is VALID [2022-04-28 08:33:08,404 INFO L272 TraceCheckUtils]: 6: Hoare triple {53717#true} call _BLAST_init(); {53775#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:33:08,404 INFO L290 TraceCheckUtils]: 7: Hoare triple {53775#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {53717#true} is VALID [2022-04-28 08:33:08,404 INFO L290 TraceCheckUtils]: 8: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,404 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {53717#true} {53717#true} #1216#return; {53717#true} is VALID [2022-04-28 08:33:08,405 INFO L272 TraceCheckUtils]: 10: Hoare triple {53717#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {53776#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:33:08,405 INFO L290 TraceCheckUtils]: 11: Hoare triple {53776#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {53717#true} is VALID [2022-04-28 08:33:08,405 INFO L272 TraceCheckUtils]: 12: Hoare triple {53717#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {53717#true} is VALID [2022-04-28 08:33:08,405 INFO L290 TraceCheckUtils]: 13: Hoare triple {53717#true} ~cond := #in~cond; {53717#true} is VALID [2022-04-28 08:33:08,405 INFO L290 TraceCheckUtils]: 14: Hoare triple {53717#true} assume !(0 == ~cond); {53717#true} is VALID [2022-04-28 08:33:08,405 INFO L290 TraceCheckUtils]: 15: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,405 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {53717#true} {53717#true} #1254#return; {53717#true} is VALID [2022-04-28 08:33:08,405 INFO L290 TraceCheckUtils]: 17: Hoare triple {53717#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {53717#true} is VALID [2022-04-28 08:33:08,405 INFO L290 TraceCheckUtils]: 18: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,405 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {53717#true} {53717#true} #1218#return; {53717#true} is VALID [2022-04-28 08:33:08,405 INFO L290 TraceCheckUtils]: 20: Hoare triple {53717#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {53717#true} is VALID [2022-04-28 08:33:08,406 INFO L290 TraceCheckUtils]: 21: Hoare triple {53717#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {53717#true} is VALID [2022-04-28 08:33:08,406 INFO L290 TraceCheckUtils]: 22: Hoare triple {53717#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {53717#true} is VALID [2022-04-28 08:33:08,406 INFO L272 TraceCheckUtils]: 23: Hoare triple {53717#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {53781#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:33:08,406 INFO L290 TraceCheckUtils]: 24: Hoare triple {53781#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {53717#true} is VALID [2022-04-28 08:33:08,407 INFO L272 TraceCheckUtils]: 25: Hoare triple {53717#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {53781#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:33:08,408 INFO L290 TraceCheckUtils]: 26: Hoare triple {53781#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {53717#true} is VALID [2022-04-28 08:33:08,408 INFO L290 TraceCheckUtils]: 27: Hoare triple {53717#true} assume !(0 == ~__BLAST_NONDET~5); {53717#true} is VALID [2022-04-28 08:33:08,408 INFO L290 TraceCheckUtils]: 28: Hoare triple {53717#true} #res := -1073741823; {53717#true} is VALID [2022-04-28 08:33:08,409 INFO L290 TraceCheckUtils]: 29: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,409 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {53717#true} {53717#true} #1176#return; {53717#true} is VALID [2022-04-28 08:33:08,409 INFO L290 TraceCheckUtils]: 31: Hoare triple {53717#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {53717#true} is VALID [2022-04-28 08:33:08,409 INFO L290 TraceCheckUtils]: 32: Hoare triple {53717#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {53717#true} is VALID [2022-04-28 08:33:08,409 INFO L290 TraceCheckUtils]: 33: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,409 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {53717#true} {53717#true} #1220#return; {53717#true} is VALID [2022-04-28 08:33:08,409 INFO L290 TraceCheckUtils]: 35: Hoare triple {53717#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {53717#true} is VALID [2022-04-28 08:33:08,410 INFO L272 TraceCheckUtils]: 36: Hoare triple {53717#true} call stub_driver_init(); {53787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:33:08,410 INFO L290 TraceCheckUtils]: 37: Hoare triple {53787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {53717#true} is VALID [2022-04-28 08:33:08,410 INFO L290 TraceCheckUtils]: 38: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,410 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {53717#true} {53717#true} #1222#return; {53717#true} is VALID [2022-04-28 08:33:08,410 INFO L290 TraceCheckUtils]: 40: Hoare triple {53717#true} assume !!(~status~5 >= 0); {53717#true} is VALID [2022-04-28 08:33:08,410 INFO L290 TraceCheckUtils]: 41: Hoare triple {53717#true} assume !(0 == ~__BLAST_NONDET~0); {53717#true} is VALID [2022-04-28 08:33:08,410 INFO L290 TraceCheckUtils]: 42: Hoare triple {53717#true} assume !(1 == ~__BLAST_NONDET~0); {53717#true} is VALID [2022-04-28 08:33:08,410 INFO L290 TraceCheckUtils]: 43: Hoare triple {53717#true} assume !(2 == ~__BLAST_NONDET~0); {53717#true} is VALID [2022-04-28 08:33:08,411 INFO L290 TraceCheckUtils]: 44: Hoare triple {53717#true} assume 3 == ~__BLAST_NONDET~0; {53717#true} is VALID [2022-04-28 08:33:08,411 INFO L272 TraceCheckUtils]: 45: Hoare triple {53717#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {53717#true} is VALID [2022-04-28 08:33:08,411 INFO L290 TraceCheckUtils]: 46: Hoare triple {53717#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {53717#true} is VALID [2022-04-28 08:33:08,411 INFO L290 TraceCheckUtils]: 47: Hoare triple {53717#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {53717#true} is VALID [2022-04-28 08:33:08,411 INFO L290 TraceCheckUtils]: 48: Hoare triple {53717#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {53717#true} is VALID [2022-04-28 08:33:08,412 INFO L272 TraceCheckUtils]: 49: Hoare triple {53717#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {53776#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:33:08,412 INFO L290 TraceCheckUtils]: 50: Hoare triple {53776#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {53717#true} is VALID [2022-04-28 08:33:08,412 INFO L290 TraceCheckUtils]: 51: Hoare triple {53717#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {53717#true} is VALID [2022-04-28 08:33:08,412 INFO L290 TraceCheckUtils]: 52: Hoare triple {53717#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {53717#true} is VALID [2022-04-28 08:33:08,412 INFO L290 TraceCheckUtils]: 53: Hoare triple {53717#true} assume #res.base == dest.base && #res.offset == dest.offset; {53717#true} is VALID [2022-04-28 08:33:08,412 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {53717#true} {53717#true} #1186#return; {53717#true} is VALID [2022-04-28 08:33:08,412 INFO L290 TraceCheckUtils]: 55: Hoare triple {53717#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {53717#true} is VALID [2022-04-28 08:33:08,412 INFO L290 TraceCheckUtils]: 56: Hoare triple {53717#true} assume !(~s~0 != ~NP~0); {53717#true} is VALID [2022-04-28 08:33:08,412 INFO L290 TraceCheckUtils]: 57: Hoare triple {53717#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {53717#true} is VALID [2022-04-28 08:33:08,412 INFO L290 TraceCheckUtils]: 58: Hoare triple {53717#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {53717#true} is VALID [2022-04-28 08:33:08,413 INFO L272 TraceCheckUtils]: 59: Hoare triple {53717#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {53788#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:33:08,413 INFO L290 TraceCheckUtils]: 60: Hoare triple {53788#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {53717#true} is VALID [2022-04-28 08:33:08,413 INFO L290 TraceCheckUtils]: 61: Hoare triple {53717#true} assume 0 != ~compRegistered~0; {53717#true} is VALID [2022-04-28 08:33:08,414 INFO L272 TraceCheckUtils]: 62: Hoare triple {53717#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {53799#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:08,414 INFO L290 TraceCheckUtils]: 63: Hoare triple {53799#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {53717#true} is VALID [2022-04-28 08:33:08,414 INFO L272 TraceCheckUtils]: 64: Hoare triple {53717#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {53799#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:08,415 INFO L290 TraceCheckUtils]: 65: Hoare triple {53799#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {53717#true} is VALID [2022-04-28 08:33:08,415 INFO L290 TraceCheckUtils]: 66: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,415 INFO L284 TraceCheckUtils]: 67: Hoare quadruple {53717#true} {53717#true} #1174#return; {53717#true} is VALID [2022-04-28 08:33:08,415 INFO L290 TraceCheckUtils]: 68: Hoare triple {53717#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {53717#true} is VALID [2022-04-28 08:33:08,415 INFO L290 TraceCheckUtils]: 69: Hoare triple {53717#true} assume true; {53717#true} is VALID [2022-04-28 08:33:08,415 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {53717#true} {53717#true} #1210#return; {53717#true} is VALID [2022-04-28 08:33:08,415 INFO L290 TraceCheckUtils]: 71: Hoare triple {53717#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {53717#true} is VALID [2022-04-28 08:33:08,415 INFO L290 TraceCheckUtils]: 72: Hoare triple {53717#true} assume !(-1073741802 == ~compRetStatus~0); {53717#true} is VALID [2022-04-28 08:33:08,415 INFO L290 TraceCheckUtils]: 73: Hoare triple {53717#true} assume 0 == ~__BLAST_NONDET~11; {53717#true} is VALID [2022-04-28 08:33:08,415 INFO L290 TraceCheckUtils]: 74: Hoare triple {53717#true} ~returnVal2~0 := 0; {53797#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:33:08,416 INFO L290 TraceCheckUtils]: 75: Hoare triple {53797#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {53797#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:33:08,416 INFO L290 TraceCheckUtils]: 76: Hoare triple {53797#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {53798#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:33:08,417 INFO L290 TraceCheckUtils]: 77: Hoare triple {53798#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {53798#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:33:08,417 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {53798#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {53717#true} #1192#return; {53772#(= |KbFilter_PnP_#t~ret109| 0)} is VALID [2022-04-28 08:33:08,418 INFO L290 TraceCheckUtils]: 79: Hoare triple {53772#(= |KbFilter_PnP_#t~ret109| 0)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {53773#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:33:08,418 INFO L290 TraceCheckUtils]: 80: Hoare triple {53773#(= KbFilter_PnP_~status~3 0)} assume !(259 == ~status~3); {53773#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:33:08,418 INFO L290 TraceCheckUtils]: 81: Hoare triple {53773#(= KbFilter_PnP_~status~3 0)} assume !(~status~3 >= 0); {53718#false} is VALID [2022-04-28 08:33:08,418 INFO L290 TraceCheckUtils]: 82: Hoare triple {53718#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {53718#false} is VALID [2022-04-28 08:33:08,418 INFO L272 TraceCheckUtils]: 83: Hoare triple {53718#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {53718#false} is VALID [2022-04-28 08:33:08,418 INFO L290 TraceCheckUtils]: 84: Hoare triple {53718#false} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {53718#false} is VALID [2022-04-28 08:33:08,418 INFO L290 TraceCheckUtils]: 85: Hoare triple {53718#false} assume !(~s~0 == ~NP~0); {53718#false} is VALID [2022-04-28 08:33:08,418 INFO L272 TraceCheckUtils]: 86: Hoare triple {53718#false} call errorFn(); {53718#false} is VALID [2022-04-28 08:33:08,419 INFO L290 TraceCheckUtils]: 87: Hoare triple {53718#false} assume !false; {53718#false} is VALID [2022-04-28 08:33:08,419 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:33:08,419 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:33:08,419 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [80947563] [2022-04-28 08:33:08,419 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [80947563] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:33:08,419 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:33:08,419 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-28 08:33:08,420 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:33:08,420 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [80928213] [2022-04-28 08:33:08,421 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [80928213] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:33:08,421 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:33:08,421 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-28 08:33:08,421 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1560626059] [2022-04-28 08:33:08,421 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:33:08,422 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 4.769230769230769) internal successors, (62), 5 states have internal predecessors, (62), 2 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) Word has length 88 [2022-04-28 08:33:08,422 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:33:08,422 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 13 states, 13 states have (on average 4.769230769230769) internal successors, (62), 5 states have internal predecessors, (62), 2 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-04-28 08:33:08,486 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:33:08,486 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-04-28 08:33:08,487 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:33:08,487 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-04-28 08:33:08,487 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=122, Unknown=0, NotChecked=0, Total=156 [2022-04-28 08:33:08,487 INFO L87 Difference]: Start difference. First operand 186 states and 220 transitions. Second operand has 13 states, 13 states have (on average 4.769230769230769) internal successors, (62), 5 states have internal predecessors, (62), 2 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-04-28 08:33:10,613 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:33:25,552 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:33:25,553 INFO L93 Difference]: Finished difference Result 300 states and 368 transitions. [2022-04-28 08:33:25,553 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-28 08:33:25,553 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 4.769230769230769) internal successors, (62), 5 states have internal predecessors, (62), 2 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) Word has length 88 [2022-04-28 08:33:25,553 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:33:25,553 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 4.769230769230769) internal successors, (62), 5 states have internal predecessors, (62), 2 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-04-28 08:33:25,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 270 transitions. [2022-04-28 08:33:25,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 4.769230769230769) internal successors, (62), 5 states have internal predecessors, (62), 2 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-04-28 08:33:25,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 270 transitions. [2022-04-28 08:33:25,556 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 270 transitions. [2022-04-28 08:33:25,838 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 270 edges. 270 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:33:25,841 INFO L225 Difference]: With dead ends: 300 [2022-04-28 08:33:25,842 INFO L226 Difference]: Without dead ends: 237 [2022-04-28 08:33:25,842 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=100, Invalid=362, Unknown=0, NotChecked=0, Total=462 [2022-04-28 08:33:25,842 INFO L413 NwaCegarLoop]: 135 mSDtfsCounter, 229 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 819 mSolverCounterSat, 125 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 234 SdHoareTripleChecker+Valid, 407 SdHoareTripleChecker+Invalid, 945 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 125 IncrementalHoareTripleChecker+Valid, 819 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.4s IncrementalHoareTripleChecker+Time [2022-04-28 08:33:25,842 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [234 Valid, 407 Invalid, 945 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [125 Valid, 819 Invalid, 1 Unknown, 0 Unchecked, 7.4s Time] [2022-04-28 08:33:25,843 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 237 states. [2022-04-28 08:33:26,120 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 237 to 199. [2022-04-28 08:33:26,120 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:33:26,120 INFO L82 GeneralOperation]: Start isEquivalent. First operand 237 states. Second operand has 199 states, 152 states have (on average 1.2236842105263157) internal successors, (186), 155 states have internal predecessors, (186), 23 states have call successors, (23), 21 states have call predecessors, (23), 23 states have return successors, (24), 22 states have call predecessors, (24), 19 states have call successors, (24) [2022-04-28 08:33:26,121 INFO L74 IsIncluded]: Start isIncluded. First operand 237 states. Second operand has 199 states, 152 states have (on average 1.2236842105263157) internal successors, (186), 155 states have internal predecessors, (186), 23 states have call successors, (23), 21 states have call predecessors, (23), 23 states have return successors, (24), 22 states have call predecessors, (24), 19 states have call successors, (24) [2022-04-28 08:33:26,121 INFO L87 Difference]: Start difference. First operand 237 states. Second operand has 199 states, 152 states have (on average 1.2236842105263157) internal successors, (186), 155 states have internal predecessors, (186), 23 states have call successors, (23), 21 states have call predecessors, (23), 23 states have return successors, (24), 22 states have call predecessors, (24), 19 states have call successors, (24) [2022-04-28 08:33:26,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:33:26,124 INFO L93 Difference]: Finished difference Result 237 states and 284 transitions. [2022-04-28 08:33:26,124 INFO L276 IsEmpty]: Start isEmpty. Operand 237 states and 284 transitions. [2022-04-28 08:33:26,124 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:33:26,124 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:33:26,124 INFO L74 IsIncluded]: Start isIncluded. First operand has 199 states, 152 states have (on average 1.2236842105263157) internal successors, (186), 155 states have internal predecessors, (186), 23 states have call successors, (23), 21 states have call predecessors, (23), 23 states have return successors, (24), 22 states have call predecessors, (24), 19 states have call successors, (24) Second operand 237 states. [2022-04-28 08:33:26,124 INFO L87 Difference]: Start difference. First operand has 199 states, 152 states have (on average 1.2236842105263157) internal successors, (186), 155 states have internal predecessors, (186), 23 states have call successors, (23), 21 states have call predecessors, (23), 23 states have return successors, (24), 22 states have call predecessors, (24), 19 states have call successors, (24) Second operand 237 states. [2022-04-28 08:33:26,127 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:33:26,127 INFO L93 Difference]: Finished difference Result 237 states and 284 transitions. [2022-04-28 08:33:26,127 INFO L276 IsEmpty]: Start isEmpty. Operand 237 states and 284 transitions. [2022-04-28 08:33:26,128 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:33:26,128 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:33:26,128 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:33:26,128 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:33:26,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 199 states, 152 states have (on average 1.2236842105263157) internal successors, (186), 155 states have internal predecessors, (186), 23 states have call successors, (23), 21 states have call predecessors, (23), 23 states have return successors, (24), 22 states have call predecessors, (24), 19 states have call successors, (24) [2022-04-28 08:33:26,130 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 199 states to 199 states and 233 transitions. [2022-04-28 08:33:26,131 INFO L78 Accepts]: Start accepts. Automaton has 199 states and 233 transitions. Word has length 88 [2022-04-28 08:33:26,131 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:33:26,131 INFO L495 AbstractCegarLoop]: Abstraction has 199 states and 233 transitions. [2022-04-28 08:33:26,131 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 4.769230769230769) internal successors, (62), 5 states have internal predecessors, (62), 2 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-04-28 08:33:26,131 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 199 states and 233 transitions. [2022-04-28 08:33:26,551 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 233 edges. 233 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:33:26,551 INFO L276 IsEmpty]: Start isEmpty. Operand 199 states and 233 transitions. [2022-04-28 08:33:26,551 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-04-28 08:33:26,551 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:33:26,551 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:33:26,552 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22 [2022-04-28 08:33:26,552 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:33:26,552 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:33:26,552 INFO L85 PathProgramCache]: Analyzing trace with hash -1324935307, now seen corresponding path program 1 times [2022-04-28 08:33:26,552 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:33:26,552 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1462335888] [2022-04-28 08:33:26,553 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:33:26,553 INFO L85 PathProgramCache]: Analyzing trace with hash -1324935307, now seen corresponding path program 2 times [2022-04-28 08:33:26,553 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:33:26,553 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [76165182] [2022-04-28 08:33:26,553 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:33:26,553 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:33:26,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:26,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:33:26,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:26,702 INFO L290 TraceCheckUtils]: 0: Hoare triple {55353#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {55297#true} is VALID [2022-04-28 08:33:26,702 INFO L290 TraceCheckUtils]: 1: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,702 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {55297#true} {55297#true} #1270#return; {55297#true} is VALID [2022-04-28 08:33:26,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:33:26,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:26,726 INFO L290 TraceCheckUtils]: 0: Hoare triple {55354#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {55297#true} is VALID [2022-04-28 08:33:26,726 INFO L290 TraceCheckUtils]: 1: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,726 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {55297#true} {55297#true} #1216#return; {55297#true} is VALID [2022-04-28 08:33:26,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:33:26,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:26,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:33:26,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:26,764 INFO L290 TraceCheckUtils]: 0: Hoare triple {55297#true} ~cond := #in~cond; {55297#true} is VALID [2022-04-28 08:33:26,764 INFO L290 TraceCheckUtils]: 1: Hoare triple {55297#true} assume !(0 == ~cond); {55297#true} is VALID [2022-04-28 08:33:26,764 INFO L290 TraceCheckUtils]: 2: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,764 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {55297#true} {55297#true} #1254#return; {55297#true} is VALID [2022-04-28 08:33:26,764 INFO L290 TraceCheckUtils]: 0: Hoare triple {55355#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {55297#true} is VALID [2022-04-28 08:33:26,764 INFO L272 TraceCheckUtils]: 1: Hoare triple {55297#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {55297#true} is VALID [2022-04-28 08:33:26,764 INFO L290 TraceCheckUtils]: 2: Hoare triple {55297#true} ~cond := #in~cond; {55297#true} is VALID [2022-04-28 08:33:26,764 INFO L290 TraceCheckUtils]: 3: Hoare triple {55297#true} assume !(0 == ~cond); {55297#true} is VALID [2022-04-28 08:33:26,764 INFO L290 TraceCheckUtils]: 4: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,765 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {55297#true} {55297#true} #1254#return; {55297#true} is VALID [2022-04-28 08:33:26,765 INFO L290 TraceCheckUtils]: 6: Hoare triple {55297#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {55297#true} is VALID [2022-04-28 08:33:26,765 INFO L290 TraceCheckUtils]: 7: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,765 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {55297#true} {55297#true} #1218#return; {55297#true} is VALID [2022-04-28 08:33:26,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:33:26,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:26,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:33:26,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:26,787 INFO L290 TraceCheckUtils]: 0: Hoare triple {55360#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {55297#true} is VALID [2022-04-28 08:33:26,788 INFO L290 TraceCheckUtils]: 1: Hoare triple {55297#true} assume !(0 == ~__BLAST_NONDET~5); {55297#true} is VALID [2022-04-28 08:33:26,788 INFO L290 TraceCheckUtils]: 2: Hoare triple {55297#true} #res := -1073741823; {55297#true} is VALID [2022-04-28 08:33:26,788 INFO L290 TraceCheckUtils]: 3: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,788 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {55297#true} {55297#true} #1176#return; {55297#true} is VALID [2022-04-28 08:33:26,788 INFO L290 TraceCheckUtils]: 0: Hoare triple {55360#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {55297#true} is VALID [2022-04-28 08:33:26,789 INFO L272 TraceCheckUtils]: 1: Hoare triple {55297#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {55360#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:33:26,789 INFO L290 TraceCheckUtils]: 2: Hoare triple {55360#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {55297#true} is VALID [2022-04-28 08:33:26,789 INFO L290 TraceCheckUtils]: 3: Hoare triple {55297#true} assume !(0 == ~__BLAST_NONDET~5); {55297#true} is VALID [2022-04-28 08:33:26,789 INFO L290 TraceCheckUtils]: 4: Hoare triple {55297#true} #res := -1073741823; {55297#true} is VALID [2022-04-28 08:33:26,789 INFO L290 TraceCheckUtils]: 5: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,789 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {55297#true} {55297#true} #1176#return; {55297#true} is VALID [2022-04-28 08:33:26,789 INFO L290 TraceCheckUtils]: 7: Hoare triple {55297#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {55297#true} is VALID [2022-04-28 08:33:26,790 INFO L290 TraceCheckUtils]: 8: Hoare triple {55297#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {55297#true} is VALID [2022-04-28 08:33:26,790 INFO L290 TraceCheckUtils]: 9: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,790 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {55297#true} {55314#(= ~myStatus~0 (- 1073741637))} #1220#return; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:33:26,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:26,808 INFO L290 TraceCheckUtils]: 0: Hoare triple {55366#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {55297#true} is VALID [2022-04-28 08:33:26,808 INFO L290 TraceCheckUtils]: 1: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,808 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {55297#true} {55314#(= ~myStatus~0 (- 1073741637))} #1222#return; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-04-28 08:33:26,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:26,815 INFO L290 TraceCheckUtils]: 0: Hoare triple {55355#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {55297#true} is VALID [2022-04-28 08:33:26,815 INFO L290 TraceCheckUtils]: 1: Hoare triple {55297#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {55297#true} is VALID [2022-04-28 08:33:26,815 INFO L290 TraceCheckUtils]: 2: Hoare triple {55297#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {55297#true} is VALID [2022-04-28 08:33:26,815 INFO L290 TraceCheckUtils]: 3: Hoare triple {55297#true} assume #res.base == dest.base && #res.offset == dest.offset; {55297#true} is VALID [2022-04-28 08:33:26,816 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {55297#true} {55314#(= ~myStatus~0 (- 1073741637))} #1186#return; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-04-28 08:33:26,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:26,839 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:33:26,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:26,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:33:26,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:26,850 INFO L290 TraceCheckUtils]: 0: Hoare triple {55376#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {55297#true} is VALID [2022-04-28 08:33:26,850 INFO L290 TraceCheckUtils]: 1: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,850 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {55297#true} {55297#true} #1174#return; {55297#true} is VALID [2022-04-28 08:33:26,850 INFO L290 TraceCheckUtils]: 0: Hoare triple {55376#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {55297#true} is VALID [2022-04-28 08:33:26,851 INFO L272 TraceCheckUtils]: 1: Hoare triple {55297#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {55376#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:26,851 INFO L290 TraceCheckUtils]: 2: Hoare triple {55376#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {55297#true} is VALID [2022-04-28 08:33:26,851 INFO L290 TraceCheckUtils]: 3: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,851 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {55297#true} {55297#true} #1174#return; {55297#true} is VALID [2022-04-28 08:33:26,851 INFO L290 TraceCheckUtils]: 5: Hoare triple {55297#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {55297#true} is VALID [2022-04-28 08:33:26,851 INFO L290 TraceCheckUtils]: 6: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,851 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {55297#true} {55297#true} #1210#return; {55297#true} is VALID [2022-04-28 08:33:26,851 INFO L290 TraceCheckUtils]: 0: Hoare triple {55367#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {55297#true} is VALID [2022-04-28 08:33:26,851 INFO L290 TraceCheckUtils]: 1: Hoare triple {55297#true} assume 0 != ~compRegistered~0; {55297#true} is VALID [2022-04-28 08:33:26,852 INFO L272 TraceCheckUtils]: 2: Hoare triple {55297#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {55376#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:26,852 INFO L290 TraceCheckUtils]: 3: Hoare triple {55376#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {55297#true} is VALID [2022-04-28 08:33:26,853 INFO L272 TraceCheckUtils]: 4: Hoare triple {55297#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {55376#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:26,853 INFO L290 TraceCheckUtils]: 5: Hoare triple {55376#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {55297#true} is VALID [2022-04-28 08:33:26,853 INFO L290 TraceCheckUtils]: 6: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,853 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {55297#true} {55297#true} #1174#return; {55297#true} is VALID [2022-04-28 08:33:26,853 INFO L290 TraceCheckUtils]: 8: Hoare triple {55297#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {55297#true} is VALID [2022-04-28 08:33:26,853 INFO L290 TraceCheckUtils]: 9: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,853 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {55297#true} {55297#true} #1210#return; {55297#true} is VALID [2022-04-28 08:33:26,853 INFO L290 TraceCheckUtils]: 11: Hoare triple {55297#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {55297#true} is VALID [2022-04-28 08:33:26,853 INFO L290 TraceCheckUtils]: 12: Hoare triple {55297#true} assume !(-1073741802 == ~compRetStatus~0); {55297#true} is VALID [2022-04-28 08:33:26,853 INFO L290 TraceCheckUtils]: 13: Hoare triple {55297#true} assume 0 == ~__BLAST_NONDET~11; {55297#true} is VALID [2022-04-28 08:33:26,853 INFO L290 TraceCheckUtils]: 14: Hoare triple {55297#true} ~returnVal2~0 := 0; {55297#true} is VALID [2022-04-28 08:33:26,853 INFO L290 TraceCheckUtils]: 15: Hoare triple {55297#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {55297#true} is VALID [2022-04-28 08:33:26,854 INFO L290 TraceCheckUtils]: 16: Hoare triple {55297#true} #res := ~returnVal2~0; {55297#true} is VALID [2022-04-28 08:33:26,854 INFO L290 TraceCheckUtils]: 17: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,854 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {55297#true} {55314#(= ~myStatus~0 (- 1073741637))} #1192#return; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,855 INFO L272 TraceCheckUtils]: 0: Hoare triple {55297#true} call ULTIMATE.init(); {55353#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:33:26,855 INFO L290 TraceCheckUtils]: 1: Hoare triple {55353#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {55297#true} is VALID [2022-04-28 08:33:26,855 INFO L290 TraceCheckUtils]: 2: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,855 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {55297#true} {55297#true} #1270#return; {55297#true} is VALID [2022-04-28 08:33:26,856 INFO L272 TraceCheckUtils]: 4: Hoare triple {55297#true} call #t~ret213 := main(); {55297#true} is VALID [2022-04-28 08:33:26,856 INFO L290 TraceCheckUtils]: 5: Hoare triple {55297#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {55297#true} is VALID [2022-04-28 08:33:26,856 INFO L272 TraceCheckUtils]: 6: Hoare triple {55297#true} call _BLAST_init(); {55354#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:33:26,856 INFO L290 TraceCheckUtils]: 7: Hoare triple {55354#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {55297#true} is VALID [2022-04-28 08:33:26,857 INFO L290 TraceCheckUtils]: 8: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,857 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {55297#true} {55297#true} #1216#return; {55297#true} is VALID [2022-04-28 08:33:26,857 INFO L272 TraceCheckUtils]: 10: Hoare triple {55297#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {55355#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:33:26,857 INFO L290 TraceCheckUtils]: 11: Hoare triple {55355#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {55297#true} is VALID [2022-04-28 08:33:26,857 INFO L272 TraceCheckUtils]: 12: Hoare triple {55297#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {55297#true} is VALID [2022-04-28 08:33:26,858 INFO L290 TraceCheckUtils]: 13: Hoare triple {55297#true} ~cond := #in~cond; {55297#true} is VALID [2022-04-28 08:33:26,858 INFO L290 TraceCheckUtils]: 14: Hoare triple {55297#true} assume !(0 == ~cond); {55297#true} is VALID [2022-04-28 08:33:26,858 INFO L290 TraceCheckUtils]: 15: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,858 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {55297#true} {55297#true} #1254#return; {55297#true} is VALID [2022-04-28 08:33:26,858 INFO L290 TraceCheckUtils]: 17: Hoare triple {55297#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {55297#true} is VALID [2022-04-28 08:33:26,858 INFO L290 TraceCheckUtils]: 18: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,858 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {55297#true} {55297#true} #1218#return; {55297#true} is VALID [2022-04-28 08:33:26,858 INFO L290 TraceCheckUtils]: 20: Hoare triple {55297#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {55297#true} is VALID [2022-04-28 08:33:26,858 INFO L290 TraceCheckUtils]: 21: Hoare triple {55297#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {55297#true} is VALID [2022-04-28 08:33:26,859 INFO L290 TraceCheckUtils]: 22: Hoare triple {55297#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,860 INFO L272 TraceCheckUtils]: 23: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {55360#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:33:26,860 INFO L290 TraceCheckUtils]: 24: Hoare triple {55360#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {55297#true} is VALID [2022-04-28 08:33:26,861 INFO L272 TraceCheckUtils]: 25: Hoare triple {55297#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {55360#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:33:26,861 INFO L290 TraceCheckUtils]: 26: Hoare triple {55360#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {55297#true} is VALID [2022-04-28 08:33:26,861 INFO L290 TraceCheckUtils]: 27: Hoare triple {55297#true} assume !(0 == ~__BLAST_NONDET~5); {55297#true} is VALID [2022-04-28 08:33:26,861 INFO L290 TraceCheckUtils]: 28: Hoare triple {55297#true} #res := -1073741823; {55297#true} is VALID [2022-04-28 08:33:26,861 INFO L290 TraceCheckUtils]: 29: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,861 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {55297#true} {55297#true} #1176#return; {55297#true} is VALID [2022-04-28 08:33:26,861 INFO L290 TraceCheckUtils]: 31: Hoare triple {55297#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {55297#true} is VALID [2022-04-28 08:33:26,861 INFO L290 TraceCheckUtils]: 32: Hoare triple {55297#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {55297#true} is VALID [2022-04-28 08:33:26,861 INFO L290 TraceCheckUtils]: 33: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,862 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {55297#true} {55314#(= ~myStatus~0 (- 1073741637))} #1220#return; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,862 INFO L290 TraceCheckUtils]: 35: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,863 INFO L272 TraceCheckUtils]: 36: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} call stub_driver_init(); {55366#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:33:26,863 INFO L290 TraceCheckUtils]: 37: Hoare triple {55366#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {55297#true} is VALID [2022-04-28 08:33:26,863 INFO L290 TraceCheckUtils]: 38: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,863 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {55297#true} {55314#(= ~myStatus~0 (- 1073741637))} #1222#return; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,863 INFO L290 TraceCheckUtils]: 40: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} assume !!(~status~5 >= 0); {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,863 INFO L290 TraceCheckUtils]: 41: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} assume !(0 == ~__BLAST_NONDET~0); {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,864 INFO L290 TraceCheckUtils]: 42: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} assume !(1 == ~__BLAST_NONDET~0); {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,864 INFO L290 TraceCheckUtils]: 43: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} assume !(2 == ~__BLAST_NONDET~0); {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,864 INFO L290 TraceCheckUtils]: 44: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} assume 3 == ~__BLAST_NONDET~0; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,865 INFO L272 TraceCheckUtils]: 45: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,865 INFO L290 TraceCheckUtils]: 46: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,865 INFO L290 TraceCheckUtils]: 47: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} assume 0 == #t~mem81 % 256;havoc #t~mem81; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,865 INFO L290 TraceCheckUtils]: 48: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,866 INFO L272 TraceCheckUtils]: 49: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {55355#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:33:26,866 INFO L290 TraceCheckUtils]: 50: Hoare triple {55355#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {55297#true} is VALID [2022-04-28 08:33:26,866 INFO L290 TraceCheckUtils]: 51: Hoare triple {55297#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {55297#true} is VALID [2022-04-28 08:33:26,866 INFO L290 TraceCheckUtils]: 52: Hoare triple {55297#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {55297#true} is VALID [2022-04-28 08:33:26,866 INFO L290 TraceCheckUtils]: 53: Hoare triple {55297#true} assume #res.base == dest.base && #res.offset == dest.offset; {55297#true} is VALID [2022-04-28 08:33:26,867 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {55297#true} {55314#(= ~myStatus~0 (- 1073741637))} #1186#return; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,867 INFO L290 TraceCheckUtils]: 55: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,868 INFO L290 TraceCheckUtils]: 56: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} assume !(~s~0 != ~NP~0); {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,868 INFO L290 TraceCheckUtils]: 57: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,868 INFO L290 TraceCheckUtils]: 58: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,869 INFO L272 TraceCheckUtils]: 59: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {55367#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:33:26,869 INFO L290 TraceCheckUtils]: 60: Hoare triple {55367#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {55297#true} is VALID [2022-04-28 08:33:26,869 INFO L290 TraceCheckUtils]: 61: Hoare triple {55297#true} assume 0 != ~compRegistered~0; {55297#true} is VALID [2022-04-28 08:33:26,870 INFO L272 TraceCheckUtils]: 62: Hoare triple {55297#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {55376#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:26,870 INFO L290 TraceCheckUtils]: 63: Hoare triple {55376#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {55297#true} is VALID [2022-04-28 08:33:26,870 INFO L272 TraceCheckUtils]: 64: Hoare triple {55297#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {55376#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:26,870 INFO L290 TraceCheckUtils]: 65: Hoare triple {55376#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {55297#true} is VALID [2022-04-28 08:33:26,870 INFO L290 TraceCheckUtils]: 66: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,870 INFO L284 TraceCheckUtils]: 67: Hoare quadruple {55297#true} {55297#true} #1174#return; {55297#true} is VALID [2022-04-28 08:33:26,870 INFO L290 TraceCheckUtils]: 68: Hoare triple {55297#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {55297#true} is VALID [2022-04-28 08:33:26,870 INFO L290 TraceCheckUtils]: 69: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,871 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {55297#true} {55297#true} #1210#return; {55297#true} is VALID [2022-04-28 08:33:26,871 INFO L290 TraceCheckUtils]: 71: Hoare triple {55297#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {55297#true} is VALID [2022-04-28 08:33:26,871 INFO L290 TraceCheckUtils]: 72: Hoare triple {55297#true} assume !(-1073741802 == ~compRetStatus~0); {55297#true} is VALID [2022-04-28 08:33:26,871 INFO L290 TraceCheckUtils]: 73: Hoare triple {55297#true} assume 0 == ~__BLAST_NONDET~11; {55297#true} is VALID [2022-04-28 08:33:26,871 INFO L290 TraceCheckUtils]: 74: Hoare triple {55297#true} ~returnVal2~0 := 0; {55297#true} is VALID [2022-04-28 08:33:26,871 INFO L290 TraceCheckUtils]: 75: Hoare triple {55297#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {55297#true} is VALID [2022-04-28 08:33:26,871 INFO L290 TraceCheckUtils]: 76: Hoare triple {55297#true} #res := ~returnVal2~0; {55297#true} is VALID [2022-04-28 08:33:26,871 INFO L290 TraceCheckUtils]: 77: Hoare triple {55297#true} assume true; {55297#true} is VALID [2022-04-28 08:33:26,872 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {55297#true} {55314#(= ~myStatus~0 (- 1073741637))} #1192#return; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,872 INFO L290 TraceCheckUtils]: 79: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,872 INFO L290 TraceCheckUtils]: 80: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} assume !(259 == ~status~3); {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,872 INFO L290 TraceCheckUtils]: 81: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} assume ~status~3 >= 0; {55314#(= ~myStatus~0 (- 1073741637))} is VALID [2022-04-28 08:33:26,873 INFO L290 TraceCheckUtils]: 82: Hoare triple {55314#(= ~myStatus~0 (- 1073741637))} assume ~myStatus~0 >= 0;call write~int(1, ~devExt~3.base, 52 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 54 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 53 + ~devExt~3.offset, 1); {55298#false} is VALID [2022-04-28 08:33:26,873 INFO L290 TraceCheckUtils]: 83: Hoare triple {55298#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {55298#false} is VALID [2022-04-28 08:33:26,873 INFO L272 TraceCheckUtils]: 84: Hoare triple {55298#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {55298#false} is VALID [2022-04-28 08:33:26,873 INFO L290 TraceCheckUtils]: 85: Hoare triple {55298#false} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {55298#false} is VALID [2022-04-28 08:33:26,873 INFO L290 TraceCheckUtils]: 86: Hoare triple {55298#false} assume !(~s~0 == ~NP~0); {55298#false} is VALID [2022-04-28 08:33:26,873 INFO L272 TraceCheckUtils]: 87: Hoare triple {55298#false} call errorFn(); {55298#false} is VALID [2022-04-28 08:33:26,873 INFO L290 TraceCheckUtils]: 88: Hoare triple {55298#false} assume !false; {55298#false} is VALID [2022-04-28 08:33:26,874 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:33:26,874 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:33:26,874 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [76165182] [2022-04-28 08:33:26,874 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [76165182] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:33:26,874 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:33:26,874 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:33:26,874 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:33:26,874 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1462335888] [2022-04-28 08:33:26,874 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1462335888] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:33:26,874 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:33:26,874 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:33:26,874 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1120832272] [2022-04-28 08:33:26,875 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:33:26,875 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 6.3) internal successors, (63), 3 states have internal predecessors, (63), 3 states have call successors, (15), 10 states have call predecessors, (15), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 89 [2022-04-28 08:33:26,875 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:33:26,875 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 6.3) internal successors, (63), 3 states have internal predecessors, (63), 3 states have call successors, (15), 10 states have call predecessors, (15), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-04-28 08:33:26,941 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 89 edges. 89 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:33:26,941 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-28 08:33:26,941 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:33:26,942 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-28 08:33:26,942 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=62, Unknown=0, NotChecked=0, Total=90 [2022-04-28 08:33:26,942 INFO L87 Difference]: Start difference. First operand 199 states and 233 transitions. Second operand has 10 states, 10 states have (on average 6.3) internal successors, (63), 3 states have internal predecessors, (63), 3 states have call successors, (15), 10 states have call predecessors, (15), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-04-28 08:33:29,024 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:33:34,318 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:33:34,318 INFO L93 Difference]: Finished difference Result 437 states and 522 transitions. [2022-04-28 08:33:34,318 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-04-28 08:33:34,319 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 6.3) internal successors, (63), 3 states have internal predecessors, (63), 3 states have call successors, (15), 10 states have call predecessors, (15), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 89 [2022-04-28 08:33:34,319 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:33:34,319 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 6.3) internal successors, (63), 3 states have internal predecessors, (63), 3 states have call successors, (15), 10 states have call predecessors, (15), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-04-28 08:33:34,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 383 transitions. [2022-04-28 08:33:34,321 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 6.3) internal successors, (63), 3 states have internal predecessors, (63), 3 states have call successors, (15), 10 states have call predecessors, (15), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-04-28 08:33:34,323 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 383 transitions. [2022-04-28 08:33:34,323 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 15 states and 383 transitions. [2022-04-28 08:33:34,804 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 383 edges. 383 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:33:34,812 INFO L225 Difference]: With dead ends: 437 [2022-04-28 08:33:34,812 INFO L226 Difference]: Without dead ends: 408 [2022-04-28 08:33:34,812 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 23 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=109, Invalid=233, Unknown=0, NotChecked=0, Total=342 [2022-04-28 08:33:34,813 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 714 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 333 mSolverCounterSat, 357 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 720 SdHoareTripleChecker+Valid, 250 SdHoareTripleChecker+Invalid, 691 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 357 IncrementalHoareTripleChecker+Valid, 333 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2022-04-28 08:33:34,813 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [720 Valid, 250 Invalid, 691 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [357 Valid, 333 Invalid, 1 Unknown, 0 Unchecked, 4.2s Time] [2022-04-28 08:33:34,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 408 states. [2022-04-28 08:33:35,483 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 408 to 345. [2022-04-28 08:33:35,483 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:33:35,484 INFO L82 GeneralOperation]: Start isEquivalent. First operand 408 states. Second operand has 345 states, 268 states have (on average 1.2350746268656716) internal successors, (331), 272 states have internal predecessors, (331), 36 states have call successors, (36), 34 states have call predecessors, (36), 40 states have return successors, (42), 38 states have call predecessors, (42), 32 states have call successors, (42) [2022-04-28 08:33:35,484 INFO L74 IsIncluded]: Start isIncluded. First operand 408 states. Second operand has 345 states, 268 states have (on average 1.2350746268656716) internal successors, (331), 272 states have internal predecessors, (331), 36 states have call successors, (36), 34 states have call predecessors, (36), 40 states have return successors, (42), 38 states have call predecessors, (42), 32 states have call successors, (42) [2022-04-28 08:33:35,485 INFO L87 Difference]: Start difference. First operand 408 states. Second operand has 345 states, 268 states have (on average 1.2350746268656716) internal successors, (331), 272 states have internal predecessors, (331), 36 states have call successors, (36), 34 states have call predecessors, (36), 40 states have return successors, (42), 38 states have call predecessors, (42), 32 states have call successors, (42) [2022-04-28 08:33:35,490 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:33:35,491 INFO L93 Difference]: Finished difference Result 408 states and 489 transitions. [2022-04-28 08:33:35,491 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 489 transitions. [2022-04-28 08:33:35,491 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:33:35,491 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:33:35,491 INFO L74 IsIncluded]: Start isIncluded. First operand has 345 states, 268 states have (on average 1.2350746268656716) internal successors, (331), 272 states have internal predecessors, (331), 36 states have call successors, (36), 34 states have call predecessors, (36), 40 states have return successors, (42), 38 states have call predecessors, (42), 32 states have call successors, (42) Second operand 408 states. [2022-04-28 08:33:35,492 INFO L87 Difference]: Start difference. First operand has 345 states, 268 states have (on average 1.2350746268656716) internal successors, (331), 272 states have internal predecessors, (331), 36 states have call successors, (36), 34 states have call predecessors, (36), 40 states have return successors, (42), 38 states have call predecessors, (42), 32 states have call successors, (42) Second operand 408 states. [2022-04-28 08:33:35,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:33:35,497 INFO L93 Difference]: Finished difference Result 408 states and 489 transitions. [2022-04-28 08:33:35,498 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 489 transitions. [2022-04-28 08:33:35,498 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:33:35,498 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:33:35,498 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:33:35,498 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:33:35,498 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 345 states, 268 states have (on average 1.2350746268656716) internal successors, (331), 272 states have internal predecessors, (331), 36 states have call successors, (36), 34 states have call predecessors, (36), 40 states have return successors, (42), 38 states have call predecessors, (42), 32 states have call successors, (42) [2022-04-28 08:33:35,504 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 345 states to 345 states and 409 transitions. [2022-04-28 08:33:35,504 INFO L78 Accepts]: Start accepts. Automaton has 345 states and 409 transitions. Word has length 89 [2022-04-28 08:33:35,504 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:33:35,504 INFO L495 AbstractCegarLoop]: Abstraction has 345 states and 409 transitions. [2022-04-28 08:33:35,504 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 6.3) internal successors, (63), 3 states have internal predecessors, (63), 3 states have call successors, (15), 10 states have call predecessors, (15), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-04-28 08:33:35,504 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 345 states and 409 transitions. [2022-04-28 08:33:36,415 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 409 edges. 409 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:33:36,416 INFO L276 IsEmpty]: Start isEmpty. Operand 345 states and 409 transitions. [2022-04-28 08:33:36,416 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-04-28 08:33:36,416 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:33:36,416 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:33:36,416 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23 [2022-04-28 08:33:36,417 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:33:36,417 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:33:36,417 INFO L85 PathProgramCache]: Analyzing trace with hash 450072055, now seen corresponding path program 1 times [2022-04-28 08:33:36,417 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:33:36,417 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [958513922] [2022-04-28 08:33:36,417 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:33:36,417 INFO L85 PathProgramCache]: Analyzing trace with hash 450072055, now seen corresponding path program 2 times [2022-04-28 08:33:36,417 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:33:36,417 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1308613625] [2022-04-28 08:33:36,417 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:33:36,418 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:33:36,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:36,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:33:36,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:36,557 INFO L290 TraceCheckUtils]: 0: Hoare triple {57843#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {57786#true} is VALID [2022-04-28 08:33:36,558 INFO L290 TraceCheckUtils]: 1: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,558 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {57786#true} {57786#true} #1270#return; {57786#true} is VALID [2022-04-28 08:33:36,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:33:36,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:36,590 INFO L290 TraceCheckUtils]: 0: Hoare triple {57844#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {57786#true} is VALID [2022-04-28 08:33:36,590 INFO L290 TraceCheckUtils]: 1: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,590 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {57786#true} {57786#true} #1216#return; {57786#true} is VALID [2022-04-28 08:33:36,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:33:36,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:36,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:33:36,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:36,615 INFO L290 TraceCheckUtils]: 0: Hoare triple {57786#true} ~cond := #in~cond; {57786#true} is VALID [2022-04-28 08:33:36,615 INFO L290 TraceCheckUtils]: 1: Hoare triple {57786#true} assume !(0 == ~cond); {57786#true} is VALID [2022-04-28 08:33:36,615 INFO L290 TraceCheckUtils]: 2: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,616 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {57786#true} {57786#true} #1254#return; {57786#true} is VALID [2022-04-28 08:33:36,616 INFO L290 TraceCheckUtils]: 0: Hoare triple {57845#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {57786#true} is VALID [2022-04-28 08:33:36,616 INFO L272 TraceCheckUtils]: 1: Hoare triple {57786#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {57786#true} is VALID [2022-04-28 08:33:36,616 INFO L290 TraceCheckUtils]: 2: Hoare triple {57786#true} ~cond := #in~cond; {57786#true} is VALID [2022-04-28 08:33:36,616 INFO L290 TraceCheckUtils]: 3: Hoare triple {57786#true} assume !(0 == ~cond); {57786#true} is VALID [2022-04-28 08:33:36,616 INFO L290 TraceCheckUtils]: 4: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,616 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {57786#true} {57786#true} #1254#return; {57786#true} is VALID [2022-04-28 08:33:36,616 INFO L290 TraceCheckUtils]: 6: Hoare triple {57786#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {57786#true} is VALID [2022-04-28 08:33:36,616 INFO L290 TraceCheckUtils]: 7: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,616 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {57786#true} {57786#true} #1218#return; {57786#true} is VALID [2022-04-28 08:33:36,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:33:36,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:36,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:33:36,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:36,650 INFO L290 TraceCheckUtils]: 0: Hoare triple {57850#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {57786#true} is VALID [2022-04-28 08:33:36,651 INFO L290 TraceCheckUtils]: 1: Hoare triple {57786#true} assume !(0 == ~__BLAST_NONDET~5); {57786#true} is VALID [2022-04-28 08:33:36,651 INFO L290 TraceCheckUtils]: 2: Hoare triple {57786#true} #res := -1073741823; {57786#true} is VALID [2022-04-28 08:33:36,651 INFO L290 TraceCheckUtils]: 3: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,651 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {57786#true} {57786#true} #1176#return; {57786#true} is VALID [2022-04-28 08:33:36,651 INFO L290 TraceCheckUtils]: 0: Hoare triple {57850#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {57786#true} is VALID [2022-04-28 08:33:36,656 INFO L272 TraceCheckUtils]: 1: Hoare triple {57786#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {57850#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:33:36,656 INFO L290 TraceCheckUtils]: 2: Hoare triple {57850#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {57786#true} is VALID [2022-04-28 08:33:36,656 INFO L290 TraceCheckUtils]: 3: Hoare triple {57786#true} assume !(0 == ~__BLAST_NONDET~5); {57786#true} is VALID [2022-04-28 08:33:36,656 INFO L290 TraceCheckUtils]: 4: Hoare triple {57786#true} #res := -1073741823; {57786#true} is VALID [2022-04-28 08:33:36,656 INFO L290 TraceCheckUtils]: 5: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,656 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {57786#true} {57786#true} #1176#return; {57786#true} is VALID [2022-04-28 08:33:36,657 INFO L290 TraceCheckUtils]: 7: Hoare triple {57786#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {57786#true} is VALID [2022-04-28 08:33:36,657 INFO L290 TraceCheckUtils]: 8: Hoare triple {57786#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {57856#(<= (+ |KbFilter_AddDevice_#res| 1) 0)} is VALID [2022-04-28 08:33:36,657 INFO L290 TraceCheckUtils]: 9: Hoare triple {57856#(<= (+ |KbFilter_AddDevice_#res| 1) 0)} assume true; {57856#(<= (+ |KbFilter_AddDevice_#res| 1) 0)} is VALID [2022-04-28 08:33:36,658 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {57856#(<= (+ |KbFilter_AddDevice_#res| 1) 0)} {57786#true} #1220#return; {57814#(<= (+ 1 |main_#t~ret170|) 0)} is VALID [2022-04-28 08:33:36,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-04-28 08:33:36,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:36,679 INFO L290 TraceCheckUtils]: 0: Hoare triple {57857#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {57786#true} is VALID [2022-04-28 08:33:36,679 INFO L290 TraceCheckUtils]: 1: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,679 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {57786#true} {57815#(<= (+ main_~status~5 1) 0)} #1222#return; {57815#(<= (+ main_~status~5 1) 0)} is VALID [2022-04-28 08:33:36,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-04-28 08:33:36,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:36,685 INFO L290 TraceCheckUtils]: 0: Hoare triple {57845#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {57786#true} is VALID [2022-04-28 08:33:36,686 INFO L290 TraceCheckUtils]: 1: Hoare triple {57786#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {57786#true} is VALID [2022-04-28 08:33:36,686 INFO L290 TraceCheckUtils]: 2: Hoare triple {57786#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {57786#true} is VALID [2022-04-28 08:33:36,686 INFO L290 TraceCheckUtils]: 3: Hoare triple {57786#true} assume #res.base == dest.base && #res.offset == dest.offset; {57786#true} is VALID [2022-04-28 08:33:36,686 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {57786#true} {57787#false} #1186#return; {57787#false} is VALID [2022-04-28 08:33:36,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-04-28 08:33:36,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:36,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:33:36,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:36,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:33:36,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:36,724 INFO L290 TraceCheckUtils]: 0: Hoare triple {57867#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {57786#true} is VALID [2022-04-28 08:33:36,724 INFO L290 TraceCheckUtils]: 1: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,724 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {57786#true} {57786#true} #1174#return; {57786#true} is VALID [2022-04-28 08:33:36,724 INFO L290 TraceCheckUtils]: 0: Hoare triple {57867#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {57786#true} is VALID [2022-04-28 08:33:36,725 INFO L272 TraceCheckUtils]: 1: Hoare triple {57786#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {57867#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:36,725 INFO L290 TraceCheckUtils]: 2: Hoare triple {57867#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {57786#true} is VALID [2022-04-28 08:33:36,725 INFO L290 TraceCheckUtils]: 3: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,725 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {57786#true} {57786#true} #1174#return; {57786#true} is VALID [2022-04-28 08:33:36,725 INFO L290 TraceCheckUtils]: 5: Hoare triple {57786#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {57786#true} is VALID [2022-04-28 08:33:36,725 INFO L290 TraceCheckUtils]: 6: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,725 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {57786#true} {57786#true} #1210#return; {57786#true} is VALID [2022-04-28 08:33:36,725 INFO L290 TraceCheckUtils]: 0: Hoare triple {57858#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {57786#true} is VALID [2022-04-28 08:33:36,725 INFO L290 TraceCheckUtils]: 1: Hoare triple {57786#true} assume 0 != ~compRegistered~0; {57786#true} is VALID [2022-04-28 08:33:36,726 INFO L272 TraceCheckUtils]: 2: Hoare triple {57786#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {57867#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:36,726 INFO L290 TraceCheckUtils]: 3: Hoare triple {57867#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {57786#true} is VALID [2022-04-28 08:33:36,727 INFO L272 TraceCheckUtils]: 4: Hoare triple {57786#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {57867#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:36,727 INFO L290 TraceCheckUtils]: 5: Hoare triple {57867#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {57786#true} is VALID [2022-04-28 08:33:36,727 INFO L290 TraceCheckUtils]: 6: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,727 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {57786#true} {57786#true} #1174#return; {57786#true} is VALID [2022-04-28 08:33:36,727 INFO L290 TraceCheckUtils]: 8: Hoare triple {57786#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {57786#true} is VALID [2022-04-28 08:33:36,727 INFO L290 TraceCheckUtils]: 9: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,727 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {57786#true} {57786#true} #1210#return; {57786#true} is VALID [2022-04-28 08:33:36,727 INFO L290 TraceCheckUtils]: 11: Hoare triple {57786#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {57786#true} is VALID [2022-04-28 08:33:36,727 INFO L290 TraceCheckUtils]: 12: Hoare triple {57786#true} assume !(-1073741802 == ~compRetStatus~0); {57786#true} is VALID [2022-04-28 08:33:36,727 INFO L290 TraceCheckUtils]: 13: Hoare triple {57786#true} assume 0 == ~__BLAST_NONDET~11; {57786#true} is VALID [2022-04-28 08:33:36,728 INFO L290 TraceCheckUtils]: 14: Hoare triple {57786#true} ~returnVal2~0 := 0; {57786#true} is VALID [2022-04-28 08:33:36,728 INFO L290 TraceCheckUtils]: 15: Hoare triple {57786#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {57786#true} is VALID [2022-04-28 08:33:36,728 INFO L290 TraceCheckUtils]: 16: Hoare triple {57786#true} #res := ~returnVal2~0; {57786#true} is VALID [2022-04-28 08:33:36,728 INFO L290 TraceCheckUtils]: 17: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,728 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {57786#true} {57787#false} #1192#return; {57787#false} is VALID [2022-04-28 08:33:36,729 INFO L272 TraceCheckUtils]: 0: Hoare triple {57786#true} call ULTIMATE.init(); {57843#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:33:36,729 INFO L290 TraceCheckUtils]: 1: Hoare triple {57843#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {57786#true} is VALID [2022-04-28 08:33:36,729 INFO L290 TraceCheckUtils]: 2: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,729 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {57786#true} {57786#true} #1270#return; {57786#true} is VALID [2022-04-28 08:33:36,729 INFO L272 TraceCheckUtils]: 4: Hoare triple {57786#true} call #t~ret213 := main(); {57786#true} is VALID [2022-04-28 08:33:36,729 INFO L290 TraceCheckUtils]: 5: Hoare triple {57786#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {57786#true} is VALID [2022-04-28 08:33:36,730 INFO L272 TraceCheckUtils]: 6: Hoare triple {57786#true} call _BLAST_init(); {57844#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:33:36,730 INFO L290 TraceCheckUtils]: 7: Hoare triple {57844#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {57786#true} is VALID [2022-04-28 08:33:36,730 INFO L290 TraceCheckUtils]: 8: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,730 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {57786#true} {57786#true} #1216#return; {57786#true} is VALID [2022-04-28 08:33:36,731 INFO L272 TraceCheckUtils]: 10: Hoare triple {57786#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {57845#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:33:36,731 INFO L290 TraceCheckUtils]: 11: Hoare triple {57845#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {57786#true} is VALID [2022-04-28 08:33:36,731 INFO L272 TraceCheckUtils]: 12: Hoare triple {57786#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {57786#true} is VALID [2022-04-28 08:33:36,731 INFO L290 TraceCheckUtils]: 13: Hoare triple {57786#true} ~cond := #in~cond; {57786#true} is VALID [2022-04-28 08:33:36,731 INFO L290 TraceCheckUtils]: 14: Hoare triple {57786#true} assume !(0 == ~cond); {57786#true} is VALID [2022-04-28 08:33:36,732 INFO L290 TraceCheckUtils]: 15: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,732 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {57786#true} {57786#true} #1254#return; {57786#true} is VALID [2022-04-28 08:33:36,732 INFO L290 TraceCheckUtils]: 17: Hoare triple {57786#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {57786#true} is VALID [2022-04-28 08:33:36,732 INFO L290 TraceCheckUtils]: 18: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,732 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {57786#true} {57786#true} #1218#return; {57786#true} is VALID [2022-04-28 08:33:36,732 INFO L290 TraceCheckUtils]: 20: Hoare triple {57786#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {57786#true} is VALID [2022-04-28 08:33:36,732 INFO L290 TraceCheckUtils]: 21: Hoare triple {57786#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {57786#true} is VALID [2022-04-28 08:33:36,732 INFO L290 TraceCheckUtils]: 22: Hoare triple {57786#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {57786#true} is VALID [2022-04-28 08:33:36,733 INFO L272 TraceCheckUtils]: 23: Hoare triple {57786#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {57850#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:33:36,733 INFO L290 TraceCheckUtils]: 24: Hoare triple {57850#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {57786#true} is VALID [2022-04-28 08:33:36,734 INFO L272 TraceCheckUtils]: 25: Hoare triple {57786#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {57850#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:33:36,734 INFO L290 TraceCheckUtils]: 26: Hoare triple {57850#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {57786#true} is VALID [2022-04-28 08:33:36,734 INFO L290 TraceCheckUtils]: 27: Hoare triple {57786#true} assume !(0 == ~__BLAST_NONDET~5); {57786#true} is VALID [2022-04-28 08:33:36,734 INFO L290 TraceCheckUtils]: 28: Hoare triple {57786#true} #res := -1073741823; {57786#true} is VALID [2022-04-28 08:33:36,734 INFO L290 TraceCheckUtils]: 29: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,734 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {57786#true} {57786#true} #1176#return; {57786#true} is VALID [2022-04-28 08:33:36,734 INFO L290 TraceCheckUtils]: 31: Hoare triple {57786#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {57786#true} is VALID [2022-04-28 08:33:36,735 INFO L290 TraceCheckUtils]: 32: Hoare triple {57786#true} assume !(~status~0 >= 0);#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {57856#(<= (+ |KbFilter_AddDevice_#res| 1) 0)} is VALID [2022-04-28 08:33:36,735 INFO L290 TraceCheckUtils]: 33: Hoare triple {57856#(<= (+ |KbFilter_AddDevice_#res| 1) 0)} assume true; {57856#(<= (+ |KbFilter_AddDevice_#res| 1) 0)} is VALID [2022-04-28 08:33:36,736 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {57856#(<= (+ |KbFilter_AddDevice_#res| 1) 0)} {57786#true} #1220#return; {57814#(<= (+ 1 |main_#t~ret170|) 0)} is VALID [2022-04-28 08:33:36,736 INFO L290 TraceCheckUtils]: 35: Hoare triple {57814#(<= (+ 1 |main_#t~ret170|) 0)} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {57815#(<= (+ main_~status~5 1) 0)} is VALID [2022-04-28 08:33:36,737 INFO L272 TraceCheckUtils]: 36: Hoare triple {57815#(<= (+ main_~status~5 1) 0)} call stub_driver_init(); {57857#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:33:36,737 INFO L290 TraceCheckUtils]: 37: Hoare triple {57857#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {57786#true} is VALID [2022-04-28 08:33:36,737 INFO L290 TraceCheckUtils]: 38: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,737 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {57786#true} {57815#(<= (+ main_~status~5 1) 0)} #1222#return; {57815#(<= (+ main_~status~5 1) 0)} is VALID [2022-04-28 08:33:36,737 INFO L290 TraceCheckUtils]: 40: Hoare triple {57815#(<= (+ main_~status~5 1) 0)} assume !!(~status~5 >= 0); {57787#false} is VALID [2022-04-28 08:33:36,738 INFO L290 TraceCheckUtils]: 41: Hoare triple {57787#false} assume !(0 == ~__BLAST_NONDET~0); {57787#false} is VALID [2022-04-28 08:33:36,738 INFO L290 TraceCheckUtils]: 42: Hoare triple {57787#false} assume !(1 == ~__BLAST_NONDET~0); {57787#false} is VALID [2022-04-28 08:33:36,738 INFO L290 TraceCheckUtils]: 43: Hoare triple {57787#false} assume !(2 == ~__BLAST_NONDET~0); {57787#false} is VALID [2022-04-28 08:33:36,738 INFO L290 TraceCheckUtils]: 44: Hoare triple {57787#false} assume 3 == ~__BLAST_NONDET~0; {57787#false} is VALID [2022-04-28 08:33:36,738 INFO L272 TraceCheckUtils]: 45: Hoare triple {57787#false} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {57787#false} is VALID [2022-04-28 08:33:36,738 INFO L290 TraceCheckUtils]: 46: Hoare triple {57787#false} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {57787#false} is VALID [2022-04-28 08:33:36,738 INFO L290 TraceCheckUtils]: 47: Hoare triple {57787#false} assume 0 == #t~mem81 % 256;havoc #t~mem81; {57787#false} is VALID [2022-04-28 08:33:36,738 INFO L290 TraceCheckUtils]: 48: Hoare triple {57787#false} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {57787#false} is VALID [2022-04-28 08:33:36,738 INFO L272 TraceCheckUtils]: 49: Hoare triple {57787#false} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {57845#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:33:36,738 INFO L290 TraceCheckUtils]: 50: Hoare triple {57845#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {57786#true} is VALID [2022-04-28 08:33:36,738 INFO L290 TraceCheckUtils]: 51: Hoare triple {57786#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {57786#true} is VALID [2022-04-28 08:33:36,738 INFO L290 TraceCheckUtils]: 52: Hoare triple {57786#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {57786#true} is VALID [2022-04-28 08:33:36,738 INFO L290 TraceCheckUtils]: 53: Hoare triple {57786#true} assume #res.base == dest.base && #res.offset == dest.offset; {57786#true} is VALID [2022-04-28 08:33:36,738 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {57786#true} {57787#false} #1186#return; {57787#false} is VALID [2022-04-28 08:33:36,738 INFO L290 TraceCheckUtils]: 55: Hoare triple {57787#false} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {57787#false} is VALID [2022-04-28 08:33:36,739 INFO L290 TraceCheckUtils]: 56: Hoare triple {57787#false} assume !(~s~0 != ~NP~0); {57787#false} is VALID [2022-04-28 08:33:36,739 INFO L290 TraceCheckUtils]: 57: Hoare triple {57787#false} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {57787#false} is VALID [2022-04-28 08:33:36,739 INFO L290 TraceCheckUtils]: 58: Hoare triple {57787#false} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {57787#false} is VALID [2022-04-28 08:33:36,739 INFO L272 TraceCheckUtils]: 59: Hoare triple {57787#false} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {57858#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:33:36,739 INFO L290 TraceCheckUtils]: 60: Hoare triple {57858#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {57786#true} is VALID [2022-04-28 08:33:36,739 INFO L290 TraceCheckUtils]: 61: Hoare triple {57786#true} assume 0 != ~compRegistered~0; {57786#true} is VALID [2022-04-28 08:33:36,740 INFO L272 TraceCheckUtils]: 62: Hoare triple {57786#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {57867#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:36,740 INFO L290 TraceCheckUtils]: 63: Hoare triple {57867#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {57786#true} is VALID [2022-04-28 08:33:36,740 INFO L272 TraceCheckUtils]: 64: Hoare triple {57786#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {57867#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:36,740 INFO L290 TraceCheckUtils]: 65: Hoare triple {57867#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {57786#true} is VALID [2022-04-28 08:33:36,740 INFO L290 TraceCheckUtils]: 66: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,741 INFO L284 TraceCheckUtils]: 67: Hoare quadruple {57786#true} {57786#true} #1174#return; {57786#true} is VALID [2022-04-28 08:33:36,741 INFO L290 TraceCheckUtils]: 68: Hoare triple {57786#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {57786#true} is VALID [2022-04-28 08:33:36,741 INFO L290 TraceCheckUtils]: 69: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,741 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {57786#true} {57786#true} #1210#return; {57786#true} is VALID [2022-04-28 08:33:36,741 INFO L290 TraceCheckUtils]: 71: Hoare triple {57786#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {57786#true} is VALID [2022-04-28 08:33:36,741 INFO L290 TraceCheckUtils]: 72: Hoare triple {57786#true} assume !(-1073741802 == ~compRetStatus~0); {57786#true} is VALID [2022-04-28 08:33:36,741 INFO L290 TraceCheckUtils]: 73: Hoare triple {57786#true} assume 0 == ~__BLAST_NONDET~11; {57786#true} is VALID [2022-04-28 08:33:36,741 INFO L290 TraceCheckUtils]: 74: Hoare triple {57786#true} ~returnVal2~0 := 0; {57786#true} is VALID [2022-04-28 08:33:36,741 INFO L290 TraceCheckUtils]: 75: Hoare triple {57786#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {57786#true} is VALID [2022-04-28 08:33:36,741 INFO L290 TraceCheckUtils]: 76: Hoare triple {57786#true} #res := ~returnVal2~0; {57786#true} is VALID [2022-04-28 08:33:36,741 INFO L290 TraceCheckUtils]: 77: Hoare triple {57786#true} assume true; {57786#true} is VALID [2022-04-28 08:33:36,741 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {57786#true} {57787#false} #1192#return; {57787#false} is VALID [2022-04-28 08:33:36,741 INFO L290 TraceCheckUtils]: 79: Hoare triple {57787#false} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {57787#false} is VALID [2022-04-28 08:33:36,741 INFO L290 TraceCheckUtils]: 80: Hoare triple {57787#false} assume !(259 == ~status~3); {57787#false} is VALID [2022-04-28 08:33:36,741 INFO L290 TraceCheckUtils]: 81: Hoare triple {57787#false} assume ~status~3 >= 0; {57787#false} is VALID [2022-04-28 08:33:36,742 INFO L290 TraceCheckUtils]: 82: Hoare triple {57787#false} assume !(~myStatus~0 >= 0); {57787#false} is VALID [2022-04-28 08:33:36,742 INFO L290 TraceCheckUtils]: 83: Hoare triple {57787#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {57787#false} is VALID [2022-04-28 08:33:36,742 INFO L272 TraceCheckUtils]: 84: Hoare triple {57787#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {57787#false} is VALID [2022-04-28 08:33:36,742 INFO L290 TraceCheckUtils]: 85: Hoare triple {57787#false} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {57787#false} is VALID [2022-04-28 08:33:36,742 INFO L290 TraceCheckUtils]: 86: Hoare triple {57787#false} assume !(~s~0 == ~NP~0); {57787#false} is VALID [2022-04-28 08:33:36,742 INFO L272 TraceCheckUtils]: 87: Hoare triple {57787#false} call errorFn(); {57787#false} is VALID [2022-04-28 08:33:36,742 INFO L290 TraceCheckUtils]: 88: Hoare triple {57787#false} assume !false; {57787#false} is VALID [2022-04-28 08:33:36,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:33:36,742 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:33:36,742 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1308613625] [2022-04-28 08:33:36,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1308613625] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:33:36,743 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:33:36,743 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:33:36,743 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:33:36,743 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [958513922] [2022-04-28 08:33:36,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [958513922] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:33:36,743 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:33:36,743 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:33:36,743 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1693302309] [2022-04-28 08:33:36,743 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:33:36,744 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 5.25) internal successors, (63), 4 states have internal predecessors, (63), 3 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 89 [2022-04-28 08:33:36,744 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:33:36,744 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 5.25) internal successors, (63), 4 states have internal predecessors, (63), 3 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-04-28 08:33:36,820 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 89 edges. 89 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:33:36,820 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 08:33:36,820 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:33:36,821 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 08:33:36,821 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:33:36,822 INFO L87 Difference]: Start difference. First operand 345 states and 409 transitions. Second operand has 12 states, 12 states have (on average 5.25) internal successors, (63), 4 states have internal predecessors, (63), 3 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-04-28 08:33:38,924 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:33:43,786 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.46s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:33:46,844 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:33:46,844 INFO L93 Difference]: Finished difference Result 657 states and 796 transitions. [2022-04-28 08:33:46,844 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-04-28 08:33:46,844 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 5.25) internal successors, (63), 4 states have internal predecessors, (63), 3 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 89 [2022-04-28 08:33:46,844 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:33:46,844 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 5.25) internal successors, (63), 4 states have internal predecessors, (63), 3 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-04-28 08:33:46,846 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 311 transitions. [2022-04-28 08:33:46,846 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 5.25) internal successors, (63), 4 states have internal predecessors, (63), 3 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-04-28 08:33:46,847 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 311 transitions. [2022-04-28 08:33:46,848 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 11 states and 311 transitions. [2022-04-28 08:33:47,167 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 311 edges. 311 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:33:47,175 INFO L225 Difference]: With dead ends: 657 [2022-04-28 08:33:47,175 INFO L226 Difference]: Without dead ends: 399 [2022-04-28 08:33:47,176 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=66, Invalid=174, Unknown=0, NotChecked=0, Total=240 [2022-04-28 08:33:47,176 INFO L413 NwaCegarLoop]: 139 mSDtfsCounter, 277 mSDsluCounter, 195 mSDsCounter, 0 mSdLazyCounter, 579 mSolverCounterSat, 153 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 281 SdHoareTripleChecker+Valid, 334 SdHoareTripleChecker+Invalid, 733 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 153 IncrementalHoareTripleChecker+Valid, 579 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.4s IncrementalHoareTripleChecker+Time [2022-04-28 08:33:47,176 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [281 Valid, 334 Invalid, 733 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [153 Valid, 579 Invalid, 1 Unknown, 0 Unchecked, 5.4s Time] [2022-04-28 08:33:47,177 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 399 states. [2022-04-28 08:33:47,817 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 399 to 337. [2022-04-28 08:33:47,817 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:33:47,818 INFO L82 GeneralOperation]: Start isEquivalent. First operand 399 states. Second operand has 337 states, 262 states have (on average 1.2328244274809161) internal successors, (323), 266 states have internal predecessors, (323), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:33:47,818 INFO L74 IsIncluded]: Start isIncluded. First operand 399 states. Second operand has 337 states, 262 states have (on average 1.2328244274809161) internal successors, (323), 266 states have internal predecessors, (323), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:33:47,818 INFO L87 Difference]: Start difference. First operand 399 states. Second operand has 337 states, 262 states have (on average 1.2328244274809161) internal successors, (323), 266 states have internal predecessors, (323), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:33:47,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:33:47,831 INFO L93 Difference]: Finished difference Result 399 states and 479 transitions. [2022-04-28 08:33:47,831 INFO L276 IsEmpty]: Start isEmpty. Operand 399 states and 479 transitions. [2022-04-28 08:33:47,831 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:33:47,831 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:33:47,832 INFO L74 IsIncluded]: Start isIncluded. First operand has 337 states, 262 states have (on average 1.2328244274809161) internal successors, (323), 266 states have internal predecessors, (323), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) Second operand 399 states. [2022-04-28 08:33:47,832 INFO L87 Difference]: Start difference. First operand has 337 states, 262 states have (on average 1.2328244274809161) internal successors, (323), 266 states have internal predecessors, (323), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) Second operand 399 states. [2022-04-28 08:33:47,838 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:33:47,838 INFO L93 Difference]: Finished difference Result 399 states and 479 transitions. [2022-04-28 08:33:47,838 INFO L276 IsEmpty]: Start isEmpty. Operand 399 states and 479 transitions. [2022-04-28 08:33:47,839 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:33:47,839 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:33:47,839 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:33:47,839 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:33:47,839 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 337 states, 262 states have (on average 1.2328244274809161) internal successors, (323), 266 states have internal predecessors, (323), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:33:47,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 337 states to 337 states and 399 transitions. [2022-04-28 08:33:47,844 INFO L78 Accepts]: Start accepts. Automaton has 337 states and 399 transitions. Word has length 89 [2022-04-28 08:33:47,845 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:33:47,845 INFO L495 AbstractCegarLoop]: Abstraction has 337 states and 399 transitions. [2022-04-28 08:33:47,845 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 5.25) internal successors, (63), 4 states have internal predecessors, (63), 3 states have call successors, (15), 9 states have call predecessors, (15), 2 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-04-28 08:33:47,845 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 337 states and 399 transitions. [2022-04-28 08:33:48,724 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 399 edges. 399 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:33:48,725 INFO L276 IsEmpty]: Start isEmpty. Operand 337 states and 399 transitions. [2022-04-28 08:33:48,725 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2022-04-28 08:33:48,725 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:33:48,725 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:33:48,725 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24 [2022-04-28 08:33:48,726 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:33:48,726 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:33:48,726 INFO L85 PathProgramCache]: Analyzing trace with hash -623916271, now seen corresponding path program 1 times [2022-04-28 08:33:48,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:33:48,726 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1002563525] [2022-04-28 08:33:48,726 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:33:48,726 INFO L85 PathProgramCache]: Analyzing trace with hash -623916271, now seen corresponding path program 2 times [2022-04-28 08:33:48,727 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:33:48,727 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1182624397] [2022-04-28 08:33:48,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:33:48,727 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:33:49,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:49,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:33:49,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:49,108 INFO L290 TraceCheckUtils]: 0: Hoare triple {60737#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {60669#true} is VALID [2022-04-28 08:33:49,109 INFO L290 TraceCheckUtils]: 1: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,109 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {60669#true} {60669#true} #1270#return; {60669#true} is VALID [2022-04-28 08:33:49,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:33:49,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:49,138 INFO L290 TraceCheckUtils]: 0: Hoare triple {60738#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {60669#true} is VALID [2022-04-28 08:33:49,138 INFO L290 TraceCheckUtils]: 1: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,138 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {60669#true} {60669#true} #1216#return; {60669#true} is VALID [2022-04-28 08:33:49,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:33:49,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:49,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:33:49,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:49,162 INFO L290 TraceCheckUtils]: 0: Hoare triple {60669#true} ~cond := #in~cond; {60669#true} is VALID [2022-04-28 08:33:49,162 INFO L290 TraceCheckUtils]: 1: Hoare triple {60669#true} assume !(0 == ~cond); {60669#true} is VALID [2022-04-28 08:33:49,162 INFO L290 TraceCheckUtils]: 2: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,162 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {60669#true} {60669#true} #1254#return; {60669#true} is VALID [2022-04-28 08:33:49,163 INFO L290 TraceCheckUtils]: 0: Hoare triple {60739#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {60669#true} is VALID [2022-04-28 08:33:49,163 INFO L272 TraceCheckUtils]: 1: Hoare triple {60669#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {60669#true} is VALID [2022-04-28 08:33:49,163 INFO L290 TraceCheckUtils]: 2: Hoare triple {60669#true} ~cond := #in~cond; {60669#true} is VALID [2022-04-28 08:33:49,163 INFO L290 TraceCheckUtils]: 3: Hoare triple {60669#true} assume !(0 == ~cond); {60669#true} is VALID [2022-04-28 08:33:49,163 INFO L290 TraceCheckUtils]: 4: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,163 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {60669#true} {60669#true} #1254#return; {60669#true} is VALID [2022-04-28 08:33:49,163 INFO L290 TraceCheckUtils]: 6: Hoare triple {60669#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {60669#true} is VALID [2022-04-28 08:33:49,163 INFO L290 TraceCheckUtils]: 7: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,163 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {60669#true} {60669#true} #1218#return; {60669#true} is VALID [2022-04-28 08:33:49,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:33:49,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:49,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:33:49,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:49,220 INFO L290 TraceCheckUtils]: 0: Hoare triple {60744#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {60669#true} is VALID [2022-04-28 08:33:49,220 INFO L290 TraceCheckUtils]: 1: Hoare triple {60669#true} assume 0 == ~__BLAST_NONDET~5; {60669#true} is VALID [2022-04-28 08:33:49,220 INFO L290 TraceCheckUtils]: 2: Hoare triple {60669#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {60669#true} is VALID [2022-04-28 08:33:49,220 INFO L290 TraceCheckUtils]: 3: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,220 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {60669#true} {60669#true} #1176#return; {60669#true} is VALID [2022-04-28 08:33:49,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:33:49,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:49,262 INFO L290 TraceCheckUtils]: 0: Hoare triple {60739#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {60759#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:33:49,263 INFO L290 TraceCheckUtils]: 1: Hoare triple {60759#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {60760#(or (<= |#Ultimate.C_memset_#amount| 0) (< 0 (div |#Ultimate.C_memset_#amount| 4294967296)))} is VALID [2022-04-28 08:33:49,264 INFO L290 TraceCheckUtils]: 2: Hoare triple {60760#(or (<= |#Ultimate.C_memset_#amount| 0) (< 0 (div |#Ultimate.C_memset_#amount| 4294967296)))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {60760#(or (<= |#Ultimate.C_memset_#amount| 0) (< 0 (div |#Ultimate.C_memset_#amount| 4294967296)))} is VALID [2022-04-28 08:33:49,264 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {60760#(or (<= |#Ultimate.C_memset_#amount| 0) (< 0 (div |#Ultimate.C_memset_#amount| 4294967296)))} {60669#true} #1178#return; {60670#false} is VALID [2022-04-28 08:33:49,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-04-28 08:33:49,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:49,275 INFO L290 TraceCheckUtils]: 0: Hoare triple {60669#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {60669#true} is VALID [2022-04-28 08:33:49,275 INFO L290 TraceCheckUtils]: 1: Hoare triple {60669#true} assume 0 == ~__BLAST_NONDET~2; {60669#true} is VALID [2022-04-28 08:33:49,275 INFO L290 TraceCheckUtils]: 2: Hoare triple {60669#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {60669#true} is VALID [2022-04-28 08:33:49,275 INFO L290 TraceCheckUtils]: 3: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,275 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {60669#true} {60670#false} #1180#return; {60670#false} is VALID [2022-04-28 08:33:49,275 INFO L290 TraceCheckUtils]: 0: Hoare triple {60744#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {60669#true} is VALID [2022-04-28 08:33:49,276 INFO L272 TraceCheckUtils]: 1: Hoare triple {60669#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {60744#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:33:49,276 INFO L290 TraceCheckUtils]: 2: Hoare triple {60744#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {60669#true} is VALID [2022-04-28 08:33:49,276 INFO L290 TraceCheckUtils]: 3: Hoare triple {60669#true} assume 0 == ~__BLAST_NONDET~5; {60669#true} is VALID [2022-04-28 08:33:49,277 INFO L290 TraceCheckUtils]: 4: Hoare triple {60669#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {60669#true} is VALID [2022-04-28 08:33:49,277 INFO L290 TraceCheckUtils]: 5: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,277 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {60669#true} {60669#true} #1176#return; {60669#true} is VALID [2022-04-28 08:33:49,277 INFO L290 TraceCheckUtils]: 7: Hoare triple {60669#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {60669#true} is VALID [2022-04-28 08:33:49,277 INFO L290 TraceCheckUtils]: 8: Hoare triple {60669#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {60669#true} is VALID [2022-04-28 08:33:49,277 INFO L272 TraceCheckUtils]: 9: Hoare triple {60669#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {60739#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:33:49,278 INFO L290 TraceCheckUtils]: 10: Hoare triple {60739#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {60759#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:33:49,279 INFO L290 TraceCheckUtils]: 11: Hoare triple {60759#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {60760#(or (<= |#Ultimate.C_memset_#amount| 0) (< 0 (div |#Ultimate.C_memset_#amount| 4294967296)))} is VALID [2022-04-28 08:33:49,279 INFO L290 TraceCheckUtils]: 12: Hoare triple {60760#(or (<= |#Ultimate.C_memset_#amount| 0) (< 0 (div |#Ultimate.C_memset_#amount| 4294967296)))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {60760#(or (<= |#Ultimate.C_memset_#amount| 0) (< 0 (div |#Ultimate.C_memset_#amount| 4294967296)))} is VALID [2022-04-28 08:33:49,280 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {60760#(or (<= |#Ultimate.C_memset_#amount| 0) (< 0 (div |#Ultimate.C_memset_#amount| 4294967296)))} {60669#true} #1178#return; {60670#false} is VALID [2022-04-28 08:33:49,280 INFO L290 TraceCheckUtils]: 14: Hoare triple {60670#false} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {60670#false} is VALID [2022-04-28 08:33:49,280 INFO L272 TraceCheckUtils]: 15: Hoare triple {60670#false} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {60669#true} is VALID [2022-04-28 08:33:49,280 INFO L290 TraceCheckUtils]: 16: Hoare triple {60669#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {60669#true} is VALID [2022-04-28 08:33:49,280 INFO L290 TraceCheckUtils]: 17: Hoare triple {60669#true} assume 0 == ~__BLAST_NONDET~2; {60669#true} is VALID [2022-04-28 08:33:49,280 INFO L290 TraceCheckUtils]: 18: Hoare triple {60669#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {60669#true} is VALID [2022-04-28 08:33:49,280 INFO L290 TraceCheckUtils]: 19: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,280 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {60669#true} {60670#false} #1180#return; {60670#false} is VALID [2022-04-28 08:33:49,280 INFO L290 TraceCheckUtils]: 21: Hoare triple {60670#false} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {60670#false} is VALID [2022-04-28 08:33:49,280 INFO L290 TraceCheckUtils]: 22: Hoare triple {60670#false} assume true; {60670#false} is VALID [2022-04-28 08:33:49,280 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {60670#false} {60669#true} #1220#return; {60670#false} is VALID [2022-04-28 08:33:49,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-04-28 08:33:49,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:49,303 INFO L290 TraceCheckUtils]: 0: Hoare triple {60761#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {60669#true} is VALID [2022-04-28 08:33:49,303 INFO L290 TraceCheckUtils]: 1: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,303 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {60669#true} {60670#false} #1222#return; {60670#false} is VALID [2022-04-28 08:33:49,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-04-28 08:33:49,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:49,310 INFO L290 TraceCheckUtils]: 0: Hoare triple {60739#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {60669#true} is VALID [2022-04-28 08:33:49,310 INFO L290 TraceCheckUtils]: 1: Hoare triple {60669#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {60669#true} is VALID [2022-04-28 08:33:49,310 INFO L290 TraceCheckUtils]: 2: Hoare triple {60669#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {60669#true} is VALID [2022-04-28 08:33:49,310 INFO L290 TraceCheckUtils]: 3: Hoare triple {60669#true} assume #res.base == dest.base && #res.offset == dest.offset; {60669#true} is VALID [2022-04-28 08:33:49,310 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {60669#true} {60670#false} #1186#return; {60670#false} is VALID [2022-04-28 08:33:49,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-04-28 08:33:49,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:49,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:33:49,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:49,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:33:49,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:33:49,349 INFO L290 TraceCheckUtils]: 0: Hoare triple {60771#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {60669#true} is VALID [2022-04-28 08:33:49,349 INFO L290 TraceCheckUtils]: 1: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,349 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {60669#true} {60669#true} #1174#return; {60669#true} is VALID [2022-04-28 08:33:49,349 INFO L290 TraceCheckUtils]: 0: Hoare triple {60771#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {60669#true} is VALID [2022-04-28 08:33:49,350 INFO L272 TraceCheckUtils]: 1: Hoare triple {60669#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {60771#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:49,350 INFO L290 TraceCheckUtils]: 2: Hoare triple {60771#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {60669#true} is VALID [2022-04-28 08:33:49,350 INFO L290 TraceCheckUtils]: 3: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,350 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {60669#true} {60669#true} #1174#return; {60669#true} is VALID [2022-04-28 08:33:49,350 INFO L290 TraceCheckUtils]: 5: Hoare triple {60669#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {60669#true} is VALID [2022-04-28 08:33:49,350 INFO L290 TraceCheckUtils]: 6: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,350 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {60669#true} {60669#true} #1210#return; {60669#true} is VALID [2022-04-28 08:33:49,351 INFO L290 TraceCheckUtils]: 0: Hoare triple {60762#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {60669#true} is VALID [2022-04-28 08:33:49,351 INFO L290 TraceCheckUtils]: 1: Hoare triple {60669#true} assume 0 != ~compRegistered~0; {60669#true} is VALID [2022-04-28 08:33:49,351 INFO L272 TraceCheckUtils]: 2: Hoare triple {60669#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {60771#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:49,351 INFO L290 TraceCheckUtils]: 3: Hoare triple {60771#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {60669#true} is VALID [2022-04-28 08:33:49,352 INFO L272 TraceCheckUtils]: 4: Hoare triple {60669#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {60771#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:49,352 INFO L290 TraceCheckUtils]: 5: Hoare triple {60771#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {60669#true} is VALID [2022-04-28 08:33:49,352 INFO L290 TraceCheckUtils]: 6: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,352 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {60669#true} {60669#true} #1174#return; {60669#true} is VALID [2022-04-28 08:33:49,352 INFO L290 TraceCheckUtils]: 8: Hoare triple {60669#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {60669#true} is VALID [2022-04-28 08:33:49,352 INFO L290 TraceCheckUtils]: 9: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,352 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {60669#true} {60669#true} #1210#return; {60669#true} is VALID [2022-04-28 08:33:49,352 INFO L290 TraceCheckUtils]: 11: Hoare triple {60669#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {60669#true} is VALID [2022-04-28 08:33:49,353 INFO L290 TraceCheckUtils]: 12: Hoare triple {60669#true} assume !(-1073741802 == ~compRetStatus~0); {60669#true} is VALID [2022-04-28 08:33:49,353 INFO L290 TraceCheckUtils]: 13: Hoare triple {60669#true} assume 0 == ~__BLAST_NONDET~11; {60669#true} is VALID [2022-04-28 08:33:49,353 INFO L290 TraceCheckUtils]: 14: Hoare triple {60669#true} ~returnVal2~0 := 0; {60669#true} is VALID [2022-04-28 08:33:49,353 INFO L290 TraceCheckUtils]: 15: Hoare triple {60669#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {60669#true} is VALID [2022-04-28 08:33:49,353 INFO L290 TraceCheckUtils]: 16: Hoare triple {60669#true} #res := ~returnVal2~0; {60669#true} is VALID [2022-04-28 08:33:49,353 INFO L290 TraceCheckUtils]: 17: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,353 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {60669#true} {60670#false} #1192#return; {60670#false} is VALID [2022-04-28 08:33:49,354 INFO L272 TraceCheckUtils]: 0: Hoare triple {60669#true} call ULTIMATE.init(); {60737#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:33:49,354 INFO L290 TraceCheckUtils]: 1: Hoare triple {60737#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {60669#true} is VALID [2022-04-28 08:33:49,354 INFO L290 TraceCheckUtils]: 2: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,354 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {60669#true} {60669#true} #1270#return; {60669#true} is VALID [2022-04-28 08:33:49,354 INFO L272 TraceCheckUtils]: 4: Hoare triple {60669#true} call #t~ret213 := main(); {60669#true} is VALID [2022-04-28 08:33:49,355 INFO L290 TraceCheckUtils]: 5: Hoare triple {60669#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {60669#true} is VALID [2022-04-28 08:33:49,362 INFO L272 TraceCheckUtils]: 6: Hoare triple {60669#true} call _BLAST_init(); {60738#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:33:49,362 INFO L290 TraceCheckUtils]: 7: Hoare triple {60738#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {60669#true} is VALID [2022-04-28 08:33:49,362 INFO L290 TraceCheckUtils]: 8: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,362 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {60669#true} {60669#true} #1216#return; {60669#true} is VALID [2022-04-28 08:33:49,363 INFO L272 TraceCheckUtils]: 10: Hoare triple {60669#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {60739#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:33:49,363 INFO L290 TraceCheckUtils]: 11: Hoare triple {60739#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {60669#true} is VALID [2022-04-28 08:33:49,363 INFO L272 TraceCheckUtils]: 12: Hoare triple {60669#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {60669#true} is VALID [2022-04-28 08:33:49,363 INFO L290 TraceCheckUtils]: 13: Hoare triple {60669#true} ~cond := #in~cond; {60669#true} is VALID [2022-04-28 08:33:49,363 INFO L290 TraceCheckUtils]: 14: Hoare triple {60669#true} assume !(0 == ~cond); {60669#true} is VALID [2022-04-28 08:33:49,363 INFO L290 TraceCheckUtils]: 15: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,363 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {60669#true} {60669#true} #1254#return; {60669#true} is VALID [2022-04-28 08:33:49,363 INFO L290 TraceCheckUtils]: 17: Hoare triple {60669#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {60669#true} is VALID [2022-04-28 08:33:49,363 INFO L290 TraceCheckUtils]: 18: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,364 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {60669#true} {60669#true} #1218#return; {60669#true} is VALID [2022-04-28 08:33:49,364 INFO L290 TraceCheckUtils]: 20: Hoare triple {60669#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {60669#true} is VALID [2022-04-28 08:33:49,364 INFO L290 TraceCheckUtils]: 21: Hoare triple {60669#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {60669#true} is VALID [2022-04-28 08:33:49,364 INFO L290 TraceCheckUtils]: 22: Hoare triple {60669#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {60669#true} is VALID [2022-04-28 08:33:49,365 INFO L272 TraceCheckUtils]: 23: Hoare triple {60669#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {60744#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:33:49,365 INFO L290 TraceCheckUtils]: 24: Hoare triple {60744#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {60669#true} is VALID [2022-04-28 08:33:49,366 INFO L272 TraceCheckUtils]: 25: Hoare triple {60669#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {60744#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:33:49,366 INFO L290 TraceCheckUtils]: 26: Hoare triple {60744#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {60669#true} is VALID [2022-04-28 08:33:49,366 INFO L290 TraceCheckUtils]: 27: Hoare triple {60669#true} assume 0 == ~__BLAST_NONDET~5; {60669#true} is VALID [2022-04-28 08:33:49,366 INFO L290 TraceCheckUtils]: 28: Hoare triple {60669#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {60669#true} is VALID [2022-04-28 08:33:49,366 INFO L290 TraceCheckUtils]: 29: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,366 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {60669#true} {60669#true} #1176#return; {60669#true} is VALID [2022-04-28 08:33:49,366 INFO L290 TraceCheckUtils]: 31: Hoare triple {60669#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {60669#true} is VALID [2022-04-28 08:33:49,366 INFO L290 TraceCheckUtils]: 32: Hoare triple {60669#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {60669#true} is VALID [2022-04-28 08:33:49,367 INFO L272 TraceCheckUtils]: 33: Hoare triple {60669#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {60739#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:33:49,367 INFO L290 TraceCheckUtils]: 34: Hoare triple {60739#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {60759#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:33:49,368 INFO L290 TraceCheckUtils]: 35: Hoare triple {60759#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {60760#(or (<= |#Ultimate.C_memset_#amount| 0) (< 0 (div |#Ultimate.C_memset_#amount| 4294967296)))} is VALID [2022-04-28 08:33:49,368 INFO L290 TraceCheckUtils]: 36: Hoare triple {60760#(or (<= |#Ultimate.C_memset_#amount| 0) (< 0 (div |#Ultimate.C_memset_#amount| 4294967296)))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {60760#(or (<= |#Ultimate.C_memset_#amount| 0) (< 0 (div |#Ultimate.C_memset_#amount| 4294967296)))} is VALID [2022-04-28 08:33:49,369 INFO L284 TraceCheckUtils]: 37: Hoare quadruple {60760#(or (<= |#Ultimate.C_memset_#amount| 0) (< 0 (div |#Ultimate.C_memset_#amount| 4294967296)))} {60669#true} #1178#return; {60670#false} is VALID [2022-04-28 08:33:49,369 INFO L290 TraceCheckUtils]: 38: Hoare triple {60670#false} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {60670#false} is VALID [2022-04-28 08:33:49,369 INFO L272 TraceCheckUtils]: 39: Hoare triple {60670#false} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {60669#true} is VALID [2022-04-28 08:33:49,369 INFO L290 TraceCheckUtils]: 40: Hoare triple {60669#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {60669#true} is VALID [2022-04-28 08:33:49,369 INFO L290 TraceCheckUtils]: 41: Hoare triple {60669#true} assume 0 == ~__BLAST_NONDET~2; {60669#true} is VALID [2022-04-28 08:33:49,369 INFO L290 TraceCheckUtils]: 42: Hoare triple {60669#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {60669#true} is VALID [2022-04-28 08:33:49,369 INFO L290 TraceCheckUtils]: 43: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,369 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {60669#true} {60670#false} #1180#return; {60670#false} is VALID [2022-04-28 08:33:49,370 INFO L290 TraceCheckUtils]: 45: Hoare triple {60670#false} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {60670#false} is VALID [2022-04-28 08:33:49,370 INFO L290 TraceCheckUtils]: 46: Hoare triple {60670#false} assume true; {60670#false} is VALID [2022-04-28 08:33:49,370 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {60670#false} {60669#true} #1220#return; {60670#false} is VALID [2022-04-28 08:33:49,370 INFO L290 TraceCheckUtils]: 48: Hoare triple {60670#false} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {60670#false} is VALID [2022-04-28 08:33:49,370 INFO L272 TraceCheckUtils]: 49: Hoare triple {60670#false} call stub_driver_init(); {60761#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:33:49,370 INFO L290 TraceCheckUtils]: 50: Hoare triple {60761#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {60669#true} is VALID [2022-04-28 08:33:49,370 INFO L290 TraceCheckUtils]: 51: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,370 INFO L284 TraceCheckUtils]: 52: Hoare quadruple {60669#true} {60670#false} #1222#return; {60670#false} is VALID [2022-04-28 08:33:49,370 INFO L290 TraceCheckUtils]: 53: Hoare triple {60670#false} assume !!(~status~5 >= 0); {60670#false} is VALID [2022-04-28 08:33:49,370 INFO L290 TraceCheckUtils]: 54: Hoare triple {60670#false} assume !(0 == ~__BLAST_NONDET~0); {60670#false} is VALID [2022-04-28 08:33:49,370 INFO L290 TraceCheckUtils]: 55: Hoare triple {60670#false} assume !(1 == ~__BLAST_NONDET~0); {60670#false} is VALID [2022-04-28 08:33:49,370 INFO L290 TraceCheckUtils]: 56: Hoare triple {60670#false} assume !(2 == ~__BLAST_NONDET~0); {60670#false} is VALID [2022-04-28 08:33:49,370 INFO L290 TraceCheckUtils]: 57: Hoare triple {60670#false} assume 3 == ~__BLAST_NONDET~0; {60670#false} is VALID [2022-04-28 08:33:49,370 INFO L272 TraceCheckUtils]: 58: Hoare triple {60670#false} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {60670#false} is VALID [2022-04-28 08:33:49,371 INFO L290 TraceCheckUtils]: 59: Hoare triple {60670#false} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {60670#false} is VALID [2022-04-28 08:33:49,371 INFO L290 TraceCheckUtils]: 60: Hoare triple {60670#false} assume 0 == #t~mem81 % 256;havoc #t~mem81; {60670#false} is VALID [2022-04-28 08:33:49,371 INFO L290 TraceCheckUtils]: 61: Hoare triple {60670#false} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {60670#false} is VALID [2022-04-28 08:33:49,371 INFO L272 TraceCheckUtils]: 62: Hoare triple {60670#false} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {60739#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:33:49,371 INFO L290 TraceCheckUtils]: 63: Hoare triple {60739#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {60669#true} is VALID [2022-04-28 08:33:49,371 INFO L290 TraceCheckUtils]: 64: Hoare triple {60669#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {60669#true} is VALID [2022-04-28 08:33:49,371 INFO L290 TraceCheckUtils]: 65: Hoare triple {60669#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {60669#true} is VALID [2022-04-28 08:33:49,371 INFO L290 TraceCheckUtils]: 66: Hoare triple {60669#true} assume #res.base == dest.base && #res.offset == dest.offset; {60669#true} is VALID [2022-04-28 08:33:49,371 INFO L284 TraceCheckUtils]: 67: Hoare quadruple {60669#true} {60670#false} #1186#return; {60670#false} is VALID [2022-04-28 08:33:49,371 INFO L290 TraceCheckUtils]: 68: Hoare triple {60670#false} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {60670#false} is VALID [2022-04-28 08:33:49,371 INFO L290 TraceCheckUtils]: 69: Hoare triple {60670#false} assume !(~s~0 != ~NP~0); {60670#false} is VALID [2022-04-28 08:33:49,371 INFO L290 TraceCheckUtils]: 70: Hoare triple {60670#false} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {60670#false} is VALID [2022-04-28 08:33:49,371 INFO L290 TraceCheckUtils]: 71: Hoare triple {60670#false} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {60670#false} is VALID [2022-04-28 08:33:49,371 INFO L272 TraceCheckUtils]: 72: Hoare triple {60670#false} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {60762#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:33:49,371 INFO L290 TraceCheckUtils]: 73: Hoare triple {60762#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {60669#true} is VALID [2022-04-28 08:33:49,372 INFO L290 TraceCheckUtils]: 74: Hoare triple {60669#true} assume 0 != ~compRegistered~0; {60669#true} is VALID [2022-04-28 08:33:49,372 INFO L272 TraceCheckUtils]: 75: Hoare triple {60669#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {60771#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:49,372 INFO L290 TraceCheckUtils]: 76: Hoare triple {60771#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {60669#true} is VALID [2022-04-28 08:33:49,373 INFO L272 TraceCheckUtils]: 77: Hoare triple {60669#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {60771#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:33:49,373 INFO L290 TraceCheckUtils]: 78: Hoare triple {60771#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {60669#true} is VALID [2022-04-28 08:33:49,373 INFO L290 TraceCheckUtils]: 79: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,373 INFO L284 TraceCheckUtils]: 80: Hoare quadruple {60669#true} {60669#true} #1174#return; {60669#true} is VALID [2022-04-28 08:33:49,373 INFO L290 TraceCheckUtils]: 81: Hoare triple {60669#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {60669#true} is VALID [2022-04-28 08:33:49,373 INFO L290 TraceCheckUtils]: 82: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,373 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {60669#true} {60669#true} #1210#return; {60669#true} is VALID [2022-04-28 08:33:49,373 INFO L290 TraceCheckUtils]: 84: Hoare triple {60669#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {60669#true} is VALID [2022-04-28 08:33:49,374 INFO L290 TraceCheckUtils]: 85: Hoare triple {60669#true} assume !(-1073741802 == ~compRetStatus~0); {60669#true} is VALID [2022-04-28 08:33:49,374 INFO L290 TraceCheckUtils]: 86: Hoare triple {60669#true} assume 0 == ~__BLAST_NONDET~11; {60669#true} is VALID [2022-04-28 08:33:49,374 INFO L290 TraceCheckUtils]: 87: Hoare triple {60669#true} ~returnVal2~0 := 0; {60669#true} is VALID [2022-04-28 08:33:49,374 INFO L290 TraceCheckUtils]: 88: Hoare triple {60669#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {60669#true} is VALID [2022-04-28 08:33:49,374 INFO L290 TraceCheckUtils]: 89: Hoare triple {60669#true} #res := ~returnVal2~0; {60669#true} is VALID [2022-04-28 08:33:49,374 INFO L290 TraceCheckUtils]: 90: Hoare triple {60669#true} assume true; {60669#true} is VALID [2022-04-28 08:33:49,374 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {60669#true} {60670#false} #1192#return; {60670#false} is VALID [2022-04-28 08:33:49,374 INFO L290 TraceCheckUtils]: 92: Hoare triple {60670#false} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {60670#false} is VALID [2022-04-28 08:33:49,374 INFO L290 TraceCheckUtils]: 93: Hoare triple {60670#false} assume !(259 == ~status~3); {60670#false} is VALID [2022-04-28 08:33:49,374 INFO L290 TraceCheckUtils]: 94: Hoare triple {60670#false} assume ~status~3 >= 0; {60670#false} is VALID [2022-04-28 08:33:49,374 INFO L290 TraceCheckUtils]: 95: Hoare triple {60670#false} assume !(~myStatus~0 >= 0); {60670#false} is VALID [2022-04-28 08:33:49,374 INFO L290 TraceCheckUtils]: 96: Hoare triple {60670#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {60670#false} is VALID [2022-04-28 08:33:49,374 INFO L272 TraceCheckUtils]: 97: Hoare triple {60670#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {60670#false} is VALID [2022-04-28 08:33:49,374 INFO L290 TraceCheckUtils]: 98: Hoare triple {60670#false} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {60670#false} is VALID [2022-04-28 08:33:49,374 INFO L290 TraceCheckUtils]: 99: Hoare triple {60670#false} assume !(~s~0 == ~NP~0); {60670#false} is VALID [2022-04-28 08:33:49,375 INFO L272 TraceCheckUtils]: 100: Hoare triple {60670#false} call errorFn(); {60670#false} is VALID [2022-04-28 08:33:49,375 INFO L290 TraceCheckUtils]: 101: Hoare triple {60670#false} assume !false; {60670#false} is VALID [2022-04-28 08:33:49,375 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:33:49,375 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:33:49,375 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1182624397] [2022-04-28 08:33:49,375 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1182624397] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:33:49,375 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:33:49,375 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:33:49,375 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:33:49,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1002563525] [2022-04-28 08:33:49,376 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1002563525] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:33:49,376 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:33:49,376 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:33:49,376 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1578250332] [2022-04-28 08:33:49,376 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:33:49,377 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 6.545454545454546) internal successors, (72), 4 states have internal predecessors, (72), 2 states have call successors, (17), 9 states have call predecessors, (17), 3 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 102 [2022-04-28 08:33:49,377 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:33:49,377 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 6.545454545454546) internal successors, (72), 4 states have internal predecessors, (72), 2 states have call successors, (17), 9 states have call predecessors, (17), 3 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-04-28 08:33:49,457 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 102 edges. 102 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:33:49,457 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 08:33:49,457 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:33:49,458 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 08:33:49,458 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2022-04-28 08:33:49,458 INFO L87 Difference]: Start difference. First operand 337 states and 399 transitions. Second operand has 11 states, 11 states have (on average 6.545454545454546) internal successors, (72), 4 states have internal predecessors, (72), 2 states have call successors, (17), 9 states have call predecessors, (17), 3 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-04-28 08:33:51,571 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:33:55,187 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:33:58,547 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:33:58,547 INFO L93 Difference]: Finished difference Result 675 states and 810 transitions. [2022-04-28 08:33:58,547 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-04-28 08:33:58,547 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 6.545454545454546) internal successors, (72), 4 states have internal predecessors, (72), 2 states have call successors, (17), 9 states have call predecessors, (17), 3 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 102 [2022-04-28 08:33:58,548 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:33:58,548 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 6.545454545454546) internal successors, (72), 4 states have internal predecessors, (72), 2 states have call successors, (17), 9 states have call predecessors, (17), 3 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-04-28 08:33:58,549 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 318 transitions. [2022-04-28 08:33:58,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 6.545454545454546) internal successors, (72), 4 states have internal predecessors, (72), 2 states have call successors, (17), 9 states have call predecessors, (17), 3 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-04-28 08:33:58,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 318 transitions. [2022-04-28 08:33:58,551 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 10 states and 318 transitions. [2022-04-28 08:33:58,827 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 318 edges. 318 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:33:58,834 INFO L225 Difference]: With dead ends: 675 [2022-04-28 08:33:58,834 INFO L226 Difference]: Without dead ends: 389 [2022-04-28 08:33:58,835 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=82, Invalid=158, Unknown=0, NotChecked=0, Total=240 [2022-04-28 08:33:58,835 INFO L413 NwaCegarLoop]: 139 mSDtfsCounter, 274 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 446 mSolverCounterSat, 136 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 277 SdHoareTripleChecker+Valid, 327 SdHoareTripleChecker+Invalid, 584 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 136 IncrementalHoareTripleChecker+Valid, 446 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.6s IncrementalHoareTripleChecker+Time [2022-04-28 08:33:58,836 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [277 Valid, 327 Invalid, 584 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [136 Valid, 446 Invalid, 2 Unknown, 0 Unchecked, 5.6s Time] [2022-04-28 08:33:58,836 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 389 states. [2022-04-28 08:33:59,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 389 to 339. [2022-04-28 08:33:59,326 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:33:59,327 INFO L82 GeneralOperation]: Start isEquivalent. First operand 389 states. Second operand has 339 states, 264 states have (on average 1.231060606060606) internal successors, (325), 268 states have internal predecessors, (325), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:33:59,327 INFO L74 IsIncluded]: Start isIncluded. First operand 389 states. Second operand has 339 states, 264 states have (on average 1.231060606060606) internal successors, (325), 268 states have internal predecessors, (325), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:33:59,327 INFO L87 Difference]: Start difference. First operand 389 states. Second operand has 339 states, 264 states have (on average 1.231060606060606) internal successors, (325), 268 states have internal predecessors, (325), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:33:59,333 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:33:59,333 INFO L93 Difference]: Finished difference Result 389 states and 463 transitions. [2022-04-28 08:33:59,333 INFO L276 IsEmpty]: Start isEmpty. Operand 389 states and 463 transitions. [2022-04-28 08:33:59,333 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:33:59,333 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:33:59,334 INFO L74 IsIncluded]: Start isIncluded. First operand has 339 states, 264 states have (on average 1.231060606060606) internal successors, (325), 268 states have internal predecessors, (325), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) Second operand 389 states. [2022-04-28 08:33:59,334 INFO L87 Difference]: Start difference. First operand has 339 states, 264 states have (on average 1.231060606060606) internal successors, (325), 268 states have internal predecessors, (325), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) Second operand 389 states. [2022-04-28 08:33:59,340 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:33:59,340 INFO L93 Difference]: Finished difference Result 389 states and 463 transitions. [2022-04-28 08:33:59,340 INFO L276 IsEmpty]: Start isEmpty. Operand 389 states and 463 transitions. [2022-04-28 08:33:59,340 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:33:59,340 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:33:59,340 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:33:59,340 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:33:59,341 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 339 states, 264 states have (on average 1.231060606060606) internal successors, (325), 268 states have internal predecessors, (325), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:33:59,346 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 339 states to 339 states and 401 transitions. [2022-04-28 08:33:59,346 INFO L78 Accepts]: Start accepts. Automaton has 339 states and 401 transitions. Word has length 102 [2022-04-28 08:33:59,346 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:33:59,346 INFO L495 AbstractCegarLoop]: Abstraction has 339 states and 401 transitions. [2022-04-28 08:33:59,347 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 6.545454545454546) internal successors, (72), 4 states have internal predecessors, (72), 2 states have call successors, (17), 9 states have call predecessors, (17), 3 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-04-28 08:33:59,347 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 339 states and 401 transitions. [2022-04-28 08:34:00,113 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 401 edges. 401 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:34:00,113 INFO L276 IsEmpty]: Start isEmpty. Operand 339 states and 401 transitions. [2022-04-28 08:34:00,114 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2022-04-28 08:34:00,114 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:34:00,114 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:34:00,114 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable25 [2022-04-28 08:34:00,114 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:34:00,114 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:34:00,114 INFO L85 PathProgramCache]: Analyzing trace with hash 1023672093, now seen corresponding path program 1 times [2022-04-28 08:34:00,114 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:34:00,114 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [186045199] [2022-04-28 08:34:00,139 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 0 HavocedVariables, 4 AssignedVariables, -1 ReadonlyVariables, Eigenvalues: {}, 0 SequentialAcceleration, 0 AlternatingAcceleration, 0 QuantifierFreeResult [2022-04-28 08:34:00,139 WARN L91 AcceleratorJordan]: Jordan acceleration failed, because NONINTEGER_UPDATE [2022-04-28 08:34:00,139 INFO L274 tedInterpolationCore]: Could not compute an accelerate. [2022-04-28 08:34:00,139 INFO L85 PathProgramCache]: Analyzing trace with hash 1023672093, now seen corresponding path program 2 times [2022-04-28 08:34:00,139 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:34:00,140 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [601657516] [2022-04-28 08:34:00,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:34:00,140 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:34:00,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:00,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:34:00,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:00,454 INFO L290 TraceCheckUtils]: 0: Hoare triple {63664#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {63595#true} is VALID [2022-04-28 08:34:00,454 INFO L290 TraceCheckUtils]: 1: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,454 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {63595#true} {63595#true} #1270#return; {63595#true} is VALID [2022-04-28 08:34:00,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:34:00,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:00,482 INFO L290 TraceCheckUtils]: 0: Hoare triple {63665#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {63595#true} is VALID [2022-04-28 08:34:00,483 INFO L290 TraceCheckUtils]: 1: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,483 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {63595#true} {63595#true} #1216#return; {63595#true} is VALID [2022-04-28 08:34:00,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:34:00,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:00,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:34:00,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:00,517 INFO L290 TraceCheckUtils]: 0: Hoare triple {63595#true} ~cond := #in~cond; {63595#true} is VALID [2022-04-28 08:34:00,517 INFO L290 TraceCheckUtils]: 1: Hoare triple {63595#true} assume !(0 == ~cond); {63595#true} is VALID [2022-04-28 08:34:00,517 INFO L290 TraceCheckUtils]: 2: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,517 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {63595#true} {63595#true} #1254#return; {63595#true} is VALID [2022-04-28 08:34:00,517 INFO L290 TraceCheckUtils]: 0: Hoare triple {63666#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {63595#true} is VALID [2022-04-28 08:34:00,517 INFO L272 TraceCheckUtils]: 1: Hoare triple {63595#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {63595#true} is VALID [2022-04-28 08:34:00,518 INFO L290 TraceCheckUtils]: 2: Hoare triple {63595#true} ~cond := #in~cond; {63595#true} is VALID [2022-04-28 08:34:00,518 INFO L290 TraceCheckUtils]: 3: Hoare triple {63595#true} assume !(0 == ~cond); {63595#true} is VALID [2022-04-28 08:34:00,518 INFO L290 TraceCheckUtils]: 4: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,518 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {63595#true} {63595#true} #1254#return; {63595#true} is VALID [2022-04-28 08:34:00,518 INFO L290 TraceCheckUtils]: 6: Hoare triple {63595#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {63595#true} is VALID [2022-04-28 08:34:00,518 INFO L290 TraceCheckUtils]: 7: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,518 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {63595#true} {63595#true} #1218#return; {63595#true} is VALID [2022-04-28 08:34:00,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:34:00,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:00,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:34:00,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:00,600 INFO L290 TraceCheckUtils]: 0: Hoare triple {63671#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {63595#true} is VALID [2022-04-28 08:34:00,600 INFO L290 TraceCheckUtils]: 1: Hoare triple {63595#true} assume 0 == ~__BLAST_NONDET~5; {63595#true} is VALID [2022-04-28 08:34:00,601 INFO L290 TraceCheckUtils]: 2: Hoare triple {63595#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {63595#true} is VALID [2022-04-28 08:34:00,601 INFO L290 TraceCheckUtils]: 3: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,601 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {63595#true} {63595#true} #1176#return; {63595#true} is VALID [2022-04-28 08:34:00,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:34:00,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:00,685 INFO L290 TraceCheckUtils]: 0: Hoare triple {63666#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {63687#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:34:00,687 INFO L290 TraceCheckUtils]: 1: Hoare triple {63687#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {63688#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} is VALID [2022-04-28 08:34:00,687 INFO L290 TraceCheckUtils]: 2: Hoare triple {63688#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {63689#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:34:00,688 INFO L290 TraceCheckUtils]: 3: Hoare triple {63689#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {63689#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:34:00,689 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {63689#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} {63595#true} #1178#return; {63596#false} is VALID [2022-04-28 08:34:00,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-04-28 08:34:00,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:00,699 INFO L290 TraceCheckUtils]: 0: Hoare triple {63595#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {63595#true} is VALID [2022-04-28 08:34:00,699 INFO L290 TraceCheckUtils]: 1: Hoare triple {63595#true} assume 0 == ~__BLAST_NONDET~2; {63595#true} is VALID [2022-04-28 08:34:00,699 INFO L290 TraceCheckUtils]: 2: Hoare triple {63595#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {63595#true} is VALID [2022-04-28 08:34:00,700 INFO L290 TraceCheckUtils]: 3: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,700 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {63595#true} {63596#false} #1180#return; {63596#false} is VALID [2022-04-28 08:34:00,700 INFO L290 TraceCheckUtils]: 0: Hoare triple {63671#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {63595#true} is VALID [2022-04-28 08:34:00,701 INFO L272 TraceCheckUtils]: 1: Hoare triple {63595#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {63671#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:34:00,701 INFO L290 TraceCheckUtils]: 2: Hoare triple {63671#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {63595#true} is VALID [2022-04-28 08:34:00,701 INFO L290 TraceCheckUtils]: 3: Hoare triple {63595#true} assume 0 == ~__BLAST_NONDET~5; {63595#true} is VALID [2022-04-28 08:34:00,702 INFO L290 TraceCheckUtils]: 4: Hoare triple {63595#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {63595#true} is VALID [2022-04-28 08:34:00,702 INFO L290 TraceCheckUtils]: 5: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,702 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {63595#true} {63595#true} #1176#return; {63595#true} is VALID [2022-04-28 08:34:00,702 INFO L290 TraceCheckUtils]: 7: Hoare triple {63595#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {63595#true} is VALID [2022-04-28 08:34:00,702 INFO L290 TraceCheckUtils]: 8: Hoare triple {63595#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {63595#true} is VALID [2022-04-28 08:34:00,703 INFO L272 TraceCheckUtils]: 9: Hoare triple {63595#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {63666#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:00,703 INFO L290 TraceCheckUtils]: 10: Hoare triple {63666#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {63687#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:34:00,704 INFO L290 TraceCheckUtils]: 11: Hoare triple {63687#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {63688#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} is VALID [2022-04-28 08:34:00,705 INFO L290 TraceCheckUtils]: 12: Hoare triple {63688#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {63689#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:34:00,706 INFO L290 TraceCheckUtils]: 13: Hoare triple {63689#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {63689#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:34:00,707 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {63689#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} {63595#true} #1178#return; {63596#false} is VALID [2022-04-28 08:34:00,707 INFO L290 TraceCheckUtils]: 15: Hoare triple {63596#false} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {63596#false} is VALID [2022-04-28 08:34:00,707 INFO L272 TraceCheckUtils]: 16: Hoare triple {63596#false} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {63595#true} is VALID [2022-04-28 08:34:00,707 INFO L290 TraceCheckUtils]: 17: Hoare triple {63595#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {63595#true} is VALID [2022-04-28 08:34:00,707 INFO L290 TraceCheckUtils]: 18: Hoare triple {63595#true} assume 0 == ~__BLAST_NONDET~2; {63595#true} is VALID [2022-04-28 08:34:00,707 INFO L290 TraceCheckUtils]: 19: Hoare triple {63595#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {63595#true} is VALID [2022-04-28 08:34:00,707 INFO L290 TraceCheckUtils]: 20: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,707 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {63595#true} {63596#false} #1180#return; {63596#false} is VALID [2022-04-28 08:34:00,707 INFO L290 TraceCheckUtils]: 22: Hoare triple {63596#false} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {63596#false} is VALID [2022-04-28 08:34:00,707 INFO L290 TraceCheckUtils]: 23: Hoare triple {63596#false} assume true; {63596#false} is VALID [2022-04-28 08:34:00,707 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {63596#false} {63595#true} #1220#return; {63596#false} is VALID [2022-04-28 08:34:00,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-04-28 08:34:00,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:00,730 INFO L290 TraceCheckUtils]: 0: Hoare triple {63690#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {63595#true} is VALID [2022-04-28 08:34:00,731 INFO L290 TraceCheckUtils]: 1: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,731 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {63595#true} {63596#false} #1222#return; {63596#false} is VALID [2022-04-28 08:34:00,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-04-28 08:34:00,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:00,737 INFO L290 TraceCheckUtils]: 0: Hoare triple {63666#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {63595#true} is VALID [2022-04-28 08:34:00,737 INFO L290 TraceCheckUtils]: 1: Hoare triple {63595#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {63595#true} is VALID [2022-04-28 08:34:00,737 INFO L290 TraceCheckUtils]: 2: Hoare triple {63595#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {63595#true} is VALID [2022-04-28 08:34:00,737 INFO L290 TraceCheckUtils]: 3: Hoare triple {63595#true} assume #res.base == dest.base && #res.offset == dest.offset; {63595#true} is VALID [2022-04-28 08:34:00,737 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {63595#true} {63596#false} #1186#return; {63596#false} is VALID [2022-04-28 08:34:00,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-04-28 08:34:00,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:00,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:34:00,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:00,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:34:00,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:00,778 INFO L290 TraceCheckUtils]: 0: Hoare triple {63700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {63595#true} is VALID [2022-04-28 08:34:00,778 INFO L290 TraceCheckUtils]: 1: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,778 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {63595#true} {63595#true} #1174#return; {63595#true} is VALID [2022-04-28 08:34:00,778 INFO L290 TraceCheckUtils]: 0: Hoare triple {63700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {63595#true} is VALID [2022-04-28 08:34:00,778 INFO L272 TraceCheckUtils]: 1: Hoare triple {63595#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {63700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:00,778 INFO L290 TraceCheckUtils]: 2: Hoare triple {63700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {63595#true} is VALID [2022-04-28 08:34:00,779 INFO L290 TraceCheckUtils]: 3: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,779 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {63595#true} {63595#true} #1174#return; {63595#true} is VALID [2022-04-28 08:34:00,779 INFO L290 TraceCheckUtils]: 5: Hoare triple {63595#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {63595#true} is VALID [2022-04-28 08:34:00,779 INFO L290 TraceCheckUtils]: 6: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,779 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {63595#true} {63595#true} #1210#return; {63595#true} is VALID [2022-04-28 08:34:00,779 INFO L290 TraceCheckUtils]: 0: Hoare triple {63691#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {63595#true} is VALID [2022-04-28 08:34:00,779 INFO L290 TraceCheckUtils]: 1: Hoare triple {63595#true} assume 0 != ~compRegistered~0; {63595#true} is VALID [2022-04-28 08:34:00,780 INFO L272 TraceCheckUtils]: 2: Hoare triple {63595#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {63700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:00,780 INFO L290 TraceCheckUtils]: 3: Hoare triple {63700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {63595#true} is VALID [2022-04-28 08:34:00,781 INFO L272 TraceCheckUtils]: 4: Hoare triple {63595#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {63700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:00,781 INFO L290 TraceCheckUtils]: 5: Hoare triple {63700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {63595#true} is VALID [2022-04-28 08:34:00,781 INFO L290 TraceCheckUtils]: 6: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,781 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {63595#true} {63595#true} #1174#return; {63595#true} is VALID [2022-04-28 08:34:00,781 INFO L290 TraceCheckUtils]: 8: Hoare triple {63595#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {63595#true} is VALID [2022-04-28 08:34:00,781 INFO L290 TraceCheckUtils]: 9: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,781 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {63595#true} {63595#true} #1210#return; {63595#true} is VALID [2022-04-28 08:34:00,781 INFO L290 TraceCheckUtils]: 11: Hoare triple {63595#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {63595#true} is VALID [2022-04-28 08:34:00,781 INFO L290 TraceCheckUtils]: 12: Hoare triple {63595#true} assume !(-1073741802 == ~compRetStatus~0); {63595#true} is VALID [2022-04-28 08:34:00,781 INFO L290 TraceCheckUtils]: 13: Hoare triple {63595#true} assume 0 == ~__BLAST_NONDET~11; {63595#true} is VALID [2022-04-28 08:34:00,781 INFO L290 TraceCheckUtils]: 14: Hoare triple {63595#true} ~returnVal2~0 := 0; {63595#true} is VALID [2022-04-28 08:34:00,781 INFO L290 TraceCheckUtils]: 15: Hoare triple {63595#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {63595#true} is VALID [2022-04-28 08:34:00,781 INFO L290 TraceCheckUtils]: 16: Hoare triple {63595#true} #res := ~returnVal2~0; {63595#true} is VALID [2022-04-28 08:34:00,782 INFO L290 TraceCheckUtils]: 17: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,782 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {63595#true} {63596#false} #1192#return; {63596#false} is VALID [2022-04-28 08:34:00,783 INFO L272 TraceCheckUtils]: 0: Hoare triple {63595#true} call ULTIMATE.init(); {63664#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:34:00,783 INFO L290 TraceCheckUtils]: 1: Hoare triple {63664#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {63595#true} is VALID [2022-04-28 08:34:00,783 INFO L290 TraceCheckUtils]: 2: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,783 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {63595#true} {63595#true} #1270#return; {63595#true} is VALID [2022-04-28 08:34:00,783 INFO L272 TraceCheckUtils]: 4: Hoare triple {63595#true} call #t~ret213 := main(); {63595#true} is VALID [2022-04-28 08:34:00,783 INFO L290 TraceCheckUtils]: 5: Hoare triple {63595#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {63595#true} is VALID [2022-04-28 08:34:00,784 INFO L272 TraceCheckUtils]: 6: Hoare triple {63595#true} call _BLAST_init(); {63665#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:34:00,784 INFO L290 TraceCheckUtils]: 7: Hoare triple {63665#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {63595#true} is VALID [2022-04-28 08:34:00,784 INFO L290 TraceCheckUtils]: 8: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,784 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {63595#true} {63595#true} #1216#return; {63595#true} is VALID [2022-04-28 08:34:00,785 INFO L272 TraceCheckUtils]: 10: Hoare triple {63595#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {63666#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:00,785 INFO L290 TraceCheckUtils]: 11: Hoare triple {63666#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {63595#true} is VALID [2022-04-28 08:34:00,785 INFO L272 TraceCheckUtils]: 12: Hoare triple {63595#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {63595#true} is VALID [2022-04-28 08:34:00,785 INFO L290 TraceCheckUtils]: 13: Hoare triple {63595#true} ~cond := #in~cond; {63595#true} is VALID [2022-04-28 08:34:00,785 INFO L290 TraceCheckUtils]: 14: Hoare triple {63595#true} assume !(0 == ~cond); {63595#true} is VALID [2022-04-28 08:34:00,785 INFO L290 TraceCheckUtils]: 15: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,785 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {63595#true} {63595#true} #1254#return; {63595#true} is VALID [2022-04-28 08:34:00,785 INFO L290 TraceCheckUtils]: 17: Hoare triple {63595#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {63595#true} is VALID [2022-04-28 08:34:00,786 INFO L290 TraceCheckUtils]: 18: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,786 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {63595#true} {63595#true} #1218#return; {63595#true} is VALID [2022-04-28 08:34:00,786 INFO L290 TraceCheckUtils]: 20: Hoare triple {63595#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {63595#true} is VALID [2022-04-28 08:34:00,786 INFO L290 TraceCheckUtils]: 21: Hoare triple {63595#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {63595#true} is VALID [2022-04-28 08:34:00,786 INFO L290 TraceCheckUtils]: 22: Hoare triple {63595#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {63595#true} is VALID [2022-04-28 08:34:00,787 INFO L272 TraceCheckUtils]: 23: Hoare triple {63595#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {63671#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:34:00,787 INFO L290 TraceCheckUtils]: 24: Hoare triple {63671#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {63595#true} is VALID [2022-04-28 08:34:00,788 INFO L272 TraceCheckUtils]: 25: Hoare triple {63595#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {63671#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:34:00,788 INFO L290 TraceCheckUtils]: 26: Hoare triple {63671#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {63595#true} is VALID [2022-04-28 08:34:00,788 INFO L290 TraceCheckUtils]: 27: Hoare triple {63595#true} assume 0 == ~__BLAST_NONDET~5; {63595#true} is VALID [2022-04-28 08:34:00,788 INFO L290 TraceCheckUtils]: 28: Hoare triple {63595#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {63595#true} is VALID [2022-04-28 08:34:00,788 INFO L290 TraceCheckUtils]: 29: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,788 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {63595#true} {63595#true} #1176#return; {63595#true} is VALID [2022-04-28 08:34:00,788 INFO L290 TraceCheckUtils]: 31: Hoare triple {63595#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {63595#true} is VALID [2022-04-28 08:34:00,788 INFO L290 TraceCheckUtils]: 32: Hoare triple {63595#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {63595#true} is VALID [2022-04-28 08:34:00,789 INFO L272 TraceCheckUtils]: 33: Hoare triple {63595#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {63666#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:00,789 INFO L290 TraceCheckUtils]: 34: Hoare triple {63666#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {63687#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:34:00,790 INFO L290 TraceCheckUtils]: 35: Hoare triple {63687#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {63688#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} is VALID [2022-04-28 08:34:00,791 INFO L290 TraceCheckUtils]: 36: Hoare triple {63688#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {63689#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:34:00,791 INFO L290 TraceCheckUtils]: 37: Hoare triple {63689#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {63689#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:34:00,792 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {63689#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} {63595#true} #1178#return; {63596#false} is VALID [2022-04-28 08:34:00,792 INFO L290 TraceCheckUtils]: 39: Hoare triple {63596#false} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {63596#false} is VALID [2022-04-28 08:34:00,792 INFO L272 TraceCheckUtils]: 40: Hoare triple {63596#false} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {63595#true} is VALID [2022-04-28 08:34:00,792 INFO L290 TraceCheckUtils]: 41: Hoare triple {63595#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {63595#true} is VALID [2022-04-28 08:34:00,793 INFO L290 TraceCheckUtils]: 42: Hoare triple {63595#true} assume 0 == ~__BLAST_NONDET~2; {63595#true} is VALID [2022-04-28 08:34:00,793 INFO L290 TraceCheckUtils]: 43: Hoare triple {63595#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {63595#true} is VALID [2022-04-28 08:34:00,793 INFO L290 TraceCheckUtils]: 44: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,793 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {63595#true} {63596#false} #1180#return; {63596#false} is VALID [2022-04-28 08:34:00,793 INFO L290 TraceCheckUtils]: 46: Hoare triple {63596#false} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {63596#false} is VALID [2022-04-28 08:34:00,793 INFO L290 TraceCheckUtils]: 47: Hoare triple {63596#false} assume true; {63596#false} is VALID [2022-04-28 08:34:00,793 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {63596#false} {63595#true} #1220#return; {63596#false} is VALID [2022-04-28 08:34:00,793 INFO L290 TraceCheckUtils]: 49: Hoare triple {63596#false} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {63596#false} is VALID [2022-04-28 08:34:00,793 INFO L272 TraceCheckUtils]: 50: Hoare triple {63596#false} call stub_driver_init(); {63690#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:34:00,793 INFO L290 TraceCheckUtils]: 51: Hoare triple {63690#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {63595#true} is VALID [2022-04-28 08:34:00,793 INFO L290 TraceCheckUtils]: 52: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,793 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {63595#true} {63596#false} #1222#return; {63596#false} is VALID [2022-04-28 08:34:00,793 INFO L290 TraceCheckUtils]: 54: Hoare triple {63596#false} assume !!(~status~5 >= 0); {63596#false} is VALID [2022-04-28 08:34:00,793 INFO L290 TraceCheckUtils]: 55: Hoare triple {63596#false} assume !(0 == ~__BLAST_NONDET~0); {63596#false} is VALID [2022-04-28 08:34:00,793 INFO L290 TraceCheckUtils]: 56: Hoare triple {63596#false} assume !(1 == ~__BLAST_NONDET~0); {63596#false} is VALID [2022-04-28 08:34:00,794 INFO L290 TraceCheckUtils]: 57: Hoare triple {63596#false} assume !(2 == ~__BLAST_NONDET~0); {63596#false} is VALID [2022-04-28 08:34:00,794 INFO L290 TraceCheckUtils]: 58: Hoare triple {63596#false} assume 3 == ~__BLAST_NONDET~0; {63596#false} is VALID [2022-04-28 08:34:00,794 INFO L272 TraceCheckUtils]: 59: Hoare triple {63596#false} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {63596#false} is VALID [2022-04-28 08:34:00,794 INFO L290 TraceCheckUtils]: 60: Hoare triple {63596#false} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {63596#false} is VALID [2022-04-28 08:34:00,794 INFO L290 TraceCheckUtils]: 61: Hoare triple {63596#false} assume 0 == #t~mem81 % 256;havoc #t~mem81; {63596#false} is VALID [2022-04-28 08:34:00,794 INFO L290 TraceCheckUtils]: 62: Hoare triple {63596#false} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {63596#false} is VALID [2022-04-28 08:34:00,794 INFO L272 TraceCheckUtils]: 63: Hoare triple {63596#false} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {63666#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:00,794 INFO L290 TraceCheckUtils]: 64: Hoare triple {63666#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {63595#true} is VALID [2022-04-28 08:34:00,794 INFO L290 TraceCheckUtils]: 65: Hoare triple {63595#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {63595#true} is VALID [2022-04-28 08:34:00,794 INFO L290 TraceCheckUtils]: 66: Hoare triple {63595#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {63595#true} is VALID [2022-04-28 08:34:00,794 INFO L290 TraceCheckUtils]: 67: Hoare triple {63595#true} assume #res.base == dest.base && #res.offset == dest.offset; {63595#true} is VALID [2022-04-28 08:34:00,794 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {63595#true} {63596#false} #1186#return; {63596#false} is VALID [2022-04-28 08:34:00,794 INFO L290 TraceCheckUtils]: 69: Hoare triple {63596#false} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {63596#false} is VALID [2022-04-28 08:34:00,794 INFO L290 TraceCheckUtils]: 70: Hoare triple {63596#false} assume !(~s~0 != ~NP~0); {63596#false} is VALID [2022-04-28 08:34:00,794 INFO L290 TraceCheckUtils]: 71: Hoare triple {63596#false} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {63596#false} is VALID [2022-04-28 08:34:00,795 INFO L290 TraceCheckUtils]: 72: Hoare triple {63596#false} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {63596#false} is VALID [2022-04-28 08:34:00,795 INFO L272 TraceCheckUtils]: 73: Hoare triple {63596#false} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {63691#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:34:00,795 INFO L290 TraceCheckUtils]: 74: Hoare triple {63691#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {63595#true} is VALID [2022-04-28 08:34:00,795 INFO L290 TraceCheckUtils]: 75: Hoare triple {63595#true} assume 0 != ~compRegistered~0; {63595#true} is VALID [2022-04-28 08:34:00,796 INFO L272 TraceCheckUtils]: 76: Hoare triple {63595#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {63700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:00,796 INFO L290 TraceCheckUtils]: 77: Hoare triple {63700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {63595#true} is VALID [2022-04-28 08:34:00,796 INFO L272 TraceCheckUtils]: 78: Hoare triple {63595#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {63700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:00,796 INFO L290 TraceCheckUtils]: 79: Hoare triple {63700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {63595#true} is VALID [2022-04-28 08:34:00,796 INFO L290 TraceCheckUtils]: 80: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,796 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {63595#true} {63595#true} #1174#return; {63595#true} is VALID [2022-04-28 08:34:00,797 INFO L290 TraceCheckUtils]: 82: Hoare triple {63595#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {63595#true} is VALID [2022-04-28 08:34:00,797 INFO L290 TraceCheckUtils]: 83: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,797 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {63595#true} {63595#true} #1210#return; {63595#true} is VALID [2022-04-28 08:34:00,797 INFO L290 TraceCheckUtils]: 85: Hoare triple {63595#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {63595#true} is VALID [2022-04-28 08:34:00,797 INFO L290 TraceCheckUtils]: 86: Hoare triple {63595#true} assume !(-1073741802 == ~compRetStatus~0); {63595#true} is VALID [2022-04-28 08:34:00,797 INFO L290 TraceCheckUtils]: 87: Hoare triple {63595#true} assume 0 == ~__BLAST_NONDET~11; {63595#true} is VALID [2022-04-28 08:34:00,797 INFO L290 TraceCheckUtils]: 88: Hoare triple {63595#true} ~returnVal2~0 := 0; {63595#true} is VALID [2022-04-28 08:34:00,797 INFO L290 TraceCheckUtils]: 89: Hoare triple {63595#true} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {63595#true} is VALID [2022-04-28 08:34:00,797 INFO L290 TraceCheckUtils]: 90: Hoare triple {63595#true} #res := ~returnVal2~0; {63595#true} is VALID [2022-04-28 08:34:00,797 INFO L290 TraceCheckUtils]: 91: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:00,797 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {63595#true} {63596#false} #1192#return; {63596#false} is VALID [2022-04-28 08:34:00,797 INFO L290 TraceCheckUtils]: 93: Hoare triple {63596#false} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {63596#false} is VALID [2022-04-28 08:34:00,797 INFO L290 TraceCheckUtils]: 94: Hoare triple {63596#false} assume !(259 == ~status~3); {63596#false} is VALID [2022-04-28 08:34:00,797 INFO L290 TraceCheckUtils]: 95: Hoare triple {63596#false} assume ~status~3 >= 0; {63596#false} is VALID [2022-04-28 08:34:00,797 INFO L290 TraceCheckUtils]: 96: Hoare triple {63596#false} assume !(~myStatus~0 >= 0); {63596#false} is VALID [2022-04-28 08:34:00,798 INFO L290 TraceCheckUtils]: 97: Hoare triple {63596#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {63596#false} is VALID [2022-04-28 08:34:00,798 INFO L272 TraceCheckUtils]: 98: Hoare triple {63596#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {63596#false} is VALID [2022-04-28 08:34:00,798 INFO L290 TraceCheckUtils]: 99: Hoare triple {63596#false} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {63596#false} is VALID [2022-04-28 08:34:00,798 INFO L290 TraceCheckUtils]: 100: Hoare triple {63596#false} assume !(~s~0 == ~NP~0); {63596#false} is VALID [2022-04-28 08:34:00,798 INFO L272 TraceCheckUtils]: 101: Hoare triple {63596#false} call errorFn(); {63596#false} is VALID [2022-04-28 08:34:00,798 INFO L290 TraceCheckUtils]: 102: Hoare triple {63596#false} assume !false; {63596#false} is VALID [2022-04-28 08:34:00,798 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:34:00,798 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:34:00,798 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [601657516] [2022-04-28 08:34:00,798 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [601657516] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 08:34:00,799 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [318931883] [2022-04-28 08:34:00,799 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-04-28 08:34:00,799 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 08:34:00,799 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 08:34:00,816 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 08:34:00,819 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-04-28 08:34:01,669 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2022-04-28 08:34:01,669 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-04-28 08:34:01,676 INFO L263 TraceCheckSpWp]: Trace formula consists of 1752 conjuncts, 9 conjunts are in the unsatisfiable core [2022-04-28 08:34:01,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:01,717 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 08:34:01,954 INFO L272 TraceCheckUtils]: 0: Hoare triple {63595#true} call ULTIMATE.init(); {63595#true} is VALID [2022-04-28 08:34:01,955 INFO L290 TraceCheckUtils]: 1: Hoare triple {63595#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {63595#true} is VALID [2022-04-28 08:34:01,955 INFO L290 TraceCheckUtils]: 2: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:01,955 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {63595#true} {63595#true} #1270#return; {63595#true} is VALID [2022-04-28 08:34:01,955 INFO L272 TraceCheckUtils]: 4: Hoare triple {63595#true} call #t~ret213 := main(); {63595#true} is VALID [2022-04-28 08:34:01,955 INFO L290 TraceCheckUtils]: 5: Hoare triple {63595#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {63595#true} is VALID [2022-04-28 08:34:01,955 INFO L272 TraceCheckUtils]: 6: Hoare triple {63595#true} call _BLAST_init(); {63595#true} is VALID [2022-04-28 08:34:01,955 INFO L290 TraceCheckUtils]: 7: Hoare triple {63595#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {63595#true} is VALID [2022-04-28 08:34:01,955 INFO L290 TraceCheckUtils]: 8: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:01,955 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {63595#true} {63595#true} #1216#return; {63595#true} is VALID [2022-04-28 08:34:01,956 INFO L272 TraceCheckUtils]: 10: Hoare triple {63595#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {63595#true} is VALID [2022-04-28 08:34:01,956 INFO L290 TraceCheckUtils]: 11: Hoare triple {63595#true} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {63595#true} is VALID [2022-04-28 08:34:01,956 INFO L272 TraceCheckUtils]: 12: Hoare triple {63595#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {63595#true} is VALID [2022-04-28 08:34:01,956 INFO L290 TraceCheckUtils]: 13: Hoare triple {63595#true} ~cond := #in~cond; {63595#true} is VALID [2022-04-28 08:34:01,956 INFO L290 TraceCheckUtils]: 14: Hoare triple {63595#true} assume !(0 == ~cond); {63595#true} is VALID [2022-04-28 08:34:01,956 INFO L290 TraceCheckUtils]: 15: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:01,956 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {63595#true} {63595#true} #1254#return; {63595#true} is VALID [2022-04-28 08:34:01,956 INFO L290 TraceCheckUtils]: 17: Hoare triple {63595#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {63595#true} is VALID [2022-04-28 08:34:01,956 INFO L290 TraceCheckUtils]: 18: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:01,956 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {63595#true} {63595#true} #1218#return; {63595#true} is VALID [2022-04-28 08:34:01,956 INFO L290 TraceCheckUtils]: 20: Hoare triple {63595#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {63595#true} is VALID [2022-04-28 08:34:01,956 INFO L290 TraceCheckUtils]: 21: Hoare triple {63595#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {63595#true} is VALID [2022-04-28 08:34:01,957 INFO L290 TraceCheckUtils]: 22: Hoare triple {63595#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {63595#true} is VALID [2022-04-28 08:34:01,957 INFO L272 TraceCheckUtils]: 23: Hoare triple {63595#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {63595#true} is VALID [2022-04-28 08:34:01,957 INFO L290 TraceCheckUtils]: 24: Hoare triple {63595#true} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {63595#true} is VALID [2022-04-28 08:34:01,957 INFO L272 TraceCheckUtils]: 25: Hoare triple {63595#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {63595#true} is VALID [2022-04-28 08:34:01,957 INFO L290 TraceCheckUtils]: 26: Hoare triple {63595#true} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {63595#true} is VALID [2022-04-28 08:34:01,957 INFO L290 TraceCheckUtils]: 27: Hoare triple {63595#true} assume 0 == ~__BLAST_NONDET~5; {63595#true} is VALID [2022-04-28 08:34:01,957 INFO L290 TraceCheckUtils]: 28: Hoare triple {63595#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {63595#true} is VALID [2022-04-28 08:34:01,957 INFO L290 TraceCheckUtils]: 29: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:01,957 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {63595#true} {63595#true} #1176#return; {63595#true} is VALID [2022-04-28 08:34:01,957 INFO L290 TraceCheckUtils]: 31: Hoare triple {63595#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {63595#true} is VALID [2022-04-28 08:34:01,957 INFO L290 TraceCheckUtils]: 32: Hoare triple {63595#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {63595#true} is VALID [2022-04-28 08:34:01,957 INFO L272 TraceCheckUtils]: 33: Hoare triple {63595#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {63595#true} is VALID [2022-04-28 08:34:01,957 INFO L290 TraceCheckUtils]: 34: Hoare triple {63595#true} #t~loopctr214 := 0; {63595#true} is VALID [2022-04-28 08:34:01,958 INFO L290 TraceCheckUtils]: 35: Hoare triple {63595#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {63595#true} is VALID [2022-04-28 08:34:01,958 INFO L290 TraceCheckUtils]: 36: Hoare triple {63595#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {63595#true} is VALID [2022-04-28 08:34:01,958 INFO L290 TraceCheckUtils]: 37: Hoare triple {63595#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {63595#true} is VALID [2022-04-28 08:34:01,958 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {63595#true} {63595#true} #1178#return; {63595#true} is VALID [2022-04-28 08:34:01,958 INFO L290 TraceCheckUtils]: 39: Hoare triple {63595#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {63595#true} is VALID [2022-04-28 08:34:01,958 INFO L272 TraceCheckUtils]: 40: Hoare triple {63595#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {63595#true} is VALID [2022-04-28 08:34:01,958 INFO L290 TraceCheckUtils]: 41: Hoare triple {63595#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {63595#true} is VALID [2022-04-28 08:34:01,958 INFO L290 TraceCheckUtils]: 42: Hoare triple {63595#true} assume 0 == ~__BLAST_NONDET~2; {63595#true} is VALID [2022-04-28 08:34:01,958 INFO L290 TraceCheckUtils]: 43: Hoare triple {63595#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {63595#true} is VALID [2022-04-28 08:34:01,958 INFO L290 TraceCheckUtils]: 44: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:01,958 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {63595#true} {63595#true} #1180#return; {63595#true} is VALID [2022-04-28 08:34:01,958 INFO L290 TraceCheckUtils]: 46: Hoare triple {63595#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {63595#true} is VALID [2022-04-28 08:34:01,958 INFO L290 TraceCheckUtils]: 47: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:01,959 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {63595#true} {63595#true} #1220#return; {63595#true} is VALID [2022-04-28 08:34:01,959 INFO L290 TraceCheckUtils]: 49: Hoare triple {63595#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {63595#true} is VALID [2022-04-28 08:34:01,959 INFO L272 TraceCheckUtils]: 50: Hoare triple {63595#true} call stub_driver_init(); {63595#true} is VALID [2022-04-28 08:34:01,959 INFO L290 TraceCheckUtils]: 51: Hoare triple {63595#true} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {63595#true} is VALID [2022-04-28 08:34:01,959 INFO L290 TraceCheckUtils]: 52: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:01,959 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {63595#true} {63595#true} #1222#return; {63595#true} is VALID [2022-04-28 08:34:01,959 INFO L290 TraceCheckUtils]: 54: Hoare triple {63595#true} assume !!(~status~5 >= 0); {63595#true} is VALID [2022-04-28 08:34:01,959 INFO L290 TraceCheckUtils]: 55: Hoare triple {63595#true} assume !(0 == ~__BLAST_NONDET~0); {63595#true} is VALID [2022-04-28 08:34:01,959 INFO L290 TraceCheckUtils]: 56: Hoare triple {63595#true} assume !(1 == ~__BLAST_NONDET~0); {63595#true} is VALID [2022-04-28 08:34:01,959 INFO L290 TraceCheckUtils]: 57: Hoare triple {63595#true} assume !(2 == ~__BLAST_NONDET~0); {63595#true} is VALID [2022-04-28 08:34:01,959 INFO L290 TraceCheckUtils]: 58: Hoare triple {63595#true} assume 3 == ~__BLAST_NONDET~0; {63595#true} is VALID [2022-04-28 08:34:01,959 INFO L272 TraceCheckUtils]: 59: Hoare triple {63595#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {63595#true} is VALID [2022-04-28 08:34:01,959 INFO L290 TraceCheckUtils]: 60: Hoare triple {63595#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {63595#true} is VALID [2022-04-28 08:34:01,960 INFO L290 TraceCheckUtils]: 61: Hoare triple {63595#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {63595#true} is VALID [2022-04-28 08:34:01,960 INFO L290 TraceCheckUtils]: 62: Hoare triple {63595#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {63595#true} is VALID [2022-04-28 08:34:01,960 INFO L272 TraceCheckUtils]: 63: Hoare triple {63595#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {63595#true} is VALID [2022-04-28 08:34:01,960 INFO L290 TraceCheckUtils]: 64: Hoare triple {63595#true} #t~loopctr215 := 0; {63595#true} is VALID [2022-04-28 08:34:01,960 INFO L290 TraceCheckUtils]: 65: Hoare triple {63595#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {63595#true} is VALID [2022-04-28 08:34:01,960 INFO L290 TraceCheckUtils]: 66: Hoare triple {63595#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {63595#true} is VALID [2022-04-28 08:34:01,960 INFO L290 TraceCheckUtils]: 67: Hoare triple {63595#true} assume #res.base == dest.base && #res.offset == dest.offset; {63595#true} is VALID [2022-04-28 08:34:01,960 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {63595#true} {63595#true} #1186#return; {63595#true} is VALID [2022-04-28 08:34:01,960 INFO L290 TraceCheckUtils]: 69: Hoare triple {63595#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {63595#true} is VALID [2022-04-28 08:34:01,960 INFO L290 TraceCheckUtils]: 70: Hoare triple {63595#true} assume !(~s~0 != ~NP~0); {63595#true} is VALID [2022-04-28 08:34:01,960 INFO L290 TraceCheckUtils]: 71: Hoare triple {63595#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {63595#true} is VALID [2022-04-28 08:34:01,960 INFO L290 TraceCheckUtils]: 72: Hoare triple {63595#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {63595#true} is VALID [2022-04-28 08:34:01,960 INFO L272 TraceCheckUtils]: 73: Hoare triple {63595#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {63595#true} is VALID [2022-04-28 08:34:01,961 INFO L290 TraceCheckUtils]: 74: Hoare triple {63595#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {63595#true} is VALID [2022-04-28 08:34:01,961 INFO L290 TraceCheckUtils]: 75: Hoare triple {63595#true} assume 0 != ~compRegistered~0; {63595#true} is VALID [2022-04-28 08:34:01,961 INFO L272 TraceCheckUtils]: 76: Hoare triple {63595#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {63595#true} is VALID [2022-04-28 08:34:01,961 INFO L290 TraceCheckUtils]: 77: Hoare triple {63595#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {63595#true} is VALID [2022-04-28 08:34:01,961 INFO L272 TraceCheckUtils]: 78: Hoare triple {63595#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {63595#true} is VALID [2022-04-28 08:34:01,961 INFO L290 TraceCheckUtils]: 79: Hoare triple {63595#true} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {63595#true} is VALID [2022-04-28 08:34:01,961 INFO L290 TraceCheckUtils]: 80: Hoare triple {63595#true} assume true; {63595#true} is VALID [2022-04-28 08:34:01,961 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {63595#true} {63595#true} #1174#return; {63595#true} is VALID [2022-04-28 08:34:01,962 INFO L290 TraceCheckUtils]: 82: Hoare triple {63595#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {63953#(= (- 1073741802) |KbFilter_Complete_#res|)} is VALID [2022-04-28 08:34:01,962 INFO L290 TraceCheckUtils]: 83: Hoare triple {63953#(= (- 1073741802) |KbFilter_Complete_#res|)} assume true; {63953#(= (- 1073741802) |KbFilter_Complete_#res|)} is VALID [2022-04-28 08:34:01,963 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {63953#(= (- 1073741802) |KbFilter_Complete_#res|)} {63595#true} #1210#return; {63960#(= |IofCallDriver_#t~ret196| (- 1073741802))} is VALID [2022-04-28 08:34:01,963 INFO L290 TraceCheckUtils]: 85: Hoare triple {63960#(= |IofCallDriver_#t~ret196| (- 1073741802))} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {63964#(= (- 1073741802) IofCallDriver_~compRetStatus~0)} is VALID [2022-04-28 08:34:01,964 INFO L290 TraceCheckUtils]: 86: Hoare triple {63964#(= (- 1073741802) IofCallDriver_~compRetStatus~0)} assume !(-1073741802 == ~compRetStatus~0); {63596#false} is VALID [2022-04-28 08:34:01,964 INFO L290 TraceCheckUtils]: 87: Hoare triple {63596#false} assume 0 == ~__BLAST_NONDET~11; {63596#false} is VALID [2022-04-28 08:34:01,964 INFO L290 TraceCheckUtils]: 88: Hoare triple {63596#false} ~returnVal2~0 := 0; {63596#false} is VALID [2022-04-28 08:34:01,964 INFO L290 TraceCheckUtils]: 89: Hoare triple {63596#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {63596#false} is VALID [2022-04-28 08:34:01,964 INFO L290 TraceCheckUtils]: 90: Hoare triple {63596#false} #res := ~returnVal2~0; {63596#false} is VALID [2022-04-28 08:34:01,964 INFO L290 TraceCheckUtils]: 91: Hoare triple {63596#false} assume true; {63596#false} is VALID [2022-04-28 08:34:01,964 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {63596#false} {63595#true} #1192#return; {63596#false} is VALID [2022-04-28 08:34:01,964 INFO L290 TraceCheckUtils]: 93: Hoare triple {63596#false} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {63596#false} is VALID [2022-04-28 08:34:01,964 INFO L290 TraceCheckUtils]: 94: Hoare triple {63596#false} assume !(259 == ~status~3); {63596#false} is VALID [2022-04-28 08:34:01,964 INFO L290 TraceCheckUtils]: 95: Hoare triple {63596#false} assume ~status~3 >= 0; {63596#false} is VALID [2022-04-28 08:34:01,965 INFO L290 TraceCheckUtils]: 96: Hoare triple {63596#false} assume !(~myStatus~0 >= 0); {63596#false} is VALID [2022-04-28 08:34:01,965 INFO L290 TraceCheckUtils]: 97: Hoare triple {63596#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {63596#false} is VALID [2022-04-28 08:34:01,965 INFO L272 TraceCheckUtils]: 98: Hoare triple {63596#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {63596#false} is VALID [2022-04-28 08:34:01,986 INFO L290 TraceCheckUtils]: 99: Hoare triple {63596#false} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {63596#false} is VALID [2022-04-28 08:34:01,986 INFO L290 TraceCheckUtils]: 100: Hoare triple {63596#false} assume !(~s~0 == ~NP~0); {63596#false} is VALID [2022-04-28 08:34:01,986 INFO L272 TraceCheckUtils]: 101: Hoare triple {63596#false} call errorFn(); {63596#false} is VALID [2022-04-28 08:34:01,987 INFO L290 TraceCheckUtils]: 102: Hoare triple {63596#false} assume !false; {63596#false} is VALID [2022-04-28 08:34:01,987 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 08:34:01,987 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-04-28 08:34:01,987 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [318931883] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:34:01,987 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-04-28 08:34:01,987 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [12] total 15 [2022-04-28 08:34:01,988 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:34:01,988 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [186045199] [2022-04-28 08:34:01,988 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [186045199] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:34:01,988 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:34:01,988 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-28 08:34:01,988 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1027697876] [2022-04-28 08:34:01,988 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:34:01,989 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 14.6) internal successors, (73), 4 states have internal predecessors, (73), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) Word has length 103 [2022-04-28 08:34:01,989 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:34:01,989 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 14.6) internal successors, (73), 4 states have internal predecessors, (73), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) [2022-04-28 08:34:02,069 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 103 edges. 103 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:34:02,069 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-04-28 08:34:02,069 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:34:02,069 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-04-28 08:34:02,069 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=172, Unknown=0, NotChecked=0, Total=210 [2022-04-28 08:34:02,070 INFO L87 Difference]: Start difference. First operand 339 states and 401 transitions. Second operand has 5 states, 5 states have (on average 14.6) internal successors, (73), 4 states have internal predecessors, (73), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) [2022-04-28 08:34:12,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:34:12,975 INFO L93 Difference]: Finished difference Result 435 states and 520 transitions. [2022-04-28 08:34:12,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-04-28 08:34:12,991 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 14.6) internal successors, (73), 4 states have internal predecessors, (73), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) Word has length 103 [2022-04-28 08:34:12,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:34:12,991 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 14.6) internal successors, (73), 4 states have internal predecessors, (73), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) [2022-04-28 08:34:12,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 227 transitions. [2022-04-28 08:34:12,993 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 14.6) internal successors, (73), 4 states have internal predecessors, (73), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) [2022-04-28 08:34:12,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 227 transitions. [2022-04-28 08:34:12,994 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 5 states and 227 transitions. [2022-04-28 08:34:13,147 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 227 edges. 227 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:34:13,152 INFO L225 Difference]: With dead ends: 435 [2022-04-28 08:34:13,152 INFO L226 Difference]: Without dead ends: 325 [2022-04-28 08:34:13,153 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 120 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=38, Invalid=172, Unknown=0, NotChecked=0, Total=210 [2022-04-28 08:34:13,153 INFO L413 NwaCegarLoop]: 162 mSDtfsCounter, 15 mSDsluCounter, 466 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 628 SdHoareTripleChecker+Invalid, 8 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-04-28 08:34:13,153 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 628 Invalid, 8 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-04-28 08:34:13,153 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-28 08:34:13,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 325. [2022-04-28 08:34:13,777 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:34:13,777 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 325 states, 250 states have (on average 1.22) internal successors, (305), 254 states have internal predecessors, (305), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:34:13,778 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 325 states, 250 states have (on average 1.22) internal successors, (305), 254 states have internal predecessors, (305), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:34:13,778 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 325 states, 250 states have (on average 1.22) internal successors, (305), 254 states have internal predecessors, (305), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:34:13,782 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:34:13,782 INFO L93 Difference]: Finished difference Result 325 states and 381 transitions. [2022-04-28 08:34:13,782 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 381 transitions. [2022-04-28 08:34:13,782 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:34:13,782 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:34:13,782 INFO L74 IsIncluded]: Start isIncluded. First operand has 325 states, 250 states have (on average 1.22) internal successors, (305), 254 states have internal predecessors, (305), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) Second operand 325 states. [2022-04-28 08:34:13,783 INFO L87 Difference]: Start difference. First operand has 325 states, 250 states have (on average 1.22) internal successors, (305), 254 states have internal predecessors, (305), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) Second operand 325 states. [2022-04-28 08:34:13,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:34:13,786 INFO L93 Difference]: Finished difference Result 325 states and 381 transitions. [2022-04-28 08:34:13,786 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 381 transitions. [2022-04-28 08:34:13,787 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:34:13,787 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:34:13,787 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:34:13,787 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:34:13,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 325 states, 250 states have (on average 1.22) internal successors, (305), 254 states have internal predecessors, (305), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:34:13,792 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 325 states to 325 states and 381 transitions. [2022-04-28 08:34:13,792 INFO L78 Accepts]: Start accepts. Automaton has 325 states and 381 transitions. Word has length 103 [2022-04-28 08:34:13,792 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:34:13,792 INFO L495 AbstractCegarLoop]: Abstraction has 325 states and 381 transitions. [2022-04-28 08:34:13,792 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 14.6) internal successors, (73), 4 states have internal predecessors, (73), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (13), 3 states have call predecessors, (13), 1 states have call successors, (13) [2022-04-28 08:34:13,792 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 325 states and 381 transitions. [2022-04-28 08:34:14,658 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 381 edges. 381 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:34:14,658 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 381 transitions. [2022-04-28 08:34:14,658 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2022-04-28 08:34:14,658 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:34:14,659 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:34:14,680 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-04-28 08:34:14,879 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-04-28 08:34:14,879 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:34:14,879 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:34:14,880 INFO L85 PathProgramCache]: Analyzing trace with hash 813900694, now seen corresponding path program 1 times [2022-04-28 08:34:14,880 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:34:14,880 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1663293455] [2022-04-28 08:34:14,883 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 0 HavocedVariables, 4 AssignedVariables, -1 ReadonlyVariables, Eigenvalues: {}, 0 SequentialAcceleration, 0 AlternatingAcceleration, 0 QuantifierFreeResult [2022-04-28 08:34:14,883 WARN L91 AcceleratorJordan]: Jordan acceleration failed, because NONINTEGER_UPDATE [2022-04-28 08:34:14,883 INFO L274 tedInterpolationCore]: Could not compute an accelerate. [2022-04-28 08:34:14,883 INFO L85 PathProgramCache]: Analyzing trace with hash 813900694, now seen corresponding path program 2 times [2022-04-28 08:34:14,883 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:34:14,883 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [757520642] [2022-04-28 08:34:14,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:34:14,883 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:34:14,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:15,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:34:15,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:15,069 INFO L290 TraceCheckUtils]: 0: Hoare triple {66259#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {66185#true} is VALID [2022-04-28 08:34:15,069 INFO L290 TraceCheckUtils]: 1: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,069 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {66185#true} {66185#true} #1270#return; {66185#true} is VALID [2022-04-28 08:34:15,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:34:15,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:15,113 INFO L290 TraceCheckUtils]: 0: Hoare triple {66260#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,114 INFO L290 TraceCheckUtils]: 1: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume true; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,114 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} {66185#true} #1216#return; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:34:15,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:15,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:34:15,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:15,140 INFO L290 TraceCheckUtils]: 0: Hoare triple {66185#true} ~cond := #in~cond; {66185#true} is VALID [2022-04-28 08:34:15,140 INFO L290 TraceCheckUtils]: 1: Hoare triple {66185#true} assume !(0 == ~cond); {66185#true} is VALID [2022-04-28 08:34:15,140 INFO L290 TraceCheckUtils]: 2: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,140 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {66185#true} {66185#true} #1254#return; {66185#true} is VALID [2022-04-28 08:34:15,140 INFO L290 TraceCheckUtils]: 0: Hoare triple {66261#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {66185#true} is VALID [2022-04-28 08:34:15,140 INFO L272 TraceCheckUtils]: 1: Hoare triple {66185#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {66185#true} is VALID [2022-04-28 08:34:15,140 INFO L290 TraceCheckUtils]: 2: Hoare triple {66185#true} ~cond := #in~cond; {66185#true} is VALID [2022-04-28 08:34:15,140 INFO L290 TraceCheckUtils]: 3: Hoare triple {66185#true} assume !(0 == ~cond); {66185#true} is VALID [2022-04-28 08:34:15,141 INFO L290 TraceCheckUtils]: 4: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,141 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {66185#true} {66185#true} #1254#return; {66185#true} is VALID [2022-04-28 08:34:15,141 INFO L290 TraceCheckUtils]: 6: Hoare triple {66185#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {66185#true} is VALID [2022-04-28 08:34:15,141 INFO L290 TraceCheckUtils]: 7: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,142 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {66185#true} {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #1218#return; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:34:15,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:15,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:34:15,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:15,186 INFO L290 TraceCheckUtils]: 0: Hoare triple {66266#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {66185#true} is VALID [2022-04-28 08:34:15,186 INFO L290 TraceCheckUtils]: 1: Hoare triple {66185#true} assume 0 == ~__BLAST_NONDET~5; {66185#true} is VALID [2022-04-28 08:34:15,186 INFO L290 TraceCheckUtils]: 2: Hoare triple {66185#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {66185#true} is VALID [2022-04-28 08:34:15,186 INFO L290 TraceCheckUtils]: 3: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,186 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {66185#true} {66185#true} #1176#return; {66185#true} is VALID [2022-04-28 08:34:15,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:34:15,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:15,193 INFO L290 TraceCheckUtils]: 0: Hoare triple {66261#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {66185#true} is VALID [2022-04-28 08:34:15,193 INFO L290 TraceCheckUtils]: 1: Hoare triple {66185#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {66185#true} is VALID [2022-04-28 08:34:15,193 INFO L290 TraceCheckUtils]: 2: Hoare triple {66185#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {66185#true} is VALID [2022-04-28 08:34:15,193 INFO L290 TraceCheckUtils]: 3: Hoare triple {66185#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {66185#true} is VALID [2022-04-28 08:34:15,193 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {66185#true} {66185#true} #1178#return; {66185#true} is VALID [2022-04-28 08:34:15,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-04-28 08:34:15,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:15,198 INFO L290 TraceCheckUtils]: 0: Hoare triple {66185#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {66185#true} is VALID [2022-04-28 08:34:15,198 INFO L290 TraceCheckUtils]: 1: Hoare triple {66185#true} assume 0 == ~__BLAST_NONDET~2; {66185#true} is VALID [2022-04-28 08:34:15,198 INFO L290 TraceCheckUtils]: 2: Hoare triple {66185#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {66185#true} is VALID [2022-04-28 08:34:15,198 INFO L290 TraceCheckUtils]: 3: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,199 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {66185#true} {66185#true} #1180#return; {66185#true} is VALID [2022-04-28 08:34:15,199 INFO L290 TraceCheckUtils]: 0: Hoare triple {66266#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {66185#true} is VALID [2022-04-28 08:34:15,200 INFO L272 TraceCheckUtils]: 1: Hoare triple {66185#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {66266#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:34:15,200 INFO L290 TraceCheckUtils]: 2: Hoare triple {66266#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {66185#true} is VALID [2022-04-28 08:34:15,200 INFO L290 TraceCheckUtils]: 3: Hoare triple {66185#true} assume 0 == ~__BLAST_NONDET~5; {66185#true} is VALID [2022-04-28 08:34:15,200 INFO L290 TraceCheckUtils]: 4: Hoare triple {66185#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {66185#true} is VALID [2022-04-28 08:34:15,200 INFO L290 TraceCheckUtils]: 5: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,200 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {66185#true} {66185#true} #1176#return; {66185#true} is VALID [2022-04-28 08:34:15,200 INFO L290 TraceCheckUtils]: 7: Hoare triple {66185#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {66185#true} is VALID [2022-04-28 08:34:15,200 INFO L290 TraceCheckUtils]: 8: Hoare triple {66185#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {66185#true} is VALID [2022-04-28 08:34:15,201 INFO L272 TraceCheckUtils]: 9: Hoare triple {66185#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {66261#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:15,201 INFO L290 TraceCheckUtils]: 10: Hoare triple {66261#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {66185#true} is VALID [2022-04-28 08:34:15,201 INFO L290 TraceCheckUtils]: 11: Hoare triple {66185#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {66185#true} is VALID [2022-04-28 08:34:15,201 INFO L290 TraceCheckUtils]: 12: Hoare triple {66185#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {66185#true} is VALID [2022-04-28 08:34:15,201 INFO L290 TraceCheckUtils]: 13: Hoare triple {66185#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {66185#true} is VALID [2022-04-28 08:34:15,201 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {66185#true} {66185#true} #1178#return; {66185#true} is VALID [2022-04-28 08:34:15,201 INFO L290 TraceCheckUtils]: 15: Hoare triple {66185#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {66185#true} is VALID [2022-04-28 08:34:15,201 INFO L272 TraceCheckUtils]: 16: Hoare triple {66185#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {66185#true} is VALID [2022-04-28 08:34:15,202 INFO L290 TraceCheckUtils]: 17: Hoare triple {66185#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {66185#true} is VALID [2022-04-28 08:34:15,202 INFO L290 TraceCheckUtils]: 18: Hoare triple {66185#true} assume 0 == ~__BLAST_NONDET~2; {66185#true} is VALID [2022-04-28 08:34:15,202 INFO L290 TraceCheckUtils]: 19: Hoare triple {66185#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {66185#true} is VALID [2022-04-28 08:34:15,202 INFO L290 TraceCheckUtils]: 20: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,202 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {66185#true} {66185#true} #1180#return; {66185#true} is VALID [2022-04-28 08:34:15,202 INFO L290 TraceCheckUtils]: 22: Hoare triple {66185#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {66185#true} is VALID [2022-04-28 08:34:15,202 INFO L290 TraceCheckUtils]: 23: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,203 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {66185#true} {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #1220#return; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-04-28 08:34:15,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:15,223 INFO L290 TraceCheckUtils]: 0: Hoare triple {66282#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {66185#true} is VALID [2022-04-28 08:34:15,223 INFO L290 TraceCheckUtils]: 1: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,224 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {66185#true} {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #1222#return; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-04-28 08:34:15,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:15,237 INFO L290 TraceCheckUtils]: 0: Hoare triple {66261#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {66185#true} is VALID [2022-04-28 08:34:15,237 INFO L290 TraceCheckUtils]: 1: Hoare triple {66185#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {66185#true} is VALID [2022-04-28 08:34:15,237 INFO L290 TraceCheckUtils]: 2: Hoare triple {66185#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {66185#true} is VALID [2022-04-28 08:34:15,237 INFO L290 TraceCheckUtils]: 3: Hoare triple {66185#true} assume #res.base == dest.base && #res.offset == dest.offset; {66185#true} is VALID [2022-04-28 08:34:15,238 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {66185#true} {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #1186#return; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-04-28 08:34:15,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:15,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:34:15,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:15,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:34:15,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:15,316 INFO L290 TraceCheckUtils]: 0: Hoare triple {66297#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {66185#true} is VALID [2022-04-28 08:34:15,316 INFO L290 TraceCheckUtils]: 1: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,316 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {66185#true} {66185#true} #1174#return; {66185#true} is VALID [2022-04-28 08:34:15,316 INFO L290 TraceCheckUtils]: 0: Hoare triple {66297#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {66185#true} is VALID [2022-04-28 08:34:15,317 INFO L272 TraceCheckUtils]: 1: Hoare triple {66185#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {66297#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:15,317 INFO L290 TraceCheckUtils]: 2: Hoare triple {66297#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {66185#true} is VALID [2022-04-28 08:34:15,317 INFO L290 TraceCheckUtils]: 3: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,317 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {66185#true} {66185#true} #1174#return; {66185#true} is VALID [2022-04-28 08:34:15,317 INFO L290 TraceCheckUtils]: 5: Hoare triple {66185#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {66185#true} is VALID [2022-04-28 08:34:15,317 INFO L290 TraceCheckUtils]: 6: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,317 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {66185#true} {66185#true} #1210#return; {66185#true} is VALID [2022-04-28 08:34:15,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:34:15,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:15,357 INFO L290 TraceCheckUtils]: 0: Hoare triple {66301#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {66302#(= ~MPR1~0 ~s~0)} is VALID [2022-04-28 08:34:15,357 INFO L290 TraceCheckUtils]: 1: Hoare triple {66302#(= ~MPR1~0 ~s~0)} assume true; {66302#(= ~MPR1~0 ~s~0)} is VALID [2022-04-28 08:34:15,357 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {66302#(= ~MPR1~0 ~s~0)} {66185#true} #1212#return; {66295#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:34:15,358 INFO L290 TraceCheckUtils]: 0: Hoare triple {66283#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {66185#true} is VALID [2022-04-28 08:34:15,358 INFO L290 TraceCheckUtils]: 1: Hoare triple {66185#true} assume 0 != ~compRegistered~0; {66185#true} is VALID [2022-04-28 08:34:15,358 INFO L272 TraceCheckUtils]: 2: Hoare triple {66185#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {66297#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:15,359 INFO L290 TraceCheckUtils]: 3: Hoare triple {66297#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {66185#true} is VALID [2022-04-28 08:34:15,359 INFO L272 TraceCheckUtils]: 4: Hoare triple {66185#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {66297#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:15,359 INFO L290 TraceCheckUtils]: 5: Hoare triple {66297#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {66185#true} is VALID [2022-04-28 08:34:15,359 INFO L290 TraceCheckUtils]: 6: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,359 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {66185#true} {66185#true} #1174#return; {66185#true} is VALID [2022-04-28 08:34:15,359 INFO L290 TraceCheckUtils]: 8: Hoare triple {66185#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {66185#true} is VALID [2022-04-28 08:34:15,360 INFO L290 TraceCheckUtils]: 9: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,360 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {66185#true} {66185#true} #1210#return; {66185#true} is VALID [2022-04-28 08:34:15,360 INFO L290 TraceCheckUtils]: 11: Hoare triple {66185#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {66185#true} is VALID [2022-04-28 08:34:15,360 INFO L290 TraceCheckUtils]: 12: Hoare triple {66185#true} assume -1073741802 == ~compRetStatus~0; {66185#true} is VALID [2022-04-28 08:34:15,360 INFO L272 TraceCheckUtils]: 13: Hoare triple {66185#true} call stubMoreProcessingRequired(); {66301#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:34:15,360 INFO L290 TraceCheckUtils]: 14: Hoare triple {66301#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {66302#(= ~MPR1~0 ~s~0)} is VALID [2022-04-28 08:34:15,361 INFO L290 TraceCheckUtils]: 15: Hoare triple {66302#(= ~MPR1~0 ~s~0)} assume true; {66302#(= ~MPR1~0 ~s~0)} is VALID [2022-04-28 08:34:15,361 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {66302#(= ~MPR1~0 ~s~0)} {66185#true} #1212#return; {66295#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:34:15,361 INFO L290 TraceCheckUtils]: 17: Hoare triple {66295#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume 0 == ~__BLAST_NONDET~11; {66295#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:34:15,362 INFO L290 TraceCheckUtils]: 18: Hoare triple {66295#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} ~returnVal2~0 := 0; {66295#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:34:15,362 INFO L290 TraceCheckUtils]: 19: Hoare triple {66295#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {66296#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-28 08:34:15,362 INFO L290 TraceCheckUtils]: 20: Hoare triple {66296#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} #res := ~returnVal2~0; {66296#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-28 08:34:15,362 INFO L290 TraceCheckUtils]: 21: Hoare triple {66296#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} assume true; {66296#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-28 08:34:15,363 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {66296#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #1192#return; {66186#false} is VALID [2022-04-28 08:34:15,365 INFO L272 TraceCheckUtils]: 0: Hoare triple {66185#true} call ULTIMATE.init(); {66259#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:34:15,365 INFO L290 TraceCheckUtils]: 1: Hoare triple {66259#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {66185#true} is VALID [2022-04-28 08:34:15,365 INFO L290 TraceCheckUtils]: 2: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,365 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {66185#true} {66185#true} #1270#return; {66185#true} is VALID [2022-04-28 08:34:15,365 INFO L272 TraceCheckUtils]: 4: Hoare triple {66185#true} call #t~ret213 := main(); {66185#true} is VALID [2022-04-28 08:34:15,365 INFO L290 TraceCheckUtils]: 5: Hoare triple {66185#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {66185#true} is VALID [2022-04-28 08:34:15,366 INFO L272 TraceCheckUtils]: 6: Hoare triple {66185#true} call _BLAST_init(); {66260#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:34:15,366 INFO L290 TraceCheckUtils]: 7: Hoare triple {66260#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,367 INFO L290 TraceCheckUtils]: 8: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume true; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,367 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} {66185#true} #1216#return; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,368 INFO L272 TraceCheckUtils]: 10: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {66261#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:15,368 INFO L290 TraceCheckUtils]: 11: Hoare triple {66261#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {66185#true} is VALID [2022-04-28 08:34:15,368 INFO L272 TraceCheckUtils]: 12: Hoare triple {66185#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {66185#true} is VALID [2022-04-28 08:34:15,368 INFO L290 TraceCheckUtils]: 13: Hoare triple {66185#true} ~cond := #in~cond; {66185#true} is VALID [2022-04-28 08:34:15,368 INFO L290 TraceCheckUtils]: 14: Hoare triple {66185#true} assume !(0 == ~cond); {66185#true} is VALID [2022-04-28 08:34:15,368 INFO L290 TraceCheckUtils]: 15: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,368 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {66185#true} {66185#true} #1254#return; {66185#true} is VALID [2022-04-28 08:34:15,368 INFO L290 TraceCheckUtils]: 17: Hoare triple {66185#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {66185#true} is VALID [2022-04-28 08:34:15,368 INFO L290 TraceCheckUtils]: 18: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,369 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {66185#true} {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #1218#return; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,369 INFO L290 TraceCheckUtils]: 20: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,370 INFO L290 TraceCheckUtils]: 21: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,370 INFO L290 TraceCheckUtils]: 22: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,371 INFO L272 TraceCheckUtils]: 23: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {66266#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:34:15,371 INFO L290 TraceCheckUtils]: 24: Hoare triple {66266#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {66185#true} is VALID [2022-04-28 08:34:15,372 INFO L272 TraceCheckUtils]: 25: Hoare triple {66185#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {66266#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:34:15,372 INFO L290 TraceCheckUtils]: 26: Hoare triple {66266#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {66185#true} is VALID [2022-04-28 08:34:15,373 INFO L290 TraceCheckUtils]: 27: Hoare triple {66185#true} assume 0 == ~__BLAST_NONDET~5; {66185#true} is VALID [2022-04-28 08:34:15,373 INFO L290 TraceCheckUtils]: 28: Hoare triple {66185#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {66185#true} is VALID [2022-04-28 08:34:15,373 INFO L290 TraceCheckUtils]: 29: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,373 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {66185#true} {66185#true} #1176#return; {66185#true} is VALID [2022-04-28 08:34:15,373 INFO L290 TraceCheckUtils]: 31: Hoare triple {66185#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {66185#true} is VALID [2022-04-28 08:34:15,373 INFO L290 TraceCheckUtils]: 32: Hoare triple {66185#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {66185#true} is VALID [2022-04-28 08:34:15,374 INFO L272 TraceCheckUtils]: 33: Hoare triple {66185#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {66261#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:15,374 INFO L290 TraceCheckUtils]: 34: Hoare triple {66261#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {66185#true} is VALID [2022-04-28 08:34:15,374 INFO L290 TraceCheckUtils]: 35: Hoare triple {66185#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {66185#true} is VALID [2022-04-28 08:34:15,374 INFO L290 TraceCheckUtils]: 36: Hoare triple {66185#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {66185#true} is VALID [2022-04-28 08:34:15,374 INFO L290 TraceCheckUtils]: 37: Hoare triple {66185#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {66185#true} is VALID [2022-04-28 08:34:15,374 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {66185#true} {66185#true} #1178#return; {66185#true} is VALID [2022-04-28 08:34:15,374 INFO L290 TraceCheckUtils]: 39: Hoare triple {66185#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {66185#true} is VALID [2022-04-28 08:34:15,374 INFO L272 TraceCheckUtils]: 40: Hoare triple {66185#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {66185#true} is VALID [2022-04-28 08:34:15,374 INFO L290 TraceCheckUtils]: 41: Hoare triple {66185#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {66185#true} is VALID [2022-04-28 08:34:15,374 INFO L290 TraceCheckUtils]: 42: Hoare triple {66185#true} assume 0 == ~__BLAST_NONDET~2; {66185#true} is VALID [2022-04-28 08:34:15,374 INFO L290 TraceCheckUtils]: 43: Hoare triple {66185#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {66185#true} is VALID [2022-04-28 08:34:15,374 INFO L290 TraceCheckUtils]: 44: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,374 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {66185#true} {66185#true} #1180#return; {66185#true} is VALID [2022-04-28 08:34:15,374 INFO L290 TraceCheckUtils]: 46: Hoare triple {66185#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {66185#true} is VALID [2022-04-28 08:34:15,375 INFO L290 TraceCheckUtils]: 47: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,375 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {66185#true} {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #1220#return; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,375 INFO L290 TraceCheckUtils]: 49: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,376 INFO L272 TraceCheckUtils]: 50: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} call stub_driver_init(); {66282#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:34:15,376 INFO L290 TraceCheckUtils]: 51: Hoare triple {66282#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {66185#true} is VALID [2022-04-28 08:34:15,376 INFO L290 TraceCheckUtils]: 52: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,377 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {66185#true} {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #1222#return; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,377 INFO L290 TraceCheckUtils]: 54: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !!(~status~5 >= 0); {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,377 INFO L290 TraceCheckUtils]: 55: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(0 == ~__BLAST_NONDET~0); {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,378 INFO L290 TraceCheckUtils]: 56: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(1 == ~__BLAST_NONDET~0); {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,378 INFO L290 TraceCheckUtils]: 57: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(2 == ~__BLAST_NONDET~0); {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,378 INFO L290 TraceCheckUtils]: 58: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume 3 == ~__BLAST_NONDET~0; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,379 INFO L272 TraceCheckUtils]: 59: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,379 INFO L290 TraceCheckUtils]: 60: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,380 INFO L290 TraceCheckUtils]: 61: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume 0 == #t~mem81 % 256;havoc #t~mem81; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,380 INFO L290 TraceCheckUtils]: 62: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,381 INFO L272 TraceCheckUtils]: 63: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {66261#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:15,381 INFO L290 TraceCheckUtils]: 64: Hoare triple {66261#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {66185#true} is VALID [2022-04-28 08:34:15,381 INFO L290 TraceCheckUtils]: 65: Hoare triple {66185#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {66185#true} is VALID [2022-04-28 08:34:15,381 INFO L290 TraceCheckUtils]: 66: Hoare triple {66185#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {66185#true} is VALID [2022-04-28 08:34:15,381 INFO L290 TraceCheckUtils]: 67: Hoare triple {66185#true} assume #res.base == dest.base && #res.offset == dest.offset; {66185#true} is VALID [2022-04-28 08:34:15,382 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {66185#true} {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #1186#return; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,382 INFO L290 TraceCheckUtils]: 69: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,383 INFO L290 TraceCheckUtils]: 70: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(~s~0 != ~NP~0); {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,383 INFO L290 TraceCheckUtils]: 71: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,384 INFO L290 TraceCheckUtils]: 72: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:34:15,385 INFO L272 TraceCheckUtils]: 73: Hoare triple {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {66283#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:34:15,385 INFO L290 TraceCheckUtils]: 74: Hoare triple {66283#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {66185#true} is VALID [2022-04-28 08:34:15,385 INFO L290 TraceCheckUtils]: 75: Hoare triple {66185#true} assume 0 != ~compRegistered~0; {66185#true} is VALID [2022-04-28 08:34:15,386 INFO L272 TraceCheckUtils]: 76: Hoare triple {66185#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {66297#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:15,386 INFO L290 TraceCheckUtils]: 77: Hoare triple {66297#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {66185#true} is VALID [2022-04-28 08:34:15,386 INFO L272 TraceCheckUtils]: 78: Hoare triple {66185#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {66297#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:15,386 INFO L290 TraceCheckUtils]: 79: Hoare triple {66297#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {66185#true} is VALID [2022-04-28 08:34:15,387 INFO L290 TraceCheckUtils]: 80: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,387 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {66185#true} {66185#true} #1174#return; {66185#true} is VALID [2022-04-28 08:34:15,387 INFO L290 TraceCheckUtils]: 82: Hoare triple {66185#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {66185#true} is VALID [2022-04-28 08:34:15,387 INFO L290 TraceCheckUtils]: 83: Hoare triple {66185#true} assume true; {66185#true} is VALID [2022-04-28 08:34:15,387 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {66185#true} {66185#true} #1210#return; {66185#true} is VALID [2022-04-28 08:34:15,387 INFO L290 TraceCheckUtils]: 85: Hoare triple {66185#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {66185#true} is VALID [2022-04-28 08:34:15,387 INFO L290 TraceCheckUtils]: 86: Hoare triple {66185#true} assume -1073741802 == ~compRetStatus~0; {66185#true} is VALID [2022-04-28 08:34:15,387 INFO L272 TraceCheckUtils]: 87: Hoare triple {66185#true} call stubMoreProcessingRequired(); {66301#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:34:15,387 INFO L290 TraceCheckUtils]: 88: Hoare triple {66301#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {66302#(= ~MPR1~0 ~s~0)} is VALID [2022-04-28 08:34:15,388 INFO L290 TraceCheckUtils]: 89: Hoare triple {66302#(= ~MPR1~0 ~s~0)} assume true; {66302#(= ~MPR1~0 ~s~0)} is VALID [2022-04-28 08:34:15,388 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {66302#(= ~MPR1~0 ~s~0)} {66185#true} #1212#return; {66295#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:34:15,388 INFO L290 TraceCheckUtils]: 91: Hoare triple {66295#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume 0 == ~__BLAST_NONDET~11; {66295#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:34:15,389 INFO L290 TraceCheckUtils]: 92: Hoare triple {66295#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} ~returnVal2~0 := 0; {66295#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:34:15,389 INFO L290 TraceCheckUtils]: 93: Hoare triple {66295#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {66296#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-28 08:34:15,389 INFO L290 TraceCheckUtils]: 94: Hoare triple {66296#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} #res := ~returnVal2~0; {66296#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-28 08:34:15,390 INFO L290 TraceCheckUtils]: 95: Hoare triple {66296#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} assume true; {66296#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-28 08:34:15,390 INFO L284 TraceCheckUtils]: 96: Hoare quadruple {66296#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} {66193#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #1192#return; {66186#false} is VALID [2022-04-28 08:34:15,391 INFO L290 TraceCheckUtils]: 97: Hoare triple {66186#false} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {66186#false} is VALID [2022-04-28 08:34:15,391 INFO L290 TraceCheckUtils]: 98: Hoare triple {66186#false} assume !(259 == ~status~3); {66186#false} is VALID [2022-04-28 08:34:15,391 INFO L290 TraceCheckUtils]: 99: Hoare triple {66186#false} assume ~status~3 >= 0; {66186#false} is VALID [2022-04-28 08:34:15,391 INFO L290 TraceCheckUtils]: 100: Hoare triple {66186#false} assume !(~myStatus~0 >= 0); {66186#false} is VALID [2022-04-28 08:34:15,391 INFO L290 TraceCheckUtils]: 101: Hoare triple {66186#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {66186#false} is VALID [2022-04-28 08:34:15,391 INFO L272 TraceCheckUtils]: 102: Hoare triple {66186#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {66186#false} is VALID [2022-04-28 08:34:15,391 INFO L290 TraceCheckUtils]: 103: Hoare triple {66186#false} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {66186#false} is VALID [2022-04-28 08:34:15,391 INFO L290 TraceCheckUtils]: 104: Hoare triple {66186#false} assume !(~s~0 == ~NP~0); {66186#false} is VALID [2022-04-28 08:34:15,391 INFO L272 TraceCheckUtils]: 105: Hoare triple {66186#false} call errorFn(); {66186#false} is VALID [2022-04-28 08:34:15,391 INFO L290 TraceCheckUtils]: 106: Hoare triple {66186#false} assume !false; {66186#false} is VALID [2022-04-28 08:34:15,391 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 08:34:15,392 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:34:15,392 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [757520642] [2022-04-28 08:34:15,392 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [757520642] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:34:15,392 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:34:15,392 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:34:15,392 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:34:15,392 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1663293455] [2022-04-28 08:34:15,392 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1663293455] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:34:15,392 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:34:15,392 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:34:15,392 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [292715086] [2022-04-28 08:34:15,392 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:34:15,394 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 5.357142857142857) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (18), 11 states have call predecessors, (18), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) Word has length 107 [2022-04-28 08:34:15,394 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:34:15,394 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 5.357142857142857) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (18), 11 states have call predecessors, (18), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2022-04-28 08:34:15,478 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 107 edges. 107 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:34:15,478 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-28 08:34:15,478 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:34:15,479 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-28 08:34:15,479 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=141, Unknown=0, NotChecked=0, Total=182 [2022-04-28 08:34:15,479 INFO L87 Difference]: Start difference. First operand 325 states and 381 transitions. Second operand has 14 states, 14 states have (on average 5.357142857142857) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (18), 11 states have call predecessors, (18), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2022-04-28 08:34:17,665 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:34:21,987 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.09s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:34:26,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:34:26,020 INFO L93 Difference]: Finished difference Result 459 states and 550 transitions. [2022-04-28 08:34:26,020 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-04-28 08:34:26,020 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 5.357142857142857) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (18), 11 states have call predecessors, (18), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) Word has length 107 [2022-04-28 08:34:26,020 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:34:26,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 5.357142857142857) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (18), 11 states have call predecessors, (18), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2022-04-28 08:34:26,022 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 244 transitions. [2022-04-28 08:34:26,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 5.357142857142857) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (18), 11 states have call predecessors, (18), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2022-04-28 08:34:26,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 244 transitions. [2022-04-28 08:34:26,024 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 16 states and 244 transitions. [2022-04-28 08:34:26,292 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 244 edges. 244 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:34:26,298 INFO L225 Difference]: With dead ends: 459 [2022-04-28 08:34:26,298 INFO L226 Difference]: Without dead ends: 363 [2022-04-28 08:34:26,299 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 24 SyntacticMatches, 1 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 101 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=164, Invalid=538, Unknown=0, NotChecked=0, Total=702 [2022-04-28 08:34:26,299 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 315 mSDsluCounter, 224 mSDsCounter, 0 mSdLazyCounter, 646 mSolverCounterSat, 155 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 318 SdHoareTripleChecker+Valid, 354 SdHoareTripleChecker+Invalid, 802 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 155 IncrementalHoareTripleChecker+Valid, 646 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.2s IncrementalHoareTripleChecker+Time [2022-04-28 08:34:26,299 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [318 Valid, 354 Invalid, 802 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [155 Valid, 646 Invalid, 1 Unknown, 0 Unchecked, 5.2s Time] [2022-04-28 08:34:26,300 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 363 states. [2022-04-28 08:34:26,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 363 to 313. [2022-04-28 08:34:26,884 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:34:26,885 INFO L82 GeneralOperation]: Start isEquivalent. First operand 363 states. Second operand has 313 states, 240 states have (on average 1.2125) internal successors, (291), 244 states have internal predecessors, (291), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:34:26,885 INFO L74 IsIncluded]: Start isIncluded. First operand 363 states. Second operand has 313 states, 240 states have (on average 1.2125) internal successors, (291), 244 states have internal predecessors, (291), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:34:26,885 INFO L87 Difference]: Start difference. First operand 363 states. Second operand has 313 states, 240 states have (on average 1.2125) internal successors, (291), 244 states have internal predecessors, (291), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:34:26,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:34:26,890 INFO L93 Difference]: Finished difference Result 363 states and 427 transitions. [2022-04-28 08:34:26,890 INFO L276 IsEmpty]: Start isEmpty. Operand 363 states and 427 transitions. [2022-04-28 08:34:26,890 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:34:26,890 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:34:26,890 INFO L74 IsIncluded]: Start isIncluded. First operand has 313 states, 240 states have (on average 1.2125) internal successors, (291), 244 states have internal predecessors, (291), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) Second operand 363 states. [2022-04-28 08:34:26,891 INFO L87 Difference]: Start difference. First operand has 313 states, 240 states have (on average 1.2125) internal successors, (291), 244 states have internal predecessors, (291), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) Second operand 363 states. [2022-04-28 08:34:26,895 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:34:26,895 INFO L93 Difference]: Finished difference Result 363 states and 427 transitions. [2022-04-28 08:34:26,895 INFO L276 IsEmpty]: Start isEmpty. Operand 363 states and 427 transitions. [2022-04-28 08:34:26,896 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:34:26,896 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:34:26,896 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:34:26,896 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:34:26,896 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 313 states, 240 states have (on average 1.2125) internal successors, (291), 244 states have internal predecessors, (291), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:34:26,900 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 313 states to 313 states and 365 transitions. [2022-04-28 08:34:26,901 INFO L78 Accepts]: Start accepts. Automaton has 313 states and 365 transitions. Word has length 107 [2022-04-28 08:34:26,901 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:34:26,901 INFO L495 AbstractCegarLoop]: Abstraction has 313 states and 365 transitions. [2022-04-28 08:34:26,901 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 5.357142857142857) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (18), 11 states have call predecessors, (18), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2022-04-28 08:34:26,901 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 313 states and 365 transitions. [2022-04-28 08:34:27,691 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:34:27,692 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 365 transitions. [2022-04-28 08:34:27,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2022-04-28 08:34:27,692 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:34:27,693 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:34:27,693 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable27 [2022-04-28 08:34:27,693 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:34:27,693 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:34:27,693 INFO L85 PathProgramCache]: Analyzing trace with hash -1477106018, now seen corresponding path program 1 times [2022-04-28 08:34:27,693 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:34:27,693 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1670878449] [2022-04-28 08:34:27,705 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 0 HavocedVariables, 4 AssignedVariables, -1 ReadonlyVariables, Eigenvalues: {}, 0 SequentialAcceleration, 0 AlternatingAcceleration, 0 QuantifierFreeResult [2022-04-28 08:34:27,705 WARN L91 AcceleratorJordan]: Jordan acceleration failed, because NONINTEGER_UPDATE [2022-04-28 08:34:27,705 INFO L274 tedInterpolationCore]: Could not compute an accelerate. [2022-04-28 08:34:27,705 INFO L85 PathProgramCache]: Analyzing trace with hash -1477106018, now seen corresponding path program 2 times [2022-04-28 08:34:27,705 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:34:27,705 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1967954780] [2022-04-28 08:34:27,705 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:34:27,705 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:34:27,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:27,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:34:27,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:27,856 INFO L290 TraceCheckUtils]: 0: Hoare triple {68682#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {68605#true} is VALID [2022-04-28 08:34:27,856 INFO L290 TraceCheckUtils]: 1: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:27,856 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {68605#true} {68605#true} #1270#return; {68605#true} is VALID [2022-04-28 08:34:27,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:34:27,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:27,890 INFO L290 TraceCheckUtils]: 0: Hoare triple {68683#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {68605#true} is VALID [2022-04-28 08:34:27,890 INFO L290 TraceCheckUtils]: 1: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:27,890 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {68605#true} {68605#true} #1216#return; {68605#true} is VALID [2022-04-28 08:34:27,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:34:27,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:27,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:34:27,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:27,929 INFO L290 TraceCheckUtils]: 0: Hoare triple {68605#true} ~cond := #in~cond; {68605#true} is VALID [2022-04-28 08:34:27,929 INFO L290 TraceCheckUtils]: 1: Hoare triple {68605#true} assume !(0 == ~cond); {68605#true} is VALID [2022-04-28 08:34:27,929 INFO L290 TraceCheckUtils]: 2: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:27,929 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {68605#true} {68605#true} #1254#return; {68605#true} is VALID [2022-04-28 08:34:27,929 INFO L290 TraceCheckUtils]: 0: Hoare triple {68684#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {68605#true} is VALID [2022-04-28 08:34:27,929 INFO L272 TraceCheckUtils]: 1: Hoare triple {68605#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {68605#true} is VALID [2022-04-28 08:34:27,929 INFO L290 TraceCheckUtils]: 2: Hoare triple {68605#true} ~cond := #in~cond; {68605#true} is VALID [2022-04-28 08:34:27,929 INFO L290 TraceCheckUtils]: 3: Hoare triple {68605#true} assume !(0 == ~cond); {68605#true} is VALID [2022-04-28 08:34:27,929 INFO L290 TraceCheckUtils]: 4: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:27,929 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {68605#true} {68605#true} #1254#return; {68605#true} is VALID [2022-04-28 08:34:27,929 INFO L290 TraceCheckUtils]: 6: Hoare triple {68605#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {68605#true} is VALID [2022-04-28 08:34:27,929 INFO L290 TraceCheckUtils]: 7: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:27,929 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {68605#true} {68605#true} #1218#return; {68605#true} is VALID [2022-04-28 08:34:27,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:34:27,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:27,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:34:27,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:27,965 INFO L290 TraceCheckUtils]: 0: Hoare triple {68689#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {68605#true} is VALID [2022-04-28 08:34:27,965 INFO L290 TraceCheckUtils]: 1: Hoare triple {68605#true} assume 0 == ~__BLAST_NONDET~5; {68605#true} is VALID [2022-04-28 08:34:27,965 INFO L290 TraceCheckUtils]: 2: Hoare triple {68605#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {68605#true} is VALID [2022-04-28 08:34:27,965 INFO L290 TraceCheckUtils]: 3: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:27,966 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {68605#true} {68605#true} #1176#return; {68605#true} is VALID [2022-04-28 08:34:27,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:34:27,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:27,971 INFO L290 TraceCheckUtils]: 0: Hoare triple {68684#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {68605#true} is VALID [2022-04-28 08:34:27,971 INFO L290 TraceCheckUtils]: 1: Hoare triple {68605#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {68605#true} is VALID [2022-04-28 08:34:27,972 INFO L290 TraceCheckUtils]: 2: Hoare triple {68605#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {68605#true} is VALID [2022-04-28 08:34:27,972 INFO L290 TraceCheckUtils]: 3: Hoare triple {68605#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {68605#true} is VALID [2022-04-28 08:34:27,972 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {68605#true} {68605#true} #1178#return; {68605#true} is VALID [2022-04-28 08:34:27,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-04-28 08:34:27,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:27,979 INFO L290 TraceCheckUtils]: 0: Hoare triple {68605#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {68605#true} is VALID [2022-04-28 08:34:27,979 INFO L290 TraceCheckUtils]: 1: Hoare triple {68605#true} assume 0 == ~__BLAST_NONDET~2; {68605#true} is VALID [2022-04-28 08:34:27,979 INFO L290 TraceCheckUtils]: 2: Hoare triple {68605#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {68605#true} is VALID [2022-04-28 08:34:27,979 INFO L290 TraceCheckUtils]: 3: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:27,979 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {68605#true} {68605#true} #1180#return; {68605#true} is VALID [2022-04-28 08:34:27,980 INFO L290 TraceCheckUtils]: 0: Hoare triple {68689#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {68605#true} is VALID [2022-04-28 08:34:27,981 INFO L272 TraceCheckUtils]: 1: Hoare triple {68605#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {68689#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:34:27,981 INFO L290 TraceCheckUtils]: 2: Hoare triple {68689#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {68605#true} is VALID [2022-04-28 08:34:27,981 INFO L290 TraceCheckUtils]: 3: Hoare triple {68605#true} assume 0 == ~__BLAST_NONDET~5; {68605#true} is VALID [2022-04-28 08:34:27,981 INFO L290 TraceCheckUtils]: 4: Hoare triple {68605#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {68605#true} is VALID [2022-04-28 08:34:27,981 INFO L290 TraceCheckUtils]: 5: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:27,981 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {68605#true} {68605#true} #1176#return; {68605#true} is VALID [2022-04-28 08:34:27,981 INFO L290 TraceCheckUtils]: 7: Hoare triple {68605#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {68605#true} is VALID [2022-04-28 08:34:27,981 INFO L290 TraceCheckUtils]: 8: Hoare triple {68605#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {68605#true} is VALID [2022-04-28 08:34:27,982 INFO L272 TraceCheckUtils]: 9: Hoare triple {68605#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {68684#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:27,982 INFO L290 TraceCheckUtils]: 10: Hoare triple {68684#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {68605#true} is VALID [2022-04-28 08:34:27,982 INFO L290 TraceCheckUtils]: 11: Hoare triple {68605#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {68605#true} is VALID [2022-04-28 08:34:27,982 INFO L290 TraceCheckUtils]: 12: Hoare triple {68605#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {68605#true} is VALID [2022-04-28 08:34:27,982 INFO L290 TraceCheckUtils]: 13: Hoare triple {68605#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {68605#true} is VALID [2022-04-28 08:34:27,982 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {68605#true} {68605#true} #1178#return; {68605#true} is VALID [2022-04-28 08:34:27,982 INFO L290 TraceCheckUtils]: 15: Hoare triple {68605#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {68605#true} is VALID [2022-04-28 08:34:27,982 INFO L272 TraceCheckUtils]: 16: Hoare triple {68605#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {68605#true} is VALID [2022-04-28 08:34:27,982 INFO L290 TraceCheckUtils]: 17: Hoare triple {68605#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {68605#true} is VALID [2022-04-28 08:34:27,982 INFO L290 TraceCheckUtils]: 18: Hoare triple {68605#true} assume 0 == ~__BLAST_NONDET~2; {68605#true} is VALID [2022-04-28 08:34:27,983 INFO L290 TraceCheckUtils]: 19: Hoare triple {68605#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {68605#true} is VALID [2022-04-28 08:34:27,983 INFO L290 TraceCheckUtils]: 20: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:27,983 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {68605#true} {68605#true} #1180#return; {68605#true} is VALID [2022-04-28 08:34:27,983 INFO L290 TraceCheckUtils]: 22: Hoare triple {68605#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {68605#true} is VALID [2022-04-28 08:34:27,983 INFO L290 TraceCheckUtils]: 23: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:27,983 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {68605#true} {68605#true} #1220#return; {68605#true} is VALID [2022-04-28 08:34:27,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-04-28 08:34:27,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:27,999 INFO L290 TraceCheckUtils]: 0: Hoare triple {68705#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {68605#true} is VALID [2022-04-28 08:34:27,999 INFO L290 TraceCheckUtils]: 1: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,000 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {68605#true} {68605#true} #1222#return; {68605#true} is VALID [2022-04-28 08:34:28,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-04-28 08:34:28,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:28,005 INFO L290 TraceCheckUtils]: 0: Hoare triple {68684#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {68605#true} is VALID [2022-04-28 08:34:28,006 INFO L290 TraceCheckUtils]: 1: Hoare triple {68605#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {68605#true} is VALID [2022-04-28 08:34:28,006 INFO L290 TraceCheckUtils]: 2: Hoare triple {68605#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {68605#true} is VALID [2022-04-28 08:34:28,006 INFO L290 TraceCheckUtils]: 3: Hoare triple {68605#true} assume #res.base == dest.base && #res.offset == dest.offset; {68605#true} is VALID [2022-04-28 08:34:28,006 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {68605#true} {68605#true} #1186#return; {68605#true} is VALID [2022-04-28 08:34:28,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-04-28 08:34:28,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:28,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:34:28,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:28,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:34:28,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:28,040 INFO L290 TraceCheckUtils]: 0: Hoare triple {68718#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {68605#true} is VALID [2022-04-28 08:34:28,040 INFO L290 TraceCheckUtils]: 1: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,040 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {68605#true} {68605#true} #1174#return; {68605#true} is VALID [2022-04-28 08:34:28,040 INFO L290 TraceCheckUtils]: 0: Hoare triple {68718#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {68605#true} is VALID [2022-04-28 08:34:28,041 INFO L272 TraceCheckUtils]: 1: Hoare triple {68605#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {68718#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:28,041 INFO L290 TraceCheckUtils]: 2: Hoare triple {68718#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {68605#true} is VALID [2022-04-28 08:34:28,041 INFO L290 TraceCheckUtils]: 3: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,041 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {68605#true} {68605#true} #1174#return; {68605#true} is VALID [2022-04-28 08:34:28,041 INFO L290 TraceCheckUtils]: 5: Hoare triple {68605#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {68605#true} is VALID [2022-04-28 08:34:28,041 INFO L290 TraceCheckUtils]: 6: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,041 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {68605#true} {68605#true} #1210#return; {68605#true} is VALID [2022-04-28 08:34:28,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:34:28,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:28,051 INFO L290 TraceCheckUtils]: 0: Hoare triple {68722#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {68605#true} is VALID [2022-04-28 08:34:28,051 INFO L290 TraceCheckUtils]: 1: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,052 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {68605#true} {68605#true} #1212#return; {68605#true} is VALID [2022-04-28 08:34:28,052 INFO L290 TraceCheckUtils]: 0: Hoare triple {68706#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {68605#true} is VALID [2022-04-28 08:34:28,052 INFO L290 TraceCheckUtils]: 1: Hoare triple {68605#true} assume 0 != ~compRegistered~0; {68605#true} is VALID [2022-04-28 08:34:28,052 INFO L272 TraceCheckUtils]: 2: Hoare triple {68605#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {68718#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:28,053 INFO L290 TraceCheckUtils]: 3: Hoare triple {68718#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {68605#true} is VALID [2022-04-28 08:34:28,053 INFO L272 TraceCheckUtils]: 4: Hoare triple {68605#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {68718#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:28,053 INFO L290 TraceCheckUtils]: 5: Hoare triple {68718#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {68605#true} is VALID [2022-04-28 08:34:28,053 INFO L290 TraceCheckUtils]: 6: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,053 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {68605#true} {68605#true} #1174#return; {68605#true} is VALID [2022-04-28 08:34:28,053 INFO L290 TraceCheckUtils]: 8: Hoare triple {68605#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {68605#true} is VALID [2022-04-28 08:34:28,053 INFO L290 TraceCheckUtils]: 9: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,054 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {68605#true} {68605#true} #1210#return; {68605#true} is VALID [2022-04-28 08:34:28,054 INFO L290 TraceCheckUtils]: 11: Hoare triple {68605#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {68605#true} is VALID [2022-04-28 08:34:28,054 INFO L290 TraceCheckUtils]: 12: Hoare triple {68605#true} assume -1073741802 == ~compRetStatus~0; {68605#true} is VALID [2022-04-28 08:34:28,054 INFO L272 TraceCheckUtils]: 13: Hoare triple {68605#true} call stubMoreProcessingRequired(); {68722#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:34:28,054 INFO L290 TraceCheckUtils]: 14: Hoare triple {68722#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {68605#true} is VALID [2022-04-28 08:34:28,054 INFO L290 TraceCheckUtils]: 15: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,054 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {68605#true} {68605#true} #1212#return; {68605#true} is VALID [2022-04-28 08:34:28,054 INFO L290 TraceCheckUtils]: 17: Hoare triple {68605#true} assume !(0 == ~__BLAST_NONDET~11); {68605#true} is VALID [2022-04-28 08:34:28,054 INFO L290 TraceCheckUtils]: 18: Hoare triple {68605#true} assume 1 == ~__BLAST_NONDET~11; {68605#true} is VALID [2022-04-28 08:34:28,054 INFO L290 TraceCheckUtils]: 19: Hoare triple {68605#true} ~returnVal2~0 := -1073741823; {68605#true} is VALID [2022-04-28 08:34:28,054 INFO L290 TraceCheckUtils]: 20: Hoare triple {68605#true} assume !(~s~0 == ~NP~0); {68605#true} is VALID [2022-04-28 08:34:28,055 INFO L290 TraceCheckUtils]: 21: Hoare triple {68605#true} assume ~s~0 == ~MPR1~0; {68605#true} is VALID [2022-04-28 08:34:28,055 INFO L290 TraceCheckUtils]: 22: Hoare triple {68605#true} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {68605#true} is VALID [2022-04-28 08:34:28,055 INFO L290 TraceCheckUtils]: 23: Hoare triple {68605#true} #res := ~returnVal2~0; {68605#true} is VALID [2022-04-28 08:34:28,055 INFO L290 TraceCheckUtils]: 24: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,055 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {68605#true} {68605#true} #1192#return; {68605#true} is VALID [2022-04-28 08:34:28,056 INFO L272 TraceCheckUtils]: 0: Hoare triple {68605#true} call ULTIMATE.init(); {68682#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:34:28,056 INFO L290 TraceCheckUtils]: 1: Hoare triple {68682#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {68605#true} is VALID [2022-04-28 08:34:28,056 INFO L290 TraceCheckUtils]: 2: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,056 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {68605#true} {68605#true} #1270#return; {68605#true} is VALID [2022-04-28 08:34:28,056 INFO L272 TraceCheckUtils]: 4: Hoare triple {68605#true} call #t~ret213 := main(); {68605#true} is VALID [2022-04-28 08:34:28,056 INFO L290 TraceCheckUtils]: 5: Hoare triple {68605#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {68605#true} is VALID [2022-04-28 08:34:28,057 INFO L272 TraceCheckUtils]: 6: Hoare triple {68605#true} call _BLAST_init(); {68683#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:34:28,057 INFO L290 TraceCheckUtils]: 7: Hoare triple {68683#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {68605#true} is VALID [2022-04-28 08:34:28,057 INFO L290 TraceCheckUtils]: 8: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,057 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {68605#true} {68605#true} #1216#return; {68605#true} is VALID [2022-04-28 08:34:28,058 INFO L272 TraceCheckUtils]: 10: Hoare triple {68605#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {68684#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:28,058 INFO L290 TraceCheckUtils]: 11: Hoare triple {68684#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {68605#true} is VALID [2022-04-28 08:34:28,058 INFO L272 TraceCheckUtils]: 12: Hoare triple {68605#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {68605#true} is VALID [2022-04-28 08:34:28,058 INFO L290 TraceCheckUtils]: 13: Hoare triple {68605#true} ~cond := #in~cond; {68605#true} is VALID [2022-04-28 08:34:28,058 INFO L290 TraceCheckUtils]: 14: Hoare triple {68605#true} assume !(0 == ~cond); {68605#true} is VALID [2022-04-28 08:34:28,058 INFO L290 TraceCheckUtils]: 15: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,059 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {68605#true} {68605#true} #1254#return; {68605#true} is VALID [2022-04-28 08:34:28,059 INFO L290 TraceCheckUtils]: 17: Hoare triple {68605#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {68605#true} is VALID [2022-04-28 08:34:28,059 INFO L290 TraceCheckUtils]: 18: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,059 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {68605#true} {68605#true} #1218#return; {68605#true} is VALID [2022-04-28 08:34:28,059 INFO L290 TraceCheckUtils]: 20: Hoare triple {68605#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {68605#true} is VALID [2022-04-28 08:34:28,059 INFO L290 TraceCheckUtils]: 21: Hoare triple {68605#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {68605#true} is VALID [2022-04-28 08:34:28,059 INFO L290 TraceCheckUtils]: 22: Hoare triple {68605#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {68605#true} is VALID [2022-04-28 08:34:28,060 INFO L272 TraceCheckUtils]: 23: Hoare triple {68605#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {68689#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:34:28,060 INFO L290 TraceCheckUtils]: 24: Hoare triple {68689#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {68605#true} is VALID [2022-04-28 08:34:28,061 INFO L272 TraceCheckUtils]: 25: Hoare triple {68605#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {68689#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:34:28,061 INFO L290 TraceCheckUtils]: 26: Hoare triple {68689#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {68605#true} is VALID [2022-04-28 08:34:28,061 INFO L290 TraceCheckUtils]: 27: Hoare triple {68605#true} assume 0 == ~__BLAST_NONDET~5; {68605#true} is VALID [2022-04-28 08:34:28,061 INFO L290 TraceCheckUtils]: 28: Hoare triple {68605#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {68605#true} is VALID [2022-04-28 08:34:28,061 INFO L290 TraceCheckUtils]: 29: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,061 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {68605#true} {68605#true} #1176#return; {68605#true} is VALID [2022-04-28 08:34:28,061 INFO L290 TraceCheckUtils]: 31: Hoare triple {68605#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {68605#true} is VALID [2022-04-28 08:34:28,061 INFO L290 TraceCheckUtils]: 32: Hoare triple {68605#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {68605#true} is VALID [2022-04-28 08:34:28,062 INFO L272 TraceCheckUtils]: 33: Hoare triple {68605#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {68684#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:28,062 INFO L290 TraceCheckUtils]: 34: Hoare triple {68684#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {68605#true} is VALID [2022-04-28 08:34:28,062 INFO L290 TraceCheckUtils]: 35: Hoare triple {68605#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {68605#true} is VALID [2022-04-28 08:34:28,062 INFO L290 TraceCheckUtils]: 36: Hoare triple {68605#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {68605#true} is VALID [2022-04-28 08:34:28,062 INFO L290 TraceCheckUtils]: 37: Hoare triple {68605#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {68605#true} is VALID [2022-04-28 08:34:28,062 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {68605#true} {68605#true} #1178#return; {68605#true} is VALID [2022-04-28 08:34:28,062 INFO L290 TraceCheckUtils]: 39: Hoare triple {68605#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {68605#true} is VALID [2022-04-28 08:34:28,062 INFO L272 TraceCheckUtils]: 40: Hoare triple {68605#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {68605#true} is VALID [2022-04-28 08:34:28,062 INFO L290 TraceCheckUtils]: 41: Hoare triple {68605#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {68605#true} is VALID [2022-04-28 08:34:28,063 INFO L290 TraceCheckUtils]: 42: Hoare triple {68605#true} assume 0 == ~__BLAST_NONDET~2; {68605#true} is VALID [2022-04-28 08:34:28,063 INFO L290 TraceCheckUtils]: 43: Hoare triple {68605#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {68605#true} is VALID [2022-04-28 08:34:28,063 INFO L290 TraceCheckUtils]: 44: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,063 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {68605#true} {68605#true} #1180#return; {68605#true} is VALID [2022-04-28 08:34:28,063 INFO L290 TraceCheckUtils]: 46: Hoare triple {68605#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {68605#true} is VALID [2022-04-28 08:34:28,063 INFO L290 TraceCheckUtils]: 47: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,063 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {68605#true} {68605#true} #1220#return; {68605#true} is VALID [2022-04-28 08:34:28,063 INFO L290 TraceCheckUtils]: 49: Hoare triple {68605#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {68605#true} is VALID [2022-04-28 08:34:28,064 INFO L272 TraceCheckUtils]: 50: Hoare triple {68605#true} call stub_driver_init(); {68705#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:34:28,064 INFO L290 TraceCheckUtils]: 51: Hoare triple {68705#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {68605#true} is VALID [2022-04-28 08:34:28,064 INFO L290 TraceCheckUtils]: 52: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,064 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {68605#true} {68605#true} #1222#return; {68605#true} is VALID [2022-04-28 08:34:28,064 INFO L290 TraceCheckUtils]: 54: Hoare triple {68605#true} assume !!(~status~5 >= 0); {68605#true} is VALID [2022-04-28 08:34:28,064 INFO L290 TraceCheckUtils]: 55: Hoare triple {68605#true} assume !(0 == ~__BLAST_NONDET~0); {68605#true} is VALID [2022-04-28 08:34:28,064 INFO L290 TraceCheckUtils]: 56: Hoare triple {68605#true} assume !(1 == ~__BLAST_NONDET~0); {68605#true} is VALID [2022-04-28 08:34:28,064 INFO L290 TraceCheckUtils]: 57: Hoare triple {68605#true} assume !(2 == ~__BLAST_NONDET~0); {68605#true} is VALID [2022-04-28 08:34:28,064 INFO L290 TraceCheckUtils]: 58: Hoare triple {68605#true} assume 3 == ~__BLAST_NONDET~0; {68605#true} is VALID [2022-04-28 08:34:28,064 INFO L272 TraceCheckUtils]: 59: Hoare triple {68605#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {68605#true} is VALID [2022-04-28 08:34:28,064 INFO L290 TraceCheckUtils]: 60: Hoare triple {68605#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {68605#true} is VALID [2022-04-28 08:34:28,064 INFO L290 TraceCheckUtils]: 61: Hoare triple {68605#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {68605#true} is VALID [2022-04-28 08:34:28,064 INFO L290 TraceCheckUtils]: 62: Hoare triple {68605#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {68605#true} is VALID [2022-04-28 08:34:28,065 INFO L272 TraceCheckUtils]: 63: Hoare triple {68605#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {68684#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:28,065 INFO L290 TraceCheckUtils]: 64: Hoare triple {68684#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {68605#true} is VALID [2022-04-28 08:34:28,065 INFO L290 TraceCheckUtils]: 65: Hoare triple {68605#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {68605#true} is VALID [2022-04-28 08:34:28,065 INFO L290 TraceCheckUtils]: 66: Hoare triple {68605#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {68605#true} is VALID [2022-04-28 08:34:28,065 INFO L290 TraceCheckUtils]: 67: Hoare triple {68605#true} assume #res.base == dest.base && #res.offset == dest.offset; {68605#true} is VALID [2022-04-28 08:34:28,065 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {68605#true} {68605#true} #1186#return; {68605#true} is VALID [2022-04-28 08:34:28,066 INFO L290 TraceCheckUtils]: 69: Hoare triple {68605#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {68605#true} is VALID [2022-04-28 08:34:28,066 INFO L290 TraceCheckUtils]: 70: Hoare triple {68605#true} assume !(~s~0 != ~NP~0); {68605#true} is VALID [2022-04-28 08:34:28,066 INFO L290 TraceCheckUtils]: 71: Hoare triple {68605#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {68605#true} is VALID [2022-04-28 08:34:28,066 INFO L290 TraceCheckUtils]: 72: Hoare triple {68605#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {68605#true} is VALID [2022-04-28 08:34:28,066 INFO L272 TraceCheckUtils]: 73: Hoare triple {68605#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {68706#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:34:28,067 INFO L290 TraceCheckUtils]: 74: Hoare triple {68706#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {68605#true} is VALID [2022-04-28 08:34:28,067 INFO L290 TraceCheckUtils]: 75: Hoare triple {68605#true} assume 0 != ~compRegistered~0; {68605#true} is VALID [2022-04-28 08:34:28,067 INFO L272 TraceCheckUtils]: 76: Hoare triple {68605#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {68718#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:28,067 INFO L290 TraceCheckUtils]: 77: Hoare triple {68718#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {68605#true} is VALID [2022-04-28 08:34:28,068 INFO L272 TraceCheckUtils]: 78: Hoare triple {68605#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {68718#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:28,068 INFO L290 TraceCheckUtils]: 79: Hoare triple {68718#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {68605#true} is VALID [2022-04-28 08:34:28,068 INFO L290 TraceCheckUtils]: 80: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,068 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {68605#true} {68605#true} #1174#return; {68605#true} is VALID [2022-04-28 08:34:28,068 INFO L290 TraceCheckUtils]: 82: Hoare triple {68605#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {68605#true} is VALID [2022-04-28 08:34:28,068 INFO L290 TraceCheckUtils]: 83: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,068 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {68605#true} {68605#true} #1210#return; {68605#true} is VALID [2022-04-28 08:34:28,068 INFO L290 TraceCheckUtils]: 85: Hoare triple {68605#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {68605#true} is VALID [2022-04-28 08:34:28,068 INFO L290 TraceCheckUtils]: 86: Hoare triple {68605#true} assume -1073741802 == ~compRetStatus~0; {68605#true} is VALID [2022-04-28 08:34:28,069 INFO L272 TraceCheckUtils]: 87: Hoare triple {68605#true} call stubMoreProcessingRequired(); {68722#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:34:28,069 INFO L290 TraceCheckUtils]: 88: Hoare triple {68722#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {68605#true} is VALID [2022-04-28 08:34:28,069 INFO L290 TraceCheckUtils]: 89: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,069 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {68605#true} {68605#true} #1212#return; {68605#true} is VALID [2022-04-28 08:34:28,069 INFO L290 TraceCheckUtils]: 91: Hoare triple {68605#true} assume !(0 == ~__BLAST_NONDET~11); {68605#true} is VALID [2022-04-28 08:34:28,069 INFO L290 TraceCheckUtils]: 92: Hoare triple {68605#true} assume 1 == ~__BLAST_NONDET~11; {68605#true} is VALID [2022-04-28 08:34:28,069 INFO L290 TraceCheckUtils]: 93: Hoare triple {68605#true} ~returnVal2~0 := -1073741823; {68605#true} is VALID [2022-04-28 08:34:28,069 INFO L290 TraceCheckUtils]: 94: Hoare triple {68605#true} assume !(~s~0 == ~NP~0); {68605#true} is VALID [2022-04-28 08:34:28,069 INFO L290 TraceCheckUtils]: 95: Hoare triple {68605#true} assume ~s~0 == ~MPR1~0; {68605#true} is VALID [2022-04-28 08:34:28,069 INFO L290 TraceCheckUtils]: 96: Hoare triple {68605#true} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {68605#true} is VALID [2022-04-28 08:34:28,069 INFO L290 TraceCheckUtils]: 97: Hoare triple {68605#true} #res := ~returnVal2~0; {68605#true} is VALID [2022-04-28 08:34:28,069 INFO L290 TraceCheckUtils]: 98: Hoare triple {68605#true} assume true; {68605#true} is VALID [2022-04-28 08:34:28,070 INFO L284 TraceCheckUtils]: 99: Hoare quadruple {68605#true} {68605#true} #1192#return; {68605#true} is VALID [2022-04-28 08:34:28,070 INFO L290 TraceCheckUtils]: 100: Hoare triple {68605#true} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {68605#true} is VALID [2022-04-28 08:34:28,070 INFO L290 TraceCheckUtils]: 101: Hoare triple {68605#true} assume 259 == ~status~3; {68605#true} is VALID [2022-04-28 08:34:28,070 INFO L272 TraceCheckUtils]: 102: Hoare triple {68605#true} call #t~ret110 := KeWaitForSingleObject(~#event~1.base, ~#event~1.offset, 0, 0, 0, 0, 0); {68605#true} is VALID [2022-04-28 08:34:28,070 INFO L290 TraceCheckUtils]: 103: Hoare triple {68605#true} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {68605#true} is VALID [2022-04-28 08:34:28,070 INFO L290 TraceCheckUtils]: 104: Hoare triple {68605#true} assume !(~s~0 == ~MPR3~0); {68681#(not (= ~MPR3~0 ~s~0))} is VALID [2022-04-28 08:34:28,070 INFO L290 TraceCheckUtils]: 105: Hoare triple {68681#(not (= ~MPR3~0 ~s~0))} assume !(1 == ~customIrp~0); {68681#(not (= ~MPR3~0 ~s~0))} is VALID [2022-04-28 08:34:28,071 INFO L290 TraceCheckUtils]: 106: Hoare triple {68681#(not (= ~MPR3~0 ~s~0))} assume ~s~0 == ~MPR3~0; {68606#false} is VALID [2022-04-28 08:34:28,071 INFO L272 TraceCheckUtils]: 107: Hoare triple {68606#false} call errorFn(); {68606#false} is VALID [2022-04-28 08:34:28,071 INFO L290 TraceCheckUtils]: 108: Hoare triple {68606#false} assume !false; {68606#false} is VALID [2022-04-28 08:34:28,071 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 08:34:28,071 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:34:28,071 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1967954780] [2022-04-28 08:34:28,071 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1967954780] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:34:28,071 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:34:28,071 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:34:28,072 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:34:28,072 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1670878449] [2022-04-28 08:34:28,072 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1670878449] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:34:28,072 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:34:28,072 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:34:28,072 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1676584256] [2022-04-28 08:34:28,072 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:34:28,073 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 7.0) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 1 states have return successors, (14), 1 states have call predecessors, (14), 1 states have call successors, (14) Word has length 109 [2022-04-28 08:34:28,073 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:34:28,073 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 7.0) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 1 states have return successors, (14), 1 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:34:28,175 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 109 edges. 109 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:34:28,176 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 08:34:28,176 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:34:28,177 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 08:34:28,177 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2022-04-28 08:34:28,177 INFO L87 Difference]: Start difference. First operand 313 states and 365 transitions. Second operand has 11 states, 11 states have (on average 7.0) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 1 states have return successors, (14), 1 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:34:30,284 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:34:36,133 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:34:36,133 INFO L93 Difference]: Finished difference Result 395 states and 474 transitions. [2022-04-28 08:34:36,133 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-28 08:34:36,133 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 7.0) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 1 states have return successors, (14), 1 states have call predecessors, (14), 1 states have call successors, (14) Word has length 109 [2022-04-28 08:34:36,133 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:34:36,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 7.0) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 1 states have return successors, (14), 1 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:34:36,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 208 transitions. [2022-04-28 08:34:36,135 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 7.0) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 1 states have return successors, (14), 1 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:34:36,136 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 208 transitions. [2022-04-28 08:34:36,136 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 208 transitions. [2022-04-28 08:34:36,320 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 208 edges. 208 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:34:36,328 INFO L225 Difference]: With dead ends: 395 [2022-04-28 08:34:36,328 INFO L226 Difference]: Without dead ends: 392 [2022-04-28 08:34:36,329 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=97, Invalid=209, Unknown=0, NotChecked=0, Total=306 [2022-04-28 08:34:36,332 INFO L413 NwaCegarLoop]: 148 mSDtfsCounter, 171 mSDsluCounter, 197 mSDsCounter, 0 mSdLazyCounter, 521 mSolverCounterSat, 86 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 174 SdHoareTripleChecker+Valid, 345 SdHoareTripleChecker+Invalid, 608 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 86 IncrementalHoareTripleChecker+Valid, 521 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2022-04-28 08:34:36,332 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [174 Valid, 345 Invalid, 608 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [86 Valid, 521 Invalid, 1 Unknown, 0 Unchecked, 3.8s Time] [2022-04-28 08:34:36,333 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 392 states. [2022-04-28 08:34:36,879 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 392 to 321. [2022-04-28 08:34:36,879 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:34:36,880 INFO L82 GeneralOperation]: Start isEquivalent. First operand 392 states. Second operand has 321 states, 248 states have (on average 1.221774193548387) internal successors, (303), 252 states have internal predecessors, (303), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:34:36,880 INFO L74 IsIncluded]: Start isIncluded. First operand 392 states. Second operand has 321 states, 248 states have (on average 1.221774193548387) internal successors, (303), 252 states have internal predecessors, (303), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:34:36,880 INFO L87 Difference]: Start difference. First operand 392 states. Second operand has 321 states, 248 states have (on average 1.221774193548387) internal successors, (303), 252 states have internal predecessors, (303), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:34:36,886 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:34:36,886 INFO L93 Difference]: Finished difference Result 392 states and 468 transitions. [2022-04-28 08:34:36,886 INFO L276 IsEmpty]: Start isEmpty. Operand 392 states and 468 transitions. [2022-04-28 08:34:36,886 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:34:36,886 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:34:36,887 INFO L74 IsIncluded]: Start isIncluded. First operand has 321 states, 248 states have (on average 1.221774193548387) internal successors, (303), 252 states have internal predecessors, (303), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) Second operand 392 states. [2022-04-28 08:34:36,887 INFO L87 Difference]: Start difference. First operand has 321 states, 248 states have (on average 1.221774193548387) internal successors, (303), 252 states have internal predecessors, (303), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) Second operand 392 states. [2022-04-28 08:34:36,892 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:34:36,892 INFO L93 Difference]: Finished difference Result 392 states and 468 transitions. [2022-04-28 08:34:36,892 INFO L276 IsEmpty]: Start isEmpty. Operand 392 states and 468 transitions. [2022-04-28 08:34:36,893 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:34:36,893 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:34:36,893 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:34:36,893 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:34:36,893 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 321 states, 248 states have (on average 1.221774193548387) internal successors, (303), 252 states have internal predecessors, (303), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:34:36,898 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 321 states to 321 states and 377 transitions. [2022-04-28 08:34:36,898 INFO L78 Accepts]: Start accepts. Automaton has 321 states and 377 transitions. Word has length 109 [2022-04-28 08:34:36,899 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:34:36,899 INFO L495 AbstractCegarLoop]: Abstraction has 321 states and 377 transitions. [2022-04-28 08:34:36,899 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 7.0) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 1 states have return successors, (14), 1 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:34:36,899 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 321 states and 377 transitions. [2022-04-28 08:34:37,755 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 377 edges. 377 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:34:37,756 INFO L276 IsEmpty]: Start isEmpty. Operand 321 states and 377 transitions. [2022-04-28 08:34:37,756 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2022-04-28 08:34:37,756 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:34:37,756 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:34:37,756 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable28 [2022-04-28 08:34:37,757 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:34:37,757 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:34:37,757 INFO L85 PathProgramCache]: Analyzing trace with hash 1629931519, now seen corresponding path program 1 times [2022-04-28 08:34:37,757 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:34:37,757 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1271775602] [2022-04-28 08:34:37,786 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 0 HavocedVariables, 4 AssignedVariables, -1 ReadonlyVariables, Eigenvalues: {}, 0 SequentialAcceleration, 0 AlternatingAcceleration, 0 QuantifierFreeResult [2022-04-28 08:34:37,786 WARN L91 AcceleratorJordan]: Jordan acceleration failed, because NONINTEGER_UPDATE [2022-04-28 08:34:37,786 INFO L274 tedInterpolationCore]: Could not compute an accelerate. [2022-04-28 08:34:37,786 INFO L85 PathProgramCache]: Analyzing trace with hash 1629931519, now seen corresponding path program 2 times [2022-04-28 08:34:37,786 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:34:37,786 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1972422082] [2022-04-28 08:34:37,786 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:34:37,786 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:34:37,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:37,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:34:37,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:37,940 INFO L290 TraceCheckUtils]: 0: Hoare triple {71034#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {70958#true} is VALID [2022-04-28 08:34:37,940 INFO L290 TraceCheckUtils]: 1: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:37,940 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {70958#true} {70958#true} #1270#return; {70958#true} is VALID [2022-04-28 08:34:37,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:34:37,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:37,966 INFO L290 TraceCheckUtils]: 0: Hoare triple {71035#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {70958#true} is VALID [2022-04-28 08:34:37,966 INFO L290 TraceCheckUtils]: 1: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:37,966 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {70958#true} {70958#true} #1216#return; {70958#true} is VALID [2022-04-28 08:34:37,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:34:37,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:37,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:34:37,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:37,988 INFO L290 TraceCheckUtils]: 0: Hoare triple {70958#true} ~cond := #in~cond; {70958#true} is VALID [2022-04-28 08:34:37,988 INFO L290 TraceCheckUtils]: 1: Hoare triple {70958#true} assume !(0 == ~cond); {70958#true} is VALID [2022-04-28 08:34:37,988 INFO L290 TraceCheckUtils]: 2: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:37,988 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {70958#true} {70958#true} #1254#return; {70958#true} is VALID [2022-04-28 08:34:37,988 INFO L290 TraceCheckUtils]: 0: Hoare triple {71036#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {70958#true} is VALID [2022-04-28 08:34:37,988 INFO L272 TraceCheckUtils]: 1: Hoare triple {70958#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {70958#true} is VALID [2022-04-28 08:34:37,988 INFO L290 TraceCheckUtils]: 2: Hoare triple {70958#true} ~cond := #in~cond; {70958#true} is VALID [2022-04-28 08:34:37,989 INFO L290 TraceCheckUtils]: 3: Hoare triple {70958#true} assume !(0 == ~cond); {70958#true} is VALID [2022-04-28 08:34:37,989 INFO L290 TraceCheckUtils]: 4: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:37,989 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {70958#true} {70958#true} #1254#return; {70958#true} is VALID [2022-04-28 08:34:37,989 INFO L290 TraceCheckUtils]: 6: Hoare triple {70958#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {70958#true} is VALID [2022-04-28 08:34:37,989 INFO L290 TraceCheckUtils]: 7: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:37,989 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {70958#true} {70958#true} #1218#return; {70958#true} is VALID [2022-04-28 08:34:37,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:34:38,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:38,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:34:38,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:38,044 INFO L290 TraceCheckUtils]: 0: Hoare triple {71041#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {70958#true} is VALID [2022-04-28 08:34:38,044 INFO L290 TraceCheckUtils]: 1: Hoare triple {70958#true} assume 0 == ~__BLAST_NONDET~5; {70958#true} is VALID [2022-04-28 08:34:38,044 INFO L290 TraceCheckUtils]: 2: Hoare triple {70958#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {70958#true} is VALID [2022-04-28 08:34:38,044 INFO L290 TraceCheckUtils]: 3: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,045 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {70958#true} {70958#true} #1176#return; {70958#true} is VALID [2022-04-28 08:34:38,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:34:38,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:38,051 INFO L290 TraceCheckUtils]: 0: Hoare triple {71036#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {70958#true} is VALID [2022-04-28 08:34:38,051 INFO L290 TraceCheckUtils]: 1: Hoare triple {70958#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {70958#true} is VALID [2022-04-28 08:34:38,051 INFO L290 TraceCheckUtils]: 2: Hoare triple {70958#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {70958#true} is VALID [2022-04-28 08:34:38,051 INFO L290 TraceCheckUtils]: 3: Hoare triple {70958#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {70958#true} is VALID [2022-04-28 08:34:38,051 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {70958#true} {70958#true} #1178#return; {70958#true} is VALID [2022-04-28 08:34:38,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-04-28 08:34:38,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:38,058 INFO L290 TraceCheckUtils]: 0: Hoare triple {70958#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {70958#true} is VALID [2022-04-28 08:34:38,059 INFO L290 TraceCheckUtils]: 1: Hoare triple {70958#true} assume 0 == ~__BLAST_NONDET~2; {70958#true} is VALID [2022-04-28 08:34:38,059 INFO L290 TraceCheckUtils]: 2: Hoare triple {70958#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {70958#true} is VALID [2022-04-28 08:34:38,059 INFO L290 TraceCheckUtils]: 3: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,059 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {70958#true} {70958#true} #1180#return; {70958#true} is VALID [2022-04-28 08:34:38,059 INFO L290 TraceCheckUtils]: 0: Hoare triple {71041#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {70958#true} is VALID [2022-04-28 08:34:38,060 INFO L272 TraceCheckUtils]: 1: Hoare triple {70958#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {71041#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:34:38,060 INFO L290 TraceCheckUtils]: 2: Hoare triple {71041#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {70958#true} is VALID [2022-04-28 08:34:38,060 INFO L290 TraceCheckUtils]: 3: Hoare triple {70958#true} assume 0 == ~__BLAST_NONDET~5; {70958#true} is VALID [2022-04-28 08:34:38,060 INFO L290 TraceCheckUtils]: 4: Hoare triple {70958#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {70958#true} is VALID [2022-04-28 08:34:38,060 INFO L290 TraceCheckUtils]: 5: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,060 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {70958#true} {70958#true} #1176#return; {70958#true} is VALID [2022-04-28 08:34:38,060 INFO L290 TraceCheckUtils]: 7: Hoare triple {70958#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {70958#true} is VALID [2022-04-28 08:34:38,061 INFO L290 TraceCheckUtils]: 8: Hoare triple {70958#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {70958#true} is VALID [2022-04-28 08:34:38,061 INFO L272 TraceCheckUtils]: 9: Hoare triple {70958#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {71036#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:38,061 INFO L290 TraceCheckUtils]: 10: Hoare triple {71036#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {70958#true} is VALID [2022-04-28 08:34:38,061 INFO L290 TraceCheckUtils]: 11: Hoare triple {70958#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {70958#true} is VALID [2022-04-28 08:34:38,061 INFO L290 TraceCheckUtils]: 12: Hoare triple {70958#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {70958#true} is VALID [2022-04-28 08:34:38,061 INFO L290 TraceCheckUtils]: 13: Hoare triple {70958#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {70958#true} is VALID [2022-04-28 08:34:38,062 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {70958#true} {70958#true} #1178#return; {70958#true} is VALID [2022-04-28 08:34:38,062 INFO L290 TraceCheckUtils]: 15: Hoare triple {70958#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {70958#true} is VALID [2022-04-28 08:34:38,062 INFO L272 TraceCheckUtils]: 16: Hoare triple {70958#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {70958#true} is VALID [2022-04-28 08:34:38,062 INFO L290 TraceCheckUtils]: 17: Hoare triple {70958#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {70958#true} is VALID [2022-04-28 08:34:38,063 INFO L290 TraceCheckUtils]: 18: Hoare triple {70958#true} assume 0 == ~__BLAST_NONDET~2; {70958#true} is VALID [2022-04-28 08:34:38,063 INFO L290 TraceCheckUtils]: 19: Hoare triple {70958#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {70958#true} is VALID [2022-04-28 08:34:38,063 INFO L290 TraceCheckUtils]: 20: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,063 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {70958#true} {70958#true} #1180#return; {70958#true} is VALID [2022-04-28 08:34:38,063 INFO L290 TraceCheckUtils]: 22: Hoare triple {70958#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {70958#true} is VALID [2022-04-28 08:34:38,063 INFO L290 TraceCheckUtils]: 23: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,063 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {70958#true} {70958#true} #1220#return; {70958#true} is VALID [2022-04-28 08:34:38,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-04-28 08:34:38,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:38,081 INFO L290 TraceCheckUtils]: 0: Hoare triple {71057#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {70958#true} is VALID [2022-04-28 08:34:38,081 INFO L290 TraceCheckUtils]: 1: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,081 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {70958#true} {70958#true} #1222#return; {70958#true} is VALID [2022-04-28 08:34:38,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-04-28 08:34:38,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:38,087 INFO L290 TraceCheckUtils]: 0: Hoare triple {71036#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {70958#true} is VALID [2022-04-28 08:34:38,087 INFO L290 TraceCheckUtils]: 1: Hoare triple {70958#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {70958#true} is VALID [2022-04-28 08:34:38,087 INFO L290 TraceCheckUtils]: 2: Hoare triple {70958#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {70958#true} is VALID [2022-04-28 08:34:38,087 INFO L290 TraceCheckUtils]: 3: Hoare triple {70958#true} assume #res.base == dest.base && #res.offset == dest.offset; {70958#true} is VALID [2022-04-28 08:34:38,087 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {70958#true} {70958#true} #1186#return; {70958#true} is VALID [2022-04-28 08:34:38,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-04-28 08:34:38,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:38,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:34:38,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:38,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:34:38,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:38,131 INFO L290 TraceCheckUtils]: 0: Hoare triple {71071#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {70958#true} is VALID [2022-04-28 08:34:38,131 INFO L290 TraceCheckUtils]: 1: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,131 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {70958#true} {70958#true} #1174#return; {70958#true} is VALID [2022-04-28 08:34:38,131 INFO L290 TraceCheckUtils]: 0: Hoare triple {71071#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {70958#true} is VALID [2022-04-28 08:34:38,132 INFO L272 TraceCheckUtils]: 1: Hoare triple {70958#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {71071#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:38,132 INFO L290 TraceCheckUtils]: 2: Hoare triple {71071#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {70958#true} is VALID [2022-04-28 08:34:38,132 INFO L290 TraceCheckUtils]: 3: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,132 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {70958#true} {70958#true} #1174#return; {70958#true} is VALID [2022-04-28 08:34:38,132 INFO L290 TraceCheckUtils]: 5: Hoare triple {70958#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {70958#true} is VALID [2022-04-28 08:34:38,132 INFO L290 TraceCheckUtils]: 6: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,132 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {70958#true} {70958#true} #1210#return; {70958#true} is VALID [2022-04-28 08:34:38,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:34:38,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:38,143 INFO L290 TraceCheckUtils]: 0: Hoare triple {71075#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {70958#true} is VALID [2022-04-28 08:34:38,143 INFO L290 TraceCheckUtils]: 1: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,144 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {70958#true} {70958#true} #1212#return; {70958#true} is VALID [2022-04-28 08:34:38,144 INFO L290 TraceCheckUtils]: 0: Hoare triple {71058#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {70958#true} is VALID [2022-04-28 08:34:38,144 INFO L290 TraceCheckUtils]: 1: Hoare triple {70958#true} assume 0 != ~compRegistered~0; {70958#true} is VALID [2022-04-28 08:34:38,144 INFO L272 TraceCheckUtils]: 2: Hoare triple {70958#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {71071#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:38,145 INFO L290 TraceCheckUtils]: 3: Hoare triple {71071#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {70958#true} is VALID [2022-04-28 08:34:38,145 INFO L272 TraceCheckUtils]: 4: Hoare triple {70958#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {71071#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:38,145 INFO L290 TraceCheckUtils]: 5: Hoare triple {71071#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {70958#true} is VALID [2022-04-28 08:34:38,145 INFO L290 TraceCheckUtils]: 6: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,145 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {70958#true} {70958#true} #1174#return; {70958#true} is VALID [2022-04-28 08:34:38,145 INFO L290 TraceCheckUtils]: 8: Hoare triple {70958#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {70958#true} is VALID [2022-04-28 08:34:38,146 INFO L290 TraceCheckUtils]: 9: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,146 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {70958#true} {70958#true} #1210#return; {70958#true} is VALID [2022-04-28 08:34:38,146 INFO L290 TraceCheckUtils]: 11: Hoare triple {70958#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {70958#true} is VALID [2022-04-28 08:34:38,146 INFO L290 TraceCheckUtils]: 12: Hoare triple {70958#true} assume -1073741802 == ~compRetStatus~0; {70958#true} is VALID [2022-04-28 08:34:38,146 INFO L272 TraceCheckUtils]: 13: Hoare triple {70958#true} call stubMoreProcessingRequired(); {71075#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:34:38,146 INFO L290 TraceCheckUtils]: 14: Hoare triple {71075#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {70958#true} is VALID [2022-04-28 08:34:38,146 INFO L290 TraceCheckUtils]: 15: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,146 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {70958#true} {70958#true} #1212#return; {70958#true} is VALID [2022-04-28 08:34:38,146 INFO L290 TraceCheckUtils]: 17: Hoare triple {70958#true} assume !(0 == ~__BLAST_NONDET~11); {70958#true} is VALID [2022-04-28 08:34:38,146 INFO L290 TraceCheckUtils]: 18: Hoare triple {70958#true} assume 1 == ~__BLAST_NONDET~11; {70958#true} is VALID [2022-04-28 08:34:38,147 INFO L290 TraceCheckUtils]: 19: Hoare triple {70958#true} ~returnVal2~0 := -1073741823; {71070#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:34:38,147 INFO L290 TraceCheckUtils]: 20: Hoare triple {71070#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume !(~s~0 == ~NP~0); {71070#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:34:38,147 INFO L290 TraceCheckUtils]: 21: Hoare triple {71070#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume ~s~0 == ~MPR1~0; {71070#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:34:38,148 INFO L290 TraceCheckUtils]: 22: Hoare triple {71070#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {70959#false} is VALID [2022-04-28 08:34:38,148 INFO L290 TraceCheckUtils]: 23: Hoare triple {70959#false} #res := ~returnVal2~0; {70959#false} is VALID [2022-04-28 08:34:38,148 INFO L290 TraceCheckUtils]: 24: Hoare triple {70959#false} assume true; {70959#false} is VALID [2022-04-28 08:34:38,148 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {70959#false} {70958#true} #1192#return; {70959#false} is VALID [2022-04-28 08:34:38,149 INFO L272 TraceCheckUtils]: 0: Hoare triple {70958#true} call ULTIMATE.init(); {71034#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:34:38,149 INFO L290 TraceCheckUtils]: 1: Hoare triple {71034#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {70958#true} is VALID [2022-04-28 08:34:38,149 INFO L290 TraceCheckUtils]: 2: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,149 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {70958#true} {70958#true} #1270#return; {70958#true} is VALID [2022-04-28 08:34:38,149 INFO L272 TraceCheckUtils]: 4: Hoare triple {70958#true} call #t~ret213 := main(); {70958#true} is VALID [2022-04-28 08:34:38,149 INFO L290 TraceCheckUtils]: 5: Hoare triple {70958#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {70958#true} is VALID [2022-04-28 08:34:38,150 INFO L272 TraceCheckUtils]: 6: Hoare triple {70958#true} call _BLAST_init(); {71035#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:34:38,150 INFO L290 TraceCheckUtils]: 7: Hoare triple {71035#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {70958#true} is VALID [2022-04-28 08:34:38,150 INFO L290 TraceCheckUtils]: 8: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,151 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {70958#true} {70958#true} #1216#return; {70958#true} is VALID [2022-04-28 08:34:38,151 INFO L272 TraceCheckUtils]: 10: Hoare triple {70958#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {71036#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:38,151 INFO L290 TraceCheckUtils]: 11: Hoare triple {71036#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {70958#true} is VALID [2022-04-28 08:34:38,151 INFO L272 TraceCheckUtils]: 12: Hoare triple {70958#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {70958#true} is VALID [2022-04-28 08:34:38,152 INFO L290 TraceCheckUtils]: 13: Hoare triple {70958#true} ~cond := #in~cond; {70958#true} is VALID [2022-04-28 08:34:38,152 INFO L290 TraceCheckUtils]: 14: Hoare triple {70958#true} assume !(0 == ~cond); {70958#true} is VALID [2022-04-28 08:34:38,152 INFO L290 TraceCheckUtils]: 15: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,152 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {70958#true} {70958#true} #1254#return; {70958#true} is VALID [2022-04-28 08:34:38,152 INFO L290 TraceCheckUtils]: 17: Hoare triple {70958#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {70958#true} is VALID [2022-04-28 08:34:38,152 INFO L290 TraceCheckUtils]: 18: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,152 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {70958#true} {70958#true} #1218#return; {70958#true} is VALID [2022-04-28 08:34:38,152 INFO L290 TraceCheckUtils]: 20: Hoare triple {70958#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {70958#true} is VALID [2022-04-28 08:34:38,152 INFO L290 TraceCheckUtils]: 21: Hoare triple {70958#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {70958#true} is VALID [2022-04-28 08:34:38,152 INFO L290 TraceCheckUtils]: 22: Hoare triple {70958#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {70958#true} is VALID [2022-04-28 08:34:38,153 INFO L272 TraceCheckUtils]: 23: Hoare triple {70958#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {71041#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:34:38,153 INFO L290 TraceCheckUtils]: 24: Hoare triple {71041#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {70958#true} is VALID [2022-04-28 08:34:38,154 INFO L272 TraceCheckUtils]: 25: Hoare triple {70958#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {71041#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:34:38,154 INFO L290 TraceCheckUtils]: 26: Hoare triple {71041#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {70958#true} is VALID [2022-04-28 08:34:38,154 INFO L290 TraceCheckUtils]: 27: Hoare triple {70958#true} assume 0 == ~__BLAST_NONDET~5; {70958#true} is VALID [2022-04-28 08:34:38,154 INFO L290 TraceCheckUtils]: 28: Hoare triple {70958#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {70958#true} is VALID [2022-04-28 08:34:38,154 INFO L290 TraceCheckUtils]: 29: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,154 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {70958#true} {70958#true} #1176#return; {70958#true} is VALID [2022-04-28 08:34:38,155 INFO L290 TraceCheckUtils]: 31: Hoare triple {70958#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {70958#true} is VALID [2022-04-28 08:34:38,155 INFO L290 TraceCheckUtils]: 32: Hoare triple {70958#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {70958#true} is VALID [2022-04-28 08:34:38,155 INFO L272 TraceCheckUtils]: 33: Hoare triple {70958#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {71036#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:38,155 INFO L290 TraceCheckUtils]: 34: Hoare triple {71036#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {70958#true} is VALID [2022-04-28 08:34:38,155 INFO L290 TraceCheckUtils]: 35: Hoare triple {70958#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {70958#true} is VALID [2022-04-28 08:34:38,156 INFO L290 TraceCheckUtils]: 36: Hoare triple {70958#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {70958#true} is VALID [2022-04-28 08:34:38,156 INFO L290 TraceCheckUtils]: 37: Hoare triple {70958#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {70958#true} is VALID [2022-04-28 08:34:38,156 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {70958#true} {70958#true} #1178#return; {70958#true} is VALID [2022-04-28 08:34:38,156 INFO L290 TraceCheckUtils]: 39: Hoare triple {70958#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {70958#true} is VALID [2022-04-28 08:34:38,156 INFO L272 TraceCheckUtils]: 40: Hoare triple {70958#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {70958#true} is VALID [2022-04-28 08:34:38,156 INFO L290 TraceCheckUtils]: 41: Hoare triple {70958#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {70958#true} is VALID [2022-04-28 08:34:38,156 INFO L290 TraceCheckUtils]: 42: Hoare triple {70958#true} assume 0 == ~__BLAST_NONDET~2; {70958#true} is VALID [2022-04-28 08:34:38,156 INFO L290 TraceCheckUtils]: 43: Hoare triple {70958#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {70958#true} is VALID [2022-04-28 08:34:38,156 INFO L290 TraceCheckUtils]: 44: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,156 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {70958#true} {70958#true} #1180#return; {70958#true} is VALID [2022-04-28 08:34:38,156 INFO L290 TraceCheckUtils]: 46: Hoare triple {70958#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {70958#true} is VALID [2022-04-28 08:34:38,156 INFO L290 TraceCheckUtils]: 47: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,156 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {70958#true} {70958#true} #1220#return; {70958#true} is VALID [2022-04-28 08:34:38,156 INFO L290 TraceCheckUtils]: 49: Hoare triple {70958#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {70958#true} is VALID [2022-04-28 08:34:38,157 INFO L272 TraceCheckUtils]: 50: Hoare triple {70958#true} call stub_driver_init(); {71057#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:34:38,157 INFO L290 TraceCheckUtils]: 51: Hoare triple {71057#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {70958#true} is VALID [2022-04-28 08:34:38,157 INFO L290 TraceCheckUtils]: 52: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,157 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {70958#true} {70958#true} #1222#return; {70958#true} is VALID [2022-04-28 08:34:38,157 INFO L290 TraceCheckUtils]: 54: Hoare triple {70958#true} assume !!(~status~5 >= 0); {70958#true} is VALID [2022-04-28 08:34:38,157 INFO L290 TraceCheckUtils]: 55: Hoare triple {70958#true} assume !(0 == ~__BLAST_NONDET~0); {70958#true} is VALID [2022-04-28 08:34:38,158 INFO L290 TraceCheckUtils]: 56: Hoare triple {70958#true} assume !(1 == ~__BLAST_NONDET~0); {70958#true} is VALID [2022-04-28 08:34:38,158 INFO L290 TraceCheckUtils]: 57: Hoare triple {70958#true} assume !(2 == ~__BLAST_NONDET~0); {70958#true} is VALID [2022-04-28 08:34:38,158 INFO L290 TraceCheckUtils]: 58: Hoare triple {70958#true} assume 3 == ~__BLAST_NONDET~0; {70958#true} is VALID [2022-04-28 08:34:38,158 INFO L272 TraceCheckUtils]: 59: Hoare triple {70958#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {70958#true} is VALID [2022-04-28 08:34:38,158 INFO L290 TraceCheckUtils]: 60: Hoare triple {70958#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {70958#true} is VALID [2022-04-28 08:34:38,158 INFO L290 TraceCheckUtils]: 61: Hoare triple {70958#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {70958#true} is VALID [2022-04-28 08:34:38,158 INFO L290 TraceCheckUtils]: 62: Hoare triple {70958#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {70958#true} is VALID [2022-04-28 08:34:38,159 INFO L272 TraceCheckUtils]: 63: Hoare triple {70958#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {71036#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:38,159 INFO L290 TraceCheckUtils]: 64: Hoare triple {71036#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {70958#true} is VALID [2022-04-28 08:34:38,159 INFO L290 TraceCheckUtils]: 65: Hoare triple {70958#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {70958#true} is VALID [2022-04-28 08:34:38,159 INFO L290 TraceCheckUtils]: 66: Hoare triple {70958#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {70958#true} is VALID [2022-04-28 08:34:38,159 INFO L290 TraceCheckUtils]: 67: Hoare triple {70958#true} assume #res.base == dest.base && #res.offset == dest.offset; {70958#true} is VALID [2022-04-28 08:34:38,159 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {70958#true} {70958#true} #1186#return; {70958#true} is VALID [2022-04-28 08:34:38,159 INFO L290 TraceCheckUtils]: 69: Hoare triple {70958#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {70958#true} is VALID [2022-04-28 08:34:38,159 INFO L290 TraceCheckUtils]: 70: Hoare triple {70958#true} assume !(~s~0 != ~NP~0); {70958#true} is VALID [2022-04-28 08:34:38,159 INFO L290 TraceCheckUtils]: 71: Hoare triple {70958#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {70958#true} is VALID [2022-04-28 08:34:38,159 INFO L290 TraceCheckUtils]: 72: Hoare triple {70958#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {70958#true} is VALID [2022-04-28 08:34:38,160 INFO L272 TraceCheckUtils]: 73: Hoare triple {70958#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {71058#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:34:38,160 INFO L290 TraceCheckUtils]: 74: Hoare triple {71058#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {70958#true} is VALID [2022-04-28 08:34:38,160 INFO L290 TraceCheckUtils]: 75: Hoare triple {70958#true} assume 0 != ~compRegistered~0; {70958#true} is VALID [2022-04-28 08:34:38,161 INFO L272 TraceCheckUtils]: 76: Hoare triple {70958#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {71071#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:38,161 INFO L290 TraceCheckUtils]: 77: Hoare triple {71071#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {70958#true} is VALID [2022-04-28 08:34:38,161 INFO L272 TraceCheckUtils]: 78: Hoare triple {70958#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {71071#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:38,162 INFO L290 TraceCheckUtils]: 79: Hoare triple {71071#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {70958#true} is VALID [2022-04-28 08:34:38,162 INFO L290 TraceCheckUtils]: 80: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,162 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {70958#true} {70958#true} #1174#return; {70958#true} is VALID [2022-04-28 08:34:38,162 INFO L290 TraceCheckUtils]: 82: Hoare triple {70958#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {70958#true} is VALID [2022-04-28 08:34:38,162 INFO L290 TraceCheckUtils]: 83: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,162 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {70958#true} {70958#true} #1210#return; {70958#true} is VALID [2022-04-28 08:34:38,162 INFO L290 TraceCheckUtils]: 85: Hoare triple {70958#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {70958#true} is VALID [2022-04-28 08:34:38,162 INFO L290 TraceCheckUtils]: 86: Hoare triple {70958#true} assume -1073741802 == ~compRetStatus~0; {70958#true} is VALID [2022-04-28 08:34:38,162 INFO L272 TraceCheckUtils]: 87: Hoare triple {70958#true} call stubMoreProcessingRequired(); {71075#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:34:38,162 INFO L290 TraceCheckUtils]: 88: Hoare triple {71075#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {70958#true} is VALID [2022-04-28 08:34:38,162 INFO L290 TraceCheckUtils]: 89: Hoare triple {70958#true} assume true; {70958#true} is VALID [2022-04-28 08:34:38,163 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {70958#true} {70958#true} #1212#return; {70958#true} is VALID [2022-04-28 08:34:38,163 INFO L290 TraceCheckUtils]: 91: Hoare triple {70958#true} assume !(0 == ~__BLAST_NONDET~11); {70958#true} is VALID [2022-04-28 08:34:38,163 INFO L290 TraceCheckUtils]: 92: Hoare triple {70958#true} assume 1 == ~__BLAST_NONDET~11; {70958#true} is VALID [2022-04-28 08:34:38,163 INFO L290 TraceCheckUtils]: 93: Hoare triple {70958#true} ~returnVal2~0 := -1073741823; {71070#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:34:38,163 INFO L290 TraceCheckUtils]: 94: Hoare triple {71070#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume !(~s~0 == ~NP~0); {71070#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:34:38,164 INFO L290 TraceCheckUtils]: 95: Hoare triple {71070#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume ~s~0 == ~MPR1~0; {71070#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:34:38,164 INFO L290 TraceCheckUtils]: 96: Hoare triple {71070#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {70959#false} is VALID [2022-04-28 08:34:38,164 INFO L290 TraceCheckUtils]: 97: Hoare triple {70959#false} #res := ~returnVal2~0; {70959#false} is VALID [2022-04-28 08:34:38,164 INFO L290 TraceCheckUtils]: 98: Hoare triple {70959#false} assume true; {70959#false} is VALID [2022-04-28 08:34:38,164 INFO L284 TraceCheckUtils]: 99: Hoare quadruple {70959#false} {70958#true} #1192#return; {70959#false} is VALID [2022-04-28 08:34:38,164 INFO L290 TraceCheckUtils]: 100: Hoare triple {70959#false} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {70959#false} is VALID [2022-04-28 08:34:38,164 INFO L290 TraceCheckUtils]: 101: Hoare triple {70959#false} assume !(259 == ~status~3); {70959#false} is VALID [2022-04-28 08:34:38,164 INFO L290 TraceCheckUtils]: 102: Hoare triple {70959#false} assume !(~status~3 >= 0); {70959#false} is VALID [2022-04-28 08:34:38,164 INFO L290 TraceCheckUtils]: 103: Hoare triple {70959#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {70959#false} is VALID [2022-04-28 08:34:38,164 INFO L272 TraceCheckUtils]: 104: Hoare triple {70959#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {70959#false} is VALID [2022-04-28 08:34:38,164 INFO L290 TraceCheckUtils]: 105: Hoare triple {70959#false} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {70959#false} is VALID [2022-04-28 08:34:38,165 INFO L290 TraceCheckUtils]: 106: Hoare triple {70959#false} assume !(~s~0 == ~NP~0); {70959#false} is VALID [2022-04-28 08:34:38,165 INFO L272 TraceCheckUtils]: 107: Hoare triple {70959#false} call errorFn(); {70959#false} is VALID [2022-04-28 08:34:38,165 INFO L290 TraceCheckUtils]: 108: Hoare triple {70959#false} assume !false; {70959#false} is VALID [2022-04-28 08:34:38,165 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 08:34:38,165 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:34:38,165 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1972422082] [2022-04-28 08:34:38,165 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1972422082] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:34:38,165 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:34:38,165 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:34:38,165 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:34:38,166 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1271775602] [2022-04-28 08:34:38,166 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1271775602] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:34:38,166 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:34:38,166 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:34:38,166 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [798797568] [2022-04-28 08:34:38,166 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:34:38,166 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 7.0) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) Word has length 109 [2022-04-28 08:34:38,166 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:34:38,166 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 7.0) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:34:38,236 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 109 edges. 109 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:34:38,236 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 08:34:38,236 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:34:38,238 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 08:34:38,238 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2022-04-28 08:34:38,238 INFO L87 Difference]: Start difference. First operand 321 states and 377 transitions. Second operand has 11 states, 11 states have (on average 7.0) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:34:40,335 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:34:44,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:34:44,821 INFO L93 Difference]: Finished difference Result 471 states and 566 transitions. [2022-04-28 08:34:44,821 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-04-28 08:34:44,821 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 7.0) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) Word has length 109 [2022-04-28 08:34:44,822 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:34:44,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 7.0) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:34:44,832 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 250 transitions. [2022-04-28 08:34:44,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 7.0) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:34:44,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 250 transitions. [2022-04-28 08:34:44,833 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 10 states and 250 transitions. [2022-04-28 08:34:45,048 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 250 edges. 250 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:34:45,054 INFO L225 Difference]: With dead ends: 471 [2022-04-28 08:34:45,054 INFO L226 Difference]: Without dead ends: 383 [2022-04-28 08:34:45,055 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=71, Invalid=169, Unknown=0, NotChecked=0, Total=240 [2022-04-28 08:34:45,055 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 215 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 482 mSolverCounterSat, 104 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 217 SdHoareTripleChecker+Valid, 298 SdHoareTripleChecker+Invalid, 587 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 104 IncrementalHoareTripleChecker+Valid, 482 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.0s IncrementalHoareTripleChecker+Time [2022-04-28 08:34:45,055 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [217 Valid, 298 Invalid, 587 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [104 Valid, 482 Invalid, 1 Unknown, 0 Unchecked, 4.0s Time] [2022-04-28 08:34:45,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 383 states. [2022-04-28 08:34:45,641 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 383 to 327. [2022-04-28 08:34:45,641 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:34:45,642 INFO L82 GeneralOperation]: Start isEquivalent. First operand 383 states. Second operand has 327 states, 254 states have (on average 1.2165354330708662) internal successors, (309), 258 states have internal predecessors, (309), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:34:45,642 INFO L74 IsIncluded]: Start isIncluded. First operand 383 states. Second operand has 327 states, 254 states have (on average 1.2165354330708662) internal successors, (309), 258 states have internal predecessors, (309), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:34:45,642 INFO L87 Difference]: Start difference. First operand 383 states. Second operand has 327 states, 254 states have (on average 1.2165354330708662) internal successors, (309), 258 states have internal predecessors, (309), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:34:45,647 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:34:45,647 INFO L93 Difference]: Finished difference Result 383 states and 451 transitions. [2022-04-28 08:34:45,647 INFO L276 IsEmpty]: Start isEmpty. Operand 383 states and 451 transitions. [2022-04-28 08:34:45,648 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:34:45,648 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:34:45,648 INFO L74 IsIncluded]: Start isIncluded. First operand has 327 states, 254 states have (on average 1.2165354330708662) internal successors, (309), 258 states have internal predecessors, (309), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) Second operand 383 states. [2022-04-28 08:34:45,648 INFO L87 Difference]: Start difference. First operand has 327 states, 254 states have (on average 1.2165354330708662) internal successors, (309), 258 states have internal predecessors, (309), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) Second operand 383 states. [2022-04-28 08:34:45,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:34:45,653 INFO L93 Difference]: Finished difference Result 383 states and 451 transitions. [2022-04-28 08:34:45,653 INFO L276 IsEmpty]: Start isEmpty. Operand 383 states and 451 transitions. [2022-04-28 08:34:45,654 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:34:45,654 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:34:45,654 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:34:45,654 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:34:45,654 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 327 states, 254 states have (on average 1.2165354330708662) internal successors, (309), 258 states have internal predecessors, (309), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:34:45,659 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 327 states to 327 states and 383 transitions. [2022-04-28 08:34:45,659 INFO L78 Accepts]: Start accepts. Automaton has 327 states and 383 transitions. Word has length 109 [2022-04-28 08:34:45,659 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:34:45,660 INFO L495 AbstractCegarLoop]: Abstraction has 327 states and 383 transitions. [2022-04-28 08:34:45,660 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 7.0) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:34:45,660 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 327 states and 383 transitions. [2022-04-28 08:34:46,597 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 383 edges. 383 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:34:46,597 INFO L276 IsEmpty]: Start isEmpty. Operand 327 states and 383 transitions. [2022-04-28 08:34:46,597 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2022-04-28 08:34:46,598 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:34:46,598 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:34:46,598 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29 [2022-04-28 08:34:46,598 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:34:46,598 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:34:46,598 INFO L85 PathProgramCache]: Analyzing trace with hash -979484737, now seen corresponding path program 1 times [2022-04-28 08:34:46,598 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:34:46,598 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1600631816] [2022-04-28 08:34:46,600 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 0 HavocedVariables, 4 AssignedVariables, -1 ReadonlyVariables, Eigenvalues: {}, 0 SequentialAcceleration, 0 AlternatingAcceleration, 0 QuantifierFreeResult [2022-04-28 08:34:46,600 WARN L91 AcceleratorJordan]: Jordan acceleration failed, because NONINTEGER_UPDATE [2022-04-28 08:34:46,600 INFO L274 tedInterpolationCore]: Could not compute an accelerate. [2022-04-28 08:34:46,600 INFO L85 PathProgramCache]: Analyzing trace with hash -979484737, now seen corresponding path program 2 times [2022-04-28 08:34:46,600 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:34:46,600 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1334175562] [2022-04-28 08:34:46,600 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:34:46,601 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:34:46,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:46,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:34:46,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:46,776 INFO L290 TraceCheckUtils]: 0: Hoare triple {73530#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {73452#true} is VALID [2022-04-28 08:34:46,777 INFO L290 TraceCheckUtils]: 1: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:46,777 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {73452#true} {73452#true} #1270#return; {73452#true} is VALID [2022-04-28 08:34:46,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:34:46,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:46,802 INFO L290 TraceCheckUtils]: 0: Hoare triple {73531#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {73452#true} is VALID [2022-04-28 08:34:46,802 INFO L290 TraceCheckUtils]: 1: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:46,803 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {73452#true} {73452#true} #1216#return; {73452#true} is VALID [2022-04-28 08:34:46,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:34:46,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:46,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:34:46,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:46,824 INFO L290 TraceCheckUtils]: 0: Hoare triple {73452#true} ~cond := #in~cond; {73452#true} is VALID [2022-04-28 08:34:46,824 INFO L290 TraceCheckUtils]: 1: Hoare triple {73452#true} assume !(0 == ~cond); {73452#true} is VALID [2022-04-28 08:34:46,825 INFO L290 TraceCheckUtils]: 2: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:46,825 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {73452#true} {73452#true} #1254#return; {73452#true} is VALID [2022-04-28 08:34:46,825 INFO L290 TraceCheckUtils]: 0: Hoare triple {73532#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {73452#true} is VALID [2022-04-28 08:34:46,825 INFO L272 TraceCheckUtils]: 1: Hoare triple {73452#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {73452#true} is VALID [2022-04-28 08:34:46,825 INFO L290 TraceCheckUtils]: 2: Hoare triple {73452#true} ~cond := #in~cond; {73452#true} is VALID [2022-04-28 08:34:46,825 INFO L290 TraceCheckUtils]: 3: Hoare triple {73452#true} assume !(0 == ~cond); {73452#true} is VALID [2022-04-28 08:34:46,825 INFO L290 TraceCheckUtils]: 4: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:46,825 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {73452#true} {73452#true} #1254#return; {73452#true} is VALID [2022-04-28 08:34:46,825 INFO L290 TraceCheckUtils]: 6: Hoare triple {73452#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {73452#true} is VALID [2022-04-28 08:34:46,825 INFO L290 TraceCheckUtils]: 7: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:46,825 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {73452#true} {73452#true} #1218#return; {73452#true} is VALID [2022-04-28 08:34:46,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:34:46,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:46,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:34:46,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:46,861 INFO L290 TraceCheckUtils]: 0: Hoare triple {73537#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {73452#true} is VALID [2022-04-28 08:34:46,862 INFO L290 TraceCheckUtils]: 1: Hoare triple {73452#true} assume 0 == ~__BLAST_NONDET~5; {73452#true} is VALID [2022-04-28 08:34:46,862 INFO L290 TraceCheckUtils]: 2: Hoare triple {73452#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {73452#true} is VALID [2022-04-28 08:34:46,862 INFO L290 TraceCheckUtils]: 3: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:46,862 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {73452#true} {73452#true} #1176#return; {73452#true} is VALID [2022-04-28 08:34:46,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:34:46,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:46,872 INFO L290 TraceCheckUtils]: 0: Hoare triple {73532#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {73452#true} is VALID [2022-04-28 08:34:46,872 INFO L290 TraceCheckUtils]: 1: Hoare triple {73452#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {73452#true} is VALID [2022-04-28 08:34:46,872 INFO L290 TraceCheckUtils]: 2: Hoare triple {73452#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {73452#true} is VALID [2022-04-28 08:34:46,873 INFO L290 TraceCheckUtils]: 3: Hoare triple {73452#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {73452#true} is VALID [2022-04-28 08:34:46,873 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {73452#true} {73452#true} #1178#return; {73452#true} is VALID [2022-04-28 08:34:46,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-04-28 08:34:46,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:46,878 INFO L290 TraceCheckUtils]: 0: Hoare triple {73452#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {73452#true} is VALID [2022-04-28 08:34:46,878 INFO L290 TraceCheckUtils]: 1: Hoare triple {73452#true} assume 0 == ~__BLAST_NONDET~2; {73452#true} is VALID [2022-04-28 08:34:46,878 INFO L290 TraceCheckUtils]: 2: Hoare triple {73452#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {73452#true} is VALID [2022-04-28 08:34:46,878 INFO L290 TraceCheckUtils]: 3: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:46,879 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {73452#true} {73452#true} #1180#return; {73452#true} is VALID [2022-04-28 08:34:46,879 INFO L290 TraceCheckUtils]: 0: Hoare triple {73537#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {73452#true} is VALID [2022-04-28 08:34:46,879 INFO L272 TraceCheckUtils]: 1: Hoare triple {73452#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {73537#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:34:46,880 INFO L290 TraceCheckUtils]: 2: Hoare triple {73537#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {73452#true} is VALID [2022-04-28 08:34:46,880 INFO L290 TraceCheckUtils]: 3: Hoare triple {73452#true} assume 0 == ~__BLAST_NONDET~5; {73452#true} is VALID [2022-04-28 08:34:46,880 INFO L290 TraceCheckUtils]: 4: Hoare triple {73452#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {73452#true} is VALID [2022-04-28 08:34:46,880 INFO L290 TraceCheckUtils]: 5: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:46,880 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {73452#true} {73452#true} #1176#return; {73452#true} is VALID [2022-04-28 08:34:46,880 INFO L290 TraceCheckUtils]: 7: Hoare triple {73452#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {73452#true} is VALID [2022-04-28 08:34:46,880 INFO L290 TraceCheckUtils]: 8: Hoare triple {73452#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {73452#true} is VALID [2022-04-28 08:34:46,880 INFO L272 TraceCheckUtils]: 9: Hoare triple {73452#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {73532#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:46,880 INFO L290 TraceCheckUtils]: 10: Hoare triple {73532#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {73452#true} is VALID [2022-04-28 08:34:46,881 INFO L290 TraceCheckUtils]: 11: Hoare triple {73452#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {73452#true} is VALID [2022-04-28 08:34:46,881 INFO L290 TraceCheckUtils]: 12: Hoare triple {73452#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {73452#true} is VALID [2022-04-28 08:34:46,881 INFO L290 TraceCheckUtils]: 13: Hoare triple {73452#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {73452#true} is VALID [2022-04-28 08:34:46,881 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {73452#true} {73452#true} #1178#return; {73452#true} is VALID [2022-04-28 08:34:46,881 INFO L290 TraceCheckUtils]: 15: Hoare triple {73452#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {73452#true} is VALID [2022-04-28 08:34:46,881 INFO L272 TraceCheckUtils]: 16: Hoare triple {73452#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {73452#true} is VALID [2022-04-28 08:34:46,881 INFO L290 TraceCheckUtils]: 17: Hoare triple {73452#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {73452#true} is VALID [2022-04-28 08:34:46,881 INFO L290 TraceCheckUtils]: 18: Hoare triple {73452#true} assume 0 == ~__BLAST_NONDET~2; {73452#true} is VALID [2022-04-28 08:34:46,881 INFO L290 TraceCheckUtils]: 19: Hoare triple {73452#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {73452#true} is VALID [2022-04-28 08:34:46,881 INFO L290 TraceCheckUtils]: 20: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:46,881 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {73452#true} {73452#true} #1180#return; {73452#true} is VALID [2022-04-28 08:34:46,881 INFO L290 TraceCheckUtils]: 22: Hoare triple {73452#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {73452#true} is VALID [2022-04-28 08:34:46,881 INFO L290 TraceCheckUtils]: 23: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:46,881 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {73452#true} {73452#true} #1220#return; {73452#true} is VALID [2022-04-28 08:34:46,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-04-28 08:34:46,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:46,898 INFO L290 TraceCheckUtils]: 0: Hoare triple {73553#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {73452#true} is VALID [2022-04-28 08:34:46,899 INFO L290 TraceCheckUtils]: 1: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:46,899 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {73452#true} {73452#true} #1222#return; {73452#true} is VALID [2022-04-28 08:34:46,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-04-28 08:34:46,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:46,904 INFO L290 TraceCheckUtils]: 0: Hoare triple {73532#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {73452#true} is VALID [2022-04-28 08:34:46,904 INFO L290 TraceCheckUtils]: 1: Hoare triple {73452#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {73452#true} is VALID [2022-04-28 08:34:46,904 INFO L290 TraceCheckUtils]: 2: Hoare triple {73452#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {73452#true} is VALID [2022-04-28 08:34:46,904 INFO L290 TraceCheckUtils]: 3: Hoare triple {73452#true} assume #res.base == dest.base && #res.offset == dest.offset; {73452#true} is VALID [2022-04-28 08:34:46,905 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {73452#true} {73452#true} #1186#return; {73452#true} is VALID [2022-04-28 08:34:46,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-04-28 08:34:46,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:46,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:34:46,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:46,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:34:46,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:46,990 INFO L290 TraceCheckUtils]: 0: Hoare triple {73568#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {73452#true} is VALID [2022-04-28 08:34:46,990 INFO L290 TraceCheckUtils]: 1: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:46,990 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {73452#true} {73452#true} #1174#return; {73452#true} is VALID [2022-04-28 08:34:46,990 INFO L290 TraceCheckUtils]: 0: Hoare triple {73568#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {73452#true} is VALID [2022-04-28 08:34:46,991 INFO L272 TraceCheckUtils]: 1: Hoare triple {73452#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {73568#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:46,991 INFO L290 TraceCheckUtils]: 2: Hoare triple {73568#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {73452#true} is VALID [2022-04-28 08:34:46,991 INFO L290 TraceCheckUtils]: 3: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:46,991 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {73452#true} {73452#true} #1174#return; {73452#true} is VALID [2022-04-28 08:34:46,991 INFO L290 TraceCheckUtils]: 5: Hoare triple {73452#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {73452#true} is VALID [2022-04-28 08:34:46,991 INFO L290 TraceCheckUtils]: 6: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:46,991 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {73452#true} {73452#true} #1210#return; {73452#true} is VALID [2022-04-28 08:34:46,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:34:46,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:34:47,002 INFO L290 TraceCheckUtils]: 0: Hoare triple {73572#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {73452#true} is VALID [2022-04-28 08:34:47,002 INFO L290 TraceCheckUtils]: 1: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:47,003 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {73452#true} {73452#true} #1212#return; {73452#true} is VALID [2022-04-28 08:34:47,003 INFO L290 TraceCheckUtils]: 0: Hoare triple {73554#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {73452#true} is VALID [2022-04-28 08:34:47,003 INFO L290 TraceCheckUtils]: 1: Hoare triple {73452#true} assume 0 != ~compRegistered~0; {73452#true} is VALID [2022-04-28 08:34:47,003 INFO L272 TraceCheckUtils]: 2: Hoare triple {73452#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {73568#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:47,003 INFO L290 TraceCheckUtils]: 3: Hoare triple {73568#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {73452#true} is VALID [2022-04-28 08:34:47,004 INFO L272 TraceCheckUtils]: 4: Hoare triple {73452#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {73568#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:47,004 INFO L290 TraceCheckUtils]: 5: Hoare triple {73568#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {73452#true} is VALID [2022-04-28 08:34:47,004 INFO L290 TraceCheckUtils]: 6: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:47,004 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {73452#true} {73452#true} #1174#return; {73452#true} is VALID [2022-04-28 08:34:47,004 INFO L290 TraceCheckUtils]: 8: Hoare triple {73452#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {73452#true} is VALID [2022-04-28 08:34:47,004 INFO L290 TraceCheckUtils]: 9: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:47,004 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {73452#true} {73452#true} #1210#return; {73452#true} is VALID [2022-04-28 08:34:47,004 INFO L290 TraceCheckUtils]: 11: Hoare triple {73452#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {73452#true} is VALID [2022-04-28 08:34:47,005 INFO L290 TraceCheckUtils]: 12: Hoare triple {73452#true} assume -1073741802 == ~compRetStatus~0; {73452#true} is VALID [2022-04-28 08:34:47,005 INFO L272 TraceCheckUtils]: 13: Hoare triple {73452#true} call stubMoreProcessingRequired(); {73572#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:34:47,005 INFO L290 TraceCheckUtils]: 14: Hoare triple {73572#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {73452#true} is VALID [2022-04-28 08:34:47,005 INFO L290 TraceCheckUtils]: 15: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:47,005 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {73452#true} {73452#true} #1212#return; {73452#true} is VALID [2022-04-28 08:34:47,005 INFO L290 TraceCheckUtils]: 17: Hoare triple {73452#true} assume !(0 == ~__BLAST_NONDET~11); {73452#true} is VALID [2022-04-28 08:34:47,005 INFO L290 TraceCheckUtils]: 18: Hoare triple {73452#true} assume !(1 == ~__BLAST_NONDET~11); {73452#true} is VALID [2022-04-28 08:34:47,005 INFO L290 TraceCheckUtils]: 19: Hoare triple {73452#true} ~returnVal2~0 := 259; {73566#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:34:47,006 INFO L290 TraceCheckUtils]: 20: Hoare triple {73566#(<= 259 IofCallDriver_~returnVal2~0)} assume !(~s~0 == ~NP~0); {73566#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:34:47,006 INFO L290 TraceCheckUtils]: 21: Hoare triple {73566#(<= 259 IofCallDriver_~returnVal2~0)} assume ~s~0 == ~MPR1~0; {73566#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:34:47,006 INFO L290 TraceCheckUtils]: 22: Hoare triple {73566#(<= 259 IofCallDriver_~returnVal2~0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {73566#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:34:47,006 INFO L290 TraceCheckUtils]: 23: Hoare triple {73566#(<= 259 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {73567#(<= 259 |IofCallDriver_#res|)} is VALID [2022-04-28 08:34:47,007 INFO L290 TraceCheckUtils]: 24: Hoare triple {73567#(<= 259 |IofCallDriver_#res|)} assume true; {73567#(<= 259 |IofCallDriver_#res|)} is VALID [2022-04-28 08:34:47,007 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {73567#(<= 259 |IofCallDriver_#res|)} {73452#true} #1192#return; {73528#(<= 259 |KbFilter_PnP_#t~ret109|)} is VALID [2022-04-28 08:34:47,008 INFO L272 TraceCheckUtils]: 0: Hoare triple {73452#true} call ULTIMATE.init(); {73530#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:34:47,008 INFO L290 TraceCheckUtils]: 1: Hoare triple {73530#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {73452#true} is VALID [2022-04-28 08:34:47,008 INFO L290 TraceCheckUtils]: 2: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:47,008 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {73452#true} {73452#true} #1270#return; {73452#true} is VALID [2022-04-28 08:34:47,008 INFO L272 TraceCheckUtils]: 4: Hoare triple {73452#true} call #t~ret213 := main(); {73452#true} is VALID [2022-04-28 08:34:47,009 INFO L290 TraceCheckUtils]: 5: Hoare triple {73452#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {73452#true} is VALID [2022-04-28 08:34:47,009 INFO L272 TraceCheckUtils]: 6: Hoare triple {73452#true} call _BLAST_init(); {73531#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:34:47,009 INFO L290 TraceCheckUtils]: 7: Hoare triple {73531#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {73452#true} is VALID [2022-04-28 08:34:47,009 INFO L290 TraceCheckUtils]: 8: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:47,009 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {73452#true} {73452#true} #1216#return; {73452#true} is VALID [2022-04-28 08:34:47,010 INFO L272 TraceCheckUtils]: 10: Hoare triple {73452#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {73532#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:47,010 INFO L290 TraceCheckUtils]: 11: Hoare triple {73532#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {73452#true} is VALID [2022-04-28 08:34:47,010 INFO L272 TraceCheckUtils]: 12: Hoare triple {73452#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {73452#true} is VALID [2022-04-28 08:34:47,010 INFO L290 TraceCheckUtils]: 13: Hoare triple {73452#true} ~cond := #in~cond; {73452#true} is VALID [2022-04-28 08:34:47,010 INFO L290 TraceCheckUtils]: 14: Hoare triple {73452#true} assume !(0 == ~cond); {73452#true} is VALID [2022-04-28 08:34:47,010 INFO L290 TraceCheckUtils]: 15: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:47,010 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {73452#true} {73452#true} #1254#return; {73452#true} is VALID [2022-04-28 08:34:47,011 INFO L290 TraceCheckUtils]: 17: Hoare triple {73452#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {73452#true} is VALID [2022-04-28 08:34:47,011 INFO L290 TraceCheckUtils]: 18: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:47,011 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {73452#true} {73452#true} #1218#return; {73452#true} is VALID [2022-04-28 08:34:47,011 INFO L290 TraceCheckUtils]: 20: Hoare triple {73452#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {73452#true} is VALID [2022-04-28 08:34:47,011 INFO L290 TraceCheckUtils]: 21: Hoare triple {73452#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {73452#true} is VALID [2022-04-28 08:34:47,011 INFO L290 TraceCheckUtils]: 22: Hoare triple {73452#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {73452#true} is VALID [2022-04-28 08:34:47,012 INFO L272 TraceCheckUtils]: 23: Hoare triple {73452#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {73537#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:34:47,012 INFO L290 TraceCheckUtils]: 24: Hoare triple {73537#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {73452#true} is VALID [2022-04-28 08:34:47,013 INFO L272 TraceCheckUtils]: 25: Hoare triple {73452#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {73537#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:34:47,013 INFO L290 TraceCheckUtils]: 26: Hoare triple {73537#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {73452#true} is VALID [2022-04-28 08:34:47,013 INFO L290 TraceCheckUtils]: 27: Hoare triple {73452#true} assume 0 == ~__BLAST_NONDET~5; {73452#true} is VALID [2022-04-28 08:34:47,013 INFO L290 TraceCheckUtils]: 28: Hoare triple {73452#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {73452#true} is VALID [2022-04-28 08:34:47,013 INFO L290 TraceCheckUtils]: 29: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:47,013 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {73452#true} {73452#true} #1176#return; {73452#true} is VALID [2022-04-28 08:34:47,013 INFO L290 TraceCheckUtils]: 31: Hoare triple {73452#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {73452#true} is VALID [2022-04-28 08:34:47,013 INFO L290 TraceCheckUtils]: 32: Hoare triple {73452#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {73452#true} is VALID [2022-04-28 08:34:47,014 INFO L272 TraceCheckUtils]: 33: Hoare triple {73452#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {73532#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:47,014 INFO L290 TraceCheckUtils]: 34: Hoare triple {73532#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {73452#true} is VALID [2022-04-28 08:34:47,014 INFO L290 TraceCheckUtils]: 35: Hoare triple {73452#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {73452#true} is VALID [2022-04-28 08:34:47,014 INFO L290 TraceCheckUtils]: 36: Hoare triple {73452#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {73452#true} is VALID [2022-04-28 08:34:47,014 INFO L290 TraceCheckUtils]: 37: Hoare triple {73452#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {73452#true} is VALID [2022-04-28 08:34:47,014 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {73452#true} {73452#true} #1178#return; {73452#true} is VALID [2022-04-28 08:34:47,014 INFO L290 TraceCheckUtils]: 39: Hoare triple {73452#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {73452#true} is VALID [2022-04-28 08:34:47,014 INFO L272 TraceCheckUtils]: 40: Hoare triple {73452#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {73452#true} is VALID [2022-04-28 08:34:47,014 INFO L290 TraceCheckUtils]: 41: Hoare triple {73452#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {73452#true} is VALID [2022-04-28 08:34:47,014 INFO L290 TraceCheckUtils]: 42: Hoare triple {73452#true} assume 0 == ~__BLAST_NONDET~2; {73452#true} is VALID [2022-04-28 08:34:47,014 INFO L290 TraceCheckUtils]: 43: Hoare triple {73452#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {73452#true} is VALID [2022-04-28 08:34:47,014 INFO L290 TraceCheckUtils]: 44: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:47,014 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {73452#true} {73452#true} #1180#return; {73452#true} is VALID [2022-04-28 08:34:47,014 INFO L290 TraceCheckUtils]: 46: Hoare triple {73452#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {73452#true} is VALID [2022-04-28 08:34:47,015 INFO L290 TraceCheckUtils]: 47: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:47,015 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {73452#true} {73452#true} #1220#return; {73452#true} is VALID [2022-04-28 08:34:47,015 INFO L290 TraceCheckUtils]: 49: Hoare triple {73452#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {73452#true} is VALID [2022-04-28 08:34:47,015 INFO L272 TraceCheckUtils]: 50: Hoare triple {73452#true} call stub_driver_init(); {73553#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:34:47,015 INFO L290 TraceCheckUtils]: 51: Hoare triple {73553#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {73452#true} is VALID [2022-04-28 08:34:47,015 INFO L290 TraceCheckUtils]: 52: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:47,015 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {73452#true} {73452#true} #1222#return; {73452#true} is VALID [2022-04-28 08:34:47,015 INFO L290 TraceCheckUtils]: 54: Hoare triple {73452#true} assume !!(~status~5 >= 0); {73452#true} is VALID [2022-04-28 08:34:47,016 INFO L290 TraceCheckUtils]: 55: Hoare triple {73452#true} assume !(0 == ~__BLAST_NONDET~0); {73452#true} is VALID [2022-04-28 08:34:47,016 INFO L290 TraceCheckUtils]: 56: Hoare triple {73452#true} assume !(1 == ~__BLAST_NONDET~0); {73452#true} is VALID [2022-04-28 08:34:47,016 INFO L290 TraceCheckUtils]: 57: Hoare triple {73452#true} assume !(2 == ~__BLAST_NONDET~0); {73452#true} is VALID [2022-04-28 08:34:47,016 INFO L290 TraceCheckUtils]: 58: Hoare triple {73452#true} assume 3 == ~__BLAST_NONDET~0; {73452#true} is VALID [2022-04-28 08:34:47,016 INFO L272 TraceCheckUtils]: 59: Hoare triple {73452#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {73452#true} is VALID [2022-04-28 08:34:47,016 INFO L290 TraceCheckUtils]: 60: Hoare triple {73452#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {73452#true} is VALID [2022-04-28 08:34:47,016 INFO L290 TraceCheckUtils]: 61: Hoare triple {73452#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {73452#true} is VALID [2022-04-28 08:34:47,016 INFO L290 TraceCheckUtils]: 62: Hoare triple {73452#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {73452#true} is VALID [2022-04-28 08:34:47,017 INFO L272 TraceCheckUtils]: 63: Hoare triple {73452#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {73532#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:34:47,017 INFO L290 TraceCheckUtils]: 64: Hoare triple {73532#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {73452#true} is VALID [2022-04-28 08:34:47,017 INFO L290 TraceCheckUtils]: 65: Hoare triple {73452#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {73452#true} is VALID [2022-04-28 08:34:47,017 INFO L290 TraceCheckUtils]: 66: Hoare triple {73452#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {73452#true} is VALID [2022-04-28 08:34:47,017 INFO L290 TraceCheckUtils]: 67: Hoare triple {73452#true} assume #res.base == dest.base && #res.offset == dest.offset; {73452#true} is VALID [2022-04-28 08:34:47,017 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {73452#true} {73452#true} #1186#return; {73452#true} is VALID [2022-04-28 08:34:47,017 INFO L290 TraceCheckUtils]: 69: Hoare triple {73452#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {73452#true} is VALID [2022-04-28 08:34:47,017 INFO L290 TraceCheckUtils]: 70: Hoare triple {73452#true} assume !(~s~0 != ~NP~0); {73452#true} is VALID [2022-04-28 08:34:47,017 INFO L290 TraceCheckUtils]: 71: Hoare triple {73452#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {73452#true} is VALID [2022-04-28 08:34:47,017 INFO L290 TraceCheckUtils]: 72: Hoare triple {73452#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {73452#true} is VALID [2022-04-28 08:34:47,018 INFO L272 TraceCheckUtils]: 73: Hoare triple {73452#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {73554#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:34:47,018 INFO L290 TraceCheckUtils]: 74: Hoare triple {73554#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {73452#true} is VALID [2022-04-28 08:34:47,018 INFO L290 TraceCheckUtils]: 75: Hoare triple {73452#true} assume 0 != ~compRegistered~0; {73452#true} is VALID [2022-04-28 08:34:47,019 INFO L272 TraceCheckUtils]: 76: Hoare triple {73452#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {73568#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:47,019 INFO L290 TraceCheckUtils]: 77: Hoare triple {73568#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {73452#true} is VALID [2022-04-28 08:34:47,019 INFO L272 TraceCheckUtils]: 78: Hoare triple {73452#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {73568#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:34:47,019 INFO L290 TraceCheckUtils]: 79: Hoare triple {73568#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {73452#true} is VALID [2022-04-28 08:34:47,019 INFO L290 TraceCheckUtils]: 80: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:47,019 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {73452#true} {73452#true} #1174#return; {73452#true} is VALID [2022-04-28 08:34:47,019 INFO L290 TraceCheckUtils]: 82: Hoare triple {73452#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {73452#true} is VALID [2022-04-28 08:34:47,020 INFO L290 TraceCheckUtils]: 83: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:47,020 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {73452#true} {73452#true} #1210#return; {73452#true} is VALID [2022-04-28 08:34:47,020 INFO L290 TraceCheckUtils]: 85: Hoare triple {73452#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {73452#true} is VALID [2022-04-28 08:34:47,020 INFO L290 TraceCheckUtils]: 86: Hoare triple {73452#true} assume -1073741802 == ~compRetStatus~0; {73452#true} is VALID [2022-04-28 08:34:47,020 INFO L272 TraceCheckUtils]: 87: Hoare triple {73452#true} call stubMoreProcessingRequired(); {73572#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:34:47,020 INFO L290 TraceCheckUtils]: 88: Hoare triple {73572#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {73452#true} is VALID [2022-04-28 08:34:47,020 INFO L290 TraceCheckUtils]: 89: Hoare triple {73452#true} assume true; {73452#true} is VALID [2022-04-28 08:34:47,020 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {73452#true} {73452#true} #1212#return; {73452#true} is VALID [2022-04-28 08:34:47,020 INFO L290 TraceCheckUtils]: 91: Hoare triple {73452#true} assume !(0 == ~__BLAST_NONDET~11); {73452#true} is VALID [2022-04-28 08:34:47,020 INFO L290 TraceCheckUtils]: 92: Hoare triple {73452#true} assume !(1 == ~__BLAST_NONDET~11); {73452#true} is VALID [2022-04-28 08:34:47,021 INFO L290 TraceCheckUtils]: 93: Hoare triple {73452#true} ~returnVal2~0 := 259; {73566#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:34:47,021 INFO L290 TraceCheckUtils]: 94: Hoare triple {73566#(<= 259 IofCallDriver_~returnVal2~0)} assume !(~s~0 == ~NP~0); {73566#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:34:47,021 INFO L290 TraceCheckUtils]: 95: Hoare triple {73566#(<= 259 IofCallDriver_~returnVal2~0)} assume ~s~0 == ~MPR1~0; {73566#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:34:47,021 INFO L290 TraceCheckUtils]: 96: Hoare triple {73566#(<= 259 IofCallDriver_~returnVal2~0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {73566#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:34:47,021 INFO L290 TraceCheckUtils]: 97: Hoare triple {73566#(<= 259 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {73567#(<= 259 |IofCallDriver_#res|)} is VALID [2022-04-28 08:34:47,022 INFO L290 TraceCheckUtils]: 98: Hoare triple {73567#(<= 259 |IofCallDriver_#res|)} assume true; {73567#(<= 259 |IofCallDriver_#res|)} is VALID [2022-04-28 08:34:47,022 INFO L284 TraceCheckUtils]: 99: Hoare quadruple {73567#(<= 259 |IofCallDriver_#res|)} {73452#true} #1192#return; {73528#(<= 259 |KbFilter_PnP_#t~ret109|)} is VALID [2022-04-28 08:34:47,023 INFO L290 TraceCheckUtils]: 100: Hoare triple {73528#(<= 259 |KbFilter_PnP_#t~ret109|)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {73529#(<= 259 KbFilter_PnP_~status~3)} is VALID [2022-04-28 08:34:47,023 INFO L290 TraceCheckUtils]: 101: Hoare triple {73529#(<= 259 KbFilter_PnP_~status~3)} assume !(259 == ~status~3); {73529#(<= 259 KbFilter_PnP_~status~3)} is VALID [2022-04-28 08:34:47,023 INFO L290 TraceCheckUtils]: 102: Hoare triple {73529#(<= 259 KbFilter_PnP_~status~3)} assume !(~status~3 >= 0); {73453#false} is VALID [2022-04-28 08:34:47,023 INFO L290 TraceCheckUtils]: 103: Hoare triple {73453#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {73453#false} is VALID [2022-04-28 08:34:47,023 INFO L272 TraceCheckUtils]: 104: Hoare triple {73453#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {73453#false} is VALID [2022-04-28 08:34:47,023 INFO L290 TraceCheckUtils]: 105: Hoare triple {73453#false} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {73453#false} is VALID [2022-04-28 08:34:47,023 INFO L290 TraceCheckUtils]: 106: Hoare triple {73453#false} assume !(~s~0 == ~NP~0); {73453#false} is VALID [2022-04-28 08:34:47,023 INFO L272 TraceCheckUtils]: 107: Hoare triple {73453#false} call errorFn(); {73453#false} is VALID [2022-04-28 08:34:47,024 INFO L290 TraceCheckUtils]: 108: Hoare triple {73453#false} assume !false; {73453#false} is VALID [2022-04-28 08:34:47,024 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 08:34:47,024 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:34:47,024 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1334175562] [2022-04-28 08:34:47,024 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1334175562] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:34:47,024 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:34:47,024 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:34:47,025 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:34:47,025 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1600631816] [2022-04-28 08:34:47,025 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1600631816] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:34:47,025 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:34:47,025 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:34:47,025 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [767134256] [2022-04-28 08:34:47,025 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:34:47,026 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 5.5) internal successors, (77), 5 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) Word has length 109 [2022-04-28 08:34:47,027 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:34:47,027 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 5.5) internal successors, (77), 5 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:34:47,114 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 109 edges. 109 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:34:47,114 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-28 08:34:47,114 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:34:47,115 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-28 08:34:47,115 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=142, Unknown=0, NotChecked=0, Total=182 [2022-04-28 08:34:47,115 INFO L87 Difference]: Start difference. First operand 327 states and 383 transitions. Second operand has 14 states, 14 states have (on average 5.5) internal successors, (77), 5 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:34:49,255 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:34:55,545 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.13s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:34:57,184 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.00s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:34:59,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:34:59,726 INFO L93 Difference]: Finished difference Result 425 states and 503 transitions. [2022-04-28 08:34:59,726 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-28 08:34:59,726 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 5.5) internal successors, (77), 5 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) Word has length 109 [2022-04-28 08:34:59,726 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:34:59,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 5.5) internal successors, (77), 5 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:34:59,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 234 transitions. [2022-04-28 08:34:59,728 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 5.5) internal successors, (77), 5 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:34:59,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 234 transitions. [2022-04-28 08:34:59,729 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 234 transitions. [2022-04-28 08:34:59,983 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 234 edges. 234 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:34:59,991 INFO L225 Difference]: With dead ends: 425 [2022-04-28 08:34:59,991 INFO L226 Difference]: Without dead ends: 396 [2022-04-28 08:34:59,991 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=84, Invalid=296, Unknown=0, NotChecked=0, Total=380 [2022-04-28 08:34:59,991 INFO L413 NwaCegarLoop]: 147 mSDtfsCounter, 153 mSDsluCounter, 350 mSDsCounter, 0 mSdLazyCounter, 1011 mSolverCounterSat, 78 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 158 SdHoareTripleChecker+Valid, 497 SdHoareTripleChecker+Invalid, 1090 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 78 IncrementalHoareTripleChecker+Valid, 1011 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.4s IncrementalHoareTripleChecker+Time [2022-04-28 08:34:59,991 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [158 Valid, 497 Invalid, 1090 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [78 Valid, 1011 Invalid, 1 Unknown, 0 Unchecked, 6.4s Time] [2022-04-28 08:34:59,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 396 states. [2022-04-28 08:35:00,673 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 396 to 337. [2022-04-28 08:35:00,673 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:35:00,673 INFO L82 GeneralOperation]: Start isEquivalent. First operand 396 states. Second operand has 337 states, 262 states have (on average 1.2099236641221374) internal successors, (317), 266 states have internal predecessors, (317), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:35:00,674 INFO L74 IsIncluded]: Start isIncluded. First operand 396 states. Second operand has 337 states, 262 states have (on average 1.2099236641221374) internal successors, (317), 266 states have internal predecessors, (317), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:35:00,674 INFO L87 Difference]: Start difference. First operand 396 states. Second operand has 337 states, 262 states have (on average 1.2099236641221374) internal successors, (317), 266 states have internal predecessors, (317), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:35:00,680 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:35:00,680 INFO L93 Difference]: Finished difference Result 396 states and 467 transitions. [2022-04-28 08:35:00,680 INFO L276 IsEmpty]: Start isEmpty. Operand 396 states and 467 transitions. [2022-04-28 08:35:00,681 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:35:00,681 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:35:00,681 INFO L74 IsIncluded]: Start isIncluded. First operand has 337 states, 262 states have (on average 1.2099236641221374) internal successors, (317), 266 states have internal predecessors, (317), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) Second operand 396 states. [2022-04-28 08:35:00,681 INFO L87 Difference]: Start difference. First operand has 337 states, 262 states have (on average 1.2099236641221374) internal successors, (317), 266 states have internal predecessors, (317), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) Second operand 396 states. [2022-04-28 08:35:00,687 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:35:00,687 INFO L93 Difference]: Finished difference Result 396 states and 467 transitions. [2022-04-28 08:35:00,687 INFO L276 IsEmpty]: Start isEmpty. Operand 396 states and 467 transitions. [2022-04-28 08:35:00,688 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:35:00,688 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:35:00,688 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:35:00,688 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:35:00,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 337 states, 262 states have (on average 1.2099236641221374) internal successors, (317), 266 states have internal predecessors, (317), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:35:00,693 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 337 states to 337 states and 393 transitions. [2022-04-28 08:35:00,693 INFO L78 Accepts]: Start accepts. Automaton has 337 states and 393 transitions. Word has length 109 [2022-04-28 08:35:00,694 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:35:00,694 INFO L495 AbstractCegarLoop]: Abstraction has 337 states and 393 transitions. [2022-04-28 08:35:00,694 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 5.5) internal successors, (77), 5 states have internal predecessors, (77), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:35:00,694 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 337 states and 393 transitions. [2022-04-28 08:35:01,628 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 393 edges. 393 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:35:01,628 INFO L276 IsEmpty]: Start isEmpty. Operand 337 states and 393 transitions. [2022-04-28 08:35:01,629 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-04-28 08:35:01,629 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:35:01,629 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:35:01,629 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30 [2022-04-28 08:35:01,629 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:35:01,630 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:35:01,630 INFO L85 PathProgramCache]: Analyzing trace with hash 1216749988, now seen corresponding path program 1 times [2022-04-28 08:35:01,630 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:35:01,630 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [374479452] [2022-04-28 08:35:01,632 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 0 HavocedVariables, 4 AssignedVariables, -1 ReadonlyVariables, Eigenvalues: {}, 0 SequentialAcceleration, 0 AlternatingAcceleration, 0 QuantifierFreeResult [2022-04-28 08:35:01,632 WARN L91 AcceleratorJordan]: Jordan acceleration failed, because NONINTEGER_UPDATE [2022-04-28 08:35:01,632 INFO L274 tedInterpolationCore]: Could not compute an accelerate. [2022-04-28 08:35:01,632 INFO L85 PathProgramCache]: Analyzing trace with hash 1216749988, now seen corresponding path program 2 times [2022-04-28 08:35:01,632 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:35:01,632 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [674968962] [2022-04-28 08:35:01,632 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:35:01,632 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:35:01,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:01,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:35:01,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:01,821 INFO L290 TraceCheckUtils]: 0: Hoare triple {75983#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {75905#true} is VALID [2022-04-28 08:35:01,821 INFO L290 TraceCheckUtils]: 1: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:01,821 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {75905#true} {75905#true} #1270#return; {75905#true} is VALID [2022-04-28 08:35:01,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:35:01,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:01,867 INFO L290 TraceCheckUtils]: 0: Hoare triple {75984#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {75985#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-28 08:35:01,867 INFO L290 TraceCheckUtils]: 1: Hoare triple {75985#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} assume true; {75985#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-28 08:35:01,868 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {75985#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} {75905#true} #1216#return; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:01,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:35:01,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:01,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:35:01,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:01,900 INFO L290 TraceCheckUtils]: 0: Hoare triple {75905#true} ~cond := #in~cond; {75905#true} is VALID [2022-04-28 08:35:01,900 INFO L290 TraceCheckUtils]: 1: Hoare triple {75905#true} assume !(0 == ~cond); {75905#true} is VALID [2022-04-28 08:35:01,900 INFO L290 TraceCheckUtils]: 2: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:01,900 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {75905#true} {75905#true} #1254#return; {75905#true} is VALID [2022-04-28 08:35:01,900 INFO L290 TraceCheckUtils]: 0: Hoare triple {75986#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {75905#true} is VALID [2022-04-28 08:35:01,900 INFO L272 TraceCheckUtils]: 1: Hoare triple {75905#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {75905#true} is VALID [2022-04-28 08:35:01,900 INFO L290 TraceCheckUtils]: 2: Hoare triple {75905#true} ~cond := #in~cond; {75905#true} is VALID [2022-04-28 08:35:01,900 INFO L290 TraceCheckUtils]: 3: Hoare triple {75905#true} assume !(0 == ~cond); {75905#true} is VALID [2022-04-28 08:35:01,900 INFO L290 TraceCheckUtils]: 4: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:01,901 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {75905#true} {75905#true} #1254#return; {75905#true} is VALID [2022-04-28 08:35:01,901 INFO L290 TraceCheckUtils]: 6: Hoare triple {75905#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {75905#true} is VALID [2022-04-28 08:35:01,901 INFO L290 TraceCheckUtils]: 7: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:01,901 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {75905#true} {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #1218#return; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:01,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:35:01,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:01,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:35:01,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:01,946 INFO L290 TraceCheckUtils]: 0: Hoare triple {75991#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {75905#true} is VALID [2022-04-28 08:35:01,947 INFO L290 TraceCheckUtils]: 1: Hoare triple {75905#true} assume 0 == ~__BLAST_NONDET~5; {75905#true} is VALID [2022-04-28 08:35:01,947 INFO L290 TraceCheckUtils]: 2: Hoare triple {75905#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {75905#true} is VALID [2022-04-28 08:35:01,947 INFO L290 TraceCheckUtils]: 3: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:01,947 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {75905#true} {75905#true} #1176#return; {75905#true} is VALID [2022-04-28 08:35:01,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:35:01,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:01,953 INFO L290 TraceCheckUtils]: 0: Hoare triple {75986#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {75905#true} is VALID [2022-04-28 08:35:01,953 INFO L290 TraceCheckUtils]: 1: Hoare triple {75905#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {75905#true} is VALID [2022-04-28 08:35:01,953 INFO L290 TraceCheckUtils]: 2: Hoare triple {75905#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {75905#true} is VALID [2022-04-28 08:35:01,953 INFO L290 TraceCheckUtils]: 3: Hoare triple {75905#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {75905#true} is VALID [2022-04-28 08:35:01,954 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {75905#true} {75905#true} #1178#return; {75905#true} is VALID [2022-04-28 08:35:01,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-04-28 08:35:01,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:01,959 INFO L290 TraceCheckUtils]: 0: Hoare triple {75905#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {75905#true} is VALID [2022-04-28 08:35:01,959 INFO L290 TraceCheckUtils]: 1: Hoare triple {75905#true} assume 0 == ~__BLAST_NONDET~2; {75905#true} is VALID [2022-04-28 08:35:01,959 INFO L290 TraceCheckUtils]: 2: Hoare triple {75905#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {75905#true} is VALID [2022-04-28 08:35:01,959 INFO L290 TraceCheckUtils]: 3: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:01,959 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {75905#true} {75905#true} #1180#return; {75905#true} is VALID [2022-04-28 08:35:01,959 INFO L290 TraceCheckUtils]: 0: Hoare triple {75991#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {75905#true} is VALID [2022-04-28 08:35:01,960 INFO L272 TraceCheckUtils]: 1: Hoare triple {75905#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {75991#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:35:01,960 INFO L290 TraceCheckUtils]: 2: Hoare triple {75991#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {75905#true} is VALID [2022-04-28 08:35:01,960 INFO L290 TraceCheckUtils]: 3: Hoare triple {75905#true} assume 0 == ~__BLAST_NONDET~5; {75905#true} is VALID [2022-04-28 08:35:01,961 INFO L290 TraceCheckUtils]: 4: Hoare triple {75905#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {75905#true} is VALID [2022-04-28 08:35:01,961 INFO L290 TraceCheckUtils]: 5: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:01,961 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {75905#true} {75905#true} #1176#return; {75905#true} is VALID [2022-04-28 08:35:01,961 INFO L290 TraceCheckUtils]: 7: Hoare triple {75905#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {75905#true} is VALID [2022-04-28 08:35:01,961 INFO L290 TraceCheckUtils]: 8: Hoare triple {75905#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {75905#true} is VALID [2022-04-28 08:35:01,961 INFO L272 TraceCheckUtils]: 9: Hoare triple {75905#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {75986#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:01,962 INFO L290 TraceCheckUtils]: 10: Hoare triple {75986#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {75905#true} is VALID [2022-04-28 08:35:01,962 INFO L290 TraceCheckUtils]: 11: Hoare triple {75905#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {75905#true} is VALID [2022-04-28 08:35:01,962 INFO L290 TraceCheckUtils]: 12: Hoare triple {75905#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {75905#true} is VALID [2022-04-28 08:35:01,962 INFO L290 TraceCheckUtils]: 13: Hoare triple {75905#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {75905#true} is VALID [2022-04-28 08:35:01,962 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {75905#true} {75905#true} #1178#return; {75905#true} is VALID [2022-04-28 08:35:01,962 INFO L290 TraceCheckUtils]: 15: Hoare triple {75905#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {75905#true} is VALID [2022-04-28 08:35:01,962 INFO L272 TraceCheckUtils]: 16: Hoare triple {75905#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {75905#true} is VALID [2022-04-28 08:35:01,962 INFO L290 TraceCheckUtils]: 17: Hoare triple {75905#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {75905#true} is VALID [2022-04-28 08:35:01,962 INFO L290 TraceCheckUtils]: 18: Hoare triple {75905#true} assume 0 == ~__BLAST_NONDET~2; {75905#true} is VALID [2022-04-28 08:35:01,962 INFO L290 TraceCheckUtils]: 19: Hoare triple {75905#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {75905#true} is VALID [2022-04-28 08:35:01,962 INFO L290 TraceCheckUtils]: 20: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:01,962 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {75905#true} {75905#true} #1180#return; {75905#true} is VALID [2022-04-28 08:35:01,962 INFO L290 TraceCheckUtils]: 22: Hoare triple {75905#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {75905#true} is VALID [2022-04-28 08:35:01,962 INFO L290 TraceCheckUtils]: 23: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:01,963 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {75905#true} {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #1220#return; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:01,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-04-28 08:35:01,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:01,984 INFO L290 TraceCheckUtils]: 0: Hoare triple {76007#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {75905#true} is VALID [2022-04-28 08:35:01,984 INFO L290 TraceCheckUtils]: 1: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:01,984 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {75905#true} {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #1222#return; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:01,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-04-28 08:35:01,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:01,991 INFO L290 TraceCheckUtils]: 0: Hoare triple {75986#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {75905#true} is VALID [2022-04-28 08:35:01,991 INFO L290 TraceCheckUtils]: 1: Hoare triple {75905#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {75905#true} is VALID [2022-04-28 08:35:01,991 INFO L290 TraceCheckUtils]: 2: Hoare triple {75905#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {75905#true} is VALID [2022-04-28 08:35:01,992 INFO L290 TraceCheckUtils]: 3: Hoare triple {75905#true} assume #res.base == dest.base && #res.offset == dest.offset; {75905#true} is VALID [2022-04-28 08:35:01,992 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {75905#true} {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #1186#return; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-04-28 08:35:02,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:02,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:35:02,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:02,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:35:02,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:02,059 INFO L290 TraceCheckUtils]: 0: Hoare triple {76021#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {75905#true} is VALID [2022-04-28 08:35:02,059 INFO L290 TraceCheckUtils]: 1: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,059 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {75905#true} {75905#true} #1174#return; {75905#true} is VALID [2022-04-28 08:35:02,059 INFO L290 TraceCheckUtils]: 0: Hoare triple {76021#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {75905#true} is VALID [2022-04-28 08:35:02,060 INFO L272 TraceCheckUtils]: 1: Hoare triple {75905#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {76021#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:02,060 INFO L290 TraceCheckUtils]: 2: Hoare triple {76021#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {75905#true} is VALID [2022-04-28 08:35:02,060 INFO L290 TraceCheckUtils]: 3: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,060 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {75905#true} {75905#true} #1174#return; {75905#true} is VALID [2022-04-28 08:35:02,060 INFO L290 TraceCheckUtils]: 5: Hoare triple {75905#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {75905#true} is VALID [2022-04-28 08:35:02,060 INFO L290 TraceCheckUtils]: 6: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,060 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {75905#true} {75905#true} #1210#return; {75905#true} is VALID [2022-04-28 08:35:02,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:35:02,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:02,073 INFO L290 TraceCheckUtils]: 0: Hoare triple {76025#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {75905#true} is VALID [2022-04-28 08:35:02,073 INFO L290 TraceCheckUtils]: 1: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,073 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {75905#true} {75905#true} #1212#return; {75905#true} is VALID [2022-04-28 08:35:02,073 INFO L290 TraceCheckUtils]: 0: Hoare triple {76008#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {75905#true} is VALID [2022-04-28 08:35:02,073 INFO L290 TraceCheckUtils]: 1: Hoare triple {75905#true} assume 0 != ~compRegistered~0; {75905#true} is VALID [2022-04-28 08:35:02,074 INFO L272 TraceCheckUtils]: 2: Hoare triple {75905#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {76021#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:02,074 INFO L290 TraceCheckUtils]: 3: Hoare triple {76021#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {75905#true} is VALID [2022-04-28 08:35:02,075 INFO L272 TraceCheckUtils]: 4: Hoare triple {75905#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {76021#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:02,075 INFO L290 TraceCheckUtils]: 5: Hoare triple {76021#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {75905#true} is VALID [2022-04-28 08:35:02,075 INFO L290 TraceCheckUtils]: 6: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,075 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {75905#true} {75905#true} #1174#return; {75905#true} is VALID [2022-04-28 08:35:02,075 INFO L290 TraceCheckUtils]: 8: Hoare triple {75905#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {75905#true} is VALID [2022-04-28 08:35:02,075 INFO L290 TraceCheckUtils]: 9: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,075 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {75905#true} {75905#true} #1210#return; {75905#true} is VALID [2022-04-28 08:35:02,075 INFO L290 TraceCheckUtils]: 11: Hoare triple {75905#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {75905#true} is VALID [2022-04-28 08:35:02,075 INFO L290 TraceCheckUtils]: 12: Hoare triple {75905#true} assume -1073741802 == ~compRetStatus~0; {75905#true} is VALID [2022-04-28 08:35:02,076 INFO L272 TraceCheckUtils]: 13: Hoare triple {75905#true} call stubMoreProcessingRequired(); {76025#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:35:02,076 INFO L290 TraceCheckUtils]: 14: Hoare triple {76025#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {75905#true} is VALID [2022-04-28 08:35:02,076 INFO L290 TraceCheckUtils]: 15: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,076 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {75905#true} {75905#true} #1212#return; {75905#true} is VALID [2022-04-28 08:35:02,076 INFO L290 TraceCheckUtils]: 17: Hoare triple {75905#true} assume !(0 == ~__BLAST_NONDET~11); {75905#true} is VALID [2022-04-28 08:35:02,076 INFO L290 TraceCheckUtils]: 18: Hoare triple {75905#true} assume 1 == ~__BLAST_NONDET~11; {75905#true} is VALID [2022-04-28 08:35:02,076 INFO L290 TraceCheckUtils]: 19: Hoare triple {75905#true} ~returnVal2~0 := -1073741823; {75905#true} is VALID [2022-04-28 08:35:02,076 INFO L290 TraceCheckUtils]: 20: Hoare triple {75905#true} assume !(~s~0 == ~NP~0); {75905#true} is VALID [2022-04-28 08:35:02,076 INFO L290 TraceCheckUtils]: 21: Hoare triple {75905#true} assume ~s~0 == ~MPR1~0; {75905#true} is VALID [2022-04-28 08:35:02,076 INFO L290 TraceCheckUtils]: 22: Hoare triple {75905#true} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {76020#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-28 08:35:02,077 INFO L290 TraceCheckUtils]: 23: Hoare triple {76020#(or (= ~s~0 1) (= ~s~0 ~NP~0))} #res := ~returnVal2~0; {76020#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-28 08:35:02,077 INFO L290 TraceCheckUtils]: 24: Hoare triple {76020#(or (= ~s~0 1) (= ~s~0 ~NP~0))} assume true; {76020#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-28 08:35:02,078 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {76020#(or (= ~s~0 1) (= ~s~0 ~NP~0))} {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #1192#return; {75982#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,079 INFO L272 TraceCheckUtils]: 0: Hoare triple {75905#true} call ULTIMATE.init(); {75983#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:35:02,079 INFO L290 TraceCheckUtils]: 1: Hoare triple {75983#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {75905#true} is VALID [2022-04-28 08:35:02,079 INFO L290 TraceCheckUtils]: 2: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,079 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {75905#true} {75905#true} #1270#return; {75905#true} is VALID [2022-04-28 08:35:02,079 INFO L272 TraceCheckUtils]: 4: Hoare triple {75905#true} call #t~ret213 := main(); {75905#true} is VALID [2022-04-28 08:35:02,079 INFO L290 TraceCheckUtils]: 5: Hoare triple {75905#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {75905#true} is VALID [2022-04-28 08:35:02,080 INFO L272 TraceCheckUtils]: 6: Hoare triple {75905#true} call _BLAST_init(); {75984#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:02,081 INFO L290 TraceCheckUtils]: 7: Hoare triple {75984#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {75985#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-28 08:35:02,081 INFO L290 TraceCheckUtils]: 8: Hoare triple {75985#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} assume true; {75985#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-28 08:35:02,082 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {75985#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} {75905#true} #1216#return; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,082 INFO L272 TraceCheckUtils]: 10: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {75986#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:02,083 INFO L290 TraceCheckUtils]: 11: Hoare triple {75986#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {75905#true} is VALID [2022-04-28 08:35:02,083 INFO L272 TraceCheckUtils]: 12: Hoare triple {75905#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {75905#true} is VALID [2022-04-28 08:35:02,083 INFO L290 TraceCheckUtils]: 13: Hoare triple {75905#true} ~cond := #in~cond; {75905#true} is VALID [2022-04-28 08:35:02,083 INFO L290 TraceCheckUtils]: 14: Hoare triple {75905#true} assume !(0 == ~cond); {75905#true} is VALID [2022-04-28 08:35:02,083 INFO L290 TraceCheckUtils]: 15: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,083 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {75905#true} {75905#true} #1254#return; {75905#true} is VALID [2022-04-28 08:35:02,083 INFO L290 TraceCheckUtils]: 17: Hoare triple {75905#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {75905#true} is VALID [2022-04-28 08:35:02,083 INFO L290 TraceCheckUtils]: 18: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,084 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {75905#true} {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #1218#return; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,084 INFO L290 TraceCheckUtils]: 20: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,085 INFO L290 TraceCheckUtils]: 21: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,085 INFO L290 TraceCheckUtils]: 22: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,086 INFO L272 TraceCheckUtils]: 23: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {75991#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:35:02,086 INFO L290 TraceCheckUtils]: 24: Hoare triple {75991#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {75905#true} is VALID [2022-04-28 08:35:02,087 INFO L272 TraceCheckUtils]: 25: Hoare triple {75905#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {75991#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:35:02,087 INFO L290 TraceCheckUtils]: 26: Hoare triple {75991#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {75905#true} is VALID [2022-04-28 08:35:02,087 INFO L290 TraceCheckUtils]: 27: Hoare triple {75905#true} assume 0 == ~__BLAST_NONDET~5; {75905#true} is VALID [2022-04-28 08:35:02,087 INFO L290 TraceCheckUtils]: 28: Hoare triple {75905#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {75905#true} is VALID [2022-04-28 08:35:02,087 INFO L290 TraceCheckUtils]: 29: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,087 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {75905#true} {75905#true} #1176#return; {75905#true} is VALID [2022-04-28 08:35:02,088 INFO L290 TraceCheckUtils]: 31: Hoare triple {75905#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {75905#true} is VALID [2022-04-28 08:35:02,088 INFO L290 TraceCheckUtils]: 32: Hoare triple {75905#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {75905#true} is VALID [2022-04-28 08:35:02,088 INFO L272 TraceCheckUtils]: 33: Hoare triple {75905#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {75986#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:02,088 INFO L290 TraceCheckUtils]: 34: Hoare triple {75986#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {75905#true} is VALID [2022-04-28 08:35:02,088 INFO L290 TraceCheckUtils]: 35: Hoare triple {75905#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {75905#true} is VALID [2022-04-28 08:35:02,088 INFO L290 TraceCheckUtils]: 36: Hoare triple {75905#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {75905#true} is VALID [2022-04-28 08:35:02,088 INFO L290 TraceCheckUtils]: 37: Hoare triple {75905#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {75905#true} is VALID [2022-04-28 08:35:02,089 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {75905#true} {75905#true} #1178#return; {75905#true} is VALID [2022-04-28 08:35:02,089 INFO L290 TraceCheckUtils]: 39: Hoare triple {75905#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {75905#true} is VALID [2022-04-28 08:35:02,089 INFO L272 TraceCheckUtils]: 40: Hoare triple {75905#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {75905#true} is VALID [2022-04-28 08:35:02,089 INFO L290 TraceCheckUtils]: 41: Hoare triple {75905#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {75905#true} is VALID [2022-04-28 08:35:02,089 INFO L290 TraceCheckUtils]: 42: Hoare triple {75905#true} assume 0 == ~__BLAST_NONDET~2; {75905#true} is VALID [2022-04-28 08:35:02,089 INFO L290 TraceCheckUtils]: 43: Hoare triple {75905#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {75905#true} is VALID [2022-04-28 08:35:02,089 INFO L290 TraceCheckUtils]: 44: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,089 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {75905#true} {75905#true} #1180#return; {75905#true} is VALID [2022-04-28 08:35:02,089 INFO L290 TraceCheckUtils]: 46: Hoare triple {75905#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {75905#true} is VALID [2022-04-28 08:35:02,089 INFO L290 TraceCheckUtils]: 47: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,090 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {75905#true} {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #1220#return; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,090 INFO L290 TraceCheckUtils]: 49: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,091 INFO L272 TraceCheckUtils]: 50: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} call stub_driver_init(); {76007#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:02,091 INFO L290 TraceCheckUtils]: 51: Hoare triple {76007#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {75905#true} is VALID [2022-04-28 08:35:02,091 INFO L290 TraceCheckUtils]: 52: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,091 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {75905#true} {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #1222#return; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,092 INFO L290 TraceCheckUtils]: 54: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !!(~status~5 >= 0); {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,092 INFO L290 TraceCheckUtils]: 55: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(0 == ~__BLAST_NONDET~0); {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,092 INFO L290 TraceCheckUtils]: 56: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(1 == ~__BLAST_NONDET~0); {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,093 INFO L290 TraceCheckUtils]: 57: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(2 == ~__BLAST_NONDET~0); {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,093 INFO L290 TraceCheckUtils]: 58: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume 3 == ~__BLAST_NONDET~0; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,093 INFO L272 TraceCheckUtils]: 59: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,094 INFO L290 TraceCheckUtils]: 60: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,094 INFO L290 TraceCheckUtils]: 61: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume 0 == #t~mem81 % 256;havoc #t~mem81; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,095 INFO L290 TraceCheckUtils]: 62: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,096 INFO L272 TraceCheckUtils]: 63: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {75986#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:02,096 INFO L290 TraceCheckUtils]: 64: Hoare triple {75986#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {75905#true} is VALID [2022-04-28 08:35:02,096 INFO L290 TraceCheckUtils]: 65: Hoare triple {75905#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {75905#true} is VALID [2022-04-28 08:35:02,096 INFO L290 TraceCheckUtils]: 66: Hoare triple {75905#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {75905#true} is VALID [2022-04-28 08:35:02,096 INFO L290 TraceCheckUtils]: 67: Hoare triple {75905#true} assume #res.base == dest.base && #res.offset == dest.offset; {75905#true} is VALID [2022-04-28 08:35:02,097 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {75905#true} {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #1186#return; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,097 INFO L290 TraceCheckUtils]: 69: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,097 INFO L290 TraceCheckUtils]: 70: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(~s~0 != ~NP~0); {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,098 INFO L290 TraceCheckUtils]: 71: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,099 INFO L290 TraceCheckUtils]: 72: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,099 INFO L272 TraceCheckUtils]: 73: Hoare triple {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {76008#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:02,100 INFO L290 TraceCheckUtils]: 74: Hoare triple {76008#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {75905#true} is VALID [2022-04-28 08:35:02,100 INFO L290 TraceCheckUtils]: 75: Hoare triple {75905#true} assume 0 != ~compRegistered~0; {75905#true} is VALID [2022-04-28 08:35:02,100 INFO L272 TraceCheckUtils]: 76: Hoare triple {75905#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {76021#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:02,100 INFO L290 TraceCheckUtils]: 77: Hoare triple {76021#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {75905#true} is VALID [2022-04-28 08:35:02,101 INFO L272 TraceCheckUtils]: 78: Hoare triple {75905#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {76021#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:02,101 INFO L290 TraceCheckUtils]: 79: Hoare triple {76021#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {75905#true} is VALID [2022-04-28 08:35:02,101 INFO L290 TraceCheckUtils]: 80: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,101 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {75905#true} {75905#true} #1174#return; {75905#true} is VALID [2022-04-28 08:35:02,101 INFO L290 TraceCheckUtils]: 82: Hoare triple {75905#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {75905#true} is VALID [2022-04-28 08:35:02,101 INFO L290 TraceCheckUtils]: 83: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,101 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {75905#true} {75905#true} #1210#return; {75905#true} is VALID [2022-04-28 08:35:02,102 INFO L290 TraceCheckUtils]: 85: Hoare triple {75905#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {75905#true} is VALID [2022-04-28 08:35:02,102 INFO L290 TraceCheckUtils]: 86: Hoare triple {75905#true} assume -1073741802 == ~compRetStatus~0; {75905#true} is VALID [2022-04-28 08:35:02,102 INFO L272 TraceCheckUtils]: 87: Hoare triple {75905#true} call stubMoreProcessingRequired(); {76025#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:35:02,102 INFO L290 TraceCheckUtils]: 88: Hoare triple {76025#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {75905#true} is VALID [2022-04-28 08:35:02,102 INFO L290 TraceCheckUtils]: 89: Hoare triple {75905#true} assume true; {75905#true} is VALID [2022-04-28 08:35:02,102 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {75905#true} {75905#true} #1212#return; {75905#true} is VALID [2022-04-28 08:35:02,102 INFO L290 TraceCheckUtils]: 91: Hoare triple {75905#true} assume !(0 == ~__BLAST_NONDET~11); {75905#true} is VALID [2022-04-28 08:35:02,102 INFO L290 TraceCheckUtils]: 92: Hoare triple {75905#true} assume 1 == ~__BLAST_NONDET~11; {75905#true} is VALID [2022-04-28 08:35:02,102 INFO L290 TraceCheckUtils]: 93: Hoare triple {75905#true} ~returnVal2~0 := -1073741823; {75905#true} is VALID [2022-04-28 08:35:02,102 INFO L290 TraceCheckUtils]: 94: Hoare triple {75905#true} assume !(~s~0 == ~NP~0); {75905#true} is VALID [2022-04-28 08:35:02,102 INFO L290 TraceCheckUtils]: 95: Hoare triple {75905#true} assume ~s~0 == ~MPR1~0; {75905#true} is VALID [2022-04-28 08:35:02,103 INFO L290 TraceCheckUtils]: 96: Hoare triple {75905#true} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {76020#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-28 08:35:02,103 INFO L290 TraceCheckUtils]: 97: Hoare triple {76020#(or (= ~s~0 1) (= ~s~0 ~NP~0))} #res := ~returnVal2~0; {76020#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-28 08:35:02,103 INFO L290 TraceCheckUtils]: 98: Hoare triple {76020#(or (= ~s~0 1) (= ~s~0 ~NP~0))} assume true; {76020#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-28 08:35:02,104 INFO L284 TraceCheckUtils]: 99: Hoare quadruple {76020#(or (= ~s~0 1) (= ~s~0 ~NP~0))} {75913#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #1192#return; {75982#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,104 INFO L290 TraceCheckUtils]: 100: Hoare triple {75982#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {75982#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,105 INFO L290 TraceCheckUtils]: 101: Hoare triple {75982#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume 259 == ~status~3; {75982#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,105 INFO L272 TraceCheckUtils]: 102: Hoare triple {75982#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} call #t~ret110 := KeWaitForSingleObject(~#event~1.base, ~#event~1.offset, 0, 0, 0, 0, 0); {75982#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,106 INFO L290 TraceCheckUtils]: 103: Hoare triple {75982#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {75982#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:35:02,106 INFO L290 TraceCheckUtils]: 104: Hoare triple {75982#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume ~s~0 == ~MPR3~0; {75906#false} is VALID [2022-04-28 08:35:02,106 INFO L290 TraceCheckUtils]: 105: Hoare triple {75906#false} assume !(1 == ~setEventCalled~0); {75906#false} is VALID [2022-04-28 08:35:02,106 INFO L290 TraceCheckUtils]: 106: Hoare triple {75906#false} assume !(1 == ~customIrp~0); {75906#false} is VALID [2022-04-28 08:35:02,106 INFO L290 TraceCheckUtils]: 107: Hoare triple {75906#false} assume ~s~0 == ~MPR3~0; {75906#false} is VALID [2022-04-28 08:35:02,106 INFO L272 TraceCheckUtils]: 108: Hoare triple {75906#false} call errorFn(); {75906#false} is VALID [2022-04-28 08:35:02,107 INFO L290 TraceCheckUtils]: 109: Hoare triple {75906#false} assume !false; {75906#false} is VALID [2022-04-28 08:35:02,107 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 08:35:02,107 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:35:02,107 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [674968962] [2022-04-28 08:35:02,107 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [674968962] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:35:02,107 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:35:02,107 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:35:02,107 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:35:02,108 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [374479452] [2022-04-28 08:35:02,108 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [374479452] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:35:02,108 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:35:02,108 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:35:02,108 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [887882762] [2022-04-28 08:35:02,108 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:35:02,109 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 5.571428571428571) internal successors, (78), 6 states have internal predecessors, (78), 4 states have call successors, (18), 12 states have call predecessors, (18), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) Word has length 110 [2022-04-28 08:35:02,109 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:35:02,109 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 5.571428571428571) internal successors, (78), 6 states have internal predecessors, (78), 4 states have call successors, (18), 12 states have call predecessors, (18), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) [2022-04-28 08:35:02,197 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 110 edges. 110 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:35:02,198 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-28 08:35:02,198 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:35:02,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-28 08:35:02,198 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=140, Unknown=0, NotChecked=0, Total=182 [2022-04-28 08:35:02,199 INFO L87 Difference]: Start difference. First operand 337 states and 393 transitions. Second operand has 14 states, 14 states have (on average 5.571428571428571) internal successors, (78), 6 states have internal predecessors, (78), 4 states have call successors, (18), 12 states have call predecessors, (18), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) [2022-04-28 08:35:04,325 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:35:09,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:35:09,775 INFO L93 Difference]: Finished difference Result 426 states and 498 transitions. [2022-04-28 08:35:09,775 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-04-28 08:35:09,775 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 5.571428571428571) internal successors, (78), 6 states have internal predecessors, (78), 4 states have call successors, (18), 12 states have call predecessors, (18), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) Word has length 110 [2022-04-28 08:35:09,775 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:35:09,775 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 5.571428571428571) internal successors, (78), 6 states have internal predecessors, (78), 4 states have call successors, (18), 12 states have call predecessors, (18), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) [2022-04-28 08:35:09,777 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 271 transitions. [2022-04-28 08:35:09,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 5.571428571428571) internal successors, (78), 6 states have internal predecessors, (78), 4 states have call successors, (18), 12 states have call predecessors, (18), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) [2022-04-28 08:35:09,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 271 transitions. [2022-04-28 08:35:09,779 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 21 states and 271 transitions. [2022-04-28 08:35:10,047 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 271 edges. 271 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:35:10,060 INFO L225 Difference]: With dead ends: 426 [2022-04-28 08:35:10,061 INFO L226 Difference]: Without dead ends: 379 [2022-04-28 08:35:10,061 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 58 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 131 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=258, Invalid=672, Unknown=0, NotChecked=0, Total=930 [2022-04-28 08:35:10,061 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 681 mSDsluCounter, 195 mSDsCounter, 0 mSdLazyCounter, 447 mSolverCounterSat, 306 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 686 SdHoareTripleChecker+Valid, 323 SdHoareTripleChecker+Invalid, 754 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 306 IncrementalHoareTripleChecker+Valid, 447 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.6s IncrementalHoareTripleChecker+Time [2022-04-28 08:35:10,062 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [686 Valid, 323 Invalid, 754 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [306 Valid, 447 Invalid, 1 Unknown, 0 Unchecked, 3.6s Time] [2022-04-28 08:35:10,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 379 states. [2022-04-28 08:35:10,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 379 to 331. [2022-04-28 08:35:10,907 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:35:10,907 INFO L82 GeneralOperation]: Start isEquivalent. First operand 379 states. Second operand has 331 states, 256 states have (on average 1.18359375) internal successors, (303), 260 states have internal predecessors, (303), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:35:10,908 INFO L74 IsIncluded]: Start isIncluded. First operand 379 states. Second operand has 331 states, 256 states have (on average 1.18359375) internal successors, (303), 260 states have internal predecessors, (303), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:35:10,908 INFO L87 Difference]: Start difference. First operand 379 states. Second operand has 331 states, 256 states have (on average 1.18359375) internal successors, (303), 260 states have internal predecessors, (303), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:35:10,913 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:35:10,913 INFO L93 Difference]: Finished difference Result 379 states and 439 transitions. [2022-04-28 08:35:10,913 INFO L276 IsEmpty]: Start isEmpty. Operand 379 states and 439 transitions. [2022-04-28 08:35:10,913 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:35:10,913 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:35:10,913 INFO L74 IsIncluded]: Start isIncluded. First operand has 331 states, 256 states have (on average 1.18359375) internal successors, (303), 260 states have internal predecessors, (303), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) Second operand 379 states. [2022-04-28 08:35:10,914 INFO L87 Difference]: Start difference. First operand has 331 states, 256 states have (on average 1.18359375) internal successors, (303), 260 states have internal predecessors, (303), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) Second operand 379 states. [2022-04-28 08:35:10,918 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:35:10,918 INFO L93 Difference]: Finished difference Result 379 states and 439 transitions. [2022-04-28 08:35:10,918 INFO L276 IsEmpty]: Start isEmpty. Operand 379 states and 439 transitions. [2022-04-28 08:35:10,919 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:35:10,919 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:35:10,919 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:35:10,919 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:35:10,919 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 331 states, 256 states have (on average 1.18359375) internal successors, (303), 260 states have internal predecessors, (303), 36 states have call successors, (36), 34 states have call predecessors, (36), 38 states have return successors, (40), 36 states have call predecessors, (40), 32 states have call successors, (40) [2022-04-28 08:35:10,924 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 331 states to 331 states and 379 transitions. [2022-04-28 08:35:10,924 INFO L78 Accepts]: Start accepts. Automaton has 331 states and 379 transitions. Word has length 110 [2022-04-28 08:35:10,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:35:10,924 INFO L495 AbstractCegarLoop]: Abstraction has 331 states and 379 transitions. [2022-04-28 08:35:10,924 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 5.571428571428571) internal successors, (78), 6 states have internal predecessors, (78), 4 states have call successors, (18), 12 states have call predecessors, (18), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) [2022-04-28 08:35:10,925 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 331 states and 379 transitions. [2022-04-28 08:35:11,836 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 379 edges. 379 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:35:11,836 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 379 transitions. [2022-04-28 08:35:11,837 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-04-28 08:35:11,837 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:35:11,837 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:35:11,837 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable31 [2022-04-28 08:35:11,837 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:35:11,837 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:35:11,837 INFO L85 PathProgramCache]: Analyzing trace with hash -1464166070, now seen corresponding path program 1 times [2022-04-28 08:35:11,837 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:35:11,837 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [975799880] [2022-04-28 08:35:11,839 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 0 HavocedVariables, 4 AssignedVariables, -1 ReadonlyVariables, Eigenvalues: {}, 0 SequentialAcceleration, 0 AlternatingAcceleration, 0 QuantifierFreeResult [2022-04-28 08:35:11,839 WARN L91 AcceleratorJordan]: Jordan acceleration failed, because NONINTEGER_UPDATE [2022-04-28 08:35:11,839 INFO L274 tedInterpolationCore]: Could not compute an accelerate. [2022-04-28 08:35:11,839 INFO L85 PathProgramCache]: Analyzing trace with hash -1464166070, now seen corresponding path program 2 times [2022-04-28 08:35:11,839 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:35:11,839 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1175402870] [2022-04-28 08:35:11,839 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:35:11,839 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:35:11,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:12,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:35:12,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:12,010 INFO L290 TraceCheckUtils]: 0: Hoare triple {78418#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {78340#true} is VALID [2022-04-28 08:35:12,010 INFO L290 TraceCheckUtils]: 1: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,010 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {78340#true} {78340#true} #1270#return; {78340#true} is VALID [2022-04-28 08:35:12,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:35:12,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:12,042 INFO L290 TraceCheckUtils]: 0: Hoare triple {78419#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {78340#true} is VALID [2022-04-28 08:35:12,042 INFO L290 TraceCheckUtils]: 1: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,042 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {78340#true} {78340#true} #1216#return; {78340#true} is VALID [2022-04-28 08:35:12,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:35:12,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:12,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:35:12,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:12,083 INFO L290 TraceCheckUtils]: 0: Hoare triple {78340#true} ~cond := #in~cond; {78340#true} is VALID [2022-04-28 08:35:12,083 INFO L290 TraceCheckUtils]: 1: Hoare triple {78340#true} assume !(0 == ~cond); {78340#true} is VALID [2022-04-28 08:35:12,083 INFO L290 TraceCheckUtils]: 2: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,083 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {78340#true} {78340#true} #1254#return; {78340#true} is VALID [2022-04-28 08:35:12,083 INFO L290 TraceCheckUtils]: 0: Hoare triple {78420#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {78340#true} is VALID [2022-04-28 08:35:12,083 INFO L272 TraceCheckUtils]: 1: Hoare triple {78340#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {78340#true} is VALID [2022-04-28 08:35:12,083 INFO L290 TraceCheckUtils]: 2: Hoare triple {78340#true} ~cond := #in~cond; {78340#true} is VALID [2022-04-28 08:35:12,083 INFO L290 TraceCheckUtils]: 3: Hoare triple {78340#true} assume !(0 == ~cond); {78340#true} is VALID [2022-04-28 08:35:12,083 INFO L290 TraceCheckUtils]: 4: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,083 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {78340#true} {78340#true} #1254#return; {78340#true} is VALID [2022-04-28 08:35:12,083 INFO L290 TraceCheckUtils]: 6: Hoare triple {78340#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {78340#true} is VALID [2022-04-28 08:35:12,084 INFO L290 TraceCheckUtils]: 7: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,084 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {78340#true} {78340#true} #1218#return; {78340#true} is VALID [2022-04-28 08:35:12,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:35:12,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:12,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:35:12,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:12,120 INFO L290 TraceCheckUtils]: 0: Hoare triple {78425#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {78340#true} is VALID [2022-04-28 08:35:12,120 INFO L290 TraceCheckUtils]: 1: Hoare triple {78340#true} assume 0 == ~__BLAST_NONDET~5; {78340#true} is VALID [2022-04-28 08:35:12,120 INFO L290 TraceCheckUtils]: 2: Hoare triple {78340#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {78340#true} is VALID [2022-04-28 08:35:12,120 INFO L290 TraceCheckUtils]: 3: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,121 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {78340#true} {78340#true} #1176#return; {78340#true} is VALID [2022-04-28 08:35:12,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:35:12,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:12,126 INFO L290 TraceCheckUtils]: 0: Hoare triple {78420#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {78340#true} is VALID [2022-04-28 08:35:12,126 INFO L290 TraceCheckUtils]: 1: Hoare triple {78340#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {78340#true} is VALID [2022-04-28 08:35:12,126 INFO L290 TraceCheckUtils]: 2: Hoare triple {78340#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {78340#true} is VALID [2022-04-28 08:35:12,126 INFO L290 TraceCheckUtils]: 3: Hoare triple {78340#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {78340#true} is VALID [2022-04-28 08:35:12,127 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {78340#true} {78340#true} #1178#return; {78340#true} is VALID [2022-04-28 08:35:12,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-04-28 08:35:12,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:12,131 INFO L290 TraceCheckUtils]: 0: Hoare triple {78340#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {78340#true} is VALID [2022-04-28 08:35:12,131 INFO L290 TraceCheckUtils]: 1: Hoare triple {78340#true} assume 0 == ~__BLAST_NONDET~2; {78340#true} is VALID [2022-04-28 08:35:12,131 INFO L290 TraceCheckUtils]: 2: Hoare triple {78340#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {78340#true} is VALID [2022-04-28 08:35:12,131 INFO L290 TraceCheckUtils]: 3: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,131 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {78340#true} {78340#true} #1180#return; {78340#true} is VALID [2022-04-28 08:35:12,132 INFO L290 TraceCheckUtils]: 0: Hoare triple {78425#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {78340#true} is VALID [2022-04-28 08:35:12,133 INFO L272 TraceCheckUtils]: 1: Hoare triple {78340#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {78425#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:35:12,133 INFO L290 TraceCheckUtils]: 2: Hoare triple {78425#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {78340#true} is VALID [2022-04-28 08:35:12,133 INFO L290 TraceCheckUtils]: 3: Hoare triple {78340#true} assume 0 == ~__BLAST_NONDET~5; {78340#true} is VALID [2022-04-28 08:35:12,133 INFO L290 TraceCheckUtils]: 4: Hoare triple {78340#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {78340#true} is VALID [2022-04-28 08:35:12,133 INFO L290 TraceCheckUtils]: 5: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,133 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {78340#true} {78340#true} #1176#return; {78340#true} is VALID [2022-04-28 08:35:12,133 INFO L290 TraceCheckUtils]: 7: Hoare triple {78340#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {78340#true} is VALID [2022-04-28 08:35:12,133 INFO L290 TraceCheckUtils]: 8: Hoare triple {78340#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {78340#true} is VALID [2022-04-28 08:35:12,134 INFO L272 TraceCheckUtils]: 9: Hoare triple {78340#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {78420#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:12,134 INFO L290 TraceCheckUtils]: 10: Hoare triple {78420#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {78340#true} is VALID [2022-04-28 08:35:12,134 INFO L290 TraceCheckUtils]: 11: Hoare triple {78340#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {78340#true} is VALID [2022-04-28 08:35:12,134 INFO L290 TraceCheckUtils]: 12: Hoare triple {78340#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {78340#true} is VALID [2022-04-28 08:35:12,134 INFO L290 TraceCheckUtils]: 13: Hoare triple {78340#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {78340#true} is VALID [2022-04-28 08:35:12,134 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {78340#true} {78340#true} #1178#return; {78340#true} is VALID [2022-04-28 08:35:12,134 INFO L290 TraceCheckUtils]: 15: Hoare triple {78340#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {78340#true} is VALID [2022-04-28 08:35:12,134 INFO L272 TraceCheckUtils]: 16: Hoare triple {78340#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {78340#true} is VALID [2022-04-28 08:35:12,134 INFO L290 TraceCheckUtils]: 17: Hoare triple {78340#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {78340#true} is VALID [2022-04-28 08:35:12,134 INFO L290 TraceCheckUtils]: 18: Hoare triple {78340#true} assume 0 == ~__BLAST_NONDET~2; {78340#true} is VALID [2022-04-28 08:35:12,134 INFO L290 TraceCheckUtils]: 19: Hoare triple {78340#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {78340#true} is VALID [2022-04-28 08:35:12,135 INFO L290 TraceCheckUtils]: 20: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,135 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {78340#true} {78340#true} #1180#return; {78340#true} is VALID [2022-04-28 08:35:12,135 INFO L290 TraceCheckUtils]: 22: Hoare triple {78340#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {78340#true} is VALID [2022-04-28 08:35:12,135 INFO L290 TraceCheckUtils]: 23: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,135 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {78340#true} {78340#true} #1220#return; {78340#true} is VALID [2022-04-28 08:35:12,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-04-28 08:35:12,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:12,153 INFO L290 TraceCheckUtils]: 0: Hoare triple {78441#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {78340#true} is VALID [2022-04-28 08:35:12,153 INFO L290 TraceCheckUtils]: 1: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,154 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {78340#true} {78340#true} #1222#return; {78340#true} is VALID [2022-04-28 08:35:12,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-04-28 08:35:12,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:12,159 INFO L290 TraceCheckUtils]: 0: Hoare triple {78420#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {78340#true} is VALID [2022-04-28 08:35:12,159 INFO L290 TraceCheckUtils]: 1: Hoare triple {78340#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {78340#true} is VALID [2022-04-28 08:35:12,159 INFO L290 TraceCheckUtils]: 2: Hoare triple {78340#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {78340#true} is VALID [2022-04-28 08:35:12,159 INFO L290 TraceCheckUtils]: 3: Hoare triple {78340#true} assume #res.base == dest.base && #res.offset == dest.offset; {78340#true} is VALID [2022-04-28 08:35:12,159 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {78340#true} {78340#true} #1186#return; {78340#true} is VALID [2022-04-28 08:35:12,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-04-28 08:35:12,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:12,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:35:12,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:12,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:35:12,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:12,226 INFO L290 TraceCheckUtils]: 0: Hoare triple {78456#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {78340#true} is VALID [2022-04-28 08:35:12,227 INFO L290 TraceCheckUtils]: 1: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,227 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {78340#true} {78340#true} #1174#return; {78340#true} is VALID [2022-04-28 08:35:12,227 INFO L290 TraceCheckUtils]: 0: Hoare triple {78456#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {78340#true} is VALID [2022-04-28 08:35:12,227 INFO L272 TraceCheckUtils]: 1: Hoare triple {78340#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {78456#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:12,227 INFO L290 TraceCheckUtils]: 2: Hoare triple {78456#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {78340#true} is VALID [2022-04-28 08:35:12,227 INFO L290 TraceCheckUtils]: 3: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,228 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {78340#true} {78340#true} #1174#return; {78340#true} is VALID [2022-04-28 08:35:12,228 INFO L290 TraceCheckUtils]: 5: Hoare triple {78340#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {78340#true} is VALID [2022-04-28 08:35:12,228 INFO L290 TraceCheckUtils]: 6: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,228 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {78340#true} {78340#true} #1210#return; {78340#true} is VALID [2022-04-28 08:35:12,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:35:12,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:12,241 INFO L290 TraceCheckUtils]: 0: Hoare triple {78460#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {78340#true} is VALID [2022-04-28 08:35:12,241 INFO L290 TraceCheckUtils]: 1: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,241 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {78340#true} {78340#true} #1212#return; {78340#true} is VALID [2022-04-28 08:35:12,241 INFO L290 TraceCheckUtils]: 0: Hoare triple {78442#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {78340#true} is VALID [2022-04-28 08:35:12,242 INFO L290 TraceCheckUtils]: 1: Hoare triple {78340#true} assume 0 != ~compRegistered~0; {78340#true} is VALID [2022-04-28 08:35:12,242 INFO L272 TraceCheckUtils]: 2: Hoare triple {78340#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {78456#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:12,242 INFO L290 TraceCheckUtils]: 3: Hoare triple {78456#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {78340#true} is VALID [2022-04-28 08:35:12,243 INFO L272 TraceCheckUtils]: 4: Hoare triple {78340#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {78456#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:12,243 INFO L290 TraceCheckUtils]: 5: Hoare triple {78456#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {78340#true} is VALID [2022-04-28 08:35:12,243 INFO L290 TraceCheckUtils]: 6: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,243 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {78340#true} {78340#true} #1174#return; {78340#true} is VALID [2022-04-28 08:35:12,243 INFO L290 TraceCheckUtils]: 8: Hoare triple {78340#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {78340#true} is VALID [2022-04-28 08:35:12,243 INFO L290 TraceCheckUtils]: 9: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,243 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {78340#true} {78340#true} #1210#return; {78340#true} is VALID [2022-04-28 08:35:12,244 INFO L290 TraceCheckUtils]: 11: Hoare triple {78340#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {78340#true} is VALID [2022-04-28 08:35:12,244 INFO L290 TraceCheckUtils]: 12: Hoare triple {78340#true} assume -1073741802 == ~compRetStatus~0; {78340#true} is VALID [2022-04-28 08:35:12,244 INFO L272 TraceCheckUtils]: 13: Hoare triple {78340#true} call stubMoreProcessingRequired(); {78460#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:35:12,244 INFO L290 TraceCheckUtils]: 14: Hoare triple {78460#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {78340#true} is VALID [2022-04-28 08:35:12,244 INFO L290 TraceCheckUtils]: 15: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,244 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {78340#true} {78340#true} #1212#return; {78340#true} is VALID [2022-04-28 08:35:12,244 INFO L290 TraceCheckUtils]: 17: Hoare triple {78340#true} assume !(0 == ~__BLAST_NONDET~11); {78340#true} is VALID [2022-04-28 08:35:12,244 INFO L290 TraceCheckUtils]: 18: Hoare triple {78340#true} assume !(1 == ~__BLAST_NONDET~11); {78340#true} is VALID [2022-04-28 08:35:12,245 INFO L290 TraceCheckUtils]: 19: Hoare triple {78340#true} ~returnVal2~0 := 259; {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:12,245 INFO L290 TraceCheckUtils]: 20: Hoare triple {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:12,245 INFO L290 TraceCheckUtils]: 21: Hoare triple {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~MPR1~0; {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:12,245 INFO L290 TraceCheckUtils]: 22: Hoare triple {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:12,246 INFO L290 TraceCheckUtils]: 23: Hoare triple {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {78455#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2022-04-28 08:35:12,246 INFO L290 TraceCheckUtils]: 24: Hoare triple {78455#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} assume true; {78455#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2022-04-28 08:35:12,247 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {78455#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} {78340#true} #1192#return; {78416#(and (<= 259 |KbFilter_PnP_#t~ret109|) (<= |KbFilter_PnP_#t~ret109| 259))} is VALID [2022-04-28 08:35:12,248 INFO L272 TraceCheckUtils]: 0: Hoare triple {78340#true} call ULTIMATE.init(); {78418#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:35:12,248 INFO L290 TraceCheckUtils]: 1: Hoare triple {78418#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {78340#true} is VALID [2022-04-28 08:35:12,248 INFO L290 TraceCheckUtils]: 2: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,248 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {78340#true} {78340#true} #1270#return; {78340#true} is VALID [2022-04-28 08:35:12,248 INFO L272 TraceCheckUtils]: 4: Hoare triple {78340#true} call #t~ret213 := main(); {78340#true} is VALID [2022-04-28 08:35:12,248 INFO L290 TraceCheckUtils]: 5: Hoare triple {78340#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {78340#true} is VALID [2022-04-28 08:35:12,249 INFO L272 TraceCheckUtils]: 6: Hoare triple {78340#true} call _BLAST_init(); {78419#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:12,249 INFO L290 TraceCheckUtils]: 7: Hoare triple {78419#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {78340#true} is VALID [2022-04-28 08:35:12,250 INFO L290 TraceCheckUtils]: 8: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,250 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {78340#true} {78340#true} #1216#return; {78340#true} is VALID [2022-04-28 08:35:12,250 INFO L272 TraceCheckUtils]: 10: Hoare triple {78340#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {78420#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:12,250 INFO L290 TraceCheckUtils]: 11: Hoare triple {78420#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {78340#true} is VALID [2022-04-28 08:35:12,250 INFO L272 TraceCheckUtils]: 12: Hoare triple {78340#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {78340#true} is VALID [2022-04-28 08:35:12,251 INFO L290 TraceCheckUtils]: 13: Hoare triple {78340#true} ~cond := #in~cond; {78340#true} is VALID [2022-04-28 08:35:12,251 INFO L290 TraceCheckUtils]: 14: Hoare triple {78340#true} assume !(0 == ~cond); {78340#true} is VALID [2022-04-28 08:35:12,251 INFO L290 TraceCheckUtils]: 15: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,251 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {78340#true} {78340#true} #1254#return; {78340#true} is VALID [2022-04-28 08:35:12,251 INFO L290 TraceCheckUtils]: 17: Hoare triple {78340#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {78340#true} is VALID [2022-04-28 08:35:12,251 INFO L290 TraceCheckUtils]: 18: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,251 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {78340#true} {78340#true} #1218#return; {78340#true} is VALID [2022-04-28 08:35:12,251 INFO L290 TraceCheckUtils]: 20: Hoare triple {78340#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {78340#true} is VALID [2022-04-28 08:35:12,251 INFO L290 TraceCheckUtils]: 21: Hoare triple {78340#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {78340#true} is VALID [2022-04-28 08:35:12,251 INFO L290 TraceCheckUtils]: 22: Hoare triple {78340#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {78340#true} is VALID [2022-04-28 08:35:12,252 INFO L272 TraceCheckUtils]: 23: Hoare triple {78340#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {78425#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:35:12,252 INFO L290 TraceCheckUtils]: 24: Hoare triple {78425#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {78340#true} is VALID [2022-04-28 08:35:12,253 INFO L272 TraceCheckUtils]: 25: Hoare triple {78340#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {78425#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:35:12,253 INFO L290 TraceCheckUtils]: 26: Hoare triple {78425#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {78340#true} is VALID [2022-04-28 08:35:12,253 INFO L290 TraceCheckUtils]: 27: Hoare triple {78340#true} assume 0 == ~__BLAST_NONDET~5; {78340#true} is VALID [2022-04-28 08:35:12,253 INFO L290 TraceCheckUtils]: 28: Hoare triple {78340#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {78340#true} is VALID [2022-04-28 08:35:12,253 INFO L290 TraceCheckUtils]: 29: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,253 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {78340#true} {78340#true} #1176#return; {78340#true} is VALID [2022-04-28 08:35:12,253 INFO L290 TraceCheckUtils]: 31: Hoare triple {78340#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {78340#true} is VALID [2022-04-28 08:35:12,254 INFO L290 TraceCheckUtils]: 32: Hoare triple {78340#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {78340#true} is VALID [2022-04-28 08:35:12,254 INFO L272 TraceCheckUtils]: 33: Hoare triple {78340#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {78420#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:12,254 INFO L290 TraceCheckUtils]: 34: Hoare triple {78420#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {78340#true} is VALID [2022-04-28 08:35:12,254 INFO L290 TraceCheckUtils]: 35: Hoare triple {78340#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {78340#true} is VALID [2022-04-28 08:35:12,254 INFO L290 TraceCheckUtils]: 36: Hoare triple {78340#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {78340#true} is VALID [2022-04-28 08:35:12,254 INFO L290 TraceCheckUtils]: 37: Hoare triple {78340#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {78340#true} is VALID [2022-04-28 08:35:12,255 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {78340#true} {78340#true} #1178#return; {78340#true} is VALID [2022-04-28 08:35:12,255 INFO L290 TraceCheckUtils]: 39: Hoare triple {78340#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {78340#true} is VALID [2022-04-28 08:35:12,255 INFO L272 TraceCheckUtils]: 40: Hoare triple {78340#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {78340#true} is VALID [2022-04-28 08:35:12,255 INFO L290 TraceCheckUtils]: 41: Hoare triple {78340#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {78340#true} is VALID [2022-04-28 08:35:12,255 INFO L290 TraceCheckUtils]: 42: Hoare triple {78340#true} assume 0 == ~__BLAST_NONDET~2; {78340#true} is VALID [2022-04-28 08:35:12,255 INFO L290 TraceCheckUtils]: 43: Hoare triple {78340#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {78340#true} is VALID [2022-04-28 08:35:12,255 INFO L290 TraceCheckUtils]: 44: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,255 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {78340#true} {78340#true} #1180#return; {78340#true} is VALID [2022-04-28 08:35:12,255 INFO L290 TraceCheckUtils]: 46: Hoare triple {78340#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {78340#true} is VALID [2022-04-28 08:35:12,255 INFO L290 TraceCheckUtils]: 47: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,255 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {78340#true} {78340#true} #1220#return; {78340#true} is VALID [2022-04-28 08:35:12,255 INFO L290 TraceCheckUtils]: 49: Hoare triple {78340#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {78340#true} is VALID [2022-04-28 08:35:12,256 INFO L272 TraceCheckUtils]: 50: Hoare triple {78340#true} call stub_driver_init(); {78441#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:12,256 INFO L290 TraceCheckUtils]: 51: Hoare triple {78441#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {78340#true} is VALID [2022-04-28 08:35:12,256 INFO L290 TraceCheckUtils]: 52: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,256 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {78340#true} {78340#true} #1222#return; {78340#true} is VALID [2022-04-28 08:35:12,256 INFO L290 TraceCheckUtils]: 54: Hoare triple {78340#true} assume !!(~status~5 >= 0); {78340#true} is VALID [2022-04-28 08:35:12,256 INFO L290 TraceCheckUtils]: 55: Hoare triple {78340#true} assume !(0 == ~__BLAST_NONDET~0); {78340#true} is VALID [2022-04-28 08:35:12,256 INFO L290 TraceCheckUtils]: 56: Hoare triple {78340#true} assume !(1 == ~__BLAST_NONDET~0); {78340#true} is VALID [2022-04-28 08:35:12,256 INFO L290 TraceCheckUtils]: 57: Hoare triple {78340#true} assume !(2 == ~__BLAST_NONDET~0); {78340#true} is VALID [2022-04-28 08:35:12,256 INFO L290 TraceCheckUtils]: 58: Hoare triple {78340#true} assume 3 == ~__BLAST_NONDET~0; {78340#true} is VALID [2022-04-28 08:35:12,256 INFO L272 TraceCheckUtils]: 59: Hoare triple {78340#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {78340#true} is VALID [2022-04-28 08:35:12,257 INFO L290 TraceCheckUtils]: 60: Hoare triple {78340#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {78340#true} is VALID [2022-04-28 08:35:12,257 INFO L290 TraceCheckUtils]: 61: Hoare triple {78340#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {78340#true} is VALID [2022-04-28 08:35:12,257 INFO L290 TraceCheckUtils]: 62: Hoare triple {78340#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {78340#true} is VALID [2022-04-28 08:35:12,257 INFO L272 TraceCheckUtils]: 63: Hoare triple {78340#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {78420#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:12,257 INFO L290 TraceCheckUtils]: 64: Hoare triple {78420#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {78340#true} is VALID [2022-04-28 08:35:12,258 INFO L290 TraceCheckUtils]: 65: Hoare triple {78340#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {78340#true} is VALID [2022-04-28 08:35:12,258 INFO L290 TraceCheckUtils]: 66: Hoare triple {78340#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {78340#true} is VALID [2022-04-28 08:35:12,258 INFO L290 TraceCheckUtils]: 67: Hoare triple {78340#true} assume #res.base == dest.base && #res.offset == dest.offset; {78340#true} is VALID [2022-04-28 08:35:12,258 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {78340#true} {78340#true} #1186#return; {78340#true} is VALID [2022-04-28 08:35:12,258 INFO L290 TraceCheckUtils]: 69: Hoare triple {78340#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {78340#true} is VALID [2022-04-28 08:35:12,258 INFO L290 TraceCheckUtils]: 70: Hoare triple {78340#true} assume !(~s~0 != ~NP~0); {78340#true} is VALID [2022-04-28 08:35:12,258 INFO L290 TraceCheckUtils]: 71: Hoare triple {78340#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {78340#true} is VALID [2022-04-28 08:35:12,258 INFO L290 TraceCheckUtils]: 72: Hoare triple {78340#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {78340#true} is VALID [2022-04-28 08:35:12,259 INFO L272 TraceCheckUtils]: 73: Hoare triple {78340#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {78442#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:12,259 INFO L290 TraceCheckUtils]: 74: Hoare triple {78442#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {78340#true} is VALID [2022-04-28 08:35:12,259 INFO L290 TraceCheckUtils]: 75: Hoare triple {78340#true} assume 0 != ~compRegistered~0; {78340#true} is VALID [2022-04-28 08:35:12,260 INFO L272 TraceCheckUtils]: 76: Hoare triple {78340#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {78456#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:12,260 INFO L290 TraceCheckUtils]: 77: Hoare triple {78456#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {78340#true} is VALID [2022-04-28 08:35:12,260 INFO L272 TraceCheckUtils]: 78: Hoare triple {78340#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {78456#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:12,260 INFO L290 TraceCheckUtils]: 79: Hoare triple {78456#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {78340#true} is VALID [2022-04-28 08:35:12,260 INFO L290 TraceCheckUtils]: 80: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,260 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {78340#true} {78340#true} #1174#return; {78340#true} is VALID [2022-04-28 08:35:12,260 INFO L290 TraceCheckUtils]: 82: Hoare triple {78340#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {78340#true} is VALID [2022-04-28 08:35:12,261 INFO L290 TraceCheckUtils]: 83: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,261 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {78340#true} {78340#true} #1210#return; {78340#true} is VALID [2022-04-28 08:35:12,261 INFO L290 TraceCheckUtils]: 85: Hoare triple {78340#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {78340#true} is VALID [2022-04-28 08:35:12,261 INFO L290 TraceCheckUtils]: 86: Hoare triple {78340#true} assume -1073741802 == ~compRetStatus~0; {78340#true} is VALID [2022-04-28 08:35:12,261 INFO L272 TraceCheckUtils]: 87: Hoare triple {78340#true} call stubMoreProcessingRequired(); {78460#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:35:12,261 INFO L290 TraceCheckUtils]: 88: Hoare triple {78460#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {78340#true} is VALID [2022-04-28 08:35:12,261 INFO L290 TraceCheckUtils]: 89: Hoare triple {78340#true} assume true; {78340#true} is VALID [2022-04-28 08:35:12,261 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {78340#true} {78340#true} #1212#return; {78340#true} is VALID [2022-04-28 08:35:12,261 INFO L290 TraceCheckUtils]: 91: Hoare triple {78340#true} assume !(0 == ~__BLAST_NONDET~11); {78340#true} is VALID [2022-04-28 08:35:12,261 INFO L290 TraceCheckUtils]: 92: Hoare triple {78340#true} assume !(1 == ~__BLAST_NONDET~11); {78340#true} is VALID [2022-04-28 08:35:12,262 INFO L290 TraceCheckUtils]: 93: Hoare triple {78340#true} ~returnVal2~0 := 259; {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:12,262 INFO L290 TraceCheckUtils]: 94: Hoare triple {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:12,262 INFO L290 TraceCheckUtils]: 95: Hoare triple {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~MPR1~0; {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:12,263 INFO L290 TraceCheckUtils]: 96: Hoare triple {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:12,263 INFO L290 TraceCheckUtils]: 97: Hoare triple {78454#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {78455#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2022-04-28 08:35:12,263 INFO L290 TraceCheckUtils]: 98: Hoare triple {78455#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} assume true; {78455#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2022-04-28 08:35:12,264 INFO L284 TraceCheckUtils]: 99: Hoare quadruple {78455#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} {78340#true} #1192#return; {78416#(and (<= 259 |KbFilter_PnP_#t~ret109|) (<= |KbFilter_PnP_#t~ret109| 259))} is VALID [2022-04-28 08:35:12,264 INFO L290 TraceCheckUtils]: 100: Hoare triple {78416#(and (<= 259 |KbFilter_PnP_#t~ret109|) (<= |KbFilter_PnP_#t~ret109| 259))} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {78417#(and (< 258 KbFilter_PnP_~status~3) (<= KbFilter_PnP_~status~3 259))} is VALID [2022-04-28 08:35:12,265 INFO L290 TraceCheckUtils]: 101: Hoare triple {78417#(and (< 258 KbFilter_PnP_~status~3) (<= KbFilter_PnP_~status~3 259))} assume !(259 == ~status~3); {78341#false} is VALID [2022-04-28 08:35:12,265 INFO L290 TraceCheckUtils]: 102: Hoare triple {78341#false} assume ~status~3 >= 0; {78341#false} is VALID [2022-04-28 08:35:12,265 INFO L290 TraceCheckUtils]: 103: Hoare triple {78341#false} assume !(~myStatus~0 >= 0); {78341#false} is VALID [2022-04-28 08:35:12,265 INFO L290 TraceCheckUtils]: 104: Hoare triple {78341#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {78341#false} is VALID [2022-04-28 08:35:12,265 INFO L272 TraceCheckUtils]: 105: Hoare triple {78341#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {78341#false} is VALID [2022-04-28 08:35:12,265 INFO L290 TraceCheckUtils]: 106: Hoare triple {78341#false} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {78341#false} is VALID [2022-04-28 08:35:12,265 INFO L290 TraceCheckUtils]: 107: Hoare triple {78341#false} assume !(~s~0 == ~NP~0); {78341#false} is VALID [2022-04-28 08:35:12,265 INFO L272 TraceCheckUtils]: 108: Hoare triple {78341#false} call errorFn(); {78341#false} is VALID [2022-04-28 08:35:12,265 INFO L290 TraceCheckUtils]: 109: Hoare triple {78341#false} assume !false; {78341#false} is VALID [2022-04-28 08:35:12,266 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 08:35:12,266 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:35:12,266 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1175402870] [2022-04-28 08:35:12,266 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1175402870] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:35:12,266 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:35:12,266 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:35:12,266 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:35:12,266 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [975799880] [2022-04-28 08:35:12,266 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [975799880] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:35:12,266 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:35:12,266 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:35:12,266 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [502751843] [2022-04-28 08:35:12,266 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:35:12,267 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 5.571428571428571) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) Word has length 110 [2022-04-28 08:35:12,267 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:35:12,267 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 5.571428571428571) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:35:12,349 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 110 edges. 110 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:35:12,349 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-28 08:35:12,349 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:35:12,350 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-28 08:35:12,350 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=142, Unknown=0, NotChecked=0, Total=182 [2022-04-28 08:35:12,350 INFO L87 Difference]: Start difference. First operand 331 states and 379 transitions. Second operand has 14 states, 14 states have (on average 5.571428571428571) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:35:14,478 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:35:22,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:35:22,019 INFO L93 Difference]: Finished difference Result 439 states and 509 transitions. [2022-04-28 08:35:22,019 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-28 08:35:22,019 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 5.571428571428571) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) Word has length 110 [2022-04-28 08:35:22,019 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:35:22,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 5.571428571428571) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:35:22,020 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 255 transitions. [2022-04-28 08:35:22,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 5.571428571428571) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:35:22,022 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 255 transitions. [2022-04-28 08:35:22,022 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 255 transitions. [2022-04-28 08:35:22,263 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 255 edges. 255 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:35:22,269 INFO L225 Difference]: With dead ends: 439 [2022-04-28 08:35:22,269 INFO L226 Difference]: Without dead ends: 370 [2022-04-28 08:35:22,270 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=84, Invalid=296, Unknown=0, NotChecked=0, Total=380 [2022-04-28 08:35:22,270 INFO L413 NwaCegarLoop]: 147 mSDtfsCounter, 276 mSDsluCounter, 317 mSDsCounter, 0 mSdLazyCounter, 846 mSolverCounterSat, 140 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 281 SdHoareTripleChecker+Valid, 464 SdHoareTripleChecker+Invalid, 987 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 140 IncrementalHoareTripleChecker+Valid, 846 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.3s IncrementalHoareTripleChecker+Time [2022-04-28 08:35:22,270 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [281 Valid, 464 Invalid, 987 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [140 Valid, 846 Invalid, 1 Unknown, 0 Unchecked, 5.3s Time] [2022-04-28 08:35:22,270 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 370 states. [2022-04-28 08:35:22,977 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 370 to 321. [2022-04-28 08:35:22,977 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:35:22,978 INFO L82 GeneralOperation]: Start isEquivalent. First operand 370 states. Second operand has 321 states, 248 states have (on average 1.1653225806451613) internal successors, (289), 252 states have internal predecessors, (289), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:35:22,978 INFO L74 IsIncluded]: Start isIncluded. First operand 370 states. Second operand has 321 states, 248 states have (on average 1.1653225806451613) internal successors, (289), 252 states have internal predecessors, (289), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:35:22,978 INFO L87 Difference]: Start difference. First operand 370 states. Second operand has 321 states, 248 states have (on average 1.1653225806451613) internal successors, (289), 252 states have internal predecessors, (289), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:35:22,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:35:22,983 INFO L93 Difference]: Finished difference Result 370 states and 425 transitions. [2022-04-28 08:35:22,983 INFO L276 IsEmpty]: Start isEmpty. Operand 370 states and 425 transitions. [2022-04-28 08:35:22,983 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:35:22,983 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:35:22,983 INFO L74 IsIncluded]: Start isIncluded. First operand has 321 states, 248 states have (on average 1.1653225806451613) internal successors, (289), 252 states have internal predecessors, (289), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) Second operand 370 states. [2022-04-28 08:35:22,983 INFO L87 Difference]: Start difference. First operand has 321 states, 248 states have (on average 1.1653225806451613) internal successors, (289), 252 states have internal predecessors, (289), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) Second operand 370 states. [2022-04-28 08:35:22,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:35:22,988 INFO L93 Difference]: Finished difference Result 370 states and 425 transitions. [2022-04-28 08:35:22,988 INFO L276 IsEmpty]: Start isEmpty. Operand 370 states and 425 transitions. [2022-04-28 08:35:22,988 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:35:22,988 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:35:22,989 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:35:22,989 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:35:22,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 321 states, 248 states have (on average 1.1653225806451613) internal successors, (289), 252 states have internal predecessors, (289), 36 states have call successors, (36), 34 states have call predecessors, (36), 36 states have return successors, (38), 34 states have call predecessors, (38), 32 states have call successors, (38) [2022-04-28 08:35:22,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 321 states to 321 states and 363 transitions. [2022-04-28 08:35:22,993 INFO L78 Accepts]: Start accepts. Automaton has 321 states and 363 transitions. Word has length 110 [2022-04-28 08:35:22,994 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:35:22,994 INFO L495 AbstractCegarLoop]: Abstraction has 321 states and 363 transitions. [2022-04-28 08:35:22,994 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 5.571428571428571) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (18), 10 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 1 states have call successors, (14) [2022-04-28 08:35:22,994 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 321 states and 363 transitions. [2022-04-28 08:35:23,822 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 363 edges. 363 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:35:23,823 INFO L276 IsEmpty]: Start isEmpty. Operand 321 states and 363 transitions. [2022-04-28 08:35:23,825 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-04-28 08:35:23,825 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:35:23,825 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:35:23,825 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable32 [2022-04-28 08:35:23,825 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:35:23,825 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:35:23,826 INFO L85 PathProgramCache]: Analyzing trace with hash -1354625370, now seen corresponding path program 1 times [2022-04-28 08:35:23,826 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:35:23,826 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [548229445] [2022-04-28 08:35:23,828 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 0 HavocedVariables, 4 AssignedVariables, -1 ReadonlyVariables, Eigenvalues: {}, 0 SequentialAcceleration, 0 AlternatingAcceleration, 0 QuantifierFreeResult [2022-04-28 08:35:23,828 WARN L91 AcceleratorJordan]: Jordan acceleration failed, because NONINTEGER_UPDATE [2022-04-28 08:35:23,828 INFO L274 tedInterpolationCore]: Could not compute an accelerate. [2022-04-28 08:35:23,828 INFO L85 PathProgramCache]: Analyzing trace with hash -1354625370, now seen corresponding path program 2 times [2022-04-28 08:35:23,828 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:35:23,829 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [307363008] [2022-04-28 08:35:23,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:35:23,829 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:35:23,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:23,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:35:23,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:23,998 INFO L290 TraceCheckUtils]: 0: Hoare triple {80814#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {80737#true} is VALID [2022-04-28 08:35:23,999 INFO L290 TraceCheckUtils]: 1: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:23,999 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {80737#true} {80737#true} #1270#return; {80737#true} is VALID [2022-04-28 08:35:24,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:35:24,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:24,022 INFO L290 TraceCheckUtils]: 0: Hoare triple {80815#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {80737#true} is VALID [2022-04-28 08:35:24,022 INFO L290 TraceCheckUtils]: 1: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,022 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {80737#true} {80737#true} #1216#return; {80737#true} is VALID [2022-04-28 08:35:24,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:35:24,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:24,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:35:24,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:24,059 INFO L290 TraceCheckUtils]: 0: Hoare triple {80737#true} ~cond := #in~cond; {80737#true} is VALID [2022-04-28 08:35:24,060 INFO L290 TraceCheckUtils]: 1: Hoare triple {80737#true} assume !(0 == ~cond); {80737#true} is VALID [2022-04-28 08:35:24,060 INFO L290 TraceCheckUtils]: 2: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,060 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {80737#true} {80737#true} #1254#return; {80737#true} is VALID [2022-04-28 08:35:24,060 INFO L290 TraceCheckUtils]: 0: Hoare triple {80816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {80737#true} is VALID [2022-04-28 08:35:24,060 INFO L272 TraceCheckUtils]: 1: Hoare triple {80737#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {80737#true} is VALID [2022-04-28 08:35:24,060 INFO L290 TraceCheckUtils]: 2: Hoare triple {80737#true} ~cond := #in~cond; {80737#true} is VALID [2022-04-28 08:35:24,060 INFO L290 TraceCheckUtils]: 3: Hoare triple {80737#true} assume !(0 == ~cond); {80737#true} is VALID [2022-04-28 08:35:24,060 INFO L290 TraceCheckUtils]: 4: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,060 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {80737#true} {80737#true} #1254#return; {80737#true} is VALID [2022-04-28 08:35:24,060 INFO L290 TraceCheckUtils]: 6: Hoare triple {80737#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {80737#true} is VALID [2022-04-28 08:35:24,060 INFO L290 TraceCheckUtils]: 7: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,060 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {80737#true} {80737#true} #1218#return; {80737#true} is VALID [2022-04-28 08:35:24,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:35:24,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:24,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:35:24,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:24,091 INFO L290 TraceCheckUtils]: 0: Hoare triple {80821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {80737#true} is VALID [2022-04-28 08:35:24,092 INFO L290 TraceCheckUtils]: 1: Hoare triple {80737#true} assume 0 == ~__BLAST_NONDET~5; {80737#true} is VALID [2022-04-28 08:35:24,092 INFO L290 TraceCheckUtils]: 2: Hoare triple {80737#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {80737#true} is VALID [2022-04-28 08:35:24,092 INFO L290 TraceCheckUtils]: 3: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,092 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {80737#true} {80737#true} #1176#return; {80737#true} is VALID [2022-04-28 08:35:24,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:35:24,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:24,097 INFO L290 TraceCheckUtils]: 0: Hoare triple {80816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {80737#true} is VALID [2022-04-28 08:35:24,098 INFO L290 TraceCheckUtils]: 1: Hoare triple {80737#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {80737#true} is VALID [2022-04-28 08:35:24,098 INFO L290 TraceCheckUtils]: 2: Hoare triple {80737#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {80737#true} is VALID [2022-04-28 08:35:24,098 INFO L290 TraceCheckUtils]: 3: Hoare triple {80737#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {80737#true} is VALID [2022-04-28 08:35:24,098 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {80737#true} {80737#true} #1178#return; {80737#true} is VALID [2022-04-28 08:35:24,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-04-28 08:35:24,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:24,105 INFO L290 TraceCheckUtils]: 0: Hoare triple {80737#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {80737#true} is VALID [2022-04-28 08:35:24,105 INFO L290 TraceCheckUtils]: 1: Hoare triple {80737#true} assume 0 == ~__BLAST_NONDET~2; {80737#true} is VALID [2022-04-28 08:35:24,105 INFO L290 TraceCheckUtils]: 2: Hoare triple {80737#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {80737#true} is VALID [2022-04-28 08:35:24,105 INFO L290 TraceCheckUtils]: 3: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,105 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {80737#true} {80737#true} #1180#return; {80737#true} is VALID [2022-04-28 08:35:24,105 INFO L290 TraceCheckUtils]: 0: Hoare triple {80821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {80737#true} is VALID [2022-04-28 08:35:24,106 INFO L272 TraceCheckUtils]: 1: Hoare triple {80737#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {80821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:35:24,106 INFO L290 TraceCheckUtils]: 2: Hoare triple {80821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {80737#true} is VALID [2022-04-28 08:35:24,106 INFO L290 TraceCheckUtils]: 3: Hoare triple {80737#true} assume 0 == ~__BLAST_NONDET~5; {80737#true} is VALID [2022-04-28 08:35:24,106 INFO L290 TraceCheckUtils]: 4: Hoare triple {80737#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {80737#true} is VALID [2022-04-28 08:35:24,106 INFO L290 TraceCheckUtils]: 5: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,107 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {80737#true} {80737#true} #1176#return; {80737#true} is VALID [2022-04-28 08:35:24,107 INFO L290 TraceCheckUtils]: 7: Hoare triple {80737#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {80737#true} is VALID [2022-04-28 08:35:24,107 INFO L290 TraceCheckUtils]: 8: Hoare triple {80737#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {80737#true} is VALID [2022-04-28 08:35:24,107 INFO L272 TraceCheckUtils]: 9: Hoare triple {80737#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {80816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:24,107 INFO L290 TraceCheckUtils]: 10: Hoare triple {80816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {80737#true} is VALID [2022-04-28 08:35:24,107 INFO L290 TraceCheckUtils]: 11: Hoare triple {80737#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {80737#true} is VALID [2022-04-28 08:35:24,107 INFO L290 TraceCheckUtils]: 12: Hoare triple {80737#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {80737#true} is VALID [2022-04-28 08:35:24,107 INFO L290 TraceCheckUtils]: 13: Hoare triple {80737#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {80737#true} is VALID [2022-04-28 08:35:24,108 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {80737#true} {80737#true} #1178#return; {80737#true} is VALID [2022-04-28 08:35:24,108 INFO L290 TraceCheckUtils]: 15: Hoare triple {80737#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {80737#true} is VALID [2022-04-28 08:35:24,108 INFO L272 TraceCheckUtils]: 16: Hoare triple {80737#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {80737#true} is VALID [2022-04-28 08:35:24,108 INFO L290 TraceCheckUtils]: 17: Hoare triple {80737#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {80737#true} is VALID [2022-04-28 08:35:24,108 INFO L290 TraceCheckUtils]: 18: Hoare triple {80737#true} assume 0 == ~__BLAST_NONDET~2; {80737#true} is VALID [2022-04-28 08:35:24,108 INFO L290 TraceCheckUtils]: 19: Hoare triple {80737#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {80737#true} is VALID [2022-04-28 08:35:24,108 INFO L290 TraceCheckUtils]: 20: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,108 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {80737#true} {80737#true} #1180#return; {80737#true} is VALID [2022-04-28 08:35:24,108 INFO L290 TraceCheckUtils]: 22: Hoare triple {80737#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {80737#true} is VALID [2022-04-28 08:35:24,108 INFO L290 TraceCheckUtils]: 23: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,108 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {80737#true} {80737#true} #1220#return; {80737#true} is VALID [2022-04-28 08:35:24,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-04-28 08:35:24,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:24,122 INFO L290 TraceCheckUtils]: 0: Hoare triple {80837#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {80737#true} is VALID [2022-04-28 08:35:24,122 INFO L290 TraceCheckUtils]: 1: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,122 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {80737#true} {80737#true} #1222#return; {80737#true} is VALID [2022-04-28 08:35:24,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-04-28 08:35:24,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:24,128 INFO L290 TraceCheckUtils]: 0: Hoare triple {80816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {80737#true} is VALID [2022-04-28 08:35:24,128 INFO L290 TraceCheckUtils]: 1: Hoare triple {80737#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {80737#true} is VALID [2022-04-28 08:35:24,128 INFO L290 TraceCheckUtils]: 2: Hoare triple {80737#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {80737#true} is VALID [2022-04-28 08:35:24,128 INFO L290 TraceCheckUtils]: 3: Hoare triple {80737#true} assume #res.base == dest.base && #res.offset == dest.offset; {80737#true} is VALID [2022-04-28 08:35:24,128 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {80737#true} {80737#true} #1186#return; {80737#true} is VALID [2022-04-28 08:35:24,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-04-28 08:35:24,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:24,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:35:24,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:24,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:35:24,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:24,168 INFO L290 TraceCheckUtils]: 0: Hoare triple {80850#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,168 INFO L290 TraceCheckUtils]: 1: Hoare triple {80813#(= ~setEventCalled~0 1)} assume true; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,169 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {80813#(= ~setEventCalled~0 1)} {80737#true} #1174#return; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,169 INFO L290 TraceCheckUtils]: 0: Hoare triple {80850#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {80737#true} is VALID [2022-04-28 08:35:24,169 INFO L272 TraceCheckUtils]: 1: Hoare triple {80737#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {80850#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:24,169 INFO L290 TraceCheckUtils]: 2: Hoare triple {80850#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,170 INFO L290 TraceCheckUtils]: 3: Hoare triple {80813#(= ~setEventCalled~0 1)} assume true; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,170 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {80813#(= ~setEventCalled~0 1)} {80737#true} #1174#return; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,170 INFO L290 TraceCheckUtils]: 5: Hoare triple {80813#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,170 INFO L290 TraceCheckUtils]: 6: Hoare triple {80813#(= ~setEventCalled~0 1)} assume true; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,171 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {80813#(= ~setEventCalled~0 1)} {80737#true} #1210#return; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:35:24,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:24,180 INFO L290 TraceCheckUtils]: 0: Hoare triple {80854#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {80737#true} is VALID [2022-04-28 08:35:24,180 INFO L290 TraceCheckUtils]: 1: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,181 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {80737#true} {80813#(= ~setEventCalled~0 1)} #1212#return; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,181 INFO L290 TraceCheckUtils]: 0: Hoare triple {80838#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {80737#true} is VALID [2022-04-28 08:35:24,181 INFO L290 TraceCheckUtils]: 1: Hoare triple {80737#true} assume 0 != ~compRegistered~0; {80737#true} is VALID [2022-04-28 08:35:24,181 INFO L272 TraceCheckUtils]: 2: Hoare triple {80737#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {80850#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:24,181 INFO L290 TraceCheckUtils]: 3: Hoare triple {80850#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {80737#true} is VALID [2022-04-28 08:35:24,182 INFO L272 TraceCheckUtils]: 4: Hoare triple {80737#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {80850#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:24,182 INFO L290 TraceCheckUtils]: 5: Hoare triple {80850#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,182 INFO L290 TraceCheckUtils]: 6: Hoare triple {80813#(= ~setEventCalled~0 1)} assume true; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,183 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {80813#(= ~setEventCalled~0 1)} {80737#true} #1174#return; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,183 INFO L290 TraceCheckUtils]: 8: Hoare triple {80813#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,183 INFO L290 TraceCheckUtils]: 9: Hoare triple {80813#(= ~setEventCalled~0 1)} assume true; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,184 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {80813#(= ~setEventCalled~0 1)} {80737#true} #1210#return; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,184 INFO L290 TraceCheckUtils]: 11: Hoare triple {80813#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,184 INFO L290 TraceCheckUtils]: 12: Hoare triple {80813#(= ~setEventCalled~0 1)} assume -1073741802 == ~compRetStatus~0; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,184 INFO L272 TraceCheckUtils]: 13: Hoare triple {80813#(= ~setEventCalled~0 1)} call stubMoreProcessingRequired(); {80854#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:35:24,184 INFO L290 TraceCheckUtils]: 14: Hoare triple {80854#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {80737#true} is VALID [2022-04-28 08:35:24,184 INFO L290 TraceCheckUtils]: 15: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,185 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {80737#true} {80813#(= ~setEventCalled~0 1)} #1212#return; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,185 INFO L290 TraceCheckUtils]: 17: Hoare triple {80813#(= ~setEventCalled~0 1)} assume !(0 == ~__BLAST_NONDET~11); {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,185 INFO L290 TraceCheckUtils]: 18: Hoare triple {80813#(= ~setEventCalled~0 1)} assume !(1 == ~__BLAST_NONDET~11); {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,185 INFO L290 TraceCheckUtils]: 19: Hoare triple {80813#(= ~setEventCalled~0 1)} ~returnVal2~0 := 259; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,185 INFO L290 TraceCheckUtils]: 20: Hoare triple {80813#(= ~setEventCalled~0 1)} assume !(~s~0 == ~NP~0); {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,185 INFO L290 TraceCheckUtils]: 21: Hoare triple {80813#(= ~setEventCalled~0 1)} assume ~s~0 == ~MPR1~0; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,186 INFO L290 TraceCheckUtils]: 22: Hoare triple {80813#(= ~setEventCalled~0 1)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,186 INFO L290 TraceCheckUtils]: 23: Hoare triple {80813#(= ~setEventCalled~0 1)} #res := ~returnVal2~0; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,186 INFO L290 TraceCheckUtils]: 24: Hoare triple {80813#(= ~setEventCalled~0 1)} assume true; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,186 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {80813#(= ~setEventCalled~0 1)} {80737#true} #1192#return; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,187 INFO L272 TraceCheckUtils]: 0: Hoare triple {80737#true} call ULTIMATE.init(); {80814#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:35:24,187 INFO L290 TraceCheckUtils]: 1: Hoare triple {80814#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {80737#true} is VALID [2022-04-28 08:35:24,187 INFO L290 TraceCheckUtils]: 2: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,188 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {80737#true} {80737#true} #1270#return; {80737#true} is VALID [2022-04-28 08:35:24,188 INFO L272 TraceCheckUtils]: 4: Hoare triple {80737#true} call #t~ret213 := main(); {80737#true} is VALID [2022-04-28 08:35:24,188 INFO L290 TraceCheckUtils]: 5: Hoare triple {80737#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {80737#true} is VALID [2022-04-28 08:35:24,188 INFO L272 TraceCheckUtils]: 6: Hoare triple {80737#true} call _BLAST_init(); {80815#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:24,188 INFO L290 TraceCheckUtils]: 7: Hoare triple {80815#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {80737#true} is VALID [2022-04-28 08:35:24,188 INFO L290 TraceCheckUtils]: 8: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,188 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {80737#true} {80737#true} #1216#return; {80737#true} is VALID [2022-04-28 08:35:24,189 INFO L272 TraceCheckUtils]: 10: Hoare triple {80737#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {80816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:24,189 INFO L290 TraceCheckUtils]: 11: Hoare triple {80816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {80737#true} is VALID [2022-04-28 08:35:24,189 INFO L272 TraceCheckUtils]: 12: Hoare triple {80737#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {80737#true} is VALID [2022-04-28 08:35:24,189 INFO L290 TraceCheckUtils]: 13: Hoare triple {80737#true} ~cond := #in~cond; {80737#true} is VALID [2022-04-28 08:35:24,189 INFO L290 TraceCheckUtils]: 14: Hoare triple {80737#true} assume !(0 == ~cond); {80737#true} is VALID [2022-04-28 08:35:24,189 INFO L290 TraceCheckUtils]: 15: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,189 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {80737#true} {80737#true} #1254#return; {80737#true} is VALID [2022-04-28 08:35:24,189 INFO L290 TraceCheckUtils]: 17: Hoare triple {80737#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {80737#true} is VALID [2022-04-28 08:35:24,190 INFO L290 TraceCheckUtils]: 18: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,190 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {80737#true} {80737#true} #1218#return; {80737#true} is VALID [2022-04-28 08:35:24,190 INFO L290 TraceCheckUtils]: 20: Hoare triple {80737#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {80737#true} is VALID [2022-04-28 08:35:24,190 INFO L290 TraceCheckUtils]: 21: Hoare triple {80737#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {80737#true} is VALID [2022-04-28 08:35:24,190 INFO L290 TraceCheckUtils]: 22: Hoare triple {80737#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {80737#true} is VALID [2022-04-28 08:35:24,190 INFO L272 TraceCheckUtils]: 23: Hoare triple {80737#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {80821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:35:24,190 INFO L290 TraceCheckUtils]: 24: Hoare triple {80821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {80737#true} is VALID [2022-04-28 08:35:24,191 INFO L272 TraceCheckUtils]: 25: Hoare triple {80737#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {80821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:35:24,191 INFO L290 TraceCheckUtils]: 26: Hoare triple {80821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {80737#true} is VALID [2022-04-28 08:35:24,191 INFO L290 TraceCheckUtils]: 27: Hoare triple {80737#true} assume 0 == ~__BLAST_NONDET~5; {80737#true} is VALID [2022-04-28 08:35:24,191 INFO L290 TraceCheckUtils]: 28: Hoare triple {80737#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {80737#true} is VALID [2022-04-28 08:35:24,191 INFO L290 TraceCheckUtils]: 29: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,192 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {80737#true} {80737#true} #1176#return; {80737#true} is VALID [2022-04-28 08:35:24,192 INFO L290 TraceCheckUtils]: 31: Hoare triple {80737#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {80737#true} is VALID [2022-04-28 08:35:24,192 INFO L290 TraceCheckUtils]: 32: Hoare triple {80737#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {80737#true} is VALID [2022-04-28 08:35:24,192 INFO L272 TraceCheckUtils]: 33: Hoare triple {80737#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {80816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:24,192 INFO L290 TraceCheckUtils]: 34: Hoare triple {80816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {80737#true} is VALID [2022-04-28 08:35:24,192 INFO L290 TraceCheckUtils]: 35: Hoare triple {80737#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {80737#true} is VALID [2022-04-28 08:35:24,192 INFO L290 TraceCheckUtils]: 36: Hoare triple {80737#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {80737#true} is VALID [2022-04-28 08:35:24,192 INFO L290 TraceCheckUtils]: 37: Hoare triple {80737#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {80737#true} is VALID [2022-04-28 08:35:24,193 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {80737#true} {80737#true} #1178#return; {80737#true} is VALID [2022-04-28 08:35:24,193 INFO L290 TraceCheckUtils]: 39: Hoare triple {80737#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {80737#true} is VALID [2022-04-28 08:35:24,193 INFO L272 TraceCheckUtils]: 40: Hoare triple {80737#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {80737#true} is VALID [2022-04-28 08:35:24,193 INFO L290 TraceCheckUtils]: 41: Hoare triple {80737#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {80737#true} is VALID [2022-04-28 08:35:24,193 INFO L290 TraceCheckUtils]: 42: Hoare triple {80737#true} assume 0 == ~__BLAST_NONDET~2; {80737#true} is VALID [2022-04-28 08:35:24,193 INFO L290 TraceCheckUtils]: 43: Hoare triple {80737#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {80737#true} is VALID [2022-04-28 08:35:24,193 INFO L290 TraceCheckUtils]: 44: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,193 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {80737#true} {80737#true} #1180#return; {80737#true} is VALID [2022-04-28 08:35:24,193 INFO L290 TraceCheckUtils]: 46: Hoare triple {80737#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {80737#true} is VALID [2022-04-28 08:35:24,193 INFO L290 TraceCheckUtils]: 47: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,193 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {80737#true} {80737#true} #1220#return; {80737#true} is VALID [2022-04-28 08:35:24,193 INFO L290 TraceCheckUtils]: 49: Hoare triple {80737#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {80737#true} is VALID [2022-04-28 08:35:24,194 INFO L272 TraceCheckUtils]: 50: Hoare triple {80737#true} call stub_driver_init(); {80837#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:24,194 INFO L290 TraceCheckUtils]: 51: Hoare triple {80837#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {80737#true} is VALID [2022-04-28 08:35:24,194 INFO L290 TraceCheckUtils]: 52: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,194 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {80737#true} {80737#true} #1222#return; {80737#true} is VALID [2022-04-28 08:35:24,194 INFO L290 TraceCheckUtils]: 54: Hoare triple {80737#true} assume !!(~status~5 >= 0); {80737#true} is VALID [2022-04-28 08:35:24,194 INFO L290 TraceCheckUtils]: 55: Hoare triple {80737#true} assume !(0 == ~__BLAST_NONDET~0); {80737#true} is VALID [2022-04-28 08:35:24,194 INFO L290 TraceCheckUtils]: 56: Hoare triple {80737#true} assume !(1 == ~__BLAST_NONDET~0); {80737#true} is VALID [2022-04-28 08:35:24,194 INFO L290 TraceCheckUtils]: 57: Hoare triple {80737#true} assume !(2 == ~__BLAST_NONDET~0); {80737#true} is VALID [2022-04-28 08:35:24,194 INFO L290 TraceCheckUtils]: 58: Hoare triple {80737#true} assume 3 == ~__BLAST_NONDET~0; {80737#true} is VALID [2022-04-28 08:35:24,194 INFO L272 TraceCheckUtils]: 59: Hoare triple {80737#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {80737#true} is VALID [2022-04-28 08:35:24,194 INFO L290 TraceCheckUtils]: 60: Hoare triple {80737#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {80737#true} is VALID [2022-04-28 08:35:24,194 INFO L290 TraceCheckUtils]: 61: Hoare triple {80737#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {80737#true} is VALID [2022-04-28 08:35:24,194 INFO L290 TraceCheckUtils]: 62: Hoare triple {80737#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {80737#true} is VALID [2022-04-28 08:35:24,195 INFO L272 TraceCheckUtils]: 63: Hoare triple {80737#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {80816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:24,195 INFO L290 TraceCheckUtils]: 64: Hoare triple {80816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {80737#true} is VALID [2022-04-28 08:35:24,195 INFO L290 TraceCheckUtils]: 65: Hoare triple {80737#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {80737#true} is VALID [2022-04-28 08:35:24,195 INFO L290 TraceCheckUtils]: 66: Hoare triple {80737#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {80737#true} is VALID [2022-04-28 08:35:24,195 INFO L290 TraceCheckUtils]: 67: Hoare triple {80737#true} assume #res.base == dest.base && #res.offset == dest.offset; {80737#true} is VALID [2022-04-28 08:35:24,195 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {80737#true} {80737#true} #1186#return; {80737#true} is VALID [2022-04-28 08:35:24,195 INFO L290 TraceCheckUtils]: 69: Hoare triple {80737#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {80737#true} is VALID [2022-04-28 08:35:24,195 INFO L290 TraceCheckUtils]: 70: Hoare triple {80737#true} assume !(~s~0 != ~NP~0); {80737#true} is VALID [2022-04-28 08:35:24,196 INFO L290 TraceCheckUtils]: 71: Hoare triple {80737#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {80737#true} is VALID [2022-04-28 08:35:24,196 INFO L290 TraceCheckUtils]: 72: Hoare triple {80737#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {80737#true} is VALID [2022-04-28 08:35:24,196 INFO L272 TraceCheckUtils]: 73: Hoare triple {80737#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {80838#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:24,196 INFO L290 TraceCheckUtils]: 74: Hoare triple {80838#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {80737#true} is VALID [2022-04-28 08:35:24,196 INFO L290 TraceCheckUtils]: 75: Hoare triple {80737#true} assume 0 != ~compRegistered~0; {80737#true} is VALID [2022-04-28 08:35:24,197 INFO L272 TraceCheckUtils]: 76: Hoare triple {80737#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {80850#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:24,197 INFO L290 TraceCheckUtils]: 77: Hoare triple {80850#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {80737#true} is VALID [2022-04-28 08:35:24,197 INFO L272 TraceCheckUtils]: 78: Hoare triple {80737#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {80850#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:24,197 INFO L290 TraceCheckUtils]: 79: Hoare triple {80850#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,198 INFO L290 TraceCheckUtils]: 80: Hoare triple {80813#(= ~setEventCalled~0 1)} assume true; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,198 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {80813#(= ~setEventCalled~0 1)} {80737#true} #1174#return; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,198 INFO L290 TraceCheckUtils]: 82: Hoare triple {80813#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,198 INFO L290 TraceCheckUtils]: 83: Hoare triple {80813#(= ~setEventCalled~0 1)} assume true; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,199 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {80813#(= ~setEventCalled~0 1)} {80737#true} #1210#return; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,199 INFO L290 TraceCheckUtils]: 85: Hoare triple {80813#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,199 INFO L290 TraceCheckUtils]: 86: Hoare triple {80813#(= ~setEventCalled~0 1)} assume -1073741802 == ~compRetStatus~0; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,200 INFO L272 TraceCheckUtils]: 87: Hoare triple {80813#(= ~setEventCalled~0 1)} call stubMoreProcessingRequired(); {80854#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:35:24,200 INFO L290 TraceCheckUtils]: 88: Hoare triple {80854#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {80737#true} is VALID [2022-04-28 08:35:24,200 INFO L290 TraceCheckUtils]: 89: Hoare triple {80737#true} assume true; {80737#true} is VALID [2022-04-28 08:35:24,200 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {80737#true} {80813#(= ~setEventCalled~0 1)} #1212#return; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,200 INFO L290 TraceCheckUtils]: 91: Hoare triple {80813#(= ~setEventCalled~0 1)} assume !(0 == ~__BLAST_NONDET~11); {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,200 INFO L290 TraceCheckUtils]: 92: Hoare triple {80813#(= ~setEventCalled~0 1)} assume !(1 == ~__BLAST_NONDET~11); {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,200 INFO L290 TraceCheckUtils]: 93: Hoare triple {80813#(= ~setEventCalled~0 1)} ~returnVal2~0 := 259; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,201 INFO L290 TraceCheckUtils]: 94: Hoare triple {80813#(= ~setEventCalled~0 1)} assume !(~s~0 == ~NP~0); {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,201 INFO L290 TraceCheckUtils]: 95: Hoare triple {80813#(= ~setEventCalled~0 1)} assume ~s~0 == ~MPR1~0; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,201 INFO L290 TraceCheckUtils]: 96: Hoare triple {80813#(= ~setEventCalled~0 1)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,201 INFO L290 TraceCheckUtils]: 97: Hoare triple {80813#(= ~setEventCalled~0 1)} #res := ~returnVal2~0; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,201 INFO L290 TraceCheckUtils]: 98: Hoare triple {80813#(= ~setEventCalled~0 1)} assume true; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,202 INFO L284 TraceCheckUtils]: 99: Hoare quadruple {80813#(= ~setEventCalled~0 1)} {80737#true} #1192#return; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,202 INFO L290 TraceCheckUtils]: 100: Hoare triple {80813#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,202 INFO L290 TraceCheckUtils]: 101: Hoare triple {80813#(= ~setEventCalled~0 1)} assume 259 == ~status~3; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,203 INFO L272 TraceCheckUtils]: 102: Hoare triple {80813#(= ~setEventCalled~0 1)} call #t~ret110 := KeWaitForSingleObject(~#event~1.base, ~#event~1.offset, 0, 0, 0, 0, 0); {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,203 INFO L290 TraceCheckUtils]: 103: Hoare triple {80813#(= ~setEventCalled~0 1)} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,203 INFO L290 TraceCheckUtils]: 104: Hoare triple {80813#(= ~setEventCalled~0 1)} assume ~s~0 == ~MPR3~0; {80813#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:35:24,203 INFO L290 TraceCheckUtils]: 105: Hoare triple {80813#(= ~setEventCalled~0 1)} assume !(1 == ~setEventCalled~0); {80738#false} is VALID [2022-04-28 08:35:24,203 INFO L290 TraceCheckUtils]: 106: Hoare triple {80738#false} assume !(1 == ~customIrp~0); {80738#false} is VALID [2022-04-28 08:35:24,203 INFO L290 TraceCheckUtils]: 107: Hoare triple {80738#false} assume ~s~0 == ~MPR3~0; {80738#false} is VALID [2022-04-28 08:35:24,203 INFO L272 TraceCheckUtils]: 108: Hoare triple {80738#false} call errorFn(); {80738#false} is VALID [2022-04-28 08:35:24,203 INFO L290 TraceCheckUtils]: 109: Hoare triple {80738#false} assume !false; {80738#false} is VALID [2022-04-28 08:35:24,204 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 08:35:24,204 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:35:24,204 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [307363008] [2022-04-28 08:35:24,204 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [307363008] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:35:24,204 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:35:24,204 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:35:24,204 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:35:24,204 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [548229445] [2022-04-28 08:35:24,204 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [548229445] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:35:24,204 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:35:24,205 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:35:24,205 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [859316339] [2022-04-28 08:35:24,205 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:35:24,205 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 7.090909090909091) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (18), 11 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 110 [2022-04-28 08:35:24,205 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:35:24,205 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 7.090909090909091) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (18), 11 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-04-28 08:35:24,298 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 110 edges. 110 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:35:24,298 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 08:35:24,298 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:35:24,298 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 08:35:24,299 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2022-04-28 08:35:24,299 INFO L87 Difference]: Start difference. First operand 321 states and 363 transitions. Second operand has 11 states, 11 states have (on average 7.090909090909091) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (18), 11 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-04-28 08:35:27,813 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.38s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:35:29,821 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:35:31,838 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:35:33,866 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:35:38,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:35:38,974 INFO L93 Difference]: Finished difference Result 452 states and 515 transitions. [2022-04-28 08:35:38,974 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-28 08:35:38,974 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 7.090909090909091) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (18), 11 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 110 [2022-04-28 08:35:38,975 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:35:38,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 7.090909090909091) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (18), 11 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-04-28 08:35:38,976 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 256 transitions. [2022-04-28 08:35:38,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 7.090909090909091) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (18), 11 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-04-28 08:35:38,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 256 transitions. [2022-04-28 08:35:38,978 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 256 transitions. [2022-04-28 08:35:39,160 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 256 edges. 256 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:35:39,167 INFO L225 Difference]: With dead ends: 452 [2022-04-28 08:35:39,167 INFO L226 Difference]: Without dead ends: 386 [2022-04-28 08:35:39,168 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 24 SyntacticMatches, 3 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=97, Invalid=209, Unknown=0, NotChecked=0, Total=306 [2022-04-28 08:35:39,168 INFO L413 NwaCegarLoop]: 135 mSDtfsCounter, 188 mSDsluCounter, 163 mSDsCounter, 0 mSdLazyCounter, 425 mSolverCounterSat, 87 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 191 SdHoareTripleChecker+Valid, 298 SdHoareTripleChecker+Invalid, 515 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 87 IncrementalHoareTripleChecker+Valid, 425 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.8s IncrementalHoareTripleChecker+Time [2022-04-28 08:35:39,168 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [191 Valid, 298 Invalid, 515 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [87 Valid, 425 Invalid, 3 Unknown, 0 Unchecked, 8.8s Time] [2022-04-28 08:35:39,169 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 386 states. [2022-04-28 08:35:40,005 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 386 to 338. [2022-04-28 08:35:40,006 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:35:40,006 INFO L82 GeneralOperation]: Start isEquivalent. First operand 386 states. Second operand has 338 states, 262 states have (on average 1.1450381679389312) internal successors, (300), 266 states have internal predecessors, (300), 36 states have call successors, (36), 35 states have call predecessors, (36), 39 states have return successors, (41), 36 states have call predecessors, (41), 33 states have call successors, (41) [2022-04-28 08:35:40,006 INFO L74 IsIncluded]: Start isIncluded. First operand 386 states. Second operand has 338 states, 262 states have (on average 1.1450381679389312) internal successors, (300), 266 states have internal predecessors, (300), 36 states have call successors, (36), 35 states have call predecessors, (36), 39 states have return successors, (41), 36 states have call predecessors, (41), 33 states have call successors, (41) [2022-04-28 08:35:40,007 INFO L87 Difference]: Start difference. First operand 386 states. Second operand has 338 states, 262 states have (on average 1.1450381679389312) internal successors, (300), 266 states have internal predecessors, (300), 36 states have call successors, (36), 35 states have call predecessors, (36), 39 states have return successors, (41), 36 states have call predecessors, (41), 33 states have call successors, (41) [2022-04-28 08:35:40,023 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:35:40,023 INFO L93 Difference]: Finished difference Result 386 states and 434 transitions. [2022-04-28 08:35:40,023 INFO L276 IsEmpty]: Start isEmpty. Operand 386 states and 434 transitions. [2022-04-28 08:35:40,023 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:35:40,023 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:35:40,024 INFO L74 IsIncluded]: Start isIncluded. First operand has 338 states, 262 states have (on average 1.1450381679389312) internal successors, (300), 266 states have internal predecessors, (300), 36 states have call successors, (36), 35 states have call predecessors, (36), 39 states have return successors, (41), 36 states have call predecessors, (41), 33 states have call successors, (41) Second operand 386 states. [2022-04-28 08:35:40,024 INFO L87 Difference]: Start difference. First operand has 338 states, 262 states have (on average 1.1450381679389312) internal successors, (300), 266 states have internal predecessors, (300), 36 states have call successors, (36), 35 states have call predecessors, (36), 39 states have return successors, (41), 36 states have call predecessors, (41), 33 states have call successors, (41) Second operand 386 states. [2022-04-28 08:35:40,029 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:35:40,029 INFO L93 Difference]: Finished difference Result 386 states and 434 transitions. [2022-04-28 08:35:40,029 INFO L276 IsEmpty]: Start isEmpty. Operand 386 states and 434 transitions. [2022-04-28 08:35:40,030 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:35:40,030 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:35:40,030 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:35:40,030 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:35:40,030 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 338 states, 262 states have (on average 1.1450381679389312) internal successors, (300), 266 states have internal predecessors, (300), 36 states have call successors, (36), 35 states have call predecessors, (36), 39 states have return successors, (41), 36 states have call predecessors, (41), 33 states have call successors, (41) [2022-04-28 08:35:40,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 338 states to 338 states and 377 transitions. [2022-04-28 08:35:40,035 INFO L78 Accepts]: Start accepts. Automaton has 338 states and 377 transitions. Word has length 110 [2022-04-28 08:35:40,035 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:35:40,035 INFO L495 AbstractCegarLoop]: Abstraction has 338 states and 377 transitions. [2022-04-28 08:35:40,035 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 7.090909090909091) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (18), 11 states have call predecessors, (18), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-04-28 08:35:40,036 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 338 states and 377 transitions. [2022-04-28 08:35:40,957 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 377 edges. 377 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:35:40,957 INFO L276 IsEmpty]: Start isEmpty. Operand 338 states and 377 transitions. [2022-04-28 08:35:40,958 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2022-04-28 08:35:40,958 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:35:40,958 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:35:40,958 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable33 [2022-04-28 08:35:40,958 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:35:40,958 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:35:40,958 INFO L85 PathProgramCache]: Analyzing trace with hash 820803447, now seen corresponding path program 1 times [2022-04-28 08:35:40,959 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:35:40,959 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [431808168] [2022-04-28 08:35:40,960 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 0 HavocedVariables, 4 AssignedVariables, -1 ReadonlyVariables, Eigenvalues: {}, 0 SequentialAcceleration, 0 AlternatingAcceleration, 0 QuantifierFreeResult [2022-04-28 08:35:40,960 WARN L91 AcceleratorJordan]: Jordan acceleration failed, because NONINTEGER_UPDATE [2022-04-28 08:35:40,960 INFO L274 tedInterpolationCore]: Could not compute an accelerate. [2022-04-28 08:35:40,960 INFO L85 PathProgramCache]: Analyzing trace with hash 820803447, now seen corresponding path program 2 times [2022-04-28 08:35:40,961 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:35:40,961 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [278222462] [2022-04-28 08:35:40,961 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:35:40,961 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:35:41,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:35:41,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,435 INFO L290 TraceCheckUtils]: 0: Hoare triple {83309#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {83225#true} is VALID [2022-04-28 08:35:41,436 INFO L290 TraceCheckUtils]: 1: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,436 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {83225#true} {83225#true} #1270#return; {83225#true} is VALID [2022-04-28 08:35:41,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:35:41,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,470 INFO L290 TraceCheckUtils]: 0: Hoare triple {83310#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {83225#true} is VALID [2022-04-28 08:35:41,470 INFO L290 TraceCheckUtils]: 1: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,470 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {83225#true} {83225#true} #1216#return; {83225#true} is VALID [2022-04-28 08:35:41,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:35:41,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:35:41,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,491 INFO L290 TraceCheckUtils]: 0: Hoare triple {83225#true} ~cond := #in~cond; {83225#true} is VALID [2022-04-28 08:35:41,491 INFO L290 TraceCheckUtils]: 1: Hoare triple {83225#true} assume !(0 == ~cond); {83225#true} is VALID [2022-04-28 08:35:41,491 INFO L290 TraceCheckUtils]: 2: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,491 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {83225#true} {83225#true} #1254#return; {83225#true} is VALID [2022-04-28 08:35:41,491 INFO L290 TraceCheckUtils]: 0: Hoare triple {83311#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {83225#true} is VALID [2022-04-28 08:35:41,491 INFO L272 TraceCheckUtils]: 1: Hoare triple {83225#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {83225#true} is VALID [2022-04-28 08:35:41,491 INFO L290 TraceCheckUtils]: 2: Hoare triple {83225#true} ~cond := #in~cond; {83225#true} is VALID [2022-04-28 08:35:41,492 INFO L290 TraceCheckUtils]: 3: Hoare triple {83225#true} assume !(0 == ~cond); {83225#true} is VALID [2022-04-28 08:35:41,492 INFO L290 TraceCheckUtils]: 4: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,492 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {83225#true} {83225#true} #1254#return; {83225#true} is VALID [2022-04-28 08:35:41,492 INFO L290 TraceCheckUtils]: 6: Hoare triple {83225#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {83225#true} is VALID [2022-04-28 08:35:41,492 INFO L290 TraceCheckUtils]: 7: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,492 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {83225#true} {83225#true} #1218#return; {83225#true} is VALID [2022-04-28 08:35:41,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:35:41,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,535 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:35:41,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,544 INFO L290 TraceCheckUtils]: 0: Hoare triple {83316#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {83225#true} is VALID [2022-04-28 08:35:41,544 INFO L290 TraceCheckUtils]: 1: Hoare triple {83225#true} assume 0 == ~__BLAST_NONDET~5; {83225#true} is VALID [2022-04-28 08:35:41,544 INFO L290 TraceCheckUtils]: 2: Hoare triple {83225#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {83225#true} is VALID [2022-04-28 08:35:41,544 INFO L290 TraceCheckUtils]: 3: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,544 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {83225#true} {83225#true} #1176#return; {83225#true} is VALID [2022-04-28 08:35:41,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:35:41,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,634 INFO L290 TraceCheckUtils]: 0: Hoare triple {83311#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {83332#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:35:41,635 INFO L290 TraceCheckUtils]: 1: Hoare triple {83332#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {83333#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} is VALID [2022-04-28 08:35:41,635 INFO L290 TraceCheckUtils]: 2: Hoare triple {83333#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {83334#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:35:41,636 INFO L290 TraceCheckUtils]: 3: Hoare triple {83334#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {83334#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:35:41,636 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {83334#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} {83225#true} #1178#return; {83226#false} is VALID [2022-04-28 08:35:41,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-04-28 08:35:41,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,642 INFO L290 TraceCheckUtils]: 0: Hoare triple {83225#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {83225#true} is VALID [2022-04-28 08:35:41,642 INFO L290 TraceCheckUtils]: 1: Hoare triple {83225#true} assume 0 == ~__BLAST_NONDET~2; {83225#true} is VALID [2022-04-28 08:35:41,642 INFO L290 TraceCheckUtils]: 2: Hoare triple {83225#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {83225#true} is VALID [2022-04-28 08:35:41,642 INFO L290 TraceCheckUtils]: 3: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,642 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {83225#true} {83226#false} #1180#return; {83226#false} is VALID [2022-04-28 08:35:41,642 INFO L290 TraceCheckUtils]: 0: Hoare triple {83316#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {83225#true} is VALID [2022-04-28 08:35:41,643 INFO L272 TraceCheckUtils]: 1: Hoare triple {83225#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {83316#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:35:41,643 INFO L290 TraceCheckUtils]: 2: Hoare triple {83316#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {83225#true} is VALID [2022-04-28 08:35:41,644 INFO L290 TraceCheckUtils]: 3: Hoare triple {83225#true} assume 0 == ~__BLAST_NONDET~5; {83225#true} is VALID [2022-04-28 08:35:41,644 INFO L290 TraceCheckUtils]: 4: Hoare triple {83225#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {83225#true} is VALID [2022-04-28 08:35:41,644 INFO L290 TraceCheckUtils]: 5: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,644 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {83225#true} {83225#true} #1176#return; {83225#true} is VALID [2022-04-28 08:35:41,644 INFO L290 TraceCheckUtils]: 7: Hoare triple {83225#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {83225#true} is VALID [2022-04-28 08:35:41,644 INFO L290 TraceCheckUtils]: 8: Hoare triple {83225#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {83225#true} is VALID [2022-04-28 08:35:41,644 INFO L272 TraceCheckUtils]: 9: Hoare triple {83225#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {83311#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:41,645 INFO L290 TraceCheckUtils]: 10: Hoare triple {83311#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {83332#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:35:41,646 INFO L290 TraceCheckUtils]: 11: Hoare triple {83332#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {83333#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} is VALID [2022-04-28 08:35:41,647 INFO L290 TraceCheckUtils]: 12: Hoare triple {83333#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {83334#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:35:41,647 INFO L290 TraceCheckUtils]: 13: Hoare triple {83334#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {83334#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:35:41,648 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {83334#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} {83225#true} #1178#return; {83226#false} is VALID [2022-04-28 08:35:41,648 INFO L290 TraceCheckUtils]: 15: Hoare triple {83226#false} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {83226#false} is VALID [2022-04-28 08:35:41,648 INFO L272 TraceCheckUtils]: 16: Hoare triple {83226#false} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {83225#true} is VALID [2022-04-28 08:35:41,648 INFO L290 TraceCheckUtils]: 17: Hoare triple {83225#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {83225#true} is VALID [2022-04-28 08:35:41,648 INFO L290 TraceCheckUtils]: 18: Hoare triple {83225#true} assume 0 == ~__BLAST_NONDET~2; {83225#true} is VALID [2022-04-28 08:35:41,648 INFO L290 TraceCheckUtils]: 19: Hoare triple {83225#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {83225#true} is VALID [2022-04-28 08:35:41,648 INFO L290 TraceCheckUtils]: 20: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,648 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {83225#true} {83226#false} #1180#return; {83226#false} is VALID [2022-04-28 08:35:41,648 INFO L290 TraceCheckUtils]: 22: Hoare triple {83226#false} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {83226#false} is VALID [2022-04-28 08:35:41,648 INFO L290 TraceCheckUtils]: 23: Hoare triple {83226#false} assume true; {83226#false} is VALID [2022-04-28 08:35:41,648 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {83226#false} {83225#true} #1220#return; {83226#false} is VALID [2022-04-28 08:35:41,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-04-28 08:35:41,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,682 INFO L290 TraceCheckUtils]: 0: Hoare triple {83335#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {83225#true} is VALID [2022-04-28 08:35:41,682 INFO L290 TraceCheckUtils]: 1: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,682 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {83225#true} {83226#false} #1222#return; {83226#false} is VALID [2022-04-28 08:35:41,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-04-28 08:35:41,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,689 INFO L290 TraceCheckUtils]: 0: Hoare triple {83311#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {83225#true} is VALID [2022-04-28 08:35:41,689 INFO L290 TraceCheckUtils]: 1: Hoare triple {83225#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {83225#true} is VALID [2022-04-28 08:35:41,689 INFO L290 TraceCheckUtils]: 2: Hoare triple {83225#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {83225#true} is VALID [2022-04-28 08:35:41,689 INFO L290 TraceCheckUtils]: 3: Hoare triple {83225#true} assume #res.base == dest.base && #res.offset == dest.offset; {83225#true} is VALID [2022-04-28 08:35:41,689 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {83225#true} {83226#false} #1186#return; {83226#false} is VALID [2022-04-28 08:35:41,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-04-28 08:35:41,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:35:41,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:35:41,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,731 INFO L290 TraceCheckUtils]: 0: Hoare triple {83348#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {83225#true} is VALID [2022-04-28 08:35:41,731 INFO L290 TraceCheckUtils]: 1: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,731 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {83225#true} {83225#true} #1174#return; {83225#true} is VALID [2022-04-28 08:35:41,731 INFO L290 TraceCheckUtils]: 0: Hoare triple {83348#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {83225#true} is VALID [2022-04-28 08:35:41,732 INFO L272 TraceCheckUtils]: 1: Hoare triple {83225#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {83348#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:41,732 INFO L290 TraceCheckUtils]: 2: Hoare triple {83348#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {83225#true} is VALID [2022-04-28 08:35:41,732 INFO L290 TraceCheckUtils]: 3: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,732 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {83225#true} {83225#true} #1174#return; {83225#true} is VALID [2022-04-28 08:35:41,732 INFO L290 TraceCheckUtils]: 5: Hoare triple {83225#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {83225#true} is VALID [2022-04-28 08:35:41,732 INFO L290 TraceCheckUtils]: 6: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,732 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {83225#true} {83225#true} #1210#return; {83225#true} is VALID [2022-04-28 08:35:41,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:35:41,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,745 INFO L290 TraceCheckUtils]: 0: Hoare triple {83352#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {83225#true} is VALID [2022-04-28 08:35:41,745 INFO L290 TraceCheckUtils]: 1: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,746 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {83225#true} {83225#true} #1212#return; {83225#true} is VALID [2022-04-28 08:35:41,746 INFO L290 TraceCheckUtils]: 0: Hoare triple {83336#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {83225#true} is VALID [2022-04-28 08:35:41,746 INFO L290 TraceCheckUtils]: 1: Hoare triple {83225#true} assume 0 != ~compRegistered~0; {83225#true} is VALID [2022-04-28 08:35:41,747 INFO L272 TraceCheckUtils]: 2: Hoare triple {83225#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {83348#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:41,747 INFO L290 TraceCheckUtils]: 3: Hoare triple {83348#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {83225#true} is VALID [2022-04-28 08:35:41,747 INFO L272 TraceCheckUtils]: 4: Hoare triple {83225#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {83348#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:41,747 INFO L290 TraceCheckUtils]: 5: Hoare triple {83348#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {83225#true} is VALID [2022-04-28 08:35:41,747 INFO L290 TraceCheckUtils]: 6: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,747 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {83225#true} {83225#true} #1174#return; {83225#true} is VALID [2022-04-28 08:35:41,747 INFO L290 TraceCheckUtils]: 8: Hoare triple {83225#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {83225#true} is VALID [2022-04-28 08:35:41,747 INFO L290 TraceCheckUtils]: 9: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,748 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {83225#true} {83225#true} #1210#return; {83225#true} is VALID [2022-04-28 08:35:41,748 INFO L290 TraceCheckUtils]: 11: Hoare triple {83225#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {83225#true} is VALID [2022-04-28 08:35:41,748 INFO L290 TraceCheckUtils]: 12: Hoare triple {83225#true} assume -1073741802 == ~compRetStatus~0; {83225#true} is VALID [2022-04-28 08:35:41,748 INFO L272 TraceCheckUtils]: 13: Hoare triple {83225#true} call stubMoreProcessingRequired(); {83352#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:35:41,748 INFO L290 TraceCheckUtils]: 14: Hoare triple {83352#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {83225#true} is VALID [2022-04-28 08:35:41,748 INFO L290 TraceCheckUtils]: 15: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,748 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {83225#true} {83225#true} #1212#return; {83225#true} is VALID [2022-04-28 08:35:41,748 INFO L290 TraceCheckUtils]: 17: Hoare triple {83225#true} assume !(0 == ~__BLAST_NONDET~11); {83225#true} is VALID [2022-04-28 08:35:41,748 INFO L290 TraceCheckUtils]: 18: Hoare triple {83225#true} assume !(1 == ~__BLAST_NONDET~11); {83225#true} is VALID [2022-04-28 08:35:41,748 INFO L290 TraceCheckUtils]: 19: Hoare triple {83225#true} ~returnVal2~0 := 259; {83225#true} is VALID [2022-04-28 08:35:41,748 INFO L290 TraceCheckUtils]: 20: Hoare triple {83225#true} assume !(~s~0 == ~NP~0); {83225#true} is VALID [2022-04-28 08:35:41,749 INFO L290 TraceCheckUtils]: 21: Hoare triple {83225#true} assume ~s~0 == ~MPR1~0; {83225#true} is VALID [2022-04-28 08:35:41,749 INFO L290 TraceCheckUtils]: 22: Hoare triple {83225#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {83225#true} is VALID [2022-04-28 08:35:41,749 INFO L290 TraceCheckUtils]: 23: Hoare triple {83225#true} #res := ~returnVal2~0; {83225#true} is VALID [2022-04-28 08:35:41,749 INFO L290 TraceCheckUtils]: 24: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,749 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {83225#true} {83226#false} #1192#return; {83226#false} is VALID [2022-04-28 08:35:41,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-04-28 08:35:41,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:41,766 INFO L290 TraceCheckUtils]: 0: Hoare triple {83353#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {83225#true} is VALID [2022-04-28 08:35:41,766 INFO L290 TraceCheckUtils]: 1: Hoare triple {83225#true} assume !(~s~0 == ~MPR3~0); {83225#true} is VALID [2022-04-28 08:35:41,766 INFO L290 TraceCheckUtils]: 2: Hoare triple {83225#true} assume !(1 == ~customIrp~0); {83225#true} is VALID [2022-04-28 08:35:41,766 INFO L290 TraceCheckUtils]: 3: Hoare triple {83225#true} assume !(~s~0 == ~MPR3~0); {83225#true} is VALID [2022-04-28 08:35:41,766 INFO L290 TraceCheckUtils]: 4: Hoare triple {83225#true} assume 0 == ~__BLAST_NONDET~13; {83225#true} is VALID [2022-04-28 08:35:41,766 INFO L290 TraceCheckUtils]: 5: Hoare triple {83225#true} #res := 0; {83225#true} is VALID [2022-04-28 08:35:41,766 INFO L290 TraceCheckUtils]: 6: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,766 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {83225#true} {83226#false} #1194#return; {83226#false} is VALID [2022-04-28 08:35:41,767 INFO L272 TraceCheckUtils]: 0: Hoare triple {83225#true} call ULTIMATE.init(); {83309#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:35:41,768 INFO L290 TraceCheckUtils]: 1: Hoare triple {83309#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {83225#true} is VALID [2022-04-28 08:35:41,768 INFO L290 TraceCheckUtils]: 2: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,768 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {83225#true} {83225#true} #1270#return; {83225#true} is VALID [2022-04-28 08:35:41,768 INFO L272 TraceCheckUtils]: 4: Hoare triple {83225#true} call #t~ret213 := main(); {83225#true} is VALID [2022-04-28 08:35:41,768 INFO L290 TraceCheckUtils]: 5: Hoare triple {83225#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {83225#true} is VALID [2022-04-28 08:35:41,769 INFO L272 TraceCheckUtils]: 6: Hoare triple {83225#true} call _BLAST_init(); {83310#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:41,769 INFO L290 TraceCheckUtils]: 7: Hoare triple {83310#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {83225#true} is VALID [2022-04-28 08:35:41,769 INFO L290 TraceCheckUtils]: 8: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,769 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {83225#true} {83225#true} #1216#return; {83225#true} is VALID [2022-04-28 08:35:41,770 INFO L272 TraceCheckUtils]: 10: Hoare triple {83225#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {83311#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:41,770 INFO L290 TraceCheckUtils]: 11: Hoare triple {83311#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {83225#true} is VALID [2022-04-28 08:35:41,770 INFO L272 TraceCheckUtils]: 12: Hoare triple {83225#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {83225#true} is VALID [2022-04-28 08:35:41,770 INFO L290 TraceCheckUtils]: 13: Hoare triple {83225#true} ~cond := #in~cond; {83225#true} is VALID [2022-04-28 08:35:41,770 INFO L290 TraceCheckUtils]: 14: Hoare triple {83225#true} assume !(0 == ~cond); {83225#true} is VALID [2022-04-28 08:35:41,770 INFO L290 TraceCheckUtils]: 15: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,770 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {83225#true} {83225#true} #1254#return; {83225#true} is VALID [2022-04-28 08:35:41,770 INFO L290 TraceCheckUtils]: 17: Hoare triple {83225#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {83225#true} is VALID [2022-04-28 08:35:41,770 INFO L290 TraceCheckUtils]: 18: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,770 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {83225#true} {83225#true} #1218#return; {83225#true} is VALID [2022-04-28 08:35:41,770 INFO L290 TraceCheckUtils]: 20: Hoare triple {83225#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {83225#true} is VALID [2022-04-28 08:35:41,770 INFO L290 TraceCheckUtils]: 21: Hoare triple {83225#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {83225#true} is VALID [2022-04-28 08:35:41,770 INFO L290 TraceCheckUtils]: 22: Hoare triple {83225#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {83225#true} is VALID [2022-04-28 08:35:41,771 INFO L272 TraceCheckUtils]: 23: Hoare triple {83225#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {83316#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:35:41,771 INFO L290 TraceCheckUtils]: 24: Hoare triple {83316#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {83225#true} is VALID [2022-04-28 08:35:41,772 INFO L272 TraceCheckUtils]: 25: Hoare triple {83225#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {83316#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:35:41,772 INFO L290 TraceCheckUtils]: 26: Hoare triple {83316#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {83225#true} is VALID [2022-04-28 08:35:41,772 INFO L290 TraceCheckUtils]: 27: Hoare triple {83225#true} assume 0 == ~__BLAST_NONDET~5; {83225#true} is VALID [2022-04-28 08:35:41,773 INFO L290 TraceCheckUtils]: 28: Hoare triple {83225#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {83225#true} is VALID [2022-04-28 08:35:41,773 INFO L290 TraceCheckUtils]: 29: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,773 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {83225#true} {83225#true} #1176#return; {83225#true} is VALID [2022-04-28 08:35:41,773 INFO L290 TraceCheckUtils]: 31: Hoare triple {83225#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {83225#true} is VALID [2022-04-28 08:35:41,773 INFO L290 TraceCheckUtils]: 32: Hoare triple {83225#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {83225#true} is VALID [2022-04-28 08:35:41,773 INFO L272 TraceCheckUtils]: 33: Hoare triple {83225#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {83311#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:41,774 INFO L290 TraceCheckUtils]: 34: Hoare triple {83311#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {83332#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:35:41,775 INFO L290 TraceCheckUtils]: 35: Hoare triple {83332#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {83333#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} is VALID [2022-04-28 08:35:41,776 INFO L290 TraceCheckUtils]: 36: Hoare triple {83333#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {83334#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:35:41,776 INFO L290 TraceCheckUtils]: 37: Hoare triple {83334#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {83334#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:35:41,777 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {83334#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} {83225#true} #1178#return; {83226#false} is VALID [2022-04-28 08:35:41,777 INFO L290 TraceCheckUtils]: 39: Hoare triple {83226#false} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {83226#false} is VALID [2022-04-28 08:35:41,777 INFO L272 TraceCheckUtils]: 40: Hoare triple {83226#false} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {83225#true} is VALID [2022-04-28 08:35:41,777 INFO L290 TraceCheckUtils]: 41: Hoare triple {83225#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {83225#true} is VALID [2022-04-28 08:35:41,777 INFO L290 TraceCheckUtils]: 42: Hoare triple {83225#true} assume 0 == ~__BLAST_NONDET~2; {83225#true} is VALID [2022-04-28 08:35:41,777 INFO L290 TraceCheckUtils]: 43: Hoare triple {83225#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {83225#true} is VALID [2022-04-28 08:35:41,777 INFO L290 TraceCheckUtils]: 44: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,777 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {83225#true} {83226#false} #1180#return; {83226#false} is VALID [2022-04-28 08:35:41,777 INFO L290 TraceCheckUtils]: 46: Hoare triple {83226#false} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {83226#false} is VALID [2022-04-28 08:35:41,777 INFO L290 TraceCheckUtils]: 47: Hoare triple {83226#false} assume true; {83226#false} is VALID [2022-04-28 08:35:41,777 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {83226#false} {83225#true} #1220#return; {83226#false} is VALID [2022-04-28 08:35:41,777 INFO L290 TraceCheckUtils]: 49: Hoare triple {83226#false} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {83226#false} is VALID [2022-04-28 08:35:41,777 INFO L272 TraceCheckUtils]: 50: Hoare triple {83226#false} call stub_driver_init(); {83335#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:41,777 INFO L290 TraceCheckUtils]: 51: Hoare triple {83335#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {83225#true} is VALID [2022-04-28 08:35:41,777 INFO L290 TraceCheckUtils]: 52: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,778 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {83225#true} {83226#false} #1222#return; {83226#false} is VALID [2022-04-28 08:35:41,778 INFO L290 TraceCheckUtils]: 54: Hoare triple {83226#false} assume !!(~status~5 >= 0); {83226#false} is VALID [2022-04-28 08:35:41,778 INFO L290 TraceCheckUtils]: 55: Hoare triple {83226#false} assume !(0 == ~__BLAST_NONDET~0); {83226#false} is VALID [2022-04-28 08:35:41,778 INFO L290 TraceCheckUtils]: 56: Hoare triple {83226#false} assume !(1 == ~__BLAST_NONDET~0); {83226#false} is VALID [2022-04-28 08:35:41,778 INFO L290 TraceCheckUtils]: 57: Hoare triple {83226#false} assume !(2 == ~__BLAST_NONDET~0); {83226#false} is VALID [2022-04-28 08:35:41,778 INFO L290 TraceCheckUtils]: 58: Hoare triple {83226#false} assume 3 == ~__BLAST_NONDET~0; {83226#false} is VALID [2022-04-28 08:35:41,778 INFO L272 TraceCheckUtils]: 59: Hoare triple {83226#false} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {83226#false} is VALID [2022-04-28 08:35:41,778 INFO L290 TraceCheckUtils]: 60: Hoare triple {83226#false} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {83226#false} is VALID [2022-04-28 08:35:41,778 INFO L290 TraceCheckUtils]: 61: Hoare triple {83226#false} assume 0 == #t~mem81 % 256;havoc #t~mem81; {83226#false} is VALID [2022-04-28 08:35:41,778 INFO L290 TraceCheckUtils]: 62: Hoare triple {83226#false} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {83226#false} is VALID [2022-04-28 08:35:41,778 INFO L272 TraceCheckUtils]: 63: Hoare triple {83226#false} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {83311#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:41,778 INFO L290 TraceCheckUtils]: 64: Hoare triple {83311#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {83225#true} is VALID [2022-04-28 08:35:41,778 INFO L290 TraceCheckUtils]: 65: Hoare triple {83225#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {83225#true} is VALID [2022-04-28 08:35:41,778 INFO L290 TraceCheckUtils]: 66: Hoare triple {83225#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {83225#true} is VALID [2022-04-28 08:35:41,778 INFO L290 TraceCheckUtils]: 67: Hoare triple {83225#true} assume #res.base == dest.base && #res.offset == dest.offset; {83225#true} is VALID [2022-04-28 08:35:41,779 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {83225#true} {83226#false} #1186#return; {83226#false} is VALID [2022-04-28 08:35:41,779 INFO L290 TraceCheckUtils]: 69: Hoare triple {83226#false} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {83226#false} is VALID [2022-04-28 08:35:41,779 INFO L290 TraceCheckUtils]: 70: Hoare triple {83226#false} assume !(~s~0 != ~NP~0); {83226#false} is VALID [2022-04-28 08:35:41,779 INFO L290 TraceCheckUtils]: 71: Hoare triple {83226#false} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {83226#false} is VALID [2022-04-28 08:35:41,779 INFO L290 TraceCheckUtils]: 72: Hoare triple {83226#false} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {83226#false} is VALID [2022-04-28 08:35:41,779 INFO L272 TraceCheckUtils]: 73: Hoare triple {83226#false} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {83336#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:41,779 INFO L290 TraceCheckUtils]: 74: Hoare triple {83336#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {83225#true} is VALID [2022-04-28 08:35:41,779 INFO L290 TraceCheckUtils]: 75: Hoare triple {83225#true} assume 0 != ~compRegistered~0; {83225#true} is VALID [2022-04-28 08:35:41,780 INFO L272 TraceCheckUtils]: 76: Hoare triple {83225#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {83348#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:41,780 INFO L290 TraceCheckUtils]: 77: Hoare triple {83348#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {83225#true} is VALID [2022-04-28 08:35:41,780 INFO L272 TraceCheckUtils]: 78: Hoare triple {83225#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {83348#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:41,781 INFO L290 TraceCheckUtils]: 79: Hoare triple {83348#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {83225#true} is VALID [2022-04-28 08:35:41,781 INFO L290 TraceCheckUtils]: 80: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,781 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {83225#true} {83225#true} #1174#return; {83225#true} is VALID [2022-04-28 08:35:41,781 INFO L290 TraceCheckUtils]: 82: Hoare triple {83225#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {83225#true} is VALID [2022-04-28 08:35:41,781 INFO L290 TraceCheckUtils]: 83: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,781 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {83225#true} {83225#true} #1210#return; {83225#true} is VALID [2022-04-28 08:35:41,781 INFO L290 TraceCheckUtils]: 85: Hoare triple {83225#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {83225#true} is VALID [2022-04-28 08:35:41,781 INFO L290 TraceCheckUtils]: 86: Hoare triple {83225#true} assume -1073741802 == ~compRetStatus~0; {83225#true} is VALID [2022-04-28 08:35:41,781 INFO L272 TraceCheckUtils]: 87: Hoare triple {83225#true} call stubMoreProcessingRequired(); {83352#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:35:41,781 INFO L290 TraceCheckUtils]: 88: Hoare triple {83352#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {83225#true} is VALID [2022-04-28 08:35:41,781 INFO L290 TraceCheckUtils]: 89: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,781 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {83225#true} {83225#true} #1212#return; {83225#true} is VALID [2022-04-28 08:35:41,782 INFO L290 TraceCheckUtils]: 91: Hoare triple {83225#true} assume !(0 == ~__BLAST_NONDET~11); {83225#true} is VALID [2022-04-28 08:35:41,782 INFO L290 TraceCheckUtils]: 92: Hoare triple {83225#true} assume !(1 == ~__BLAST_NONDET~11); {83225#true} is VALID [2022-04-28 08:35:41,782 INFO L290 TraceCheckUtils]: 93: Hoare triple {83225#true} ~returnVal2~0 := 259; {83225#true} is VALID [2022-04-28 08:35:41,782 INFO L290 TraceCheckUtils]: 94: Hoare triple {83225#true} assume !(~s~0 == ~NP~0); {83225#true} is VALID [2022-04-28 08:35:41,782 INFO L290 TraceCheckUtils]: 95: Hoare triple {83225#true} assume ~s~0 == ~MPR1~0; {83225#true} is VALID [2022-04-28 08:35:41,782 INFO L290 TraceCheckUtils]: 96: Hoare triple {83225#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {83225#true} is VALID [2022-04-28 08:35:41,782 INFO L290 TraceCheckUtils]: 97: Hoare triple {83225#true} #res := ~returnVal2~0; {83225#true} is VALID [2022-04-28 08:35:41,782 INFO L290 TraceCheckUtils]: 98: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,782 INFO L284 TraceCheckUtils]: 99: Hoare quadruple {83225#true} {83226#false} #1192#return; {83226#false} is VALID [2022-04-28 08:35:41,782 INFO L290 TraceCheckUtils]: 100: Hoare triple {83226#false} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {83226#false} is VALID [2022-04-28 08:35:41,782 INFO L290 TraceCheckUtils]: 101: Hoare triple {83226#false} assume 259 == ~status~3; {83226#false} is VALID [2022-04-28 08:35:41,782 INFO L272 TraceCheckUtils]: 102: Hoare triple {83226#false} call #t~ret110 := KeWaitForSingleObject(~#event~1.base, ~#event~1.offset, 0, 0, 0, 0, 0); {83353#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:41,782 INFO L290 TraceCheckUtils]: 103: Hoare triple {83353#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {83225#true} is VALID [2022-04-28 08:35:41,782 INFO L290 TraceCheckUtils]: 104: Hoare triple {83225#true} assume !(~s~0 == ~MPR3~0); {83225#true} is VALID [2022-04-28 08:35:41,782 INFO L290 TraceCheckUtils]: 105: Hoare triple {83225#true} assume !(1 == ~customIrp~0); {83225#true} is VALID [2022-04-28 08:35:41,783 INFO L290 TraceCheckUtils]: 106: Hoare triple {83225#true} assume !(~s~0 == ~MPR3~0); {83225#true} is VALID [2022-04-28 08:35:41,783 INFO L290 TraceCheckUtils]: 107: Hoare triple {83225#true} assume 0 == ~__BLAST_NONDET~13; {83225#true} is VALID [2022-04-28 08:35:41,783 INFO L290 TraceCheckUtils]: 108: Hoare triple {83225#true} #res := 0; {83225#true} is VALID [2022-04-28 08:35:41,783 INFO L290 TraceCheckUtils]: 109: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:41,783 INFO L284 TraceCheckUtils]: 110: Hoare quadruple {83225#true} {83226#false} #1194#return; {83226#false} is VALID [2022-04-28 08:35:41,783 INFO L290 TraceCheckUtils]: 111: Hoare triple {83226#false} assume -2147483648 <= #t~ret110 && #t~ret110 <= 2147483647;havoc #t~ret110; {83226#false} is VALID [2022-04-28 08:35:41,783 INFO L290 TraceCheckUtils]: 112: Hoare triple {83226#false} assume ~status~3 >= 0; {83226#false} is VALID [2022-04-28 08:35:41,783 INFO L290 TraceCheckUtils]: 113: Hoare triple {83226#false} assume !(~myStatus~0 >= 0); {83226#false} is VALID [2022-04-28 08:35:41,783 INFO L290 TraceCheckUtils]: 114: Hoare triple {83226#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {83226#false} is VALID [2022-04-28 08:35:41,783 INFO L272 TraceCheckUtils]: 115: Hoare triple {83226#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {83226#false} is VALID [2022-04-28 08:35:41,783 INFO L290 TraceCheckUtils]: 116: Hoare triple {83226#false} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {83226#false} is VALID [2022-04-28 08:35:41,783 INFO L290 TraceCheckUtils]: 117: Hoare triple {83226#false} assume !(~s~0 == ~NP~0); {83226#false} is VALID [2022-04-28 08:35:41,783 INFO L272 TraceCheckUtils]: 118: Hoare triple {83226#false} call errorFn(); {83226#false} is VALID [2022-04-28 08:35:41,783 INFO L290 TraceCheckUtils]: 119: Hoare triple {83226#false} assume !false; {83226#false} is VALID [2022-04-28 08:35:41,784 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:35:41,784 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:35:41,784 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [278222462] [2022-04-28 08:35:41,784 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [278222462] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 08:35:41,784 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [236007912] [2022-04-28 08:35:41,784 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-04-28 08:35:41,784 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 08:35:41,784 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 08:35:41,800 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 08:35:41,801 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-04-28 08:35:42,896 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2022-04-28 08:35:42,897 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-04-28 08:35:42,903 INFO L263 TraceCheckSpWp]: Trace formula consists of 1824 conjuncts, 7 conjunts are in the unsatisfiable core [2022-04-28 08:35:42,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:42,953 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 08:35:43,218 INFO L272 TraceCheckUtils]: 0: Hoare triple {83225#true} call ULTIMATE.init(); {83225#true} is VALID [2022-04-28 08:35:43,218 INFO L290 TraceCheckUtils]: 1: Hoare triple {83225#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {83225#true} is VALID [2022-04-28 08:35:43,218 INFO L290 TraceCheckUtils]: 2: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:43,218 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {83225#true} {83225#true} #1270#return; {83225#true} is VALID [2022-04-28 08:35:43,218 INFO L272 TraceCheckUtils]: 4: Hoare triple {83225#true} call #t~ret213 := main(); {83225#true} is VALID [2022-04-28 08:35:43,218 INFO L290 TraceCheckUtils]: 5: Hoare triple {83225#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {83225#true} is VALID [2022-04-28 08:35:43,218 INFO L272 TraceCheckUtils]: 6: Hoare triple {83225#true} call _BLAST_init(); {83225#true} is VALID [2022-04-28 08:35:43,218 INFO L290 TraceCheckUtils]: 7: Hoare triple {83225#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {83225#true} is VALID [2022-04-28 08:35:43,218 INFO L290 TraceCheckUtils]: 8: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:43,219 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {83225#true} {83225#true} #1216#return; {83225#true} is VALID [2022-04-28 08:35:43,219 INFO L272 TraceCheckUtils]: 10: Hoare triple {83225#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {83225#true} is VALID [2022-04-28 08:35:43,219 INFO L290 TraceCheckUtils]: 11: Hoare triple {83225#true} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {83225#true} is VALID [2022-04-28 08:35:43,219 INFO L272 TraceCheckUtils]: 12: Hoare triple {83225#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {83225#true} is VALID [2022-04-28 08:35:43,219 INFO L290 TraceCheckUtils]: 13: Hoare triple {83225#true} ~cond := #in~cond; {83225#true} is VALID [2022-04-28 08:35:43,219 INFO L290 TraceCheckUtils]: 14: Hoare triple {83225#true} assume !(0 == ~cond); {83225#true} is VALID [2022-04-28 08:35:43,219 INFO L290 TraceCheckUtils]: 15: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:43,219 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {83225#true} {83225#true} #1254#return; {83225#true} is VALID [2022-04-28 08:35:43,219 INFO L290 TraceCheckUtils]: 17: Hoare triple {83225#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {83225#true} is VALID [2022-04-28 08:35:43,219 INFO L290 TraceCheckUtils]: 18: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:43,219 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {83225#true} {83225#true} #1218#return; {83225#true} is VALID [2022-04-28 08:35:43,219 INFO L290 TraceCheckUtils]: 20: Hoare triple {83225#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {83225#true} is VALID [2022-04-28 08:35:43,219 INFO L290 TraceCheckUtils]: 21: Hoare triple {83225#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {83225#true} is VALID [2022-04-28 08:35:43,219 INFO L290 TraceCheckUtils]: 22: Hoare triple {83225#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {83225#true} is VALID [2022-04-28 08:35:43,220 INFO L272 TraceCheckUtils]: 23: Hoare triple {83225#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {83225#true} is VALID [2022-04-28 08:35:43,220 INFO L290 TraceCheckUtils]: 24: Hoare triple {83225#true} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {83225#true} is VALID [2022-04-28 08:35:43,220 INFO L272 TraceCheckUtils]: 25: Hoare triple {83225#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {83225#true} is VALID [2022-04-28 08:35:43,220 INFO L290 TraceCheckUtils]: 26: Hoare triple {83225#true} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {83225#true} is VALID [2022-04-28 08:35:43,220 INFO L290 TraceCheckUtils]: 27: Hoare triple {83225#true} assume 0 == ~__BLAST_NONDET~5; {83225#true} is VALID [2022-04-28 08:35:43,220 INFO L290 TraceCheckUtils]: 28: Hoare triple {83225#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {83225#true} is VALID [2022-04-28 08:35:43,220 INFO L290 TraceCheckUtils]: 29: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:43,220 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {83225#true} {83225#true} #1176#return; {83225#true} is VALID [2022-04-28 08:35:43,220 INFO L290 TraceCheckUtils]: 31: Hoare triple {83225#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {83225#true} is VALID [2022-04-28 08:35:43,220 INFO L290 TraceCheckUtils]: 32: Hoare triple {83225#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {83225#true} is VALID [2022-04-28 08:35:43,220 INFO L272 TraceCheckUtils]: 33: Hoare triple {83225#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {83225#true} is VALID [2022-04-28 08:35:43,220 INFO L290 TraceCheckUtils]: 34: Hoare triple {83225#true} #t~loopctr214 := 0; {83225#true} is VALID [2022-04-28 08:35:43,220 INFO L290 TraceCheckUtils]: 35: Hoare triple {83225#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {83225#true} is VALID [2022-04-28 08:35:43,220 INFO L290 TraceCheckUtils]: 36: Hoare triple {83225#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {83225#true} is VALID [2022-04-28 08:35:43,220 INFO L290 TraceCheckUtils]: 37: Hoare triple {83225#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {83225#true} is VALID [2022-04-28 08:35:43,221 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {83225#true} {83225#true} #1178#return; {83225#true} is VALID [2022-04-28 08:35:43,221 INFO L290 TraceCheckUtils]: 39: Hoare triple {83225#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {83225#true} is VALID [2022-04-28 08:35:43,221 INFO L272 TraceCheckUtils]: 40: Hoare triple {83225#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {83225#true} is VALID [2022-04-28 08:35:43,221 INFO L290 TraceCheckUtils]: 41: Hoare triple {83225#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {83225#true} is VALID [2022-04-28 08:35:43,221 INFO L290 TraceCheckUtils]: 42: Hoare triple {83225#true} assume 0 == ~__BLAST_NONDET~2; {83225#true} is VALID [2022-04-28 08:35:43,221 INFO L290 TraceCheckUtils]: 43: Hoare triple {83225#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {83225#true} is VALID [2022-04-28 08:35:43,221 INFO L290 TraceCheckUtils]: 44: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:43,221 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {83225#true} {83225#true} #1180#return; {83225#true} is VALID [2022-04-28 08:35:43,221 INFO L290 TraceCheckUtils]: 46: Hoare triple {83225#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {83225#true} is VALID [2022-04-28 08:35:43,221 INFO L290 TraceCheckUtils]: 47: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:43,221 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {83225#true} {83225#true} #1220#return; {83225#true} is VALID [2022-04-28 08:35:43,221 INFO L290 TraceCheckUtils]: 49: Hoare triple {83225#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {83225#true} is VALID [2022-04-28 08:35:43,221 INFO L272 TraceCheckUtils]: 50: Hoare triple {83225#true} call stub_driver_init(); {83225#true} is VALID [2022-04-28 08:35:43,221 INFO L290 TraceCheckUtils]: 51: Hoare triple {83225#true} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {83225#true} is VALID [2022-04-28 08:35:43,222 INFO L290 TraceCheckUtils]: 52: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:43,222 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {83225#true} {83225#true} #1222#return; {83225#true} is VALID [2022-04-28 08:35:43,222 INFO L290 TraceCheckUtils]: 54: Hoare triple {83225#true} assume !!(~status~5 >= 0); {83225#true} is VALID [2022-04-28 08:35:43,222 INFO L290 TraceCheckUtils]: 55: Hoare triple {83225#true} assume !(0 == ~__BLAST_NONDET~0); {83225#true} is VALID [2022-04-28 08:35:43,222 INFO L290 TraceCheckUtils]: 56: Hoare triple {83225#true} assume !(1 == ~__BLAST_NONDET~0); {83225#true} is VALID [2022-04-28 08:35:43,222 INFO L290 TraceCheckUtils]: 57: Hoare triple {83225#true} assume !(2 == ~__BLAST_NONDET~0); {83225#true} is VALID [2022-04-28 08:35:43,222 INFO L290 TraceCheckUtils]: 58: Hoare triple {83225#true} assume 3 == ~__BLAST_NONDET~0; {83225#true} is VALID [2022-04-28 08:35:43,222 INFO L272 TraceCheckUtils]: 59: Hoare triple {83225#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {83225#true} is VALID [2022-04-28 08:35:43,222 INFO L290 TraceCheckUtils]: 60: Hoare triple {83225#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {83225#true} is VALID [2022-04-28 08:35:43,222 INFO L290 TraceCheckUtils]: 61: Hoare triple {83225#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {83225#true} is VALID [2022-04-28 08:35:43,222 INFO L290 TraceCheckUtils]: 62: Hoare triple {83225#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {83225#true} is VALID [2022-04-28 08:35:43,222 INFO L272 TraceCheckUtils]: 63: Hoare triple {83225#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {83225#true} is VALID [2022-04-28 08:35:43,222 INFO L290 TraceCheckUtils]: 64: Hoare triple {83225#true} #t~loopctr215 := 0; {83225#true} is VALID [2022-04-28 08:35:43,222 INFO L290 TraceCheckUtils]: 65: Hoare triple {83225#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {83225#true} is VALID [2022-04-28 08:35:43,222 INFO L290 TraceCheckUtils]: 66: Hoare triple {83225#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {83225#true} is VALID [2022-04-28 08:35:43,223 INFO L290 TraceCheckUtils]: 67: Hoare triple {83225#true} assume #res.base == dest.base && #res.offset == dest.offset; {83225#true} is VALID [2022-04-28 08:35:43,223 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {83225#true} {83225#true} #1186#return; {83225#true} is VALID [2022-04-28 08:35:43,223 INFO L290 TraceCheckUtils]: 69: Hoare triple {83225#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {83225#true} is VALID [2022-04-28 08:35:43,223 INFO L290 TraceCheckUtils]: 70: Hoare triple {83225#true} assume !(~s~0 != ~NP~0); {83225#true} is VALID [2022-04-28 08:35:43,223 INFO L290 TraceCheckUtils]: 71: Hoare triple {83225#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {83225#true} is VALID [2022-04-28 08:35:43,223 INFO L290 TraceCheckUtils]: 72: Hoare triple {83225#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {83225#true} is VALID [2022-04-28 08:35:43,223 INFO L272 TraceCheckUtils]: 73: Hoare triple {83225#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {83225#true} is VALID [2022-04-28 08:35:43,223 INFO L290 TraceCheckUtils]: 74: Hoare triple {83225#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {83225#true} is VALID [2022-04-28 08:35:43,223 INFO L290 TraceCheckUtils]: 75: Hoare triple {83225#true} assume 0 != ~compRegistered~0; {83225#true} is VALID [2022-04-28 08:35:43,223 INFO L272 TraceCheckUtils]: 76: Hoare triple {83225#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {83225#true} is VALID [2022-04-28 08:35:43,223 INFO L290 TraceCheckUtils]: 77: Hoare triple {83225#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {83225#true} is VALID [2022-04-28 08:35:43,223 INFO L272 TraceCheckUtils]: 78: Hoare triple {83225#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {83225#true} is VALID [2022-04-28 08:35:43,223 INFO L290 TraceCheckUtils]: 79: Hoare triple {83225#true} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {83225#true} is VALID [2022-04-28 08:35:43,223 INFO L290 TraceCheckUtils]: 80: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:43,224 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {83225#true} {83225#true} #1174#return; {83225#true} is VALID [2022-04-28 08:35:43,224 INFO L290 TraceCheckUtils]: 82: Hoare triple {83225#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {83225#true} is VALID [2022-04-28 08:35:43,224 INFO L290 TraceCheckUtils]: 83: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:43,224 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {83225#true} {83225#true} #1210#return; {83225#true} is VALID [2022-04-28 08:35:43,224 INFO L290 TraceCheckUtils]: 85: Hoare triple {83225#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {83225#true} is VALID [2022-04-28 08:35:43,224 INFO L290 TraceCheckUtils]: 86: Hoare triple {83225#true} assume -1073741802 == ~compRetStatus~0; {83225#true} is VALID [2022-04-28 08:35:43,224 INFO L272 TraceCheckUtils]: 87: Hoare triple {83225#true} call stubMoreProcessingRequired(); {83225#true} is VALID [2022-04-28 08:35:43,224 INFO L290 TraceCheckUtils]: 88: Hoare triple {83225#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {83225#true} is VALID [2022-04-28 08:35:43,224 INFO L290 TraceCheckUtils]: 89: Hoare triple {83225#true} assume true; {83225#true} is VALID [2022-04-28 08:35:43,224 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {83225#true} {83225#true} #1212#return; {83225#true} is VALID [2022-04-28 08:35:43,224 INFO L290 TraceCheckUtils]: 91: Hoare triple {83225#true} assume !(0 == ~__BLAST_NONDET~11); {83225#true} is VALID [2022-04-28 08:35:43,224 INFO L290 TraceCheckUtils]: 92: Hoare triple {83225#true} assume !(1 == ~__BLAST_NONDET~11); {83225#true} is VALID [2022-04-28 08:35:43,224 INFO L290 TraceCheckUtils]: 93: Hoare triple {83225#true} ~returnVal2~0 := 259; {83225#true} is VALID [2022-04-28 08:35:43,224 INFO L290 TraceCheckUtils]: 94: Hoare triple {83225#true} assume !(~s~0 == ~NP~0); {83225#true} is VALID [2022-04-28 08:35:43,224 INFO L290 TraceCheckUtils]: 95: Hoare triple {83225#true} assume ~s~0 == ~MPR1~0; {83225#true} is VALID [2022-04-28 08:35:43,225 INFO L290 TraceCheckUtils]: 96: Hoare triple {83225#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {83645#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:35:43,225 INFO L290 TraceCheckUtils]: 97: Hoare triple {83645#(= ~MPR3~0 ~s~0)} #res := ~returnVal2~0; {83645#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:35:43,226 INFO L290 TraceCheckUtils]: 98: Hoare triple {83645#(= ~MPR3~0 ~s~0)} assume true; {83645#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:35:43,226 INFO L284 TraceCheckUtils]: 99: Hoare quadruple {83645#(= ~MPR3~0 ~s~0)} {83225#true} #1192#return; {83645#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:35:43,227 INFO L290 TraceCheckUtils]: 100: Hoare triple {83645#(= ~MPR3~0 ~s~0)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {83645#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:35:43,227 INFO L290 TraceCheckUtils]: 101: Hoare triple {83645#(= ~MPR3~0 ~s~0)} assume 259 == ~status~3; {83645#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:35:43,228 INFO L272 TraceCheckUtils]: 102: Hoare triple {83645#(= ~MPR3~0 ~s~0)} call #t~ret110 := KeWaitForSingleObject(~#event~1.base, ~#event~1.offset, 0, 0, 0, 0, 0); {83352#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:35:43,228 INFO L290 TraceCheckUtils]: 103: Hoare triple {83352#(= ~s~0 |old(~s~0)|)} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {83352#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:35:43,229 INFO L290 TraceCheckUtils]: 104: Hoare triple {83352#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~MPR3~0); {83670#(and (= ~s~0 |old(~s~0)|) (not (= ~MPR3~0 ~s~0)))} is VALID [2022-04-28 08:35:43,229 INFO L290 TraceCheckUtils]: 105: Hoare triple {83670#(and (= ~s~0 |old(~s~0)|) (not (= ~MPR3~0 ~s~0)))} assume !(1 == ~customIrp~0); {83670#(and (= ~s~0 |old(~s~0)|) (not (= ~MPR3~0 ~s~0)))} is VALID [2022-04-28 08:35:43,229 INFO L290 TraceCheckUtils]: 106: Hoare triple {83670#(and (= ~s~0 |old(~s~0)|) (not (= ~MPR3~0 ~s~0)))} assume !(~s~0 == ~MPR3~0); {83670#(and (= ~s~0 |old(~s~0)|) (not (= ~MPR3~0 ~s~0)))} is VALID [2022-04-28 08:35:43,230 INFO L290 TraceCheckUtils]: 107: Hoare triple {83670#(and (= ~s~0 |old(~s~0)|) (not (= ~MPR3~0 ~s~0)))} assume 0 == ~__BLAST_NONDET~13; {83670#(and (= ~s~0 |old(~s~0)|) (not (= ~MPR3~0 ~s~0)))} is VALID [2022-04-28 08:35:43,230 INFO L290 TraceCheckUtils]: 108: Hoare triple {83670#(and (= ~s~0 |old(~s~0)|) (not (= ~MPR3~0 ~s~0)))} #res := 0; {83670#(and (= ~s~0 |old(~s~0)|) (not (= ~MPR3~0 ~s~0)))} is VALID [2022-04-28 08:35:43,230 INFO L290 TraceCheckUtils]: 109: Hoare triple {83670#(and (= ~s~0 |old(~s~0)|) (not (= ~MPR3~0 ~s~0)))} assume true; {83670#(and (= ~s~0 |old(~s~0)|) (not (= ~MPR3~0 ~s~0)))} is VALID [2022-04-28 08:35:43,231 INFO L284 TraceCheckUtils]: 110: Hoare quadruple {83670#(and (= ~s~0 |old(~s~0)|) (not (= ~MPR3~0 ~s~0)))} {83645#(= ~MPR3~0 ~s~0)} #1194#return; {83226#false} is VALID [2022-04-28 08:35:43,231 INFO L290 TraceCheckUtils]: 111: Hoare triple {83226#false} assume -2147483648 <= #t~ret110 && #t~ret110 <= 2147483647;havoc #t~ret110; {83226#false} is VALID [2022-04-28 08:35:43,231 INFO L290 TraceCheckUtils]: 112: Hoare triple {83226#false} assume ~status~3 >= 0; {83226#false} is VALID [2022-04-28 08:35:43,231 INFO L290 TraceCheckUtils]: 113: Hoare triple {83226#false} assume !(~myStatus~0 >= 0); {83226#false} is VALID [2022-04-28 08:35:43,231 INFO L290 TraceCheckUtils]: 114: Hoare triple {83226#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {83226#false} is VALID [2022-04-28 08:35:43,231 INFO L272 TraceCheckUtils]: 115: Hoare triple {83226#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {83226#false} is VALID [2022-04-28 08:35:43,232 INFO L290 TraceCheckUtils]: 116: Hoare triple {83226#false} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {83226#false} is VALID [2022-04-28 08:35:43,232 INFO L290 TraceCheckUtils]: 117: Hoare triple {83226#false} assume !(~s~0 == ~NP~0); {83226#false} is VALID [2022-04-28 08:35:43,232 INFO L272 TraceCheckUtils]: 118: Hoare triple {83226#false} call errorFn(); {83226#false} is VALID [2022-04-28 08:35:43,232 INFO L290 TraceCheckUtils]: 119: Hoare triple {83226#false} assume !false; {83226#false} is VALID [2022-04-28 08:35:43,232 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 08:35:43,232 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-04-28 08:35:43,232 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [236007912] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:35:43,232 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-04-28 08:35:43,232 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [14] total 16 [2022-04-28 08:35:43,232 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:35:43,233 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [431808168] [2022-04-28 08:35:43,233 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [431808168] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:35:43,233 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:35:43,233 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-28 08:35:43,233 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1496364207] [2022-04-28 08:35:43,233 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:35:43,233 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 17.2) internal successors, (86), 5 states have internal predecessors, (86), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) Word has length 120 [2022-04-28 08:35:43,233 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:35:43,233 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 17.2) internal successors, (86), 5 states have internal predecessors, (86), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-04-28 08:35:43,341 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 120 edges. 120 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:35:43,341 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-04-28 08:35:43,342 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:35:43,342 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-04-28 08:35:43,342 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=190, Unknown=0, NotChecked=0, Total=240 [2022-04-28 08:35:43,342 INFO L87 Difference]: Start difference. First operand 338 states and 377 transitions. Second operand has 5 states, 5 states have (on average 17.2) internal successors, (86), 5 states have internal predecessors, (86), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-04-28 08:35:50,274 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:35:50,274 INFO L93 Difference]: Finished difference Result 378 states and 421 transitions. [2022-04-28 08:35:50,274 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-28 08:35:50,274 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 17.2) internal successors, (86), 5 states have internal predecessors, (86), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) Word has length 120 [2022-04-28 08:35:50,274 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:35:50,274 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 17.2) internal successors, (86), 5 states have internal predecessors, (86), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-04-28 08:35:50,275 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 212 transitions. [2022-04-28 08:35:50,276 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 17.2) internal successors, (86), 5 states have internal predecessors, (86), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-04-28 08:35:50,277 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 212 transitions. [2022-04-28 08:35:50,277 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 212 transitions. [2022-04-28 08:35:50,426 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 212 edges. 212 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:35:50,431 INFO L225 Difference]: With dead ends: 378 [2022-04-28 08:35:50,431 INFO L226 Difference]: Without dead ends: 313 [2022-04-28 08:35:50,432 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 141 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=54, Invalid=218, Unknown=0, NotChecked=0, Total=272 [2022-04-28 08:35:50,432 INFO L413 NwaCegarLoop]: 159 mSDtfsCounter, 71 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 185 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 308 SdHoareTripleChecker+Invalid, 207 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 185 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-04-28 08:35:50,432 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 308 Invalid, 207 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 185 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-04-28 08:35:50,433 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 313 states. [2022-04-28 08:35:51,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 313 to 291. [2022-04-28 08:35:51,175 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:35:51,176 INFO L82 GeneralOperation]: Start isEquivalent. First operand 313 states. Second operand has 291 states, 223 states have (on average 1.1210762331838564) internal successors, (250), 225 states have internal predecessors, (250), 33 states have call successors, (33), 33 states have call predecessors, (33), 34 states have return successors, (35), 32 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:35:51,176 INFO L74 IsIncluded]: Start isIncluded. First operand 313 states. Second operand has 291 states, 223 states have (on average 1.1210762331838564) internal successors, (250), 225 states have internal predecessors, (250), 33 states have call successors, (33), 33 states have call predecessors, (33), 34 states have return successors, (35), 32 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:35:51,176 INFO L87 Difference]: Start difference. First operand 313 states. Second operand has 291 states, 223 states have (on average 1.1210762331838564) internal successors, (250), 225 states have internal predecessors, (250), 33 states have call successors, (33), 33 states have call predecessors, (33), 34 states have return successors, (35), 32 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:35:51,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:35:51,180 INFO L93 Difference]: Finished difference Result 313 states and 343 transitions. [2022-04-28 08:35:51,180 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 343 transitions. [2022-04-28 08:35:51,180 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:35:51,180 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:35:51,181 INFO L74 IsIncluded]: Start isIncluded. First operand has 291 states, 223 states have (on average 1.1210762331838564) internal successors, (250), 225 states have internal predecessors, (250), 33 states have call successors, (33), 33 states have call predecessors, (33), 34 states have return successors, (35), 32 states have call predecessors, (35), 31 states have call successors, (35) Second operand 313 states. [2022-04-28 08:35:51,181 INFO L87 Difference]: Start difference. First operand has 291 states, 223 states have (on average 1.1210762331838564) internal successors, (250), 225 states have internal predecessors, (250), 33 states have call successors, (33), 33 states have call predecessors, (33), 34 states have return successors, (35), 32 states have call predecessors, (35), 31 states have call successors, (35) Second operand 313 states. [2022-04-28 08:35:51,184 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:35:51,184 INFO L93 Difference]: Finished difference Result 313 states and 343 transitions. [2022-04-28 08:35:51,184 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 343 transitions. [2022-04-28 08:35:51,185 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:35:51,185 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:35:51,185 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:35:51,185 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:35:51,185 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 291 states, 223 states have (on average 1.1210762331838564) internal successors, (250), 225 states have internal predecessors, (250), 33 states have call successors, (33), 33 states have call predecessors, (33), 34 states have return successors, (35), 32 states have call predecessors, (35), 31 states have call successors, (35) [2022-04-28 08:35:51,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 291 states to 291 states and 318 transitions. [2022-04-28 08:35:51,189 INFO L78 Accepts]: Start accepts. Automaton has 291 states and 318 transitions. Word has length 120 [2022-04-28 08:35:51,190 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:35:51,190 INFO L495 AbstractCegarLoop]: Abstraction has 291 states and 318 transitions. [2022-04-28 08:35:51,190 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 17.2) internal successors, (86), 5 states have internal predecessors, (86), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-04-28 08:35:51,190 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 291 states and 318 transitions. [2022-04-28 08:35:51,993 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 318 edges. 318 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:35:51,994 INFO L276 IsEmpty]: Start isEmpty. Operand 291 states and 318 transitions. [2022-04-28 08:35:51,994 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 127 [2022-04-28 08:35:51,994 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:35:51,994 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:35:52,019 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-04-28 08:35:52,217 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-04-28 08:35:52,217 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:35:52,217 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:35:52,217 INFO L85 PathProgramCache]: Analyzing trace with hash 1988173063, now seen corresponding path program 1 times [2022-04-28 08:35:52,217 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:35:52,217 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1537639637] [2022-04-28 08:35:52,219 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 0 HavocedVariables, 4 AssignedVariables, -1 ReadonlyVariables, Eigenvalues: {}, 0 SequentialAcceleration, 0 AlternatingAcceleration, 0 QuantifierFreeResult [2022-04-28 08:35:52,219 WARN L91 AcceleratorJordan]: Jordan acceleration failed, because NONINTEGER_UPDATE [2022-04-28 08:35:52,219 INFO L274 tedInterpolationCore]: Could not compute an accelerate. [2022-04-28 08:35:52,219 INFO L85 PathProgramCache]: Analyzing trace with hash 1988173063, now seen corresponding path program 2 times [2022-04-28 08:35:52,220 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:35:52,220 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [616232229] [2022-04-28 08:35:52,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:35:52,220 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:35:52,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:35:52,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,426 INFO L290 TraceCheckUtils]: 0: Hoare triple {85781#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {85682#true} is VALID [2022-04-28 08:35:52,426 INFO L290 TraceCheckUtils]: 1: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,426 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {85682#true} {85682#true} #1270#return; {85682#true} is VALID [2022-04-28 08:35:52,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:35:52,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,458 INFO L290 TraceCheckUtils]: 0: Hoare triple {85782#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {85682#true} is VALID [2022-04-28 08:35:52,458 INFO L290 TraceCheckUtils]: 1: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,458 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {85682#true} {85682#true} #1216#return; {85682#true} is VALID [2022-04-28 08:35:52,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:35:52,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:35:52,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,485 INFO L290 TraceCheckUtils]: 0: Hoare triple {85682#true} ~cond := #in~cond; {85682#true} is VALID [2022-04-28 08:35:52,485 INFO L290 TraceCheckUtils]: 1: Hoare triple {85682#true} assume !(0 == ~cond); {85682#true} is VALID [2022-04-28 08:35:52,485 INFO L290 TraceCheckUtils]: 2: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,485 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {85682#true} {85682#true} #1254#return; {85682#true} is VALID [2022-04-28 08:35:52,485 INFO L290 TraceCheckUtils]: 0: Hoare triple {85783#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {85682#true} is VALID [2022-04-28 08:35:52,485 INFO L272 TraceCheckUtils]: 1: Hoare triple {85682#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {85682#true} is VALID [2022-04-28 08:35:52,485 INFO L290 TraceCheckUtils]: 2: Hoare triple {85682#true} ~cond := #in~cond; {85682#true} is VALID [2022-04-28 08:35:52,486 INFO L290 TraceCheckUtils]: 3: Hoare triple {85682#true} assume !(0 == ~cond); {85682#true} is VALID [2022-04-28 08:35:52,486 INFO L290 TraceCheckUtils]: 4: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,486 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {85682#true} {85682#true} #1254#return; {85682#true} is VALID [2022-04-28 08:35:52,486 INFO L290 TraceCheckUtils]: 6: Hoare triple {85682#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {85682#true} is VALID [2022-04-28 08:35:52,486 INFO L290 TraceCheckUtils]: 7: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,486 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {85682#true} {85682#true} #1218#return; {85682#true} is VALID [2022-04-28 08:35:52,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:35:52,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,518 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:35:52,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,526 INFO L290 TraceCheckUtils]: 0: Hoare triple {85788#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {85682#true} is VALID [2022-04-28 08:35:52,526 INFO L290 TraceCheckUtils]: 1: Hoare triple {85682#true} assume 0 == ~__BLAST_NONDET~5; {85682#true} is VALID [2022-04-28 08:35:52,526 INFO L290 TraceCheckUtils]: 2: Hoare triple {85682#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {85682#true} is VALID [2022-04-28 08:35:52,526 INFO L290 TraceCheckUtils]: 3: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,526 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {85682#true} {85682#true} #1176#return; {85682#true} is VALID [2022-04-28 08:35:52,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:35:52,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,532 INFO L290 TraceCheckUtils]: 0: Hoare triple {85783#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {85682#true} is VALID [2022-04-28 08:35:52,532 INFO L290 TraceCheckUtils]: 1: Hoare triple {85682#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {85682#true} is VALID [2022-04-28 08:35:52,533 INFO L290 TraceCheckUtils]: 2: Hoare triple {85682#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {85682#true} is VALID [2022-04-28 08:35:52,533 INFO L290 TraceCheckUtils]: 3: Hoare triple {85682#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {85682#true} is VALID [2022-04-28 08:35:52,533 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {85682#true} {85682#true} #1178#return; {85682#true} is VALID [2022-04-28 08:35:52,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-04-28 08:35:52,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,538 INFO L290 TraceCheckUtils]: 0: Hoare triple {85682#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {85682#true} is VALID [2022-04-28 08:35:52,538 INFO L290 TraceCheckUtils]: 1: Hoare triple {85682#true} assume 0 == ~__BLAST_NONDET~2; {85682#true} is VALID [2022-04-28 08:35:52,538 INFO L290 TraceCheckUtils]: 2: Hoare triple {85682#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {85682#true} is VALID [2022-04-28 08:35:52,538 INFO L290 TraceCheckUtils]: 3: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,538 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {85682#true} {85682#true} #1180#return; {85682#true} is VALID [2022-04-28 08:35:52,538 INFO L290 TraceCheckUtils]: 0: Hoare triple {85788#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {85682#true} is VALID [2022-04-28 08:35:52,539 INFO L272 TraceCheckUtils]: 1: Hoare triple {85682#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {85788#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:35:52,539 INFO L290 TraceCheckUtils]: 2: Hoare triple {85788#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {85682#true} is VALID [2022-04-28 08:35:52,539 INFO L290 TraceCheckUtils]: 3: Hoare triple {85682#true} assume 0 == ~__BLAST_NONDET~5; {85682#true} is VALID [2022-04-28 08:35:52,539 INFO L290 TraceCheckUtils]: 4: Hoare triple {85682#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {85682#true} is VALID [2022-04-28 08:35:52,539 INFO L290 TraceCheckUtils]: 5: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,540 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {85682#true} {85682#true} #1176#return; {85682#true} is VALID [2022-04-28 08:35:52,540 INFO L290 TraceCheckUtils]: 7: Hoare triple {85682#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {85682#true} is VALID [2022-04-28 08:35:52,540 INFO L290 TraceCheckUtils]: 8: Hoare triple {85682#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {85682#true} is VALID [2022-04-28 08:35:52,540 INFO L272 TraceCheckUtils]: 9: Hoare triple {85682#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {85783#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:52,540 INFO L290 TraceCheckUtils]: 10: Hoare triple {85783#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {85682#true} is VALID [2022-04-28 08:35:52,541 INFO L290 TraceCheckUtils]: 11: Hoare triple {85682#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {85682#true} is VALID [2022-04-28 08:35:52,541 INFO L290 TraceCheckUtils]: 12: Hoare triple {85682#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {85682#true} is VALID [2022-04-28 08:35:52,541 INFO L290 TraceCheckUtils]: 13: Hoare triple {85682#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {85682#true} is VALID [2022-04-28 08:35:52,541 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {85682#true} {85682#true} #1178#return; {85682#true} is VALID [2022-04-28 08:35:52,541 INFO L290 TraceCheckUtils]: 15: Hoare triple {85682#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {85682#true} is VALID [2022-04-28 08:35:52,541 INFO L272 TraceCheckUtils]: 16: Hoare triple {85682#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {85682#true} is VALID [2022-04-28 08:35:52,541 INFO L290 TraceCheckUtils]: 17: Hoare triple {85682#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {85682#true} is VALID [2022-04-28 08:35:52,541 INFO L290 TraceCheckUtils]: 18: Hoare triple {85682#true} assume 0 == ~__BLAST_NONDET~2; {85682#true} is VALID [2022-04-28 08:35:52,541 INFO L290 TraceCheckUtils]: 19: Hoare triple {85682#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {85682#true} is VALID [2022-04-28 08:35:52,541 INFO L290 TraceCheckUtils]: 20: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,541 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {85682#true} {85682#true} #1180#return; {85682#true} is VALID [2022-04-28 08:35:52,541 INFO L290 TraceCheckUtils]: 22: Hoare triple {85682#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {85682#true} is VALID [2022-04-28 08:35:52,541 INFO L290 TraceCheckUtils]: 23: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,541 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {85682#true} {85682#true} #1220#return; {85682#true} is VALID [2022-04-28 08:35:52,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-04-28 08:35:52,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,560 INFO L290 TraceCheckUtils]: 0: Hoare triple {85804#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {85682#true} is VALID [2022-04-28 08:35:52,560 INFO L290 TraceCheckUtils]: 1: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,560 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {85682#true} {85682#true} #1222#return; {85682#true} is VALID [2022-04-28 08:35:52,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-04-28 08:35:52,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-28 08:35:52,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,647 INFO L290 TraceCheckUtils]: 0: Hoare triple {85783#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {85682#true} is VALID [2022-04-28 08:35:52,647 INFO L290 TraceCheckUtils]: 1: Hoare triple {85682#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {85682#true} is VALID [2022-04-28 08:35:52,647 INFO L290 TraceCheckUtils]: 2: Hoare triple {85682#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {85682#true} is VALID [2022-04-28 08:35:52,647 INFO L290 TraceCheckUtils]: 3: Hoare triple {85682#true} assume #res.base == dest.base && #res.offset == dest.offset; {85682#true} is VALID [2022-04-28 08:35:52,647 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {85682#true} {85682#true} #1186#return; {85682#true} is VALID [2022-04-28 08:35:52,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:35:52,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:35:52,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:35:52,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,751 INFO L290 TraceCheckUtils]: 0: Hoare triple {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {85682#true} is VALID [2022-04-28 08:35:52,751 INFO L290 TraceCheckUtils]: 1: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,751 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {85682#true} {85682#true} #1174#return; {85682#true} is VALID [2022-04-28 08:35:52,751 INFO L290 TraceCheckUtils]: 0: Hoare triple {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {85682#true} is VALID [2022-04-28 08:35:52,752 INFO L272 TraceCheckUtils]: 1: Hoare triple {85682#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:52,752 INFO L290 TraceCheckUtils]: 2: Hoare triple {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {85682#true} is VALID [2022-04-28 08:35:52,752 INFO L290 TraceCheckUtils]: 3: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,752 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {85682#true} {85682#true} #1174#return; {85682#true} is VALID [2022-04-28 08:35:52,752 INFO L290 TraceCheckUtils]: 5: Hoare triple {85682#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {85682#true} is VALID [2022-04-28 08:35:52,752 INFO L290 TraceCheckUtils]: 6: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,752 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {85682#true} {85682#true} #1210#return; {85682#true} is VALID [2022-04-28 08:35:52,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:35:52,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,768 INFO L290 TraceCheckUtils]: 0: Hoare triple {85861#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {85682#true} is VALID [2022-04-28 08:35:52,768 INFO L290 TraceCheckUtils]: 1: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,769 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {85682#true} {85682#true} #1212#return; {85682#true} is VALID [2022-04-28 08:35:52,769 INFO L290 TraceCheckUtils]: 0: Hoare triple {85843#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {85682#true} is VALID [2022-04-28 08:35:52,769 INFO L290 TraceCheckUtils]: 1: Hoare triple {85682#true} assume 0 != ~compRegistered~0; {85682#true} is VALID [2022-04-28 08:35:52,770 INFO L272 TraceCheckUtils]: 2: Hoare triple {85682#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:52,770 INFO L290 TraceCheckUtils]: 3: Hoare triple {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {85682#true} is VALID [2022-04-28 08:35:52,770 INFO L272 TraceCheckUtils]: 4: Hoare triple {85682#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:52,770 INFO L290 TraceCheckUtils]: 5: Hoare triple {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {85682#true} is VALID [2022-04-28 08:35:52,771 INFO L290 TraceCheckUtils]: 6: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,771 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {85682#true} {85682#true} #1174#return; {85682#true} is VALID [2022-04-28 08:35:52,771 INFO L290 TraceCheckUtils]: 8: Hoare triple {85682#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {85682#true} is VALID [2022-04-28 08:35:52,771 INFO L290 TraceCheckUtils]: 9: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,771 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {85682#true} {85682#true} #1210#return; {85682#true} is VALID [2022-04-28 08:35:52,771 INFO L290 TraceCheckUtils]: 11: Hoare triple {85682#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {85682#true} is VALID [2022-04-28 08:35:52,771 INFO L290 TraceCheckUtils]: 12: Hoare triple {85682#true} assume -1073741802 == ~compRetStatus~0; {85682#true} is VALID [2022-04-28 08:35:52,771 INFO L272 TraceCheckUtils]: 13: Hoare triple {85682#true} call stubMoreProcessingRequired(); {85861#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:35:52,771 INFO L290 TraceCheckUtils]: 14: Hoare triple {85861#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {85682#true} is VALID [2022-04-28 08:35:52,772 INFO L290 TraceCheckUtils]: 15: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,772 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {85682#true} {85682#true} #1212#return; {85682#true} is VALID [2022-04-28 08:35:52,772 INFO L290 TraceCheckUtils]: 17: Hoare triple {85682#true} assume 0 == ~__BLAST_NONDET~11; {85682#true} is VALID [2022-04-28 08:35:52,772 INFO L290 TraceCheckUtils]: 18: Hoare triple {85682#true} ~returnVal2~0 := 0; {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:52,772 INFO L290 TraceCheckUtils]: 19: Hoare triple {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:52,773 INFO L290 TraceCheckUtils]: 20: Hoare triple {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~MPR1~0; {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:52,773 INFO L290 TraceCheckUtils]: 21: Hoare triple {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:52,774 INFO L290 TraceCheckUtils]: 22: Hoare triple {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {85856#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:35:52,774 INFO L290 TraceCheckUtils]: 23: Hoare triple {85856#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {85856#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:35:52,775 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {85856#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {85682#true} #1192#return; {85836#(= |KbFilter_PnP_#t~ret109| 0)} is VALID [2022-04-28 08:35:52,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-04-28 08:35:52,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:35:52,780 INFO L290 TraceCheckUtils]: 0: Hoare triple {85861#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {85682#true} is VALID [2022-04-28 08:35:52,780 INFO L290 TraceCheckUtils]: 1: Hoare triple {85682#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {85682#true} is VALID [2022-04-28 08:35:52,780 INFO L290 TraceCheckUtils]: 2: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,781 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {85682#true} {85837#(= KbFilter_PnP_~status~3 0)} #1196#return; {85837#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:35:52,781 INFO L290 TraceCheckUtils]: 0: Hoare triple {85805#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {85682#true} is VALID [2022-04-28 08:35:52,781 INFO L290 TraceCheckUtils]: 1: Hoare triple {85682#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {85682#true} is VALID [2022-04-28 08:35:52,781 INFO L290 TraceCheckUtils]: 2: Hoare triple {85682#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {85682#true} is VALID [2022-04-28 08:35:52,782 INFO L272 TraceCheckUtils]: 3: Hoare triple {85682#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {85783#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:52,782 INFO L290 TraceCheckUtils]: 4: Hoare triple {85783#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {85682#true} is VALID [2022-04-28 08:35:52,782 INFO L290 TraceCheckUtils]: 5: Hoare triple {85682#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {85682#true} is VALID [2022-04-28 08:35:52,782 INFO L290 TraceCheckUtils]: 6: Hoare triple {85682#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {85682#true} is VALID [2022-04-28 08:35:52,782 INFO L290 TraceCheckUtils]: 7: Hoare triple {85682#true} assume #res.base == dest.base && #res.offset == dest.offset; {85682#true} is VALID [2022-04-28 08:35:52,782 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {85682#true} {85682#true} #1186#return; {85682#true} is VALID [2022-04-28 08:35:52,782 INFO L290 TraceCheckUtils]: 9: Hoare triple {85682#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {85682#true} is VALID [2022-04-28 08:35:52,782 INFO L290 TraceCheckUtils]: 10: Hoare triple {85682#true} assume !(~s~0 != ~NP~0); {85682#true} is VALID [2022-04-28 08:35:52,782 INFO L290 TraceCheckUtils]: 11: Hoare triple {85682#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {85682#true} is VALID [2022-04-28 08:35:52,782 INFO L290 TraceCheckUtils]: 12: Hoare triple {85682#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {85682#true} is VALID [2022-04-28 08:35:52,783 INFO L272 TraceCheckUtils]: 13: Hoare triple {85682#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {85843#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:52,783 INFO L290 TraceCheckUtils]: 14: Hoare triple {85843#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {85682#true} is VALID [2022-04-28 08:35:52,783 INFO L290 TraceCheckUtils]: 15: Hoare triple {85682#true} assume 0 != ~compRegistered~0; {85682#true} is VALID [2022-04-28 08:35:52,784 INFO L272 TraceCheckUtils]: 16: Hoare triple {85682#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:52,784 INFO L290 TraceCheckUtils]: 17: Hoare triple {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {85682#true} is VALID [2022-04-28 08:35:52,784 INFO L272 TraceCheckUtils]: 18: Hoare triple {85682#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:52,785 INFO L290 TraceCheckUtils]: 19: Hoare triple {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {85682#true} is VALID [2022-04-28 08:35:52,785 INFO L290 TraceCheckUtils]: 20: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,785 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {85682#true} {85682#true} #1174#return; {85682#true} is VALID [2022-04-28 08:35:52,785 INFO L290 TraceCheckUtils]: 22: Hoare triple {85682#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {85682#true} is VALID [2022-04-28 08:35:52,785 INFO L290 TraceCheckUtils]: 23: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,785 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {85682#true} {85682#true} #1210#return; {85682#true} is VALID [2022-04-28 08:35:52,785 INFO L290 TraceCheckUtils]: 25: Hoare triple {85682#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {85682#true} is VALID [2022-04-28 08:35:52,785 INFO L290 TraceCheckUtils]: 26: Hoare triple {85682#true} assume -1073741802 == ~compRetStatus~0; {85682#true} is VALID [2022-04-28 08:35:52,785 INFO L272 TraceCheckUtils]: 27: Hoare triple {85682#true} call stubMoreProcessingRequired(); {85861#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:35:52,785 INFO L290 TraceCheckUtils]: 28: Hoare triple {85861#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {85682#true} is VALID [2022-04-28 08:35:52,785 INFO L290 TraceCheckUtils]: 29: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,786 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {85682#true} {85682#true} #1212#return; {85682#true} is VALID [2022-04-28 08:35:52,786 INFO L290 TraceCheckUtils]: 31: Hoare triple {85682#true} assume 0 == ~__BLAST_NONDET~11; {85682#true} is VALID [2022-04-28 08:35:52,786 INFO L290 TraceCheckUtils]: 32: Hoare triple {85682#true} ~returnVal2~0 := 0; {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:52,786 INFO L290 TraceCheckUtils]: 33: Hoare triple {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:52,786 INFO L290 TraceCheckUtils]: 34: Hoare triple {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~MPR1~0; {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:52,787 INFO L290 TraceCheckUtils]: 35: Hoare triple {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:52,787 INFO L290 TraceCheckUtils]: 36: Hoare triple {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {85856#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:35:52,788 INFO L290 TraceCheckUtils]: 37: Hoare triple {85856#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {85856#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:35:52,788 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {85856#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {85682#true} #1192#return; {85836#(= |KbFilter_PnP_#t~ret109| 0)} is VALID [2022-04-28 08:35:52,789 INFO L290 TraceCheckUtils]: 39: Hoare triple {85836#(= |KbFilter_PnP_#t~ret109| 0)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {85837#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:35:52,789 INFO L290 TraceCheckUtils]: 40: Hoare triple {85837#(= KbFilter_PnP_~status~3 0)} assume !(259 == ~status~3); {85837#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:35:52,789 INFO L290 TraceCheckUtils]: 41: Hoare triple {85837#(= KbFilter_PnP_~status~3 0)} assume ~status~3 >= 0; {85837#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:35:52,789 INFO L290 TraceCheckUtils]: 42: Hoare triple {85837#(= KbFilter_PnP_~status~3 0)} assume !(~myStatus~0 >= 0); {85837#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:35:52,790 INFO L290 TraceCheckUtils]: 43: Hoare triple {85837#(= KbFilter_PnP_~status~3 0)} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {85837#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:35:52,790 INFO L272 TraceCheckUtils]: 44: Hoare triple {85837#(= KbFilter_PnP_~status~3 0)} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {85861#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:35:52,790 INFO L290 TraceCheckUtils]: 45: Hoare triple {85861#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {85682#true} is VALID [2022-04-28 08:35:52,790 INFO L290 TraceCheckUtils]: 46: Hoare triple {85682#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {85682#true} is VALID [2022-04-28 08:35:52,790 INFO L290 TraceCheckUtils]: 47: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,791 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {85682#true} {85837#(= KbFilter_PnP_~status~3 0)} #1196#return; {85837#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:35:52,791 INFO L290 TraceCheckUtils]: 49: Hoare triple {85837#(= KbFilter_PnP_~status~3 0)} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {85842#(= |KbFilter_PnP_#res| 0)} is VALID [2022-04-28 08:35:52,791 INFO L290 TraceCheckUtils]: 50: Hoare triple {85842#(= |KbFilter_PnP_#res| 0)} assume true; {85842#(= |KbFilter_PnP_#res| 0)} is VALID [2022-04-28 08:35:52,792 INFO L284 TraceCheckUtils]: 51: Hoare quadruple {85842#(= |KbFilter_PnP_#res| 0)} {85682#true} #1230#return; {85779#(not (= 259 |main_#t~ret174|))} is VALID [2022-04-28 08:35:52,793 INFO L272 TraceCheckUtils]: 0: Hoare triple {85682#true} call ULTIMATE.init(); {85781#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:35:52,793 INFO L290 TraceCheckUtils]: 1: Hoare triple {85781#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {85682#true} is VALID [2022-04-28 08:35:52,793 INFO L290 TraceCheckUtils]: 2: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,794 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {85682#true} {85682#true} #1270#return; {85682#true} is VALID [2022-04-28 08:35:52,794 INFO L272 TraceCheckUtils]: 4: Hoare triple {85682#true} call #t~ret213 := main(); {85682#true} is VALID [2022-04-28 08:35:52,794 INFO L290 TraceCheckUtils]: 5: Hoare triple {85682#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {85682#true} is VALID [2022-04-28 08:35:52,795 INFO L272 TraceCheckUtils]: 6: Hoare triple {85682#true} call _BLAST_init(); {85782#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:52,795 INFO L290 TraceCheckUtils]: 7: Hoare triple {85782#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {85682#true} is VALID [2022-04-28 08:35:52,795 INFO L290 TraceCheckUtils]: 8: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,795 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {85682#true} {85682#true} #1216#return; {85682#true} is VALID [2022-04-28 08:35:52,795 INFO L272 TraceCheckUtils]: 10: Hoare triple {85682#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {85783#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:52,796 INFO L290 TraceCheckUtils]: 11: Hoare triple {85783#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {85682#true} is VALID [2022-04-28 08:35:52,796 INFO L272 TraceCheckUtils]: 12: Hoare triple {85682#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {85682#true} is VALID [2022-04-28 08:35:52,796 INFO L290 TraceCheckUtils]: 13: Hoare triple {85682#true} ~cond := #in~cond; {85682#true} is VALID [2022-04-28 08:35:52,796 INFO L290 TraceCheckUtils]: 14: Hoare triple {85682#true} assume !(0 == ~cond); {85682#true} is VALID [2022-04-28 08:35:52,796 INFO L290 TraceCheckUtils]: 15: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,796 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {85682#true} {85682#true} #1254#return; {85682#true} is VALID [2022-04-28 08:35:52,796 INFO L290 TraceCheckUtils]: 17: Hoare triple {85682#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {85682#true} is VALID [2022-04-28 08:35:52,796 INFO L290 TraceCheckUtils]: 18: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,796 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {85682#true} {85682#true} #1218#return; {85682#true} is VALID [2022-04-28 08:35:52,796 INFO L290 TraceCheckUtils]: 20: Hoare triple {85682#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {85682#true} is VALID [2022-04-28 08:35:52,796 INFO L290 TraceCheckUtils]: 21: Hoare triple {85682#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {85682#true} is VALID [2022-04-28 08:35:52,796 INFO L290 TraceCheckUtils]: 22: Hoare triple {85682#true} assume 0 == ~irp_choice~0;call write~int(-1073741637, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := -1073741637; {85682#true} is VALID [2022-04-28 08:35:52,797 INFO L272 TraceCheckUtils]: 23: Hoare triple {85682#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {85788#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:35:52,797 INFO L290 TraceCheckUtils]: 24: Hoare triple {85788#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {85682#true} is VALID [2022-04-28 08:35:52,798 INFO L272 TraceCheckUtils]: 25: Hoare triple {85682#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {85788#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:35:52,798 INFO L290 TraceCheckUtils]: 26: Hoare triple {85788#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {85682#true} is VALID [2022-04-28 08:35:52,798 INFO L290 TraceCheckUtils]: 27: Hoare triple {85682#true} assume 0 == ~__BLAST_NONDET~5; {85682#true} is VALID [2022-04-28 08:35:52,798 INFO L290 TraceCheckUtils]: 28: Hoare triple {85682#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {85682#true} is VALID [2022-04-28 08:35:52,798 INFO L290 TraceCheckUtils]: 29: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,798 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {85682#true} {85682#true} #1176#return; {85682#true} is VALID [2022-04-28 08:35:52,799 INFO L290 TraceCheckUtils]: 31: Hoare triple {85682#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {85682#true} is VALID [2022-04-28 08:35:52,799 INFO L290 TraceCheckUtils]: 32: Hoare triple {85682#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {85682#true} is VALID [2022-04-28 08:35:52,799 INFO L272 TraceCheckUtils]: 33: Hoare triple {85682#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {85783#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:52,799 INFO L290 TraceCheckUtils]: 34: Hoare triple {85783#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {85682#true} is VALID [2022-04-28 08:35:52,799 INFO L290 TraceCheckUtils]: 35: Hoare triple {85682#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {85682#true} is VALID [2022-04-28 08:35:52,799 INFO L290 TraceCheckUtils]: 36: Hoare triple {85682#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {85682#true} is VALID [2022-04-28 08:35:52,800 INFO L290 TraceCheckUtils]: 37: Hoare triple {85682#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {85682#true} is VALID [2022-04-28 08:35:52,800 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {85682#true} {85682#true} #1178#return; {85682#true} is VALID [2022-04-28 08:35:52,800 INFO L290 TraceCheckUtils]: 39: Hoare triple {85682#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {85682#true} is VALID [2022-04-28 08:35:52,800 INFO L272 TraceCheckUtils]: 40: Hoare triple {85682#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {85682#true} is VALID [2022-04-28 08:35:52,800 INFO L290 TraceCheckUtils]: 41: Hoare triple {85682#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {85682#true} is VALID [2022-04-28 08:35:52,800 INFO L290 TraceCheckUtils]: 42: Hoare triple {85682#true} assume 0 == ~__BLAST_NONDET~2; {85682#true} is VALID [2022-04-28 08:35:52,800 INFO L290 TraceCheckUtils]: 43: Hoare triple {85682#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {85682#true} is VALID [2022-04-28 08:35:52,800 INFO L290 TraceCheckUtils]: 44: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,800 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {85682#true} {85682#true} #1180#return; {85682#true} is VALID [2022-04-28 08:35:52,800 INFO L290 TraceCheckUtils]: 46: Hoare triple {85682#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {85682#true} is VALID [2022-04-28 08:35:52,800 INFO L290 TraceCheckUtils]: 47: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,800 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {85682#true} {85682#true} #1220#return; {85682#true} is VALID [2022-04-28 08:35:52,800 INFO L290 TraceCheckUtils]: 49: Hoare triple {85682#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {85682#true} is VALID [2022-04-28 08:35:52,801 INFO L272 TraceCheckUtils]: 50: Hoare triple {85682#true} call stub_driver_init(); {85804#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:52,801 INFO L290 TraceCheckUtils]: 51: Hoare triple {85804#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {85682#true} is VALID [2022-04-28 08:35:52,801 INFO L290 TraceCheckUtils]: 52: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,801 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {85682#true} {85682#true} #1222#return; {85682#true} is VALID [2022-04-28 08:35:52,801 INFO L290 TraceCheckUtils]: 54: Hoare triple {85682#true} assume !!(~status~5 >= 0); {85682#true} is VALID [2022-04-28 08:35:52,801 INFO L290 TraceCheckUtils]: 55: Hoare triple {85682#true} assume !(0 == ~__BLAST_NONDET~0); {85682#true} is VALID [2022-04-28 08:35:52,801 INFO L290 TraceCheckUtils]: 56: Hoare triple {85682#true} assume !(1 == ~__BLAST_NONDET~0); {85682#true} is VALID [2022-04-28 08:35:52,801 INFO L290 TraceCheckUtils]: 57: Hoare triple {85682#true} assume !(2 == ~__BLAST_NONDET~0); {85682#true} is VALID [2022-04-28 08:35:52,801 INFO L290 TraceCheckUtils]: 58: Hoare triple {85682#true} assume 3 == ~__BLAST_NONDET~0; {85682#true} is VALID [2022-04-28 08:35:52,803 INFO L272 TraceCheckUtils]: 59: Hoare triple {85682#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {85805#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:52,803 INFO L290 TraceCheckUtils]: 60: Hoare triple {85805#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {85682#true} is VALID [2022-04-28 08:35:52,803 INFO L290 TraceCheckUtils]: 61: Hoare triple {85682#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {85682#true} is VALID [2022-04-28 08:35:52,803 INFO L290 TraceCheckUtils]: 62: Hoare triple {85682#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {85682#true} is VALID [2022-04-28 08:35:52,803 INFO L272 TraceCheckUtils]: 63: Hoare triple {85682#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {85783#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:35:52,804 INFO L290 TraceCheckUtils]: 64: Hoare triple {85783#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {85682#true} is VALID [2022-04-28 08:35:52,804 INFO L290 TraceCheckUtils]: 65: Hoare triple {85682#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {85682#true} is VALID [2022-04-28 08:35:52,804 INFO L290 TraceCheckUtils]: 66: Hoare triple {85682#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {85682#true} is VALID [2022-04-28 08:35:52,804 INFO L290 TraceCheckUtils]: 67: Hoare triple {85682#true} assume #res.base == dest.base && #res.offset == dest.offset; {85682#true} is VALID [2022-04-28 08:35:52,804 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {85682#true} {85682#true} #1186#return; {85682#true} is VALID [2022-04-28 08:35:52,804 INFO L290 TraceCheckUtils]: 69: Hoare triple {85682#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {85682#true} is VALID [2022-04-28 08:35:52,804 INFO L290 TraceCheckUtils]: 70: Hoare triple {85682#true} assume !(~s~0 != ~NP~0); {85682#true} is VALID [2022-04-28 08:35:52,804 INFO L290 TraceCheckUtils]: 71: Hoare triple {85682#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {85682#true} is VALID [2022-04-28 08:35:52,804 INFO L290 TraceCheckUtils]: 72: Hoare triple {85682#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {85682#true} is VALID [2022-04-28 08:35:52,805 INFO L272 TraceCheckUtils]: 73: Hoare triple {85682#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {85843#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:35:52,805 INFO L290 TraceCheckUtils]: 74: Hoare triple {85843#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {85682#true} is VALID [2022-04-28 08:35:52,805 INFO L290 TraceCheckUtils]: 75: Hoare triple {85682#true} assume 0 != ~compRegistered~0; {85682#true} is VALID [2022-04-28 08:35:52,806 INFO L272 TraceCheckUtils]: 76: Hoare triple {85682#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:52,806 INFO L290 TraceCheckUtils]: 77: Hoare triple {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {85682#true} is VALID [2022-04-28 08:35:52,806 INFO L272 TraceCheckUtils]: 78: Hoare triple {85682#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:35:52,806 INFO L290 TraceCheckUtils]: 79: Hoare triple {85857#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {85682#true} is VALID [2022-04-28 08:35:52,806 INFO L290 TraceCheckUtils]: 80: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,806 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {85682#true} {85682#true} #1174#return; {85682#true} is VALID [2022-04-28 08:35:52,807 INFO L290 TraceCheckUtils]: 82: Hoare triple {85682#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {85682#true} is VALID [2022-04-28 08:35:52,807 INFO L290 TraceCheckUtils]: 83: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,807 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {85682#true} {85682#true} #1210#return; {85682#true} is VALID [2022-04-28 08:35:52,807 INFO L290 TraceCheckUtils]: 85: Hoare triple {85682#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {85682#true} is VALID [2022-04-28 08:35:52,807 INFO L290 TraceCheckUtils]: 86: Hoare triple {85682#true} assume -1073741802 == ~compRetStatus~0; {85682#true} is VALID [2022-04-28 08:35:52,807 INFO L272 TraceCheckUtils]: 87: Hoare triple {85682#true} call stubMoreProcessingRequired(); {85861#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:35:52,807 INFO L290 TraceCheckUtils]: 88: Hoare triple {85861#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {85682#true} is VALID [2022-04-28 08:35:52,807 INFO L290 TraceCheckUtils]: 89: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,807 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {85682#true} {85682#true} #1212#return; {85682#true} is VALID [2022-04-28 08:35:52,807 INFO L290 TraceCheckUtils]: 91: Hoare triple {85682#true} assume 0 == ~__BLAST_NONDET~11; {85682#true} is VALID [2022-04-28 08:35:52,808 INFO L290 TraceCheckUtils]: 92: Hoare triple {85682#true} ~returnVal2~0 := 0; {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:52,808 INFO L290 TraceCheckUtils]: 93: Hoare triple {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:52,808 INFO L290 TraceCheckUtils]: 94: Hoare triple {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~MPR1~0; {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:52,809 INFO L290 TraceCheckUtils]: 95: Hoare triple {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:35:52,809 INFO L290 TraceCheckUtils]: 96: Hoare triple {85855#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {85856#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:35:52,809 INFO L290 TraceCheckUtils]: 97: Hoare triple {85856#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {85856#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:35:52,810 INFO L284 TraceCheckUtils]: 98: Hoare quadruple {85856#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {85682#true} #1192#return; {85836#(= |KbFilter_PnP_#t~ret109| 0)} is VALID [2022-04-28 08:35:52,810 INFO L290 TraceCheckUtils]: 99: Hoare triple {85836#(= |KbFilter_PnP_#t~ret109| 0)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {85837#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:35:52,811 INFO L290 TraceCheckUtils]: 100: Hoare triple {85837#(= KbFilter_PnP_~status~3 0)} assume !(259 == ~status~3); {85837#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:35:52,811 INFO L290 TraceCheckUtils]: 101: Hoare triple {85837#(= KbFilter_PnP_~status~3 0)} assume ~status~3 >= 0; {85837#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:35:52,811 INFO L290 TraceCheckUtils]: 102: Hoare triple {85837#(= KbFilter_PnP_~status~3 0)} assume !(~myStatus~0 >= 0); {85837#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:35:52,811 INFO L290 TraceCheckUtils]: 103: Hoare triple {85837#(= KbFilter_PnP_~status~3 0)} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {85837#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:35:52,812 INFO L272 TraceCheckUtils]: 104: Hoare triple {85837#(= KbFilter_PnP_~status~3 0)} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {85861#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:35:52,812 INFO L290 TraceCheckUtils]: 105: Hoare triple {85861#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {85682#true} is VALID [2022-04-28 08:35:52,812 INFO L290 TraceCheckUtils]: 106: Hoare triple {85682#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {85682#true} is VALID [2022-04-28 08:35:52,812 INFO L290 TraceCheckUtils]: 107: Hoare triple {85682#true} assume true; {85682#true} is VALID [2022-04-28 08:35:52,813 INFO L284 TraceCheckUtils]: 108: Hoare quadruple {85682#true} {85837#(= KbFilter_PnP_~status~3 0)} #1196#return; {85837#(= KbFilter_PnP_~status~3 0)} is VALID [2022-04-28 08:35:52,813 INFO L290 TraceCheckUtils]: 109: Hoare triple {85837#(= KbFilter_PnP_~status~3 0)} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {85842#(= |KbFilter_PnP_#res| 0)} is VALID [2022-04-28 08:35:52,813 INFO L290 TraceCheckUtils]: 110: Hoare triple {85842#(= |KbFilter_PnP_#res| 0)} assume true; {85842#(= |KbFilter_PnP_#res| 0)} is VALID [2022-04-28 08:35:52,814 INFO L284 TraceCheckUtils]: 111: Hoare quadruple {85842#(= |KbFilter_PnP_#res| 0)} {85682#true} #1230#return; {85779#(not (= 259 |main_#t~ret174|))} is VALID [2022-04-28 08:35:52,814 INFO L290 TraceCheckUtils]: 112: Hoare triple {85779#(not (= 259 |main_#t~ret174|))} assume -2147483648 <= #t~ret174 && #t~ret174 <= 2147483647;~status~5 := #t~ret174;havoc #t~ret174; {85780#(not (= main_~status~5 259))} is VALID [2022-04-28 08:35:52,814 INFO L290 TraceCheckUtils]: 113: Hoare triple {85780#(not (= main_~status~5 259))} assume 0 != ~we_should_unload~0; {85780#(not (= main_~status~5 259))} is VALID [2022-04-28 08:35:52,815 INFO L290 TraceCheckUtils]: 114: Hoare triple {85780#(not (= main_~status~5 259))} assume !(1 == ~pended~0); {85780#(not (= main_~status~5 259))} is VALID [2022-04-28 08:35:52,815 INFO L290 TraceCheckUtils]: 115: Hoare triple {85780#(not (= main_~status~5 259))} assume !(1 == ~pended~0); {85780#(not (= main_~status~5 259))} is VALID [2022-04-28 08:35:52,815 INFO L290 TraceCheckUtils]: 116: Hoare triple {85780#(not (= main_~status~5 259))} assume !(~s~0 == ~UNLOADED~0); {85780#(not (= main_~status~5 259))} is VALID [2022-04-28 08:35:52,815 INFO L290 TraceCheckUtils]: 117: Hoare triple {85780#(not (= main_~status~5 259))} assume !(-1 == ~status~5); {85780#(not (= main_~status~5 259))} is VALID [2022-04-28 08:35:52,816 INFO L290 TraceCheckUtils]: 118: Hoare triple {85780#(not (= main_~status~5 259))} assume ~s~0 != ~SKIP2~0; {85780#(not (= main_~status~5 259))} is VALID [2022-04-28 08:35:52,816 INFO L290 TraceCheckUtils]: 119: Hoare triple {85780#(not (= main_~status~5 259))} assume ~s~0 != ~IPC~0; {85780#(not (= main_~status~5 259))} is VALID [2022-04-28 08:35:52,816 INFO L290 TraceCheckUtils]: 120: Hoare triple {85780#(not (= main_~status~5 259))} assume !(~s~0 != ~DC~0); {85780#(not (= main_~status~5 259))} is VALID [2022-04-28 08:35:52,817 INFO L290 TraceCheckUtils]: 121: Hoare triple {85780#(not (= main_~status~5 259))} assume !(1 == ~pended~0); {85780#(not (= main_~status~5 259))} is VALID [2022-04-28 08:35:52,817 INFO L290 TraceCheckUtils]: 122: Hoare triple {85780#(not (= main_~status~5 259))} assume ~s~0 == ~DC~0; {85780#(not (= main_~status~5 259))} is VALID [2022-04-28 08:35:52,817 INFO L290 TraceCheckUtils]: 123: Hoare triple {85780#(not (= main_~status~5 259))} assume 259 == ~status~5; {85683#false} is VALID [2022-04-28 08:35:52,817 INFO L272 TraceCheckUtils]: 124: Hoare triple {85683#false} call errorFn(); {85683#false} is VALID [2022-04-28 08:35:52,817 INFO L290 TraceCheckUtils]: 125: Hoare triple {85683#false} assume !false; {85683#false} is VALID [2022-04-28 08:35:52,818 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 08:35:52,818 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:35:52,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [616232229] [2022-04-28 08:35:52,818 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [616232229] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:35:52,818 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:35:52,818 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [18] imperfect sequences [] total 18 [2022-04-28 08:35:52,818 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:35:52,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1537639637] [2022-04-28 08:35:52,818 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1537639637] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:35:52,818 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:35:52,818 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [18] imperfect sequences [] total 18 [2022-04-28 08:35:52,818 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [517401820] [2022-04-28 08:35:52,818 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:35:52,819 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 5.111111111111111) internal successors, (92), 7 states have internal predecessors, (92), 3 states have call successors, (18), 11 states have call predecessors, (18), 3 states have return successors, (16), 4 states have call predecessors, (16), 2 states have call successors, (16) Word has length 126 [2022-04-28 08:35:52,819 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:35:52,820 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 18 states, 18 states have (on average 5.111111111111111) internal successors, (92), 7 states have internal predecessors, (92), 3 states have call successors, (18), 11 states have call predecessors, (18), 3 states have return successors, (16), 4 states have call predecessors, (16), 2 states have call successors, (16) [2022-04-28 08:35:52,912 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 126 edges. 126 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:35:52,912 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-04-28 08:35:52,912 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:35:52,913 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-04-28 08:35:52,913 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=53, Invalid=253, Unknown=0, NotChecked=0, Total=306 [2022-04-28 08:35:52,913 INFO L87 Difference]: Start difference. First operand 291 states and 318 transitions. Second operand has 18 states, 18 states have (on average 5.111111111111111) internal successors, (92), 7 states have internal predecessors, (92), 3 states have call successors, (18), 11 states have call predecessors, (18), 3 states have return successors, (16), 4 states have call predecessors, (16), 2 states have call successors, (16) [2022-04-28 08:35:55,065 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:05,204 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.33s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:07,290 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.93s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:10,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:36:10,835 INFO L93 Difference]: Finished difference Result 345 states and 383 transitions. [2022-04-28 08:36:10,835 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-04-28 08:36:10,835 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 5.111111111111111) internal successors, (92), 7 states have internal predecessors, (92), 3 states have call successors, (18), 11 states have call predecessors, (18), 3 states have return successors, (16), 4 states have call predecessors, (16), 2 states have call successors, (16) Word has length 126 [2022-04-28 08:36:10,836 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:36:10,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 18 states have (on average 5.111111111111111) internal successors, (92), 7 states have internal predecessors, (92), 3 states have call successors, (18), 11 states have call predecessors, (18), 3 states have return successors, (16), 4 states have call predecessors, (16), 2 states have call successors, (16) [2022-04-28 08:36:10,840 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 216 transitions. [2022-04-28 08:36:10,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 18 states have (on average 5.111111111111111) internal successors, (92), 7 states have internal predecessors, (92), 3 states have call successors, (18), 11 states have call predecessors, (18), 3 states have return successors, (16), 4 states have call predecessors, (16), 2 states have call successors, (16) [2022-04-28 08:36:10,868 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 216 transitions. [2022-04-28 08:36:10,868 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 18 states and 216 transitions. [2022-04-28 08:36:11,061 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 216 edges. 216 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:36:11,065 INFO L225 Difference]: With dead ends: 345 [2022-04-28 08:36:11,065 INFO L226 Difference]: Without dead ends: 303 [2022-04-28 08:36:11,066 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 98 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=137, Invalid=675, Unknown=0, NotChecked=0, Total=812 [2022-04-28 08:36:11,066 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 240 mSDsluCounter, 405 mSDsCounter, 0 mSdLazyCounter, 1290 mSolverCounterSat, 135 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 533 SdHoareTripleChecker+Invalid, 1426 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 135 IncrementalHoareTripleChecker+Valid, 1290 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.8s IncrementalHoareTripleChecker+Time [2022-04-28 08:36:11,066 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [242 Valid, 533 Invalid, 1426 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [135 Valid, 1290 Invalid, 1 Unknown, 0 Unchecked, 8.8s Time] [2022-04-28 08:36:11,067 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 303 states. [2022-04-28 08:36:11,504 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 303 to 273. [2022-04-28 08:36:11,504 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:36:11,505 INFO L82 GeneralOperation]: Start isEquivalent. First operand 303 states. Second operand has 273 states, 207 states have (on average 1.1207729468599035) internal successors, (232), 209 states have internal predecessors, (232), 33 states have call successors, (33), 33 states have call predecessors, (33), 32 states have return successors, (33), 30 states have call predecessors, (33), 31 states have call successors, (33) [2022-04-28 08:36:11,505 INFO L74 IsIncluded]: Start isIncluded. First operand 303 states. Second operand has 273 states, 207 states have (on average 1.1207729468599035) internal successors, (232), 209 states have internal predecessors, (232), 33 states have call successors, (33), 33 states have call predecessors, (33), 32 states have return successors, (33), 30 states have call predecessors, (33), 31 states have call successors, (33) [2022-04-28 08:36:11,505 INFO L87 Difference]: Start difference. First operand 303 states. Second operand has 273 states, 207 states have (on average 1.1207729468599035) internal successors, (232), 209 states have internal predecessors, (232), 33 states have call successors, (33), 33 states have call predecessors, (33), 32 states have return successors, (33), 30 states have call predecessors, (33), 31 states have call successors, (33) [2022-04-28 08:36:11,508 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:36:11,509 INFO L93 Difference]: Finished difference Result 303 states and 336 transitions. [2022-04-28 08:36:11,509 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 336 transitions. [2022-04-28 08:36:11,509 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:36:11,509 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:36:11,509 INFO L74 IsIncluded]: Start isIncluded. First operand has 273 states, 207 states have (on average 1.1207729468599035) internal successors, (232), 209 states have internal predecessors, (232), 33 states have call successors, (33), 33 states have call predecessors, (33), 32 states have return successors, (33), 30 states have call predecessors, (33), 31 states have call successors, (33) Second operand 303 states. [2022-04-28 08:36:11,509 INFO L87 Difference]: Start difference. First operand has 273 states, 207 states have (on average 1.1207729468599035) internal successors, (232), 209 states have internal predecessors, (232), 33 states have call successors, (33), 33 states have call predecessors, (33), 32 states have return successors, (33), 30 states have call predecessors, (33), 31 states have call successors, (33) Second operand 303 states. [2022-04-28 08:36:11,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:36:11,513 INFO L93 Difference]: Finished difference Result 303 states and 336 transitions. [2022-04-28 08:36:11,513 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 336 transitions. [2022-04-28 08:36:11,513 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:36:11,513 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:36:11,513 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:36:11,513 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:36:11,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 273 states, 207 states have (on average 1.1207729468599035) internal successors, (232), 209 states have internal predecessors, (232), 33 states have call successors, (33), 33 states have call predecessors, (33), 32 states have return successors, (33), 30 states have call predecessors, (33), 31 states have call successors, (33) [2022-04-28 08:36:11,517 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 273 states to 273 states and 298 transitions. [2022-04-28 08:36:11,517 INFO L78 Accepts]: Start accepts. Automaton has 273 states and 298 transitions. Word has length 126 [2022-04-28 08:36:11,517 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:36:11,517 INFO L495 AbstractCegarLoop]: Abstraction has 273 states and 298 transitions. [2022-04-28 08:36:11,517 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 5.111111111111111) internal successors, (92), 7 states have internal predecessors, (92), 3 states have call successors, (18), 11 states have call predecessors, (18), 3 states have return successors, (16), 4 states have call predecessors, (16), 2 states have call successors, (16) [2022-04-28 08:36:11,517 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 273 states and 298 transitions. [2022-04-28 08:36:12,268 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 298 edges. 298 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:36:12,268 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 298 transitions. [2022-04-28 08:36:12,268 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 127 [2022-04-28 08:36:12,268 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:36:12,269 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:36:12,269 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable35 [2022-04-28 08:36:12,269 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:36:12,269 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:36:12,269 INFO L85 PathProgramCache]: Analyzing trace with hash 1014106643, now seen corresponding path program 1 times [2022-04-28 08:36:12,269 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:36:12,269 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1708261574] [2022-04-28 08:36:12,270 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 0 HavocedVariables, 4 AssignedVariables, -1 ReadonlyVariables, Eigenvalues: {}, 0 SequentialAcceleration, 0 AlternatingAcceleration, 0 QuantifierFreeResult [2022-04-28 08:36:12,270 WARN L91 AcceleratorJordan]: Jordan acceleration failed, because NONINTEGER_UPDATE [2022-04-28 08:36:12,270 INFO L274 tedInterpolationCore]: Could not compute an accelerate. [2022-04-28 08:36:12,271 INFO L85 PathProgramCache]: Analyzing trace with hash 1014106643, now seen corresponding path program 2 times [2022-04-28 08:36:12,271 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:36:12,271 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2126811366] [2022-04-28 08:36:12,271 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:36:12,271 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:36:12,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:36:12,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,418 INFO L290 TraceCheckUtils]: 0: Hoare triple {87829#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {87730#true} is VALID [2022-04-28 08:36:12,418 INFO L290 TraceCheckUtils]: 1: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,418 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {87730#true} {87730#true} #1270#return; {87730#true} is VALID [2022-04-28 08:36:12,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:36:12,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,438 INFO L290 TraceCheckUtils]: 0: Hoare triple {87830#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {87730#true} is VALID [2022-04-28 08:36:12,438 INFO L290 TraceCheckUtils]: 1: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,438 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {87730#true} {87730#true} #1216#return; {87730#true} is VALID [2022-04-28 08:36:12,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:36:12,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:36:12,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,457 INFO L290 TraceCheckUtils]: 0: Hoare triple {87730#true} ~cond := #in~cond; {87730#true} is VALID [2022-04-28 08:36:12,457 INFO L290 TraceCheckUtils]: 1: Hoare triple {87730#true} assume !(0 == ~cond); {87730#true} is VALID [2022-04-28 08:36:12,457 INFO L290 TraceCheckUtils]: 2: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,457 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {87730#true} {87730#true} #1254#return; {87730#true} is VALID [2022-04-28 08:36:12,457 INFO L290 TraceCheckUtils]: 0: Hoare triple {87831#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {87730#true} is VALID [2022-04-28 08:36:12,457 INFO L272 TraceCheckUtils]: 1: Hoare triple {87730#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {87730#true} is VALID [2022-04-28 08:36:12,458 INFO L290 TraceCheckUtils]: 2: Hoare triple {87730#true} ~cond := #in~cond; {87730#true} is VALID [2022-04-28 08:36:12,458 INFO L290 TraceCheckUtils]: 3: Hoare triple {87730#true} assume !(0 == ~cond); {87730#true} is VALID [2022-04-28 08:36:12,458 INFO L290 TraceCheckUtils]: 4: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,458 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {87730#true} {87730#true} #1254#return; {87730#true} is VALID [2022-04-28 08:36:12,458 INFO L290 TraceCheckUtils]: 6: Hoare triple {87730#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {87730#true} is VALID [2022-04-28 08:36:12,458 INFO L290 TraceCheckUtils]: 7: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,458 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {87730#true} {87730#true} #1218#return; {87730#true} is VALID [2022-04-28 08:36:12,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:36:12,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:36:12,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,496 INFO L290 TraceCheckUtils]: 0: Hoare triple {87836#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {87730#true} is VALID [2022-04-28 08:36:12,497 INFO L290 TraceCheckUtils]: 1: Hoare triple {87730#true} assume 0 == ~__BLAST_NONDET~5; {87730#true} is VALID [2022-04-28 08:36:12,497 INFO L290 TraceCheckUtils]: 2: Hoare triple {87730#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {87730#true} is VALID [2022-04-28 08:36:12,497 INFO L290 TraceCheckUtils]: 3: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,497 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {87730#true} {87730#true} #1176#return; {87730#true} is VALID [2022-04-28 08:36:12,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:36:12,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,502 INFO L290 TraceCheckUtils]: 0: Hoare triple {87831#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {87730#true} is VALID [2022-04-28 08:36:12,503 INFO L290 TraceCheckUtils]: 1: Hoare triple {87730#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {87730#true} is VALID [2022-04-28 08:36:12,503 INFO L290 TraceCheckUtils]: 2: Hoare triple {87730#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {87730#true} is VALID [2022-04-28 08:36:12,503 INFO L290 TraceCheckUtils]: 3: Hoare triple {87730#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {87730#true} is VALID [2022-04-28 08:36:12,503 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {87730#true} {87730#true} #1178#return; {87730#true} is VALID [2022-04-28 08:36:12,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-04-28 08:36:12,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,507 INFO L290 TraceCheckUtils]: 0: Hoare triple {87730#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {87730#true} is VALID [2022-04-28 08:36:12,507 INFO L290 TraceCheckUtils]: 1: Hoare triple {87730#true} assume 0 == ~__BLAST_NONDET~2; {87730#true} is VALID [2022-04-28 08:36:12,508 INFO L290 TraceCheckUtils]: 2: Hoare triple {87730#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {87730#true} is VALID [2022-04-28 08:36:12,508 INFO L290 TraceCheckUtils]: 3: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,508 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {87730#true} {87730#true} #1180#return; {87730#true} is VALID [2022-04-28 08:36:12,508 INFO L290 TraceCheckUtils]: 0: Hoare triple {87836#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {87730#true} is VALID [2022-04-28 08:36:12,509 INFO L272 TraceCheckUtils]: 1: Hoare triple {87730#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {87836#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:36:12,509 INFO L290 TraceCheckUtils]: 2: Hoare triple {87836#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {87730#true} is VALID [2022-04-28 08:36:12,509 INFO L290 TraceCheckUtils]: 3: Hoare triple {87730#true} assume 0 == ~__BLAST_NONDET~5; {87730#true} is VALID [2022-04-28 08:36:12,509 INFO L290 TraceCheckUtils]: 4: Hoare triple {87730#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {87730#true} is VALID [2022-04-28 08:36:12,509 INFO L290 TraceCheckUtils]: 5: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,509 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {87730#true} {87730#true} #1176#return; {87730#true} is VALID [2022-04-28 08:36:12,509 INFO L290 TraceCheckUtils]: 7: Hoare triple {87730#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {87730#true} is VALID [2022-04-28 08:36:12,509 INFO L290 TraceCheckUtils]: 8: Hoare triple {87730#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {87730#true} is VALID [2022-04-28 08:36:12,510 INFO L272 TraceCheckUtils]: 9: Hoare triple {87730#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {87831#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:36:12,510 INFO L290 TraceCheckUtils]: 10: Hoare triple {87831#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {87730#true} is VALID [2022-04-28 08:36:12,510 INFO L290 TraceCheckUtils]: 11: Hoare triple {87730#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {87730#true} is VALID [2022-04-28 08:36:12,510 INFO L290 TraceCheckUtils]: 12: Hoare triple {87730#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {87730#true} is VALID [2022-04-28 08:36:12,510 INFO L290 TraceCheckUtils]: 13: Hoare triple {87730#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {87730#true} is VALID [2022-04-28 08:36:12,510 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {87730#true} {87730#true} #1178#return; {87730#true} is VALID [2022-04-28 08:36:12,510 INFO L290 TraceCheckUtils]: 15: Hoare triple {87730#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {87730#true} is VALID [2022-04-28 08:36:12,510 INFO L272 TraceCheckUtils]: 16: Hoare triple {87730#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {87730#true} is VALID [2022-04-28 08:36:12,510 INFO L290 TraceCheckUtils]: 17: Hoare triple {87730#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {87730#true} is VALID [2022-04-28 08:36:12,510 INFO L290 TraceCheckUtils]: 18: Hoare triple {87730#true} assume 0 == ~__BLAST_NONDET~2; {87730#true} is VALID [2022-04-28 08:36:12,510 INFO L290 TraceCheckUtils]: 19: Hoare triple {87730#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {87730#true} is VALID [2022-04-28 08:36:12,510 INFO L290 TraceCheckUtils]: 20: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,510 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {87730#true} {87730#true} #1180#return; {87730#true} is VALID [2022-04-28 08:36:12,510 INFO L290 TraceCheckUtils]: 22: Hoare triple {87730#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {87730#true} is VALID [2022-04-28 08:36:12,511 INFO L290 TraceCheckUtils]: 23: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,511 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {87730#true} {87730#true} #1220#return; {87730#true} is VALID [2022-04-28 08:36:12,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-04-28 08:36:12,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,524 INFO L290 TraceCheckUtils]: 0: Hoare triple {87852#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {87730#true} is VALID [2022-04-28 08:36:12,525 INFO L290 TraceCheckUtils]: 1: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,525 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {87730#true} {87730#true} #1222#return; {87730#true} is VALID [2022-04-28 08:36:12,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-04-28 08:36:12,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-28 08:36:12,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,586 INFO L290 TraceCheckUtils]: 0: Hoare triple {87831#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {87730#true} is VALID [2022-04-28 08:36:12,587 INFO L290 TraceCheckUtils]: 1: Hoare triple {87730#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {87730#true} is VALID [2022-04-28 08:36:12,587 INFO L290 TraceCheckUtils]: 2: Hoare triple {87730#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {87730#true} is VALID [2022-04-28 08:36:12,587 INFO L290 TraceCheckUtils]: 3: Hoare triple {87730#true} assume #res.base == dest.base && #res.offset == dest.offset; {87730#true} is VALID [2022-04-28 08:36:12,587 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {87730#true} {87730#true} #1186#return; {87730#true} is VALID [2022-04-28 08:36:12,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:36:12,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:36:12,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:36:12,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,629 INFO L290 TraceCheckUtils]: 0: Hoare triple {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {87730#true} is VALID [2022-04-28 08:36:12,629 INFO L290 TraceCheckUtils]: 1: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,629 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {87730#true} {87730#true} #1174#return; {87730#true} is VALID [2022-04-28 08:36:12,629 INFO L290 TraceCheckUtils]: 0: Hoare triple {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {87730#true} is VALID [2022-04-28 08:36:12,631 INFO L272 TraceCheckUtils]: 1: Hoare triple {87730#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:36:12,631 INFO L290 TraceCheckUtils]: 2: Hoare triple {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {87730#true} is VALID [2022-04-28 08:36:12,631 INFO L290 TraceCheckUtils]: 3: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,631 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {87730#true} {87730#true} #1174#return; {87730#true} is VALID [2022-04-28 08:36:12,631 INFO L290 TraceCheckUtils]: 5: Hoare triple {87730#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {87730#true} is VALID [2022-04-28 08:36:12,631 INFO L290 TraceCheckUtils]: 6: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,631 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {87730#true} {87730#true} #1210#return; {87730#true} is VALID [2022-04-28 08:36:12,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:36:12,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,645 INFO L290 TraceCheckUtils]: 0: Hoare triple {87907#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {87730#true} is VALID [2022-04-28 08:36:12,646 INFO L290 TraceCheckUtils]: 1: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,646 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {87730#true} {87730#true} #1212#return; {87730#true} is VALID [2022-04-28 08:36:12,646 INFO L290 TraceCheckUtils]: 0: Hoare triple {87891#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {87730#true} is VALID [2022-04-28 08:36:12,646 INFO L290 TraceCheckUtils]: 1: Hoare triple {87730#true} assume 0 != ~compRegistered~0; {87730#true} is VALID [2022-04-28 08:36:12,647 INFO L272 TraceCheckUtils]: 2: Hoare triple {87730#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:36:12,647 INFO L290 TraceCheckUtils]: 3: Hoare triple {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {87730#true} is VALID [2022-04-28 08:36:12,647 INFO L272 TraceCheckUtils]: 4: Hoare triple {87730#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:36:12,647 INFO L290 TraceCheckUtils]: 5: Hoare triple {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {87730#true} is VALID [2022-04-28 08:36:12,648 INFO L290 TraceCheckUtils]: 6: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,648 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {87730#true} {87730#true} #1174#return; {87730#true} is VALID [2022-04-28 08:36:12,648 INFO L290 TraceCheckUtils]: 8: Hoare triple {87730#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {87730#true} is VALID [2022-04-28 08:36:12,648 INFO L290 TraceCheckUtils]: 9: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,648 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {87730#true} {87730#true} #1210#return; {87730#true} is VALID [2022-04-28 08:36:12,648 INFO L290 TraceCheckUtils]: 11: Hoare triple {87730#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {87730#true} is VALID [2022-04-28 08:36:12,648 INFO L290 TraceCheckUtils]: 12: Hoare triple {87730#true} assume -1073741802 == ~compRetStatus~0; {87730#true} is VALID [2022-04-28 08:36:12,648 INFO L272 TraceCheckUtils]: 13: Hoare triple {87730#true} call stubMoreProcessingRequired(); {87907#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:36:12,648 INFO L290 TraceCheckUtils]: 14: Hoare triple {87907#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {87730#true} is VALID [2022-04-28 08:36:12,648 INFO L290 TraceCheckUtils]: 15: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,648 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {87730#true} {87730#true} #1212#return; {87730#true} is VALID [2022-04-28 08:36:12,649 INFO L290 TraceCheckUtils]: 17: Hoare triple {87730#true} assume !(0 == ~__BLAST_NONDET~11); {87730#true} is VALID [2022-04-28 08:36:12,649 INFO L290 TraceCheckUtils]: 18: Hoare triple {87730#true} assume 1 == ~__BLAST_NONDET~11; {87730#true} is VALID [2022-04-28 08:36:12,649 INFO L290 TraceCheckUtils]: 19: Hoare triple {87730#true} ~returnVal2~0 := -1073741823; {87730#true} is VALID [2022-04-28 08:36:12,649 INFO L290 TraceCheckUtils]: 20: Hoare triple {87730#true} assume !(~s~0 == ~NP~0); {87730#true} is VALID [2022-04-28 08:36:12,649 INFO L290 TraceCheckUtils]: 21: Hoare triple {87730#true} assume ~s~0 == ~MPR1~0; {87730#true} is VALID [2022-04-28 08:36:12,649 INFO L290 TraceCheckUtils]: 22: Hoare triple {87730#true} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {87730#true} is VALID [2022-04-28 08:36:12,649 INFO L290 TraceCheckUtils]: 23: Hoare triple {87730#true} #res := ~returnVal2~0; {87730#true} is VALID [2022-04-28 08:36:12,649 INFO L290 TraceCheckUtils]: 24: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,649 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {87730#true} {87730#true} #1192#return; {87730#true} is VALID [2022-04-28 08:36:12,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-04-28 08:36:12,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:12,656 INFO L290 TraceCheckUtils]: 0: Hoare triple {87907#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {87730#true} is VALID [2022-04-28 08:36:12,656 INFO L290 TraceCheckUtils]: 1: Hoare triple {87730#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {87730#true} is VALID [2022-04-28 08:36:12,656 INFO L290 TraceCheckUtils]: 2: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,656 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {87730#true} {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} #1196#return; {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} is VALID [2022-04-28 08:36:12,657 INFO L290 TraceCheckUtils]: 0: Hoare triple {87853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {87730#true} is VALID [2022-04-28 08:36:12,657 INFO L290 TraceCheckUtils]: 1: Hoare triple {87730#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {87730#true} is VALID [2022-04-28 08:36:12,657 INFO L290 TraceCheckUtils]: 2: Hoare triple {87730#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {87730#true} is VALID [2022-04-28 08:36:12,658 INFO L272 TraceCheckUtils]: 3: Hoare triple {87730#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {87831#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:36:12,658 INFO L290 TraceCheckUtils]: 4: Hoare triple {87831#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {87730#true} is VALID [2022-04-28 08:36:12,658 INFO L290 TraceCheckUtils]: 5: Hoare triple {87730#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {87730#true} is VALID [2022-04-28 08:36:12,658 INFO L290 TraceCheckUtils]: 6: Hoare triple {87730#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {87730#true} is VALID [2022-04-28 08:36:12,658 INFO L290 TraceCheckUtils]: 7: Hoare triple {87730#true} assume #res.base == dest.base && #res.offset == dest.offset; {87730#true} is VALID [2022-04-28 08:36:12,658 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {87730#true} {87730#true} #1186#return; {87730#true} is VALID [2022-04-28 08:36:12,658 INFO L290 TraceCheckUtils]: 9: Hoare triple {87730#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {87730#true} is VALID [2022-04-28 08:36:12,658 INFO L290 TraceCheckUtils]: 10: Hoare triple {87730#true} assume !(~s~0 != ~NP~0); {87730#true} is VALID [2022-04-28 08:36:12,658 INFO L290 TraceCheckUtils]: 11: Hoare triple {87730#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {87730#true} is VALID [2022-04-28 08:36:12,658 INFO L290 TraceCheckUtils]: 12: Hoare triple {87730#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {87730#true} is VALID [2022-04-28 08:36:12,659 INFO L272 TraceCheckUtils]: 13: Hoare triple {87730#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {87891#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:36:12,659 INFO L290 TraceCheckUtils]: 14: Hoare triple {87891#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {87730#true} is VALID [2022-04-28 08:36:12,659 INFO L290 TraceCheckUtils]: 15: Hoare triple {87730#true} assume 0 != ~compRegistered~0; {87730#true} is VALID [2022-04-28 08:36:12,660 INFO L272 TraceCheckUtils]: 16: Hoare triple {87730#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:36:12,660 INFO L290 TraceCheckUtils]: 17: Hoare triple {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {87730#true} is VALID [2022-04-28 08:36:12,660 INFO L272 TraceCheckUtils]: 18: Hoare triple {87730#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:36:12,661 INFO L290 TraceCheckUtils]: 19: Hoare triple {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {87730#true} is VALID [2022-04-28 08:36:12,661 INFO L290 TraceCheckUtils]: 20: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,661 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {87730#true} {87730#true} #1174#return; {87730#true} is VALID [2022-04-28 08:36:12,661 INFO L290 TraceCheckUtils]: 22: Hoare triple {87730#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {87730#true} is VALID [2022-04-28 08:36:12,661 INFO L290 TraceCheckUtils]: 23: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,661 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {87730#true} {87730#true} #1210#return; {87730#true} is VALID [2022-04-28 08:36:12,661 INFO L290 TraceCheckUtils]: 25: Hoare triple {87730#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {87730#true} is VALID [2022-04-28 08:36:12,661 INFO L290 TraceCheckUtils]: 26: Hoare triple {87730#true} assume -1073741802 == ~compRetStatus~0; {87730#true} is VALID [2022-04-28 08:36:12,661 INFO L272 TraceCheckUtils]: 27: Hoare triple {87730#true} call stubMoreProcessingRequired(); {87907#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:36:12,661 INFO L290 TraceCheckUtils]: 28: Hoare triple {87907#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {87730#true} is VALID [2022-04-28 08:36:12,661 INFO L290 TraceCheckUtils]: 29: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,662 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {87730#true} {87730#true} #1212#return; {87730#true} is VALID [2022-04-28 08:36:12,662 INFO L290 TraceCheckUtils]: 31: Hoare triple {87730#true} assume !(0 == ~__BLAST_NONDET~11); {87730#true} is VALID [2022-04-28 08:36:12,662 INFO L290 TraceCheckUtils]: 32: Hoare triple {87730#true} assume 1 == ~__BLAST_NONDET~11; {87730#true} is VALID [2022-04-28 08:36:12,662 INFO L290 TraceCheckUtils]: 33: Hoare triple {87730#true} ~returnVal2~0 := -1073741823; {87730#true} is VALID [2022-04-28 08:36:12,662 INFO L290 TraceCheckUtils]: 34: Hoare triple {87730#true} assume !(~s~0 == ~NP~0); {87730#true} is VALID [2022-04-28 08:36:12,662 INFO L290 TraceCheckUtils]: 35: Hoare triple {87730#true} assume ~s~0 == ~MPR1~0; {87730#true} is VALID [2022-04-28 08:36:12,662 INFO L290 TraceCheckUtils]: 36: Hoare triple {87730#true} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {87730#true} is VALID [2022-04-28 08:36:12,662 INFO L290 TraceCheckUtils]: 37: Hoare triple {87730#true} #res := ~returnVal2~0; {87730#true} is VALID [2022-04-28 08:36:12,662 INFO L290 TraceCheckUtils]: 38: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,662 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {87730#true} {87730#true} #1192#return; {87730#true} is VALID [2022-04-28 08:36:12,662 INFO L290 TraceCheckUtils]: 40: Hoare triple {87730#true} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {87730#true} is VALID [2022-04-28 08:36:12,662 INFO L290 TraceCheckUtils]: 41: Hoare triple {87730#true} assume !(259 == ~status~3); {87730#true} is VALID [2022-04-28 08:36:12,663 INFO L290 TraceCheckUtils]: 42: Hoare triple {87730#true} assume !(~status~3 >= 0); {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} is VALID [2022-04-28 08:36:12,663 INFO L290 TraceCheckUtils]: 43: Hoare triple {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} is VALID [2022-04-28 08:36:12,663 INFO L272 TraceCheckUtils]: 44: Hoare triple {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {87907#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:36:12,664 INFO L290 TraceCheckUtils]: 45: Hoare triple {87907#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {87730#true} is VALID [2022-04-28 08:36:12,664 INFO L290 TraceCheckUtils]: 46: Hoare triple {87730#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {87730#true} is VALID [2022-04-28 08:36:12,664 INFO L290 TraceCheckUtils]: 47: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,664 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {87730#true} {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} #1196#return; {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} is VALID [2022-04-28 08:36:12,664 INFO L290 TraceCheckUtils]: 49: Hoare triple {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {87890#(<= (+ |KbFilter_PnP_#res| 1) 0)} is VALID [2022-04-28 08:36:12,665 INFO L290 TraceCheckUtils]: 50: Hoare triple {87890#(<= (+ |KbFilter_PnP_#res| 1) 0)} assume true; {87890#(<= (+ |KbFilter_PnP_#res| 1) 0)} is VALID [2022-04-28 08:36:12,665 INFO L284 TraceCheckUtils]: 51: Hoare quadruple {87890#(<= (+ |KbFilter_PnP_#res| 1) 0)} {87730#true} #1230#return; {87827#(<= (+ 1 |main_#t~ret174|) 0)} is VALID [2022-04-28 08:36:12,667 INFO L272 TraceCheckUtils]: 0: Hoare triple {87730#true} call ULTIMATE.init(); {87829#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:36:12,667 INFO L290 TraceCheckUtils]: 1: Hoare triple {87829#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {87730#true} is VALID [2022-04-28 08:36:12,667 INFO L290 TraceCheckUtils]: 2: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,667 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {87730#true} {87730#true} #1270#return; {87730#true} is VALID [2022-04-28 08:36:12,667 INFO L272 TraceCheckUtils]: 4: Hoare triple {87730#true} call #t~ret213 := main(); {87730#true} is VALID [2022-04-28 08:36:12,667 INFO L290 TraceCheckUtils]: 5: Hoare triple {87730#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {87730#true} is VALID [2022-04-28 08:36:12,668 INFO L272 TraceCheckUtils]: 6: Hoare triple {87730#true} call _BLAST_init(); {87830#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:36:12,668 INFO L290 TraceCheckUtils]: 7: Hoare triple {87830#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {87730#true} is VALID [2022-04-28 08:36:12,668 INFO L290 TraceCheckUtils]: 8: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,668 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {87730#true} {87730#true} #1216#return; {87730#true} is VALID [2022-04-28 08:36:12,669 INFO L272 TraceCheckUtils]: 10: Hoare triple {87730#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {87831#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:36:12,669 INFO L290 TraceCheckUtils]: 11: Hoare triple {87831#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {87730#true} is VALID [2022-04-28 08:36:12,669 INFO L272 TraceCheckUtils]: 12: Hoare triple {87730#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {87730#true} is VALID [2022-04-28 08:36:12,669 INFO L290 TraceCheckUtils]: 13: Hoare triple {87730#true} ~cond := #in~cond; {87730#true} is VALID [2022-04-28 08:36:12,669 INFO L290 TraceCheckUtils]: 14: Hoare triple {87730#true} assume !(0 == ~cond); {87730#true} is VALID [2022-04-28 08:36:12,669 INFO L290 TraceCheckUtils]: 15: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,669 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {87730#true} {87730#true} #1254#return; {87730#true} is VALID [2022-04-28 08:36:12,669 INFO L290 TraceCheckUtils]: 17: Hoare triple {87730#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {87730#true} is VALID [2022-04-28 08:36:12,669 INFO L290 TraceCheckUtils]: 18: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,669 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {87730#true} {87730#true} #1218#return; {87730#true} is VALID [2022-04-28 08:36:12,670 INFO L290 TraceCheckUtils]: 20: Hoare triple {87730#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {87730#true} is VALID [2022-04-28 08:36:12,670 INFO L290 TraceCheckUtils]: 21: Hoare triple {87730#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {87730#true} is VALID [2022-04-28 08:36:12,670 INFO L290 TraceCheckUtils]: 22: Hoare triple {87730#true} assume !(0 == ~irp_choice~0); {87730#true} is VALID [2022-04-28 08:36:12,671 INFO L272 TraceCheckUtils]: 23: Hoare triple {87730#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {87836#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:36:12,671 INFO L290 TraceCheckUtils]: 24: Hoare triple {87836#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {87730#true} is VALID [2022-04-28 08:36:12,672 INFO L272 TraceCheckUtils]: 25: Hoare triple {87730#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {87836#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:36:12,672 INFO L290 TraceCheckUtils]: 26: Hoare triple {87836#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {87730#true} is VALID [2022-04-28 08:36:12,672 INFO L290 TraceCheckUtils]: 27: Hoare triple {87730#true} assume 0 == ~__BLAST_NONDET~5; {87730#true} is VALID [2022-04-28 08:36:12,672 INFO L290 TraceCheckUtils]: 28: Hoare triple {87730#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {87730#true} is VALID [2022-04-28 08:36:12,672 INFO L290 TraceCheckUtils]: 29: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,672 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {87730#true} {87730#true} #1176#return; {87730#true} is VALID [2022-04-28 08:36:12,672 INFO L290 TraceCheckUtils]: 31: Hoare triple {87730#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {87730#true} is VALID [2022-04-28 08:36:12,672 INFO L290 TraceCheckUtils]: 32: Hoare triple {87730#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {87730#true} is VALID [2022-04-28 08:36:12,673 INFO L272 TraceCheckUtils]: 33: Hoare triple {87730#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {87831#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:36:12,673 INFO L290 TraceCheckUtils]: 34: Hoare triple {87831#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {87730#true} is VALID [2022-04-28 08:36:12,673 INFO L290 TraceCheckUtils]: 35: Hoare triple {87730#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {87730#true} is VALID [2022-04-28 08:36:12,673 INFO L290 TraceCheckUtils]: 36: Hoare triple {87730#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {87730#true} is VALID [2022-04-28 08:36:12,673 INFO L290 TraceCheckUtils]: 37: Hoare triple {87730#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {87730#true} is VALID [2022-04-28 08:36:12,673 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {87730#true} {87730#true} #1178#return; {87730#true} is VALID [2022-04-28 08:36:12,673 INFO L290 TraceCheckUtils]: 39: Hoare triple {87730#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {87730#true} is VALID [2022-04-28 08:36:12,673 INFO L272 TraceCheckUtils]: 40: Hoare triple {87730#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {87730#true} is VALID [2022-04-28 08:36:12,673 INFO L290 TraceCheckUtils]: 41: Hoare triple {87730#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {87730#true} is VALID [2022-04-28 08:36:12,673 INFO L290 TraceCheckUtils]: 42: Hoare triple {87730#true} assume 0 == ~__BLAST_NONDET~2; {87730#true} is VALID [2022-04-28 08:36:12,673 INFO L290 TraceCheckUtils]: 43: Hoare triple {87730#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {87730#true} is VALID [2022-04-28 08:36:12,674 INFO L290 TraceCheckUtils]: 44: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,674 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {87730#true} {87730#true} #1180#return; {87730#true} is VALID [2022-04-28 08:36:12,674 INFO L290 TraceCheckUtils]: 46: Hoare triple {87730#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {87730#true} is VALID [2022-04-28 08:36:12,674 INFO L290 TraceCheckUtils]: 47: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,674 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {87730#true} {87730#true} #1220#return; {87730#true} is VALID [2022-04-28 08:36:12,674 INFO L290 TraceCheckUtils]: 49: Hoare triple {87730#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {87730#true} is VALID [2022-04-28 08:36:12,674 INFO L272 TraceCheckUtils]: 50: Hoare triple {87730#true} call stub_driver_init(); {87852#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:36:12,675 INFO L290 TraceCheckUtils]: 51: Hoare triple {87852#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {87730#true} is VALID [2022-04-28 08:36:12,675 INFO L290 TraceCheckUtils]: 52: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,675 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {87730#true} {87730#true} #1222#return; {87730#true} is VALID [2022-04-28 08:36:12,675 INFO L290 TraceCheckUtils]: 54: Hoare triple {87730#true} assume !!(~status~5 >= 0); {87730#true} is VALID [2022-04-28 08:36:12,675 INFO L290 TraceCheckUtils]: 55: Hoare triple {87730#true} assume !(0 == ~__BLAST_NONDET~0); {87730#true} is VALID [2022-04-28 08:36:12,675 INFO L290 TraceCheckUtils]: 56: Hoare triple {87730#true} assume !(1 == ~__BLAST_NONDET~0); {87730#true} is VALID [2022-04-28 08:36:12,675 INFO L290 TraceCheckUtils]: 57: Hoare triple {87730#true} assume !(2 == ~__BLAST_NONDET~0); {87730#true} is VALID [2022-04-28 08:36:12,675 INFO L290 TraceCheckUtils]: 58: Hoare triple {87730#true} assume 3 == ~__BLAST_NONDET~0; {87730#true} is VALID [2022-04-28 08:36:12,676 INFO L272 TraceCheckUtils]: 59: Hoare triple {87730#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {87853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:36:12,676 INFO L290 TraceCheckUtils]: 60: Hoare triple {87853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {87730#true} is VALID [2022-04-28 08:36:12,676 INFO L290 TraceCheckUtils]: 61: Hoare triple {87730#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {87730#true} is VALID [2022-04-28 08:36:12,676 INFO L290 TraceCheckUtils]: 62: Hoare triple {87730#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {87730#true} is VALID [2022-04-28 08:36:12,677 INFO L272 TraceCheckUtils]: 63: Hoare triple {87730#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {87831#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:36:12,677 INFO L290 TraceCheckUtils]: 64: Hoare triple {87831#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {87730#true} is VALID [2022-04-28 08:36:12,677 INFO L290 TraceCheckUtils]: 65: Hoare triple {87730#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {87730#true} is VALID [2022-04-28 08:36:12,677 INFO L290 TraceCheckUtils]: 66: Hoare triple {87730#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {87730#true} is VALID [2022-04-28 08:36:12,677 INFO L290 TraceCheckUtils]: 67: Hoare triple {87730#true} assume #res.base == dest.base && #res.offset == dest.offset; {87730#true} is VALID [2022-04-28 08:36:12,677 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {87730#true} {87730#true} #1186#return; {87730#true} is VALID [2022-04-28 08:36:12,678 INFO L290 TraceCheckUtils]: 69: Hoare triple {87730#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {87730#true} is VALID [2022-04-28 08:36:12,678 INFO L290 TraceCheckUtils]: 70: Hoare triple {87730#true} assume !(~s~0 != ~NP~0); {87730#true} is VALID [2022-04-28 08:36:12,678 INFO L290 TraceCheckUtils]: 71: Hoare triple {87730#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {87730#true} is VALID [2022-04-28 08:36:12,678 INFO L290 TraceCheckUtils]: 72: Hoare triple {87730#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {87730#true} is VALID [2022-04-28 08:36:12,678 INFO L272 TraceCheckUtils]: 73: Hoare triple {87730#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {87891#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:36:12,678 INFO L290 TraceCheckUtils]: 74: Hoare triple {87891#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {87730#true} is VALID [2022-04-28 08:36:12,679 INFO L290 TraceCheckUtils]: 75: Hoare triple {87730#true} assume 0 != ~compRegistered~0; {87730#true} is VALID [2022-04-28 08:36:12,679 INFO L272 TraceCheckUtils]: 76: Hoare triple {87730#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:36:12,679 INFO L290 TraceCheckUtils]: 77: Hoare triple {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {87730#true} is VALID [2022-04-28 08:36:12,680 INFO L272 TraceCheckUtils]: 78: Hoare triple {87730#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:36:12,680 INFO L290 TraceCheckUtils]: 79: Hoare triple {87903#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {87730#true} is VALID [2022-04-28 08:36:12,680 INFO L290 TraceCheckUtils]: 80: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,680 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {87730#true} {87730#true} #1174#return; {87730#true} is VALID [2022-04-28 08:36:12,680 INFO L290 TraceCheckUtils]: 82: Hoare triple {87730#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {87730#true} is VALID [2022-04-28 08:36:12,680 INFO L290 TraceCheckUtils]: 83: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,680 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {87730#true} {87730#true} #1210#return; {87730#true} is VALID [2022-04-28 08:36:12,680 INFO L290 TraceCheckUtils]: 85: Hoare triple {87730#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {87730#true} is VALID [2022-04-28 08:36:12,681 INFO L290 TraceCheckUtils]: 86: Hoare triple {87730#true} assume -1073741802 == ~compRetStatus~0; {87730#true} is VALID [2022-04-28 08:36:12,681 INFO L272 TraceCheckUtils]: 87: Hoare triple {87730#true} call stubMoreProcessingRequired(); {87907#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:36:12,681 INFO L290 TraceCheckUtils]: 88: Hoare triple {87907#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {87730#true} is VALID [2022-04-28 08:36:12,681 INFO L290 TraceCheckUtils]: 89: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,681 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {87730#true} {87730#true} #1212#return; {87730#true} is VALID [2022-04-28 08:36:12,681 INFO L290 TraceCheckUtils]: 91: Hoare triple {87730#true} assume !(0 == ~__BLAST_NONDET~11); {87730#true} is VALID [2022-04-28 08:36:12,681 INFO L290 TraceCheckUtils]: 92: Hoare triple {87730#true} assume 1 == ~__BLAST_NONDET~11; {87730#true} is VALID [2022-04-28 08:36:12,681 INFO L290 TraceCheckUtils]: 93: Hoare triple {87730#true} ~returnVal2~0 := -1073741823; {87730#true} is VALID [2022-04-28 08:36:12,681 INFO L290 TraceCheckUtils]: 94: Hoare triple {87730#true} assume !(~s~0 == ~NP~0); {87730#true} is VALID [2022-04-28 08:36:12,681 INFO L290 TraceCheckUtils]: 95: Hoare triple {87730#true} assume ~s~0 == ~MPR1~0; {87730#true} is VALID [2022-04-28 08:36:12,681 INFO L290 TraceCheckUtils]: 96: Hoare triple {87730#true} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {87730#true} is VALID [2022-04-28 08:36:12,681 INFO L290 TraceCheckUtils]: 97: Hoare triple {87730#true} #res := ~returnVal2~0; {87730#true} is VALID [2022-04-28 08:36:12,682 INFO L290 TraceCheckUtils]: 98: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,682 INFO L284 TraceCheckUtils]: 99: Hoare quadruple {87730#true} {87730#true} #1192#return; {87730#true} is VALID [2022-04-28 08:36:12,682 INFO L290 TraceCheckUtils]: 100: Hoare triple {87730#true} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {87730#true} is VALID [2022-04-28 08:36:12,682 INFO L290 TraceCheckUtils]: 101: Hoare triple {87730#true} assume !(259 == ~status~3); {87730#true} is VALID [2022-04-28 08:36:12,682 INFO L290 TraceCheckUtils]: 102: Hoare triple {87730#true} assume !(~status~3 >= 0); {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} is VALID [2022-04-28 08:36:12,682 INFO L290 TraceCheckUtils]: 103: Hoare triple {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} is VALID [2022-04-28 08:36:12,683 INFO L272 TraceCheckUtils]: 104: Hoare triple {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {87907#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:36:12,683 INFO L290 TraceCheckUtils]: 105: Hoare triple {87907#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {87730#true} is VALID [2022-04-28 08:36:12,683 INFO L290 TraceCheckUtils]: 106: Hoare triple {87730#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {87730#true} is VALID [2022-04-28 08:36:12,683 INFO L290 TraceCheckUtils]: 107: Hoare triple {87730#true} assume true; {87730#true} is VALID [2022-04-28 08:36:12,684 INFO L284 TraceCheckUtils]: 108: Hoare quadruple {87730#true} {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} #1196#return; {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} is VALID [2022-04-28 08:36:12,684 INFO L290 TraceCheckUtils]: 109: Hoare triple {87885#(<= (+ KbFilter_PnP_~status~3 1) 0)} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {87890#(<= (+ |KbFilter_PnP_#res| 1) 0)} is VALID [2022-04-28 08:36:12,684 INFO L290 TraceCheckUtils]: 110: Hoare triple {87890#(<= (+ |KbFilter_PnP_#res| 1) 0)} assume true; {87890#(<= (+ |KbFilter_PnP_#res| 1) 0)} is VALID [2022-04-28 08:36:12,685 INFO L284 TraceCheckUtils]: 111: Hoare quadruple {87890#(<= (+ |KbFilter_PnP_#res| 1) 0)} {87730#true} #1230#return; {87827#(<= (+ 1 |main_#t~ret174|) 0)} is VALID [2022-04-28 08:36:12,685 INFO L290 TraceCheckUtils]: 112: Hoare triple {87827#(<= (+ 1 |main_#t~ret174|) 0)} assume -2147483648 <= #t~ret174 && #t~ret174 <= 2147483647;~status~5 := #t~ret174;havoc #t~ret174; {87828#(<= (+ main_~status~5 1) 0)} is VALID [2022-04-28 08:36:12,686 INFO L290 TraceCheckUtils]: 113: Hoare triple {87828#(<= (+ main_~status~5 1) 0)} assume 0 != ~we_should_unload~0; {87828#(<= (+ main_~status~5 1) 0)} is VALID [2022-04-28 08:36:12,686 INFO L290 TraceCheckUtils]: 114: Hoare triple {87828#(<= (+ main_~status~5 1) 0)} assume !(1 == ~pended~0); {87828#(<= (+ main_~status~5 1) 0)} is VALID [2022-04-28 08:36:12,686 INFO L290 TraceCheckUtils]: 115: Hoare triple {87828#(<= (+ main_~status~5 1) 0)} assume !(1 == ~pended~0); {87828#(<= (+ main_~status~5 1) 0)} is VALID [2022-04-28 08:36:12,686 INFO L290 TraceCheckUtils]: 116: Hoare triple {87828#(<= (+ main_~status~5 1) 0)} assume !(~s~0 == ~UNLOADED~0); {87828#(<= (+ main_~status~5 1) 0)} is VALID [2022-04-28 08:36:12,687 INFO L290 TraceCheckUtils]: 117: Hoare triple {87828#(<= (+ main_~status~5 1) 0)} assume !(-1 == ~status~5); {87828#(<= (+ main_~status~5 1) 0)} is VALID [2022-04-28 08:36:12,687 INFO L290 TraceCheckUtils]: 118: Hoare triple {87828#(<= (+ main_~status~5 1) 0)} assume ~s~0 != ~SKIP2~0; {87828#(<= (+ main_~status~5 1) 0)} is VALID [2022-04-28 08:36:12,687 INFO L290 TraceCheckUtils]: 119: Hoare triple {87828#(<= (+ main_~status~5 1) 0)} assume ~s~0 != ~IPC~0; {87828#(<= (+ main_~status~5 1) 0)} is VALID [2022-04-28 08:36:12,687 INFO L290 TraceCheckUtils]: 120: Hoare triple {87828#(<= (+ main_~status~5 1) 0)} assume !(~s~0 != ~DC~0); {87828#(<= (+ main_~status~5 1) 0)} is VALID [2022-04-28 08:36:12,687 INFO L290 TraceCheckUtils]: 121: Hoare triple {87828#(<= (+ main_~status~5 1) 0)} assume !(1 == ~pended~0); {87828#(<= (+ main_~status~5 1) 0)} is VALID [2022-04-28 08:36:12,688 INFO L290 TraceCheckUtils]: 122: Hoare triple {87828#(<= (+ main_~status~5 1) 0)} assume ~s~0 == ~DC~0; {87828#(<= (+ main_~status~5 1) 0)} is VALID [2022-04-28 08:36:12,688 INFO L290 TraceCheckUtils]: 123: Hoare triple {87828#(<= (+ main_~status~5 1) 0)} assume 259 == ~status~5; {87731#false} is VALID [2022-04-28 08:36:12,688 INFO L272 TraceCheckUtils]: 124: Hoare triple {87731#false} call errorFn(); {87731#false} is VALID [2022-04-28 08:36:12,688 INFO L290 TraceCheckUtils]: 125: Hoare triple {87731#false} assume !false; {87731#false} is VALID [2022-04-28 08:36:12,688 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 08:36:12,689 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:36:12,689 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2126811366] [2022-04-28 08:36:12,689 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2126811366] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:36:12,689 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:36:12,689 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 08:36:12,689 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:36:12,689 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1708261574] [2022-04-28 08:36:12,689 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1708261574] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:36:12,689 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:36:12,689 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 08:36:12,689 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [542755075] [2022-04-28 08:36:12,689 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:36:12,690 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 6.133333333333334) internal successors, (92), 5 states have internal predecessors, (92), 3 states have call successors, (18), 11 states have call predecessors, (18), 2 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 126 [2022-04-28 08:36:12,690 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:36:12,690 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 6.133333333333334) internal successors, (92), 5 states have internal predecessors, (92), 3 states have call successors, (18), 11 states have call predecessors, (18), 2 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-04-28 08:36:12,780 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 126 edges. 126 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:36:12,780 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-28 08:36:12,780 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:36:12,780 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-28 08:36:12,780 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2022-04-28 08:36:12,780 INFO L87 Difference]: Start difference. First operand 273 states and 298 transitions. Second operand has 15 states, 15 states have (on average 6.133333333333334) internal successors, (92), 5 states have internal predecessors, (92), 3 states have call successors, (18), 11 states have call predecessors, (18), 2 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-04-28 08:36:16,551 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.70s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:18,564 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:22,217 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.62s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:24,223 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:26,239 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:28,258 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:30,280 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:40,533 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:36:40,533 INFO L93 Difference]: Finished difference Result 323 states and 358 transitions. [2022-04-28 08:36:40,533 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-28 08:36:40,533 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 6.133333333333334) internal successors, (92), 5 states have internal predecessors, (92), 3 states have call successors, (18), 11 states have call predecessors, (18), 2 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 126 [2022-04-28 08:36:40,533 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:36:40,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 6.133333333333334) internal successors, (92), 5 states have internal predecessors, (92), 3 states have call successors, (18), 11 states have call predecessors, (18), 2 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-04-28 08:36:40,535 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 203 transitions. [2022-04-28 08:36:40,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 6.133333333333334) internal successors, (92), 5 states have internal predecessors, (92), 3 states have call successors, (18), 11 states have call predecessors, (18), 2 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-04-28 08:36:40,536 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 203 transitions. [2022-04-28 08:36:40,536 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 203 transitions. [2022-04-28 08:36:40,736 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 203 edges. 203 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:36:40,746 INFO L225 Difference]: With dead ends: 323 [2022-04-28 08:36:40,746 INFO L226 Difference]: Without dead ends: 303 [2022-04-28 08:36:40,747 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=86, Invalid=294, Unknown=0, NotChecked=0, Total=380 [2022-04-28 08:36:40,747 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 290 mSDsluCounter, 344 mSDsCounter, 0 mSdLazyCounter, 821 mSolverCounterSat, 154 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 17.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 292 SdHoareTripleChecker+Valid, 490 SdHoareTripleChecker+Invalid, 980 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 154 IncrementalHoareTripleChecker+Valid, 821 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.5s IncrementalHoareTripleChecker+Time [2022-04-28 08:36:40,747 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [292 Valid, 490 Invalid, 980 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [154 Valid, 821 Invalid, 5 Unknown, 0 Unchecked, 17.5s Time] [2022-04-28 08:36:40,749 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 303 states. [2022-04-28 08:36:41,407 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 303 to 271. [2022-04-28 08:36:41,407 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:36:41,407 INFO L82 GeneralOperation]: Start isEquivalent. First operand 303 states. Second operand has 271 states, 205 states have (on average 1.1121951219512196) internal successors, (228), 207 states have internal predecessors, (228), 33 states have call successors, (33), 33 states have call predecessors, (33), 32 states have return successors, (33), 30 states have call predecessors, (33), 31 states have call successors, (33) [2022-04-28 08:36:41,407 INFO L74 IsIncluded]: Start isIncluded. First operand 303 states. Second operand has 271 states, 205 states have (on average 1.1121951219512196) internal successors, (228), 207 states have internal predecessors, (228), 33 states have call successors, (33), 33 states have call predecessors, (33), 32 states have return successors, (33), 30 states have call predecessors, (33), 31 states have call successors, (33) [2022-04-28 08:36:41,408 INFO L87 Difference]: Start difference. First operand 303 states. Second operand has 271 states, 205 states have (on average 1.1121951219512196) internal successors, (228), 207 states have internal predecessors, (228), 33 states have call successors, (33), 33 states have call predecessors, (33), 32 states have return successors, (33), 30 states have call predecessors, (33), 31 states have call successors, (33) [2022-04-28 08:36:41,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:36:41,412 INFO L93 Difference]: Finished difference Result 303 states and 334 transitions. [2022-04-28 08:36:41,412 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 334 transitions. [2022-04-28 08:36:41,412 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:36:41,412 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:36:41,412 INFO L74 IsIncluded]: Start isIncluded. First operand has 271 states, 205 states have (on average 1.1121951219512196) internal successors, (228), 207 states have internal predecessors, (228), 33 states have call successors, (33), 33 states have call predecessors, (33), 32 states have return successors, (33), 30 states have call predecessors, (33), 31 states have call successors, (33) Second operand 303 states. [2022-04-28 08:36:41,413 INFO L87 Difference]: Start difference. First operand has 271 states, 205 states have (on average 1.1121951219512196) internal successors, (228), 207 states have internal predecessors, (228), 33 states have call successors, (33), 33 states have call predecessors, (33), 32 states have return successors, (33), 30 states have call predecessors, (33), 31 states have call successors, (33) Second operand 303 states. [2022-04-28 08:36:41,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:36:41,416 INFO L93 Difference]: Finished difference Result 303 states and 334 transitions. [2022-04-28 08:36:41,416 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 334 transitions. [2022-04-28 08:36:41,417 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:36:41,417 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:36:41,417 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:36:41,417 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:36:41,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 271 states, 205 states have (on average 1.1121951219512196) internal successors, (228), 207 states have internal predecessors, (228), 33 states have call successors, (33), 33 states have call predecessors, (33), 32 states have return successors, (33), 30 states have call predecessors, (33), 31 states have call successors, (33) [2022-04-28 08:36:41,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271 states to 271 states and 294 transitions. [2022-04-28 08:36:41,421 INFO L78 Accepts]: Start accepts. Automaton has 271 states and 294 transitions. Word has length 126 [2022-04-28 08:36:41,421 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:36:41,421 INFO L495 AbstractCegarLoop]: Abstraction has 271 states and 294 transitions. [2022-04-28 08:36:41,421 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 6.133333333333334) internal successors, (92), 5 states have internal predecessors, (92), 3 states have call successors, (18), 11 states have call predecessors, (18), 2 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-04-28 08:36:41,421 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 271 states and 294 transitions. [2022-04-28 08:36:42,212 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 294 edges. 294 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:36:42,213 INFO L276 IsEmpty]: Start isEmpty. Operand 271 states and 294 transitions. [2022-04-28 08:36:42,213 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 128 [2022-04-28 08:36:42,213 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:36:42,213 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:36:42,213 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable36 [2022-04-28 08:36:42,214 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:36:42,214 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:36:42,214 INFO L85 PathProgramCache]: Analyzing trace with hash -94633934, now seen corresponding path program 1 times [2022-04-28 08:36:42,214 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:36:42,214 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [773655258] [2022-04-28 08:36:42,216 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 0 HavocedVariables, 4 AssignedVariables, -1 ReadonlyVariables, Eigenvalues: {}, 0 SequentialAcceleration, 0 AlternatingAcceleration, 0 QuantifierFreeResult [2022-04-28 08:36:42,216 WARN L91 AcceleratorJordan]: Jordan acceleration failed, because NONINTEGER_UPDATE [2022-04-28 08:36:42,216 INFO L274 tedInterpolationCore]: Could not compute an accelerate. [2022-04-28 08:36:42,216 INFO L85 PathProgramCache]: Analyzing trace with hash -94633934, now seen corresponding path program 2 times [2022-04-28 08:36:42,216 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:36:42,216 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1498603320] [2022-04-28 08:36:42,216 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:36:42,216 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:36:42,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:36:42,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,373 INFO L290 TraceCheckUtils]: 0: Hoare triple {89814#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {89716#true} is VALID [2022-04-28 08:36:42,373 INFO L290 TraceCheckUtils]: 1: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,373 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {89716#true} {89716#true} #1270#return; {89716#true} is VALID [2022-04-28 08:36:42,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:36:42,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,401 INFO L290 TraceCheckUtils]: 0: Hoare triple {89815#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {89716#true} is VALID [2022-04-28 08:36:42,401 INFO L290 TraceCheckUtils]: 1: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,401 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {89716#true} {89716#true} #1216#return; {89716#true} is VALID [2022-04-28 08:36:42,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:36:42,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:36:42,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,422 INFO L290 TraceCheckUtils]: 0: Hoare triple {89716#true} ~cond := #in~cond; {89716#true} is VALID [2022-04-28 08:36:42,422 INFO L290 TraceCheckUtils]: 1: Hoare triple {89716#true} assume !(0 == ~cond); {89716#true} is VALID [2022-04-28 08:36:42,422 INFO L290 TraceCheckUtils]: 2: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,423 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {89716#true} {89716#true} #1254#return; {89716#true} is VALID [2022-04-28 08:36:42,423 INFO L290 TraceCheckUtils]: 0: Hoare triple {89816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {89716#true} is VALID [2022-04-28 08:36:42,423 INFO L272 TraceCheckUtils]: 1: Hoare triple {89716#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {89716#true} is VALID [2022-04-28 08:36:42,423 INFO L290 TraceCheckUtils]: 2: Hoare triple {89716#true} ~cond := #in~cond; {89716#true} is VALID [2022-04-28 08:36:42,423 INFO L290 TraceCheckUtils]: 3: Hoare triple {89716#true} assume !(0 == ~cond); {89716#true} is VALID [2022-04-28 08:36:42,423 INFO L290 TraceCheckUtils]: 4: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,423 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {89716#true} {89716#true} #1254#return; {89716#true} is VALID [2022-04-28 08:36:42,423 INFO L290 TraceCheckUtils]: 6: Hoare triple {89716#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {89716#true} is VALID [2022-04-28 08:36:42,423 INFO L290 TraceCheckUtils]: 7: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,423 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {89716#true} {89716#true} #1218#return; {89716#true} is VALID [2022-04-28 08:36:42,431 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:36:42,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:36:42,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,458 INFO L290 TraceCheckUtils]: 0: Hoare triple {89821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {89716#true} is VALID [2022-04-28 08:36:42,458 INFO L290 TraceCheckUtils]: 1: Hoare triple {89716#true} assume 0 == ~__BLAST_NONDET~5; {89716#true} is VALID [2022-04-28 08:36:42,458 INFO L290 TraceCheckUtils]: 2: Hoare triple {89716#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {89716#true} is VALID [2022-04-28 08:36:42,458 INFO L290 TraceCheckUtils]: 3: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,458 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {89716#true} {89716#true} #1176#return; {89716#true} is VALID [2022-04-28 08:36:42,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:36:42,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,464 INFO L290 TraceCheckUtils]: 0: Hoare triple {89816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {89716#true} is VALID [2022-04-28 08:36:42,464 INFO L290 TraceCheckUtils]: 1: Hoare triple {89716#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {89716#true} is VALID [2022-04-28 08:36:42,464 INFO L290 TraceCheckUtils]: 2: Hoare triple {89716#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {89716#true} is VALID [2022-04-28 08:36:42,464 INFO L290 TraceCheckUtils]: 3: Hoare triple {89716#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {89716#true} is VALID [2022-04-28 08:36:42,464 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {89716#true} {89716#true} #1178#return; {89716#true} is VALID [2022-04-28 08:36:42,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-04-28 08:36:42,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,469 INFO L290 TraceCheckUtils]: 0: Hoare triple {89716#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {89716#true} is VALID [2022-04-28 08:36:42,469 INFO L290 TraceCheckUtils]: 1: Hoare triple {89716#true} assume 0 == ~__BLAST_NONDET~2; {89716#true} is VALID [2022-04-28 08:36:42,469 INFO L290 TraceCheckUtils]: 2: Hoare triple {89716#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {89716#true} is VALID [2022-04-28 08:36:42,469 INFO L290 TraceCheckUtils]: 3: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,469 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {89716#true} {89716#true} #1180#return; {89716#true} is VALID [2022-04-28 08:36:42,469 INFO L290 TraceCheckUtils]: 0: Hoare triple {89821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {89716#true} is VALID [2022-04-28 08:36:42,470 INFO L272 TraceCheckUtils]: 1: Hoare triple {89716#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {89821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:36:42,470 INFO L290 TraceCheckUtils]: 2: Hoare triple {89821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {89716#true} is VALID [2022-04-28 08:36:42,470 INFO L290 TraceCheckUtils]: 3: Hoare triple {89716#true} assume 0 == ~__BLAST_NONDET~5; {89716#true} is VALID [2022-04-28 08:36:42,470 INFO L290 TraceCheckUtils]: 4: Hoare triple {89716#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {89716#true} is VALID [2022-04-28 08:36:42,471 INFO L290 TraceCheckUtils]: 5: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,471 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {89716#true} {89716#true} #1176#return; {89716#true} is VALID [2022-04-28 08:36:42,471 INFO L290 TraceCheckUtils]: 7: Hoare triple {89716#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {89716#true} is VALID [2022-04-28 08:36:42,471 INFO L290 TraceCheckUtils]: 8: Hoare triple {89716#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {89716#true} is VALID [2022-04-28 08:36:42,471 INFO L272 TraceCheckUtils]: 9: Hoare triple {89716#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {89816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:36:42,471 INFO L290 TraceCheckUtils]: 10: Hoare triple {89816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {89716#true} is VALID [2022-04-28 08:36:42,472 INFO L290 TraceCheckUtils]: 11: Hoare triple {89716#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {89716#true} is VALID [2022-04-28 08:36:42,472 INFO L290 TraceCheckUtils]: 12: Hoare triple {89716#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {89716#true} is VALID [2022-04-28 08:36:42,472 INFO L290 TraceCheckUtils]: 13: Hoare triple {89716#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {89716#true} is VALID [2022-04-28 08:36:42,472 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {89716#true} {89716#true} #1178#return; {89716#true} is VALID [2022-04-28 08:36:42,472 INFO L290 TraceCheckUtils]: 15: Hoare triple {89716#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {89716#true} is VALID [2022-04-28 08:36:42,472 INFO L272 TraceCheckUtils]: 16: Hoare triple {89716#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {89716#true} is VALID [2022-04-28 08:36:42,472 INFO L290 TraceCheckUtils]: 17: Hoare triple {89716#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {89716#true} is VALID [2022-04-28 08:36:42,472 INFO L290 TraceCheckUtils]: 18: Hoare triple {89716#true} assume 0 == ~__BLAST_NONDET~2; {89716#true} is VALID [2022-04-28 08:36:42,472 INFO L290 TraceCheckUtils]: 19: Hoare triple {89716#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {89716#true} is VALID [2022-04-28 08:36:42,472 INFO L290 TraceCheckUtils]: 20: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,472 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {89716#true} {89716#true} #1180#return; {89716#true} is VALID [2022-04-28 08:36:42,472 INFO L290 TraceCheckUtils]: 22: Hoare triple {89716#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {89716#true} is VALID [2022-04-28 08:36:42,472 INFO L290 TraceCheckUtils]: 23: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,472 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {89716#true} {89716#true} #1220#return; {89716#true} is VALID [2022-04-28 08:36:42,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-04-28 08:36:42,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,489 INFO L290 TraceCheckUtils]: 0: Hoare triple {89837#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {89716#true} is VALID [2022-04-28 08:36:42,489 INFO L290 TraceCheckUtils]: 1: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,489 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {89716#true} {89716#true} #1222#return; {89716#true} is VALID [2022-04-28 08:36:42,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-04-28 08:36:42,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-28 08:36:42,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,602 INFO L290 TraceCheckUtils]: 0: Hoare triple {89816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {89716#true} is VALID [2022-04-28 08:36:42,603 INFO L290 TraceCheckUtils]: 1: Hoare triple {89716#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {89716#true} is VALID [2022-04-28 08:36:42,603 INFO L290 TraceCheckUtils]: 2: Hoare triple {89716#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {89716#true} is VALID [2022-04-28 08:36:42,603 INFO L290 TraceCheckUtils]: 3: Hoare triple {89716#true} assume #res.base == dest.base && #res.offset == dest.offset; {89716#true} is VALID [2022-04-28 08:36:42,603 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {89716#true} {89716#true} #1186#return; {89716#true} is VALID [2022-04-28 08:36:42,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:36:42,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:36:42,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:36:42,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,662 INFO L290 TraceCheckUtils]: 0: Hoare triple {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {89716#true} is VALID [2022-04-28 08:36:42,662 INFO L290 TraceCheckUtils]: 1: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,663 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {89716#true} {89716#true} #1174#return; {89716#true} is VALID [2022-04-28 08:36:42,663 INFO L290 TraceCheckUtils]: 0: Hoare triple {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {89716#true} is VALID [2022-04-28 08:36:42,663 INFO L272 TraceCheckUtils]: 1: Hoare triple {89716#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:36:42,663 INFO L290 TraceCheckUtils]: 2: Hoare triple {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {89716#true} is VALID [2022-04-28 08:36:42,663 INFO L290 TraceCheckUtils]: 3: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,663 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {89716#true} {89716#true} #1174#return; {89716#true} is VALID [2022-04-28 08:36:42,664 INFO L290 TraceCheckUtils]: 5: Hoare triple {89716#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {89716#true} is VALID [2022-04-28 08:36:42,664 INFO L290 TraceCheckUtils]: 6: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,664 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {89716#true} {89716#true} #1210#return; {89716#true} is VALID [2022-04-28 08:36:42,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:36:42,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,696 INFO L290 TraceCheckUtils]: 0: Hoare triple {89894#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {89716#true} is VALID [2022-04-28 08:36:42,696 INFO L290 TraceCheckUtils]: 1: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,696 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {89716#true} {89716#true} #1212#return; {89716#true} is VALID [2022-04-28 08:36:42,696 INFO L290 TraceCheckUtils]: 0: Hoare triple {89876#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {89716#true} is VALID [2022-04-28 08:36:42,696 INFO L290 TraceCheckUtils]: 1: Hoare triple {89716#true} assume 0 != ~compRegistered~0; {89716#true} is VALID [2022-04-28 08:36:42,697 INFO L272 TraceCheckUtils]: 2: Hoare triple {89716#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:36:42,697 INFO L290 TraceCheckUtils]: 3: Hoare triple {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {89716#true} is VALID [2022-04-28 08:36:42,698 INFO L272 TraceCheckUtils]: 4: Hoare triple {89716#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:36:42,698 INFO L290 TraceCheckUtils]: 5: Hoare triple {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {89716#true} is VALID [2022-04-28 08:36:42,698 INFO L290 TraceCheckUtils]: 6: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,698 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {89716#true} {89716#true} #1174#return; {89716#true} is VALID [2022-04-28 08:36:42,698 INFO L290 TraceCheckUtils]: 8: Hoare triple {89716#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {89716#true} is VALID [2022-04-28 08:36:42,698 INFO L290 TraceCheckUtils]: 9: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,698 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {89716#true} {89716#true} #1210#return; {89716#true} is VALID [2022-04-28 08:36:42,698 INFO L290 TraceCheckUtils]: 11: Hoare triple {89716#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {89716#true} is VALID [2022-04-28 08:36:42,698 INFO L290 TraceCheckUtils]: 12: Hoare triple {89716#true} assume -1073741802 == ~compRetStatus~0; {89716#true} is VALID [2022-04-28 08:36:42,698 INFO L272 TraceCheckUtils]: 13: Hoare triple {89716#true} call stubMoreProcessingRequired(); {89894#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:36:42,699 INFO L290 TraceCheckUtils]: 14: Hoare triple {89894#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {89716#true} is VALID [2022-04-28 08:36:42,699 INFO L290 TraceCheckUtils]: 15: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,699 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {89716#true} {89716#true} #1212#return; {89716#true} is VALID [2022-04-28 08:36:42,699 INFO L290 TraceCheckUtils]: 17: Hoare triple {89716#true} assume !(0 == ~__BLAST_NONDET~11); {89716#true} is VALID [2022-04-28 08:36:42,699 INFO L290 TraceCheckUtils]: 18: Hoare triple {89716#true} assume 1 == ~__BLAST_NONDET~11; {89716#true} is VALID [2022-04-28 08:36:42,699 INFO L290 TraceCheckUtils]: 19: Hoare triple {89716#true} ~returnVal2~0 := -1073741823; {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:36:42,700 INFO L290 TraceCheckUtils]: 20: Hoare triple {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume !(~s~0 == ~NP~0); {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:36:42,700 INFO L290 TraceCheckUtils]: 21: Hoare triple {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume ~s~0 == ~MPR1~0; {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:36:42,700 INFO L290 TraceCheckUtils]: 22: Hoare triple {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:36:42,701 INFO L290 TraceCheckUtils]: 23: Hoare triple {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} #res := ~returnVal2~0; {89889#(<= (+ |IofCallDriver_#res| 1073741823) 0)} is VALID [2022-04-28 08:36:42,701 INFO L290 TraceCheckUtils]: 24: Hoare triple {89889#(<= (+ |IofCallDriver_#res| 1073741823) 0)} assume true; {89889#(<= (+ |IofCallDriver_#res| 1073741823) 0)} is VALID [2022-04-28 08:36:42,702 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {89889#(<= (+ |IofCallDriver_#res| 1073741823) 0)} {89716#true} #1192#return; {89870#(<= (+ 1073741823 |KbFilter_PnP_#t~ret109|) 0)} is VALID [2022-04-28 08:36:42,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-04-28 08:36:42,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:36:42,707 INFO L290 TraceCheckUtils]: 0: Hoare triple {89894#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {89716#true} is VALID [2022-04-28 08:36:42,707 INFO L290 TraceCheckUtils]: 1: Hoare triple {89716#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {89716#true} is VALID [2022-04-28 08:36:42,707 INFO L290 TraceCheckUtils]: 2: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,707 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {89716#true} {89717#false} #1196#return; {89717#false} is VALID [2022-04-28 08:36:42,707 INFO L290 TraceCheckUtils]: 0: Hoare triple {89838#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {89716#true} is VALID [2022-04-28 08:36:42,707 INFO L290 TraceCheckUtils]: 1: Hoare triple {89716#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {89716#true} is VALID [2022-04-28 08:36:42,707 INFO L290 TraceCheckUtils]: 2: Hoare triple {89716#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {89716#true} is VALID [2022-04-28 08:36:42,708 INFO L272 TraceCheckUtils]: 3: Hoare triple {89716#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {89816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:36:42,708 INFO L290 TraceCheckUtils]: 4: Hoare triple {89816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {89716#true} is VALID [2022-04-28 08:36:42,708 INFO L290 TraceCheckUtils]: 5: Hoare triple {89716#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {89716#true} is VALID [2022-04-28 08:36:42,708 INFO L290 TraceCheckUtils]: 6: Hoare triple {89716#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {89716#true} is VALID [2022-04-28 08:36:42,708 INFO L290 TraceCheckUtils]: 7: Hoare triple {89716#true} assume #res.base == dest.base && #res.offset == dest.offset; {89716#true} is VALID [2022-04-28 08:36:42,708 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {89716#true} {89716#true} #1186#return; {89716#true} is VALID [2022-04-28 08:36:42,708 INFO L290 TraceCheckUtils]: 9: Hoare triple {89716#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {89716#true} is VALID [2022-04-28 08:36:42,708 INFO L290 TraceCheckUtils]: 10: Hoare triple {89716#true} assume !(~s~0 != ~NP~0); {89716#true} is VALID [2022-04-28 08:36:42,708 INFO L290 TraceCheckUtils]: 11: Hoare triple {89716#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {89716#true} is VALID [2022-04-28 08:36:42,709 INFO L290 TraceCheckUtils]: 12: Hoare triple {89716#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {89716#true} is VALID [2022-04-28 08:36:42,709 INFO L272 TraceCheckUtils]: 13: Hoare triple {89716#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {89876#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:36:42,710 INFO L290 TraceCheckUtils]: 14: Hoare triple {89876#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {89716#true} is VALID [2022-04-28 08:36:42,710 INFO L290 TraceCheckUtils]: 15: Hoare triple {89716#true} assume 0 != ~compRegistered~0; {89716#true} is VALID [2022-04-28 08:36:42,711 INFO L272 TraceCheckUtils]: 16: Hoare triple {89716#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:36:42,711 INFO L290 TraceCheckUtils]: 17: Hoare triple {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {89716#true} is VALID [2022-04-28 08:36:42,711 INFO L272 TraceCheckUtils]: 18: Hoare triple {89716#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:36:42,711 INFO L290 TraceCheckUtils]: 19: Hoare triple {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {89716#true} is VALID [2022-04-28 08:36:42,712 INFO L290 TraceCheckUtils]: 20: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,712 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {89716#true} {89716#true} #1174#return; {89716#true} is VALID [2022-04-28 08:36:42,712 INFO L290 TraceCheckUtils]: 22: Hoare triple {89716#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {89716#true} is VALID [2022-04-28 08:36:42,712 INFO L290 TraceCheckUtils]: 23: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,712 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {89716#true} {89716#true} #1210#return; {89716#true} is VALID [2022-04-28 08:36:42,712 INFO L290 TraceCheckUtils]: 25: Hoare triple {89716#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {89716#true} is VALID [2022-04-28 08:36:42,712 INFO L290 TraceCheckUtils]: 26: Hoare triple {89716#true} assume -1073741802 == ~compRetStatus~0; {89716#true} is VALID [2022-04-28 08:36:42,712 INFO L272 TraceCheckUtils]: 27: Hoare triple {89716#true} call stubMoreProcessingRequired(); {89894#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:36:42,712 INFO L290 TraceCheckUtils]: 28: Hoare triple {89894#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {89716#true} is VALID [2022-04-28 08:36:42,712 INFO L290 TraceCheckUtils]: 29: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,713 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {89716#true} {89716#true} #1212#return; {89716#true} is VALID [2022-04-28 08:36:42,713 INFO L290 TraceCheckUtils]: 31: Hoare triple {89716#true} assume !(0 == ~__BLAST_NONDET~11); {89716#true} is VALID [2022-04-28 08:36:42,713 INFO L290 TraceCheckUtils]: 32: Hoare triple {89716#true} assume 1 == ~__BLAST_NONDET~11; {89716#true} is VALID [2022-04-28 08:36:42,713 INFO L290 TraceCheckUtils]: 33: Hoare triple {89716#true} ~returnVal2~0 := -1073741823; {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:36:42,713 INFO L290 TraceCheckUtils]: 34: Hoare triple {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume !(~s~0 == ~NP~0); {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:36:42,714 INFO L290 TraceCheckUtils]: 35: Hoare triple {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume ~s~0 == ~MPR1~0; {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:36:42,714 INFO L290 TraceCheckUtils]: 36: Hoare triple {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:36:42,714 INFO L290 TraceCheckUtils]: 37: Hoare triple {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} #res := ~returnVal2~0; {89889#(<= (+ |IofCallDriver_#res| 1073741823) 0)} is VALID [2022-04-28 08:36:42,715 INFO L290 TraceCheckUtils]: 38: Hoare triple {89889#(<= (+ |IofCallDriver_#res| 1073741823) 0)} assume true; {89889#(<= (+ |IofCallDriver_#res| 1073741823) 0)} is VALID [2022-04-28 08:36:42,716 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {89889#(<= (+ |IofCallDriver_#res| 1073741823) 0)} {89716#true} #1192#return; {89870#(<= (+ 1073741823 |KbFilter_PnP_#t~ret109|) 0)} is VALID [2022-04-28 08:36:42,716 INFO L290 TraceCheckUtils]: 40: Hoare triple {89870#(<= (+ 1073741823 |KbFilter_PnP_#t~ret109|) 0)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {89871#(<= (+ KbFilter_PnP_~status~3 1073741823) 0)} is VALID [2022-04-28 08:36:42,716 INFO L290 TraceCheckUtils]: 41: Hoare triple {89871#(<= (+ KbFilter_PnP_~status~3 1073741823) 0)} assume !(259 == ~status~3); {89871#(<= (+ KbFilter_PnP_~status~3 1073741823) 0)} is VALID [2022-04-28 08:36:42,717 INFO L290 TraceCheckUtils]: 42: Hoare triple {89871#(<= (+ KbFilter_PnP_~status~3 1073741823) 0)} assume ~status~3 >= 0; {89717#false} is VALID [2022-04-28 08:36:42,717 INFO L290 TraceCheckUtils]: 43: Hoare triple {89717#false} assume ~myStatus~0 >= 0;call write~int(1, ~devExt~3.base, 52 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 54 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 53 + ~devExt~3.offset, 1); {89717#false} is VALID [2022-04-28 08:36:42,717 INFO L290 TraceCheckUtils]: 44: Hoare triple {89717#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {89717#false} is VALID [2022-04-28 08:36:42,717 INFO L272 TraceCheckUtils]: 45: Hoare triple {89717#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {89894#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:36:42,717 INFO L290 TraceCheckUtils]: 46: Hoare triple {89894#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {89716#true} is VALID [2022-04-28 08:36:42,717 INFO L290 TraceCheckUtils]: 47: Hoare triple {89716#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {89716#true} is VALID [2022-04-28 08:36:42,717 INFO L290 TraceCheckUtils]: 48: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,717 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {89716#true} {89717#false} #1196#return; {89717#false} is VALID [2022-04-28 08:36:42,717 INFO L290 TraceCheckUtils]: 50: Hoare triple {89717#false} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {89717#false} is VALID [2022-04-28 08:36:42,718 INFO L290 TraceCheckUtils]: 51: Hoare triple {89717#false} assume true; {89717#false} is VALID [2022-04-28 08:36:42,718 INFO L284 TraceCheckUtils]: 52: Hoare quadruple {89717#false} {89716#true} #1230#return; {89717#false} is VALID [2022-04-28 08:36:42,719 INFO L272 TraceCheckUtils]: 0: Hoare triple {89716#true} call ULTIMATE.init(); {89814#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:36:42,719 INFO L290 TraceCheckUtils]: 1: Hoare triple {89814#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {89716#true} is VALID [2022-04-28 08:36:42,719 INFO L290 TraceCheckUtils]: 2: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,719 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {89716#true} {89716#true} #1270#return; {89716#true} is VALID [2022-04-28 08:36:42,719 INFO L272 TraceCheckUtils]: 4: Hoare triple {89716#true} call #t~ret213 := main(); {89716#true} is VALID [2022-04-28 08:36:42,720 INFO L290 TraceCheckUtils]: 5: Hoare triple {89716#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {89716#true} is VALID [2022-04-28 08:36:42,721 INFO L272 TraceCheckUtils]: 6: Hoare triple {89716#true} call _BLAST_init(); {89815#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:36:42,721 INFO L290 TraceCheckUtils]: 7: Hoare triple {89815#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {89716#true} is VALID [2022-04-28 08:36:42,721 INFO L290 TraceCheckUtils]: 8: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,721 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {89716#true} {89716#true} #1216#return; {89716#true} is VALID [2022-04-28 08:36:42,722 INFO L272 TraceCheckUtils]: 10: Hoare triple {89716#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {89816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:36:42,722 INFO L290 TraceCheckUtils]: 11: Hoare triple {89816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {89716#true} is VALID [2022-04-28 08:36:42,722 INFO L272 TraceCheckUtils]: 12: Hoare triple {89716#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {89716#true} is VALID [2022-04-28 08:36:42,722 INFO L290 TraceCheckUtils]: 13: Hoare triple {89716#true} ~cond := #in~cond; {89716#true} is VALID [2022-04-28 08:36:42,722 INFO L290 TraceCheckUtils]: 14: Hoare triple {89716#true} assume !(0 == ~cond); {89716#true} is VALID [2022-04-28 08:36:42,722 INFO L290 TraceCheckUtils]: 15: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,722 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {89716#true} {89716#true} #1254#return; {89716#true} is VALID [2022-04-28 08:36:42,722 INFO L290 TraceCheckUtils]: 17: Hoare triple {89716#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {89716#true} is VALID [2022-04-28 08:36:42,722 INFO L290 TraceCheckUtils]: 18: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,722 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {89716#true} {89716#true} #1218#return; {89716#true} is VALID [2022-04-28 08:36:42,722 INFO L290 TraceCheckUtils]: 20: Hoare triple {89716#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {89716#true} is VALID [2022-04-28 08:36:42,722 INFO L290 TraceCheckUtils]: 21: Hoare triple {89716#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {89716#true} is VALID [2022-04-28 08:36:42,723 INFO L290 TraceCheckUtils]: 22: Hoare triple {89716#true} assume !(0 == ~irp_choice~0); {89716#true} is VALID [2022-04-28 08:36:42,723 INFO L272 TraceCheckUtils]: 23: Hoare triple {89716#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {89821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:36:42,723 INFO L290 TraceCheckUtils]: 24: Hoare triple {89821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {89716#true} is VALID [2022-04-28 08:36:42,725 INFO L272 TraceCheckUtils]: 25: Hoare triple {89716#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {89821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:36:42,725 INFO L290 TraceCheckUtils]: 26: Hoare triple {89821#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {89716#true} is VALID [2022-04-28 08:36:42,725 INFO L290 TraceCheckUtils]: 27: Hoare triple {89716#true} assume 0 == ~__BLAST_NONDET~5; {89716#true} is VALID [2022-04-28 08:36:42,725 INFO L290 TraceCheckUtils]: 28: Hoare triple {89716#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {89716#true} is VALID [2022-04-28 08:36:42,725 INFO L290 TraceCheckUtils]: 29: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,725 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {89716#true} {89716#true} #1176#return; {89716#true} is VALID [2022-04-28 08:36:42,725 INFO L290 TraceCheckUtils]: 31: Hoare triple {89716#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {89716#true} is VALID [2022-04-28 08:36:42,725 INFO L290 TraceCheckUtils]: 32: Hoare triple {89716#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {89716#true} is VALID [2022-04-28 08:36:42,726 INFO L272 TraceCheckUtils]: 33: Hoare triple {89716#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {89816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:36:42,726 INFO L290 TraceCheckUtils]: 34: Hoare triple {89816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {89716#true} is VALID [2022-04-28 08:36:42,726 INFO L290 TraceCheckUtils]: 35: Hoare triple {89716#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {89716#true} is VALID [2022-04-28 08:36:42,726 INFO L290 TraceCheckUtils]: 36: Hoare triple {89716#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {89716#true} is VALID [2022-04-28 08:36:42,726 INFO L290 TraceCheckUtils]: 37: Hoare triple {89716#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {89716#true} is VALID [2022-04-28 08:36:42,726 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {89716#true} {89716#true} #1178#return; {89716#true} is VALID [2022-04-28 08:36:42,726 INFO L290 TraceCheckUtils]: 39: Hoare triple {89716#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {89716#true} is VALID [2022-04-28 08:36:42,726 INFO L272 TraceCheckUtils]: 40: Hoare triple {89716#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {89716#true} is VALID [2022-04-28 08:36:42,726 INFO L290 TraceCheckUtils]: 41: Hoare triple {89716#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {89716#true} is VALID [2022-04-28 08:36:42,726 INFO L290 TraceCheckUtils]: 42: Hoare triple {89716#true} assume 0 == ~__BLAST_NONDET~2; {89716#true} is VALID [2022-04-28 08:36:42,727 INFO L290 TraceCheckUtils]: 43: Hoare triple {89716#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {89716#true} is VALID [2022-04-28 08:36:42,727 INFO L290 TraceCheckUtils]: 44: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,727 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {89716#true} {89716#true} #1180#return; {89716#true} is VALID [2022-04-28 08:36:42,727 INFO L290 TraceCheckUtils]: 46: Hoare triple {89716#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {89716#true} is VALID [2022-04-28 08:36:42,727 INFO L290 TraceCheckUtils]: 47: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,727 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {89716#true} {89716#true} #1220#return; {89716#true} is VALID [2022-04-28 08:36:42,727 INFO L290 TraceCheckUtils]: 49: Hoare triple {89716#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {89716#true} is VALID [2022-04-28 08:36:42,728 INFO L272 TraceCheckUtils]: 50: Hoare triple {89716#true} call stub_driver_init(); {89837#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:36:42,728 INFO L290 TraceCheckUtils]: 51: Hoare triple {89837#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {89716#true} is VALID [2022-04-28 08:36:42,728 INFO L290 TraceCheckUtils]: 52: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,728 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {89716#true} {89716#true} #1222#return; {89716#true} is VALID [2022-04-28 08:36:42,728 INFO L290 TraceCheckUtils]: 54: Hoare triple {89716#true} assume !!(~status~5 >= 0); {89716#true} is VALID [2022-04-28 08:36:42,728 INFO L290 TraceCheckUtils]: 55: Hoare triple {89716#true} assume !(0 == ~__BLAST_NONDET~0); {89716#true} is VALID [2022-04-28 08:36:42,728 INFO L290 TraceCheckUtils]: 56: Hoare triple {89716#true} assume !(1 == ~__BLAST_NONDET~0); {89716#true} is VALID [2022-04-28 08:36:42,728 INFO L290 TraceCheckUtils]: 57: Hoare triple {89716#true} assume !(2 == ~__BLAST_NONDET~0); {89716#true} is VALID [2022-04-28 08:36:42,728 INFO L290 TraceCheckUtils]: 58: Hoare triple {89716#true} assume 3 == ~__BLAST_NONDET~0; {89716#true} is VALID [2022-04-28 08:36:42,729 INFO L272 TraceCheckUtils]: 59: Hoare triple {89716#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {89838#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:36:42,729 INFO L290 TraceCheckUtils]: 60: Hoare triple {89838#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {89716#true} is VALID [2022-04-28 08:36:42,730 INFO L290 TraceCheckUtils]: 61: Hoare triple {89716#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {89716#true} is VALID [2022-04-28 08:36:42,730 INFO L290 TraceCheckUtils]: 62: Hoare triple {89716#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {89716#true} is VALID [2022-04-28 08:36:42,730 INFO L272 TraceCheckUtils]: 63: Hoare triple {89716#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {89816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:36:42,731 INFO L290 TraceCheckUtils]: 64: Hoare triple {89816#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {89716#true} is VALID [2022-04-28 08:36:42,731 INFO L290 TraceCheckUtils]: 65: Hoare triple {89716#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {89716#true} is VALID [2022-04-28 08:36:42,731 INFO L290 TraceCheckUtils]: 66: Hoare triple {89716#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {89716#true} is VALID [2022-04-28 08:36:42,731 INFO L290 TraceCheckUtils]: 67: Hoare triple {89716#true} assume #res.base == dest.base && #res.offset == dest.offset; {89716#true} is VALID [2022-04-28 08:36:42,731 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {89716#true} {89716#true} #1186#return; {89716#true} is VALID [2022-04-28 08:36:42,731 INFO L290 TraceCheckUtils]: 69: Hoare triple {89716#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {89716#true} is VALID [2022-04-28 08:36:42,731 INFO L290 TraceCheckUtils]: 70: Hoare triple {89716#true} assume !(~s~0 != ~NP~0); {89716#true} is VALID [2022-04-28 08:36:42,731 INFO L290 TraceCheckUtils]: 71: Hoare triple {89716#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {89716#true} is VALID [2022-04-28 08:36:42,731 INFO L290 TraceCheckUtils]: 72: Hoare triple {89716#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {89716#true} is VALID [2022-04-28 08:36:42,732 INFO L272 TraceCheckUtils]: 73: Hoare triple {89716#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {89876#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:36:42,732 INFO L290 TraceCheckUtils]: 74: Hoare triple {89876#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {89716#true} is VALID [2022-04-28 08:36:42,732 INFO L290 TraceCheckUtils]: 75: Hoare triple {89716#true} assume 0 != ~compRegistered~0; {89716#true} is VALID [2022-04-28 08:36:42,733 INFO L272 TraceCheckUtils]: 76: Hoare triple {89716#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:36:42,733 INFO L290 TraceCheckUtils]: 77: Hoare triple {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {89716#true} is VALID [2022-04-28 08:36:42,733 INFO L272 TraceCheckUtils]: 78: Hoare triple {89716#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:36:42,733 INFO L290 TraceCheckUtils]: 79: Hoare triple {89890#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {89716#true} is VALID [2022-04-28 08:36:42,734 INFO L290 TraceCheckUtils]: 80: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,734 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {89716#true} {89716#true} #1174#return; {89716#true} is VALID [2022-04-28 08:36:42,734 INFO L290 TraceCheckUtils]: 82: Hoare triple {89716#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {89716#true} is VALID [2022-04-28 08:36:42,734 INFO L290 TraceCheckUtils]: 83: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,734 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {89716#true} {89716#true} #1210#return; {89716#true} is VALID [2022-04-28 08:36:42,734 INFO L290 TraceCheckUtils]: 85: Hoare triple {89716#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {89716#true} is VALID [2022-04-28 08:36:42,734 INFO L290 TraceCheckUtils]: 86: Hoare triple {89716#true} assume -1073741802 == ~compRetStatus~0; {89716#true} is VALID [2022-04-28 08:36:42,734 INFO L272 TraceCheckUtils]: 87: Hoare triple {89716#true} call stubMoreProcessingRequired(); {89894#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:36:42,734 INFO L290 TraceCheckUtils]: 88: Hoare triple {89894#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {89716#true} is VALID [2022-04-28 08:36:42,734 INFO L290 TraceCheckUtils]: 89: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,734 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {89716#true} {89716#true} #1212#return; {89716#true} is VALID [2022-04-28 08:36:42,735 INFO L290 TraceCheckUtils]: 91: Hoare triple {89716#true} assume !(0 == ~__BLAST_NONDET~11); {89716#true} is VALID [2022-04-28 08:36:42,735 INFO L290 TraceCheckUtils]: 92: Hoare triple {89716#true} assume 1 == ~__BLAST_NONDET~11; {89716#true} is VALID [2022-04-28 08:36:42,735 INFO L290 TraceCheckUtils]: 93: Hoare triple {89716#true} ~returnVal2~0 := -1073741823; {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:36:42,735 INFO L290 TraceCheckUtils]: 94: Hoare triple {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume !(~s~0 == ~NP~0); {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:36:42,735 INFO L290 TraceCheckUtils]: 95: Hoare triple {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume ~s~0 == ~MPR1~0; {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:36:42,736 INFO L290 TraceCheckUtils]: 96: Hoare triple {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:36:42,736 INFO L290 TraceCheckUtils]: 97: Hoare triple {89888#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} #res := ~returnVal2~0; {89889#(<= (+ |IofCallDriver_#res| 1073741823) 0)} is VALID [2022-04-28 08:36:42,736 INFO L290 TraceCheckUtils]: 98: Hoare triple {89889#(<= (+ |IofCallDriver_#res| 1073741823) 0)} assume true; {89889#(<= (+ |IofCallDriver_#res| 1073741823) 0)} is VALID [2022-04-28 08:36:42,737 INFO L284 TraceCheckUtils]: 99: Hoare quadruple {89889#(<= (+ |IofCallDriver_#res| 1073741823) 0)} {89716#true} #1192#return; {89870#(<= (+ 1073741823 |KbFilter_PnP_#t~ret109|) 0)} is VALID [2022-04-28 08:36:42,737 INFO L290 TraceCheckUtils]: 100: Hoare triple {89870#(<= (+ 1073741823 |KbFilter_PnP_#t~ret109|) 0)} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {89871#(<= (+ KbFilter_PnP_~status~3 1073741823) 0)} is VALID [2022-04-28 08:36:42,738 INFO L290 TraceCheckUtils]: 101: Hoare triple {89871#(<= (+ KbFilter_PnP_~status~3 1073741823) 0)} assume !(259 == ~status~3); {89871#(<= (+ KbFilter_PnP_~status~3 1073741823) 0)} is VALID [2022-04-28 08:36:42,738 INFO L290 TraceCheckUtils]: 102: Hoare triple {89871#(<= (+ KbFilter_PnP_~status~3 1073741823) 0)} assume ~status~3 >= 0; {89717#false} is VALID [2022-04-28 08:36:42,738 INFO L290 TraceCheckUtils]: 103: Hoare triple {89717#false} assume ~myStatus~0 >= 0;call write~int(1, ~devExt~3.base, 52 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 54 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 53 + ~devExt~3.offset, 1); {89717#false} is VALID [2022-04-28 08:36:42,738 INFO L290 TraceCheckUtils]: 104: Hoare triple {89717#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {89717#false} is VALID [2022-04-28 08:36:42,738 INFO L272 TraceCheckUtils]: 105: Hoare triple {89717#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {89894#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:36:42,738 INFO L290 TraceCheckUtils]: 106: Hoare triple {89894#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {89716#true} is VALID [2022-04-28 08:36:42,738 INFO L290 TraceCheckUtils]: 107: Hoare triple {89716#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {89716#true} is VALID [2022-04-28 08:36:42,739 INFO L290 TraceCheckUtils]: 108: Hoare triple {89716#true} assume true; {89716#true} is VALID [2022-04-28 08:36:42,739 INFO L284 TraceCheckUtils]: 109: Hoare quadruple {89716#true} {89717#false} #1196#return; {89717#false} is VALID [2022-04-28 08:36:42,739 INFO L290 TraceCheckUtils]: 110: Hoare triple {89717#false} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {89717#false} is VALID [2022-04-28 08:36:42,739 INFO L290 TraceCheckUtils]: 111: Hoare triple {89717#false} assume true; {89717#false} is VALID [2022-04-28 08:36:42,739 INFO L284 TraceCheckUtils]: 112: Hoare quadruple {89717#false} {89716#true} #1230#return; {89717#false} is VALID [2022-04-28 08:36:42,739 INFO L290 TraceCheckUtils]: 113: Hoare triple {89717#false} assume -2147483648 <= #t~ret174 && #t~ret174 <= 2147483647;~status~5 := #t~ret174;havoc #t~ret174; {89717#false} is VALID [2022-04-28 08:36:42,739 INFO L290 TraceCheckUtils]: 114: Hoare triple {89717#false} assume 0 != ~we_should_unload~0; {89717#false} is VALID [2022-04-28 08:36:42,739 INFO L290 TraceCheckUtils]: 115: Hoare triple {89717#false} assume !(1 == ~pended~0); {89717#false} is VALID [2022-04-28 08:36:42,739 INFO L290 TraceCheckUtils]: 116: Hoare triple {89717#false} assume !(1 == ~pended~0); {89717#false} is VALID [2022-04-28 08:36:42,739 INFO L290 TraceCheckUtils]: 117: Hoare triple {89717#false} assume !(~s~0 == ~UNLOADED~0); {89717#false} is VALID [2022-04-28 08:36:42,739 INFO L290 TraceCheckUtils]: 118: Hoare triple {89717#false} assume !(-1 == ~status~5); {89717#false} is VALID [2022-04-28 08:36:42,739 INFO L290 TraceCheckUtils]: 119: Hoare triple {89717#false} assume ~s~0 != ~SKIP2~0; {89717#false} is VALID [2022-04-28 08:36:42,739 INFO L290 TraceCheckUtils]: 120: Hoare triple {89717#false} assume ~s~0 != ~IPC~0; {89717#false} is VALID [2022-04-28 08:36:42,739 INFO L290 TraceCheckUtils]: 121: Hoare triple {89717#false} assume !(~s~0 != ~DC~0); {89717#false} is VALID [2022-04-28 08:36:42,740 INFO L290 TraceCheckUtils]: 122: Hoare triple {89717#false} assume !(1 == ~pended~0); {89717#false} is VALID [2022-04-28 08:36:42,740 INFO L290 TraceCheckUtils]: 123: Hoare triple {89717#false} assume ~s~0 == ~DC~0; {89717#false} is VALID [2022-04-28 08:36:42,740 INFO L290 TraceCheckUtils]: 124: Hoare triple {89717#false} assume 259 == ~status~5; {89717#false} is VALID [2022-04-28 08:36:42,740 INFO L272 TraceCheckUtils]: 125: Hoare triple {89717#false} call errorFn(); {89717#false} is VALID [2022-04-28 08:36:42,740 INFO L290 TraceCheckUtils]: 126: Hoare triple {89717#false} assume !false; {89717#false} is VALID [2022-04-28 08:36:42,740 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 08:36:42,740 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:36:42,740 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1498603320] [2022-04-28 08:36:42,740 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1498603320] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:36:42,740 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:36:42,740 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 08:36:42,741 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:36:42,741 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [773655258] [2022-04-28 08:36:42,741 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [773655258] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:36:42,741 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:36:42,741 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 08:36:42,741 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1170612531] [2022-04-28 08:36:42,741 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:36:42,741 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 6.2) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (18), 11 states have call predecessors, (18), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 127 [2022-04-28 08:36:42,741 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:36:42,742 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 6.2) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (18), 11 states have call predecessors, (18), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-04-28 08:36:42,837 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 127 edges. 127 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:36:42,838 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-28 08:36:42,838 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:36:42,838 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-28 08:36:42,838 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2022-04-28 08:36:42,838 INFO L87 Difference]: Start difference. First operand 271 states and 294 transitions. Second operand has 15 states, 15 states have (on average 6.2) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (18), 11 states have call predecessors, (18), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-04-28 08:36:46,453 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.47s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:48,458 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:50,474 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:52,504 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:54,525 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:56,544 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:36:58,579 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-04-28 08:37:06,644 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:37:06,644 INFO L93 Difference]: Finished difference Result 323 states and 354 transitions. [2022-04-28 08:37:06,644 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-28 08:37:06,644 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 6.2) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (18), 11 states have call predecessors, (18), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 127 [2022-04-28 08:37:06,645 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:37:06,645 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 6.2) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (18), 11 states have call predecessors, (18), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-04-28 08:37:06,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 213 transitions. [2022-04-28 08:37:06,647 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 6.2) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (18), 11 states have call predecessors, (18), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-04-28 08:37:06,648 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 213 transitions. [2022-04-28 08:37:06,648 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 213 transitions. [2022-04-28 08:37:06,846 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 213 edges. 213 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:37:06,849 INFO L225 Difference]: With dead ends: 323 [2022-04-28 08:37:06,849 INFO L226 Difference]: Without dead ends: 253 [2022-04-28 08:37:06,850 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 46 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=94, Invalid=326, Unknown=0, NotChecked=0, Total=420 [2022-04-28 08:37:06,850 INFO L413 NwaCegarLoop]: 123 mSDtfsCounter, 197 mSDsluCounter, 257 mSDsCounter, 0 mSdLazyCounter, 687 mSolverCounterSat, 117 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 199 SdHoareTripleChecker+Valid, 380 SdHoareTripleChecker+Invalid, 810 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 117 IncrementalHoareTripleChecker+Valid, 687 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.3s IncrementalHoareTripleChecker+Time [2022-04-28 08:37:06,850 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [199 Valid, 380 Invalid, 810 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [117 Valid, 687 Invalid, 6 Unknown, 0 Unchecked, 16.3s Time] [2022-04-28 08:37:06,851 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 253 states. [2022-04-28 08:37:07,434 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 253 to 233. [2022-04-28 08:37:07,435 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:37:07,435 INFO L82 GeneralOperation]: Start isEquivalent. First operand 253 states. Second operand has 233 states, 173 states have (on average 1.0867052023121386) internal successors, (188), 173 states have internal predecessors, (188), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) [2022-04-28 08:37:07,435 INFO L74 IsIncluded]: Start isIncluded. First operand 253 states. Second operand has 233 states, 173 states have (on average 1.0867052023121386) internal successors, (188), 173 states have internal predecessors, (188), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) [2022-04-28 08:37:07,435 INFO L87 Difference]: Start difference. First operand 253 states. Second operand has 233 states, 173 states have (on average 1.0867052023121386) internal successors, (188), 173 states have internal predecessors, (188), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) [2022-04-28 08:37:07,438 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:37:07,438 INFO L93 Difference]: Finished difference Result 253 states and 274 transitions. [2022-04-28 08:37:07,438 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 274 transitions. [2022-04-28 08:37:07,438 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:37:07,438 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:37:07,439 INFO L74 IsIncluded]: Start isIncluded. First operand has 233 states, 173 states have (on average 1.0867052023121386) internal successors, (188), 173 states have internal predecessors, (188), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) Second operand 253 states. [2022-04-28 08:37:07,439 INFO L87 Difference]: Start difference. First operand has 233 states, 173 states have (on average 1.0867052023121386) internal successors, (188), 173 states have internal predecessors, (188), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) Second operand 253 states. [2022-04-28 08:37:07,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:37:07,441 INFO L93 Difference]: Finished difference Result 253 states and 274 transitions. [2022-04-28 08:37:07,441 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 274 transitions. [2022-04-28 08:37:07,442 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:37:07,442 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:37:07,442 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:37:07,442 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:37:07,442 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 233 states, 173 states have (on average 1.0867052023121386) internal successors, (188), 173 states have internal predecessors, (188), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) [2022-04-28 08:37:07,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 233 states to 233 states and 248 transitions. [2022-04-28 08:37:07,445 INFO L78 Accepts]: Start accepts. Automaton has 233 states and 248 transitions. Word has length 127 [2022-04-28 08:37:07,445 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:37:07,445 INFO L495 AbstractCegarLoop]: Abstraction has 233 states and 248 transitions. [2022-04-28 08:37:07,445 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 6.2) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (18), 11 states have call predecessors, (18), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-04-28 08:37:07,445 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 233 states and 248 transitions. [2022-04-28 08:37:08,121 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 248 edges. 248 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:37:08,121 INFO L276 IsEmpty]: Start isEmpty. Operand 233 states and 248 transitions. [2022-04-28 08:37:08,122 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 137 [2022-04-28 08:37:08,122 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:37:08,122 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:37:08,122 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable37 [2022-04-28 08:37:08,122 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:37:08,122 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:37:08,122 INFO L85 PathProgramCache]: Analyzing trace with hash -558415743, now seen corresponding path program 1 times [2022-04-28 08:37:08,123 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:37:08,123 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1287046019] [2022-04-28 08:37:08,124 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 0 HavocedVariables, 4 AssignedVariables, -1 ReadonlyVariables, Eigenvalues: {}, 0 SequentialAcceleration, 0 AlternatingAcceleration, 0 QuantifierFreeResult [2022-04-28 08:37:08,124 WARN L91 AcceleratorJordan]: Jordan acceleration failed, because NONINTEGER_UPDATE [2022-04-28 08:37:08,124 INFO L274 tedInterpolationCore]: Could not compute an accelerate. [2022-04-28 08:37:08,124 INFO L85 PathProgramCache]: Analyzing trace with hash -558415743, now seen corresponding path program 2 times [2022-04-28 08:37:08,125 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:37:08,125 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1136738553] [2022-04-28 08:37:08,125 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:37:08,125 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:37:08,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:37:08,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,588 INFO L290 TraceCheckUtils]: 0: Hoare triple {91635#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {91528#true} is VALID [2022-04-28 08:37:08,588 INFO L290 TraceCheckUtils]: 1: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,588 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {91528#true} {91528#true} #1270#return; {91528#true} is VALID [2022-04-28 08:37:08,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:37:08,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,616 INFO L290 TraceCheckUtils]: 0: Hoare triple {91636#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {91528#true} is VALID [2022-04-28 08:37:08,616 INFO L290 TraceCheckUtils]: 1: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,616 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {91528#true} {91528#true} #1216#return; {91528#true} is VALID [2022-04-28 08:37:08,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:37:08,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:37:08,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,638 INFO L290 TraceCheckUtils]: 0: Hoare triple {91528#true} ~cond := #in~cond; {91528#true} is VALID [2022-04-28 08:37:08,638 INFO L290 TraceCheckUtils]: 1: Hoare triple {91528#true} assume !(0 == ~cond); {91528#true} is VALID [2022-04-28 08:37:08,639 INFO L290 TraceCheckUtils]: 2: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,639 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {91528#true} {91528#true} #1254#return; {91528#true} is VALID [2022-04-28 08:37:08,639 INFO L290 TraceCheckUtils]: 0: Hoare triple {91637#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {91528#true} is VALID [2022-04-28 08:37:08,639 INFO L272 TraceCheckUtils]: 1: Hoare triple {91528#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {91528#true} is VALID [2022-04-28 08:37:08,639 INFO L290 TraceCheckUtils]: 2: Hoare triple {91528#true} ~cond := #in~cond; {91528#true} is VALID [2022-04-28 08:37:08,639 INFO L290 TraceCheckUtils]: 3: Hoare triple {91528#true} assume !(0 == ~cond); {91528#true} is VALID [2022-04-28 08:37:08,639 INFO L290 TraceCheckUtils]: 4: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,639 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {91528#true} {91528#true} #1254#return; {91528#true} is VALID [2022-04-28 08:37:08,639 INFO L290 TraceCheckUtils]: 6: Hoare triple {91528#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {91528#true} is VALID [2022-04-28 08:37:08,639 INFO L290 TraceCheckUtils]: 7: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,639 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {91528#true} {91528#true} #1218#return; {91528#true} is VALID [2022-04-28 08:37:08,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:37:08,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:37:08,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,687 INFO L290 TraceCheckUtils]: 0: Hoare triple {91642#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {91528#true} is VALID [2022-04-28 08:37:08,687 INFO L290 TraceCheckUtils]: 1: Hoare triple {91528#true} assume 0 == ~__BLAST_NONDET~5; {91528#true} is VALID [2022-04-28 08:37:08,687 INFO L290 TraceCheckUtils]: 2: Hoare triple {91528#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {91528#true} is VALID [2022-04-28 08:37:08,687 INFO L290 TraceCheckUtils]: 3: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,687 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {91528#true} {91528#true} #1176#return; {91528#true} is VALID [2022-04-28 08:37:08,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:37:08,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,758 INFO L290 TraceCheckUtils]: 0: Hoare triple {91637#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {91658#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:37:08,759 INFO L290 TraceCheckUtils]: 1: Hoare triple {91658#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {91659#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} is VALID [2022-04-28 08:37:08,760 INFO L290 TraceCheckUtils]: 2: Hoare triple {91659#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {91660#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:08,760 INFO L290 TraceCheckUtils]: 3: Hoare triple {91660#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {91660#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:08,761 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {91660#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} {91528#true} #1178#return; {91529#false} is VALID [2022-04-28 08:37:08,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-04-28 08:37:08,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,767 INFO L290 TraceCheckUtils]: 0: Hoare triple {91528#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {91528#true} is VALID [2022-04-28 08:37:08,767 INFO L290 TraceCheckUtils]: 1: Hoare triple {91528#true} assume 0 == ~__BLAST_NONDET~2; {91528#true} is VALID [2022-04-28 08:37:08,767 INFO L290 TraceCheckUtils]: 2: Hoare triple {91528#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {91528#true} is VALID [2022-04-28 08:37:08,767 INFO L290 TraceCheckUtils]: 3: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,767 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {91528#true} {91529#false} #1180#return; {91529#false} is VALID [2022-04-28 08:37:08,767 INFO L290 TraceCheckUtils]: 0: Hoare triple {91642#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {91528#true} is VALID [2022-04-28 08:37:08,768 INFO L272 TraceCheckUtils]: 1: Hoare triple {91528#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {91642#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:37:08,768 INFO L290 TraceCheckUtils]: 2: Hoare triple {91642#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {91528#true} is VALID [2022-04-28 08:37:08,768 INFO L290 TraceCheckUtils]: 3: Hoare triple {91528#true} assume 0 == ~__BLAST_NONDET~5; {91528#true} is VALID [2022-04-28 08:37:08,769 INFO L290 TraceCheckUtils]: 4: Hoare triple {91528#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {91528#true} is VALID [2022-04-28 08:37:08,769 INFO L290 TraceCheckUtils]: 5: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,769 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {91528#true} {91528#true} #1176#return; {91528#true} is VALID [2022-04-28 08:37:08,769 INFO L290 TraceCheckUtils]: 7: Hoare triple {91528#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {91528#true} is VALID [2022-04-28 08:37:08,769 INFO L290 TraceCheckUtils]: 8: Hoare triple {91528#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {91528#true} is VALID [2022-04-28 08:37:08,770 INFO L272 TraceCheckUtils]: 9: Hoare triple {91528#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {91637#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:37:08,770 INFO L290 TraceCheckUtils]: 10: Hoare triple {91637#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {91658#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:37:08,771 INFO L290 TraceCheckUtils]: 11: Hoare triple {91658#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {91659#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} is VALID [2022-04-28 08:37:08,772 INFO L290 TraceCheckUtils]: 12: Hoare triple {91659#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {91660#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:08,772 INFO L290 TraceCheckUtils]: 13: Hoare triple {91660#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {91660#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:08,773 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {91660#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} {91528#true} #1178#return; {91529#false} is VALID [2022-04-28 08:37:08,773 INFO L290 TraceCheckUtils]: 15: Hoare triple {91529#false} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {91529#false} is VALID [2022-04-28 08:37:08,773 INFO L272 TraceCheckUtils]: 16: Hoare triple {91529#false} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {91528#true} is VALID [2022-04-28 08:37:08,773 INFO L290 TraceCheckUtils]: 17: Hoare triple {91528#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {91528#true} is VALID [2022-04-28 08:37:08,773 INFO L290 TraceCheckUtils]: 18: Hoare triple {91528#true} assume 0 == ~__BLAST_NONDET~2; {91528#true} is VALID [2022-04-28 08:37:08,773 INFO L290 TraceCheckUtils]: 19: Hoare triple {91528#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {91528#true} is VALID [2022-04-28 08:37:08,773 INFO L290 TraceCheckUtils]: 20: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,773 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {91528#true} {91529#false} #1180#return; {91529#false} is VALID [2022-04-28 08:37:08,774 INFO L290 TraceCheckUtils]: 22: Hoare triple {91529#false} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {91529#false} is VALID [2022-04-28 08:37:08,774 INFO L290 TraceCheckUtils]: 23: Hoare triple {91529#false} assume true; {91529#false} is VALID [2022-04-28 08:37:08,774 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {91529#false} {91528#true} #1220#return; {91529#false} is VALID [2022-04-28 08:37:08,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-04-28 08:37:08,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,795 INFO L290 TraceCheckUtils]: 0: Hoare triple {91661#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {91528#true} is VALID [2022-04-28 08:37:08,795 INFO L290 TraceCheckUtils]: 1: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,795 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {91528#true} {91529#false} #1222#return; {91529#false} is VALID [2022-04-28 08:37:08,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-04-28 08:37:08,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-28 08:37:08,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,851 INFO L290 TraceCheckUtils]: 0: Hoare triple {91637#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {91528#true} is VALID [2022-04-28 08:37:08,851 INFO L290 TraceCheckUtils]: 1: Hoare triple {91528#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {91528#true} is VALID [2022-04-28 08:37:08,851 INFO L290 TraceCheckUtils]: 2: Hoare triple {91528#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {91528#true} is VALID [2022-04-28 08:37:08,851 INFO L290 TraceCheckUtils]: 3: Hoare triple {91528#true} assume #res.base == dest.base && #res.offset == dest.offset; {91528#true} is VALID [2022-04-28 08:37:08,851 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {91528#true} {91528#true} #1186#return; {91528#true} is VALID [2022-04-28 08:37:08,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:37:08,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:37:08,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:37:08,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,891 INFO L290 TraceCheckUtils]: 0: Hoare triple {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {91528#true} is VALID [2022-04-28 08:37:08,891 INFO L290 TraceCheckUtils]: 1: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,891 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {91528#true} {91528#true} #1174#return; {91528#true} is VALID [2022-04-28 08:37:08,891 INFO L290 TraceCheckUtils]: 0: Hoare triple {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {91528#true} is VALID [2022-04-28 08:37:08,892 INFO L272 TraceCheckUtils]: 1: Hoare triple {91528#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:08,892 INFO L290 TraceCheckUtils]: 2: Hoare triple {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {91528#true} is VALID [2022-04-28 08:37:08,892 INFO L290 TraceCheckUtils]: 3: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,892 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {91528#true} {91528#true} #1174#return; {91528#true} is VALID [2022-04-28 08:37:08,892 INFO L290 TraceCheckUtils]: 5: Hoare triple {91528#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {91528#true} is VALID [2022-04-28 08:37:08,892 INFO L290 TraceCheckUtils]: 6: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,892 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {91528#true} {91528#true} #1210#return; {91528#true} is VALID [2022-04-28 08:37:08,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:37:08,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,905 INFO L290 TraceCheckUtils]: 0: Hoare triple {91721#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {91528#true} is VALID [2022-04-28 08:37:08,905 INFO L290 TraceCheckUtils]: 1: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,905 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {91528#true} {91528#true} #1212#return; {91528#true} is VALID [2022-04-28 08:37:08,906 INFO L290 TraceCheckUtils]: 0: Hoare triple {91705#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {91528#true} is VALID [2022-04-28 08:37:08,906 INFO L290 TraceCheckUtils]: 1: Hoare triple {91528#true} assume 0 != ~compRegistered~0; {91528#true} is VALID [2022-04-28 08:37:08,906 INFO L272 TraceCheckUtils]: 2: Hoare triple {91528#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:08,907 INFO L290 TraceCheckUtils]: 3: Hoare triple {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {91528#true} is VALID [2022-04-28 08:37:08,907 INFO L272 TraceCheckUtils]: 4: Hoare triple {91528#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:08,907 INFO L290 TraceCheckUtils]: 5: Hoare triple {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {91528#true} is VALID [2022-04-28 08:37:08,907 INFO L290 TraceCheckUtils]: 6: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,907 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {91528#true} {91528#true} #1174#return; {91528#true} is VALID [2022-04-28 08:37:08,907 INFO L290 TraceCheckUtils]: 8: Hoare triple {91528#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {91528#true} is VALID [2022-04-28 08:37:08,907 INFO L290 TraceCheckUtils]: 9: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,908 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {91528#true} {91528#true} #1210#return; {91528#true} is VALID [2022-04-28 08:37:08,908 INFO L290 TraceCheckUtils]: 11: Hoare triple {91528#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {91528#true} is VALID [2022-04-28 08:37:08,908 INFO L290 TraceCheckUtils]: 12: Hoare triple {91528#true} assume -1073741802 == ~compRetStatus~0; {91528#true} is VALID [2022-04-28 08:37:08,908 INFO L272 TraceCheckUtils]: 13: Hoare triple {91528#true} call stubMoreProcessingRequired(); {91721#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:37:08,908 INFO L290 TraceCheckUtils]: 14: Hoare triple {91721#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {91528#true} is VALID [2022-04-28 08:37:08,908 INFO L290 TraceCheckUtils]: 15: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,908 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {91528#true} {91528#true} #1212#return; {91528#true} is VALID [2022-04-28 08:37:08,908 INFO L290 TraceCheckUtils]: 17: Hoare triple {91528#true} assume !(0 == ~__BLAST_NONDET~11); {91528#true} is VALID [2022-04-28 08:37:08,908 INFO L290 TraceCheckUtils]: 18: Hoare triple {91528#true} assume !(1 == ~__BLAST_NONDET~11); {91528#true} is VALID [2022-04-28 08:37:08,908 INFO L290 TraceCheckUtils]: 19: Hoare triple {91528#true} ~returnVal2~0 := 259; {91528#true} is VALID [2022-04-28 08:37:08,909 INFO L290 TraceCheckUtils]: 20: Hoare triple {91528#true} assume !(~s~0 == ~NP~0); {91528#true} is VALID [2022-04-28 08:37:08,909 INFO L290 TraceCheckUtils]: 21: Hoare triple {91528#true} assume ~s~0 == ~MPR1~0; {91528#true} is VALID [2022-04-28 08:37:08,909 INFO L290 TraceCheckUtils]: 22: Hoare triple {91528#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {91528#true} is VALID [2022-04-28 08:37:08,909 INFO L290 TraceCheckUtils]: 23: Hoare triple {91528#true} #res := ~returnVal2~0; {91528#true} is VALID [2022-04-28 08:37:08,909 INFO L290 TraceCheckUtils]: 24: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,909 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {91528#true} {91528#true} #1192#return; {91528#true} is VALID [2022-04-28 08:37:08,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-04-28 08:37:08,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,926 INFO L290 TraceCheckUtils]: 0: Hoare triple {91722#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {91528#true} is VALID [2022-04-28 08:37:08,926 INFO L290 TraceCheckUtils]: 1: Hoare triple {91528#true} assume ~s~0 == ~MPR3~0; {91528#true} is VALID [2022-04-28 08:37:08,926 INFO L290 TraceCheckUtils]: 2: Hoare triple {91528#true} assume 1 == ~setEventCalled~0;~s~0 := ~NP~0;~setEventCalled~0 := 0; {91528#true} is VALID [2022-04-28 08:37:08,926 INFO L290 TraceCheckUtils]: 3: Hoare triple {91528#true} assume 0 == ~__BLAST_NONDET~13; {91528#true} is VALID [2022-04-28 08:37:08,926 INFO L290 TraceCheckUtils]: 4: Hoare triple {91528#true} #res := 0; {91528#true} is VALID [2022-04-28 08:37:08,927 INFO L290 TraceCheckUtils]: 5: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,927 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {91528#true} {91528#true} #1194#return; {91528#true} is VALID [2022-04-28 08:37:08,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-04-28 08:37:08,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:08,931 INFO L290 TraceCheckUtils]: 0: Hoare triple {91721#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {91528#true} is VALID [2022-04-28 08:37:08,931 INFO L290 TraceCheckUtils]: 1: Hoare triple {91528#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {91528#true} is VALID [2022-04-28 08:37:08,931 INFO L290 TraceCheckUtils]: 2: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,931 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {91528#true} {91528#true} #1196#return; {91528#true} is VALID [2022-04-28 08:37:08,931 INFO L290 TraceCheckUtils]: 0: Hoare triple {91662#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {91528#true} is VALID [2022-04-28 08:37:08,931 INFO L290 TraceCheckUtils]: 1: Hoare triple {91528#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {91528#true} is VALID [2022-04-28 08:37:08,931 INFO L290 TraceCheckUtils]: 2: Hoare triple {91528#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {91528#true} is VALID [2022-04-28 08:37:08,932 INFO L272 TraceCheckUtils]: 3: Hoare triple {91528#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {91637#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:37:08,932 INFO L290 TraceCheckUtils]: 4: Hoare triple {91637#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {91528#true} is VALID [2022-04-28 08:37:08,932 INFO L290 TraceCheckUtils]: 5: Hoare triple {91528#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {91528#true} is VALID [2022-04-28 08:37:08,932 INFO L290 TraceCheckUtils]: 6: Hoare triple {91528#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {91528#true} is VALID [2022-04-28 08:37:08,933 INFO L290 TraceCheckUtils]: 7: Hoare triple {91528#true} assume #res.base == dest.base && #res.offset == dest.offset; {91528#true} is VALID [2022-04-28 08:37:08,933 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {91528#true} {91528#true} #1186#return; {91528#true} is VALID [2022-04-28 08:37:08,933 INFO L290 TraceCheckUtils]: 9: Hoare triple {91528#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {91528#true} is VALID [2022-04-28 08:37:08,933 INFO L290 TraceCheckUtils]: 10: Hoare triple {91528#true} assume !(~s~0 != ~NP~0); {91528#true} is VALID [2022-04-28 08:37:08,933 INFO L290 TraceCheckUtils]: 11: Hoare triple {91528#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {91528#true} is VALID [2022-04-28 08:37:08,933 INFO L290 TraceCheckUtils]: 12: Hoare triple {91528#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {91528#true} is VALID [2022-04-28 08:37:08,934 INFO L272 TraceCheckUtils]: 13: Hoare triple {91528#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {91705#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:08,934 INFO L290 TraceCheckUtils]: 14: Hoare triple {91705#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {91528#true} is VALID [2022-04-28 08:37:08,934 INFO L290 TraceCheckUtils]: 15: Hoare triple {91528#true} assume 0 != ~compRegistered~0; {91528#true} is VALID [2022-04-28 08:37:08,935 INFO L272 TraceCheckUtils]: 16: Hoare triple {91528#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:08,935 INFO L290 TraceCheckUtils]: 17: Hoare triple {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {91528#true} is VALID [2022-04-28 08:37:08,935 INFO L272 TraceCheckUtils]: 18: Hoare triple {91528#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:08,935 INFO L290 TraceCheckUtils]: 19: Hoare triple {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {91528#true} is VALID [2022-04-28 08:37:08,935 INFO L290 TraceCheckUtils]: 20: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,935 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {91528#true} {91528#true} #1174#return; {91528#true} is VALID [2022-04-28 08:37:08,935 INFO L290 TraceCheckUtils]: 22: Hoare triple {91528#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {91528#true} is VALID [2022-04-28 08:37:08,936 INFO L290 TraceCheckUtils]: 23: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,936 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {91528#true} {91528#true} #1210#return; {91528#true} is VALID [2022-04-28 08:37:08,936 INFO L290 TraceCheckUtils]: 25: Hoare triple {91528#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {91528#true} is VALID [2022-04-28 08:37:08,936 INFO L290 TraceCheckUtils]: 26: Hoare triple {91528#true} assume -1073741802 == ~compRetStatus~0; {91528#true} is VALID [2022-04-28 08:37:08,936 INFO L272 TraceCheckUtils]: 27: Hoare triple {91528#true} call stubMoreProcessingRequired(); {91721#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:37:08,936 INFO L290 TraceCheckUtils]: 28: Hoare triple {91721#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {91528#true} is VALID [2022-04-28 08:37:08,936 INFO L290 TraceCheckUtils]: 29: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,936 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {91528#true} {91528#true} #1212#return; {91528#true} is VALID [2022-04-28 08:37:08,936 INFO L290 TraceCheckUtils]: 31: Hoare triple {91528#true} assume !(0 == ~__BLAST_NONDET~11); {91528#true} is VALID [2022-04-28 08:37:08,936 INFO L290 TraceCheckUtils]: 32: Hoare triple {91528#true} assume !(1 == ~__BLAST_NONDET~11); {91528#true} is VALID [2022-04-28 08:37:08,936 INFO L290 TraceCheckUtils]: 33: Hoare triple {91528#true} ~returnVal2~0 := 259; {91528#true} is VALID [2022-04-28 08:37:08,937 INFO L290 TraceCheckUtils]: 34: Hoare triple {91528#true} assume !(~s~0 == ~NP~0); {91528#true} is VALID [2022-04-28 08:37:08,937 INFO L290 TraceCheckUtils]: 35: Hoare triple {91528#true} assume ~s~0 == ~MPR1~0; {91528#true} is VALID [2022-04-28 08:37:08,937 INFO L290 TraceCheckUtils]: 36: Hoare triple {91528#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {91528#true} is VALID [2022-04-28 08:37:08,937 INFO L290 TraceCheckUtils]: 37: Hoare triple {91528#true} #res := ~returnVal2~0; {91528#true} is VALID [2022-04-28 08:37:08,937 INFO L290 TraceCheckUtils]: 38: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,937 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {91528#true} {91528#true} #1192#return; {91528#true} is VALID [2022-04-28 08:37:08,937 INFO L290 TraceCheckUtils]: 40: Hoare triple {91528#true} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {91528#true} is VALID [2022-04-28 08:37:08,937 INFO L290 TraceCheckUtils]: 41: Hoare triple {91528#true} assume 259 == ~status~3; {91528#true} is VALID [2022-04-28 08:37:08,938 INFO L272 TraceCheckUtils]: 42: Hoare triple {91528#true} call #t~ret110 := KeWaitForSingleObject(~#event~1.base, ~#event~1.offset, 0, 0, 0, 0, 0); {91722#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:08,938 INFO L290 TraceCheckUtils]: 43: Hoare triple {91722#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {91528#true} is VALID [2022-04-28 08:37:08,938 INFO L290 TraceCheckUtils]: 44: Hoare triple {91528#true} assume ~s~0 == ~MPR3~0; {91528#true} is VALID [2022-04-28 08:37:08,938 INFO L290 TraceCheckUtils]: 45: Hoare triple {91528#true} assume 1 == ~setEventCalled~0;~s~0 := ~NP~0;~setEventCalled~0 := 0; {91528#true} is VALID [2022-04-28 08:37:08,938 INFO L290 TraceCheckUtils]: 46: Hoare triple {91528#true} assume 0 == ~__BLAST_NONDET~13; {91528#true} is VALID [2022-04-28 08:37:08,938 INFO L290 TraceCheckUtils]: 47: Hoare triple {91528#true} #res := 0; {91528#true} is VALID [2022-04-28 08:37:08,938 INFO L290 TraceCheckUtils]: 48: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,938 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {91528#true} {91528#true} #1194#return; {91528#true} is VALID [2022-04-28 08:37:08,938 INFO L290 TraceCheckUtils]: 50: Hoare triple {91528#true} assume -2147483648 <= #t~ret110 && #t~ret110 <= 2147483647;havoc #t~ret110; {91528#true} is VALID [2022-04-28 08:37:08,938 INFO L290 TraceCheckUtils]: 51: Hoare triple {91528#true} assume ~status~3 >= 0; {91528#true} is VALID [2022-04-28 08:37:08,939 INFO L290 TraceCheckUtils]: 52: Hoare triple {91528#true} assume ~myStatus~0 >= 0;call write~int(1, ~devExt~3.base, 52 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 54 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 53 + ~devExt~3.offset, 1); {91528#true} is VALID [2022-04-28 08:37:08,939 INFO L290 TraceCheckUtils]: 53: Hoare triple {91528#true} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {91528#true} is VALID [2022-04-28 08:37:08,939 INFO L272 TraceCheckUtils]: 54: Hoare triple {91528#true} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {91721#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:37:08,939 INFO L290 TraceCheckUtils]: 55: Hoare triple {91721#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {91528#true} is VALID [2022-04-28 08:37:08,939 INFO L290 TraceCheckUtils]: 56: Hoare triple {91528#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {91528#true} is VALID [2022-04-28 08:37:08,939 INFO L290 TraceCheckUtils]: 57: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,939 INFO L284 TraceCheckUtils]: 58: Hoare quadruple {91528#true} {91528#true} #1196#return; {91528#true} is VALID [2022-04-28 08:37:08,939 INFO L290 TraceCheckUtils]: 59: Hoare triple {91528#true} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {91528#true} is VALID [2022-04-28 08:37:08,940 INFO L290 TraceCheckUtils]: 60: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,940 INFO L284 TraceCheckUtils]: 61: Hoare quadruple {91528#true} {91529#false} #1230#return; {91529#false} is VALID [2022-04-28 08:37:08,941 INFO L272 TraceCheckUtils]: 0: Hoare triple {91528#true} call ULTIMATE.init(); {91635#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:37:08,941 INFO L290 TraceCheckUtils]: 1: Hoare triple {91635#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {91528#true} is VALID [2022-04-28 08:37:08,941 INFO L290 TraceCheckUtils]: 2: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,941 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {91528#true} {91528#true} #1270#return; {91528#true} is VALID [2022-04-28 08:37:08,941 INFO L272 TraceCheckUtils]: 4: Hoare triple {91528#true} call #t~ret213 := main(); {91528#true} is VALID [2022-04-28 08:37:08,941 INFO L290 TraceCheckUtils]: 5: Hoare triple {91528#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {91528#true} is VALID [2022-04-28 08:37:08,942 INFO L272 TraceCheckUtils]: 6: Hoare triple {91528#true} call _BLAST_init(); {91636#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:08,942 INFO L290 TraceCheckUtils]: 7: Hoare triple {91636#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {91528#true} is VALID [2022-04-28 08:37:08,942 INFO L290 TraceCheckUtils]: 8: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,942 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {91528#true} {91528#true} #1216#return; {91528#true} is VALID [2022-04-28 08:37:08,943 INFO L272 TraceCheckUtils]: 10: Hoare triple {91528#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {91637#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:37:08,943 INFO L290 TraceCheckUtils]: 11: Hoare triple {91637#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {91528#true} is VALID [2022-04-28 08:37:08,943 INFO L272 TraceCheckUtils]: 12: Hoare triple {91528#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {91528#true} is VALID [2022-04-28 08:37:08,943 INFO L290 TraceCheckUtils]: 13: Hoare triple {91528#true} ~cond := #in~cond; {91528#true} is VALID [2022-04-28 08:37:08,943 INFO L290 TraceCheckUtils]: 14: Hoare triple {91528#true} assume !(0 == ~cond); {91528#true} is VALID [2022-04-28 08:37:08,943 INFO L290 TraceCheckUtils]: 15: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,943 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {91528#true} {91528#true} #1254#return; {91528#true} is VALID [2022-04-28 08:37:08,943 INFO L290 TraceCheckUtils]: 17: Hoare triple {91528#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {91528#true} is VALID [2022-04-28 08:37:08,943 INFO L290 TraceCheckUtils]: 18: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,944 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {91528#true} {91528#true} #1218#return; {91528#true} is VALID [2022-04-28 08:37:08,944 INFO L290 TraceCheckUtils]: 20: Hoare triple {91528#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {91528#true} is VALID [2022-04-28 08:37:08,944 INFO L290 TraceCheckUtils]: 21: Hoare triple {91528#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {91528#true} is VALID [2022-04-28 08:37:08,944 INFO L290 TraceCheckUtils]: 22: Hoare triple {91528#true} assume !(0 == ~irp_choice~0); {91528#true} is VALID [2022-04-28 08:37:08,945 INFO L272 TraceCheckUtils]: 23: Hoare triple {91528#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {91642#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:37:08,945 INFO L290 TraceCheckUtils]: 24: Hoare triple {91642#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {91528#true} is VALID [2022-04-28 08:37:08,946 INFO L272 TraceCheckUtils]: 25: Hoare triple {91528#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {91642#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:37:08,946 INFO L290 TraceCheckUtils]: 26: Hoare triple {91642#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {91528#true} is VALID [2022-04-28 08:37:08,946 INFO L290 TraceCheckUtils]: 27: Hoare triple {91528#true} assume 0 == ~__BLAST_NONDET~5; {91528#true} is VALID [2022-04-28 08:37:08,946 INFO L290 TraceCheckUtils]: 28: Hoare triple {91528#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {91528#true} is VALID [2022-04-28 08:37:08,946 INFO L290 TraceCheckUtils]: 29: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,946 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {91528#true} {91528#true} #1176#return; {91528#true} is VALID [2022-04-28 08:37:08,946 INFO L290 TraceCheckUtils]: 31: Hoare triple {91528#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {91528#true} is VALID [2022-04-28 08:37:08,946 INFO L290 TraceCheckUtils]: 32: Hoare triple {91528#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {91528#true} is VALID [2022-04-28 08:37:08,947 INFO L272 TraceCheckUtils]: 33: Hoare triple {91528#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {91637#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:37:08,947 INFO L290 TraceCheckUtils]: 34: Hoare triple {91637#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {91658#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:37:08,948 INFO L290 TraceCheckUtils]: 35: Hoare triple {91658#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {91659#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} is VALID [2022-04-28 08:37:08,949 INFO L290 TraceCheckUtils]: 36: Hoare triple {91659#(and (or (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0)))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {91660#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:08,950 INFO L290 TraceCheckUtils]: 37: Hoare triple {91660#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {91660#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:08,950 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {91660#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} {91528#true} #1178#return; {91529#false} is VALID [2022-04-28 08:37:08,950 INFO L290 TraceCheckUtils]: 39: Hoare triple {91529#false} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {91529#false} is VALID [2022-04-28 08:37:08,950 INFO L272 TraceCheckUtils]: 40: Hoare triple {91529#false} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {91528#true} is VALID [2022-04-28 08:37:08,951 INFO L290 TraceCheckUtils]: 41: Hoare triple {91528#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {91528#true} is VALID [2022-04-28 08:37:08,951 INFO L290 TraceCheckUtils]: 42: Hoare triple {91528#true} assume 0 == ~__BLAST_NONDET~2; {91528#true} is VALID [2022-04-28 08:37:08,951 INFO L290 TraceCheckUtils]: 43: Hoare triple {91528#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {91528#true} is VALID [2022-04-28 08:37:08,951 INFO L290 TraceCheckUtils]: 44: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,951 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {91528#true} {91529#false} #1180#return; {91529#false} is VALID [2022-04-28 08:37:08,951 INFO L290 TraceCheckUtils]: 46: Hoare triple {91529#false} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {91529#false} is VALID [2022-04-28 08:37:08,951 INFO L290 TraceCheckUtils]: 47: Hoare triple {91529#false} assume true; {91529#false} is VALID [2022-04-28 08:37:08,951 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {91529#false} {91528#true} #1220#return; {91529#false} is VALID [2022-04-28 08:37:08,951 INFO L290 TraceCheckUtils]: 49: Hoare triple {91529#false} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {91529#false} is VALID [2022-04-28 08:37:08,951 INFO L272 TraceCheckUtils]: 50: Hoare triple {91529#false} call stub_driver_init(); {91661#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:08,951 INFO L290 TraceCheckUtils]: 51: Hoare triple {91661#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {91528#true} is VALID [2022-04-28 08:37:08,951 INFO L290 TraceCheckUtils]: 52: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,951 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {91528#true} {91529#false} #1222#return; {91529#false} is VALID [2022-04-28 08:37:08,951 INFO L290 TraceCheckUtils]: 54: Hoare triple {91529#false} assume !!(~status~5 >= 0); {91529#false} is VALID [2022-04-28 08:37:08,951 INFO L290 TraceCheckUtils]: 55: Hoare triple {91529#false} assume !(0 == ~__BLAST_NONDET~0); {91529#false} is VALID [2022-04-28 08:37:08,952 INFO L290 TraceCheckUtils]: 56: Hoare triple {91529#false} assume !(1 == ~__BLAST_NONDET~0); {91529#false} is VALID [2022-04-28 08:37:08,952 INFO L290 TraceCheckUtils]: 57: Hoare triple {91529#false} assume !(2 == ~__BLAST_NONDET~0); {91529#false} is VALID [2022-04-28 08:37:08,952 INFO L290 TraceCheckUtils]: 58: Hoare triple {91529#false} assume 3 == ~__BLAST_NONDET~0; {91529#false} is VALID [2022-04-28 08:37:08,952 INFO L272 TraceCheckUtils]: 59: Hoare triple {91529#false} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {91662#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:08,952 INFO L290 TraceCheckUtils]: 60: Hoare triple {91662#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {91528#true} is VALID [2022-04-28 08:37:08,952 INFO L290 TraceCheckUtils]: 61: Hoare triple {91528#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {91528#true} is VALID [2022-04-28 08:37:08,952 INFO L290 TraceCheckUtils]: 62: Hoare triple {91528#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {91528#true} is VALID [2022-04-28 08:37:08,953 INFO L272 TraceCheckUtils]: 63: Hoare triple {91528#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {91637#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:37:08,953 INFO L290 TraceCheckUtils]: 64: Hoare triple {91637#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {91528#true} is VALID [2022-04-28 08:37:08,953 INFO L290 TraceCheckUtils]: 65: Hoare triple {91528#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {91528#true} is VALID [2022-04-28 08:37:08,953 INFO L290 TraceCheckUtils]: 66: Hoare triple {91528#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {91528#true} is VALID [2022-04-28 08:37:08,953 INFO L290 TraceCheckUtils]: 67: Hoare triple {91528#true} assume #res.base == dest.base && #res.offset == dest.offset; {91528#true} is VALID [2022-04-28 08:37:08,953 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {91528#true} {91528#true} #1186#return; {91528#true} is VALID [2022-04-28 08:37:08,953 INFO L290 TraceCheckUtils]: 69: Hoare triple {91528#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {91528#true} is VALID [2022-04-28 08:37:08,953 INFO L290 TraceCheckUtils]: 70: Hoare triple {91528#true} assume !(~s~0 != ~NP~0); {91528#true} is VALID [2022-04-28 08:37:08,953 INFO L290 TraceCheckUtils]: 71: Hoare triple {91528#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {91528#true} is VALID [2022-04-28 08:37:08,953 INFO L290 TraceCheckUtils]: 72: Hoare triple {91528#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {91528#true} is VALID [2022-04-28 08:37:08,954 INFO L272 TraceCheckUtils]: 73: Hoare triple {91528#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {91705#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:08,954 INFO L290 TraceCheckUtils]: 74: Hoare triple {91705#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {91528#true} is VALID [2022-04-28 08:37:08,954 INFO L290 TraceCheckUtils]: 75: Hoare triple {91528#true} assume 0 != ~compRegistered~0; {91528#true} is VALID [2022-04-28 08:37:08,955 INFO L272 TraceCheckUtils]: 76: Hoare triple {91528#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:08,955 INFO L290 TraceCheckUtils]: 77: Hoare triple {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {91528#true} is VALID [2022-04-28 08:37:08,956 INFO L272 TraceCheckUtils]: 78: Hoare triple {91528#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:08,956 INFO L290 TraceCheckUtils]: 79: Hoare triple {91717#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {91528#true} is VALID [2022-04-28 08:37:08,956 INFO L290 TraceCheckUtils]: 80: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,956 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {91528#true} {91528#true} #1174#return; {91528#true} is VALID [2022-04-28 08:37:08,956 INFO L290 TraceCheckUtils]: 82: Hoare triple {91528#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {91528#true} is VALID [2022-04-28 08:37:08,956 INFO L290 TraceCheckUtils]: 83: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,956 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {91528#true} {91528#true} #1210#return; {91528#true} is VALID [2022-04-28 08:37:08,956 INFO L290 TraceCheckUtils]: 85: Hoare triple {91528#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {91528#true} is VALID [2022-04-28 08:37:08,956 INFO L290 TraceCheckUtils]: 86: Hoare triple {91528#true} assume -1073741802 == ~compRetStatus~0; {91528#true} is VALID [2022-04-28 08:37:08,956 INFO L272 TraceCheckUtils]: 87: Hoare triple {91528#true} call stubMoreProcessingRequired(); {91721#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:37:08,957 INFO L290 TraceCheckUtils]: 88: Hoare triple {91721#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {91528#true} is VALID [2022-04-28 08:37:08,957 INFO L290 TraceCheckUtils]: 89: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,957 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {91528#true} {91528#true} #1212#return; {91528#true} is VALID [2022-04-28 08:37:08,957 INFO L290 TraceCheckUtils]: 91: Hoare triple {91528#true} assume !(0 == ~__BLAST_NONDET~11); {91528#true} is VALID [2022-04-28 08:37:08,957 INFO L290 TraceCheckUtils]: 92: Hoare triple {91528#true} assume !(1 == ~__BLAST_NONDET~11); {91528#true} is VALID [2022-04-28 08:37:08,957 INFO L290 TraceCheckUtils]: 93: Hoare triple {91528#true} ~returnVal2~0 := 259; {91528#true} is VALID [2022-04-28 08:37:08,957 INFO L290 TraceCheckUtils]: 94: Hoare triple {91528#true} assume !(~s~0 == ~NP~0); {91528#true} is VALID [2022-04-28 08:37:08,957 INFO L290 TraceCheckUtils]: 95: Hoare triple {91528#true} assume ~s~0 == ~MPR1~0; {91528#true} is VALID [2022-04-28 08:37:08,957 INFO L290 TraceCheckUtils]: 96: Hoare triple {91528#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {91528#true} is VALID [2022-04-28 08:37:08,957 INFO L290 TraceCheckUtils]: 97: Hoare triple {91528#true} #res := ~returnVal2~0; {91528#true} is VALID [2022-04-28 08:37:08,957 INFO L290 TraceCheckUtils]: 98: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,957 INFO L284 TraceCheckUtils]: 99: Hoare quadruple {91528#true} {91528#true} #1192#return; {91528#true} is VALID [2022-04-28 08:37:08,957 INFO L290 TraceCheckUtils]: 100: Hoare triple {91528#true} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {91528#true} is VALID [2022-04-28 08:37:08,957 INFO L290 TraceCheckUtils]: 101: Hoare triple {91528#true} assume 259 == ~status~3; {91528#true} is VALID [2022-04-28 08:37:08,958 INFO L272 TraceCheckUtils]: 102: Hoare triple {91528#true} call #t~ret110 := KeWaitForSingleObject(~#event~1.base, ~#event~1.offset, 0, 0, 0, 0, 0); {91722#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:08,958 INFO L290 TraceCheckUtils]: 103: Hoare triple {91722#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {91528#true} is VALID [2022-04-28 08:37:08,958 INFO L290 TraceCheckUtils]: 104: Hoare triple {91528#true} assume ~s~0 == ~MPR3~0; {91528#true} is VALID [2022-04-28 08:37:08,958 INFO L290 TraceCheckUtils]: 105: Hoare triple {91528#true} assume 1 == ~setEventCalled~0;~s~0 := ~NP~0;~setEventCalled~0 := 0; {91528#true} is VALID [2022-04-28 08:37:08,958 INFO L290 TraceCheckUtils]: 106: Hoare triple {91528#true} assume 0 == ~__BLAST_NONDET~13; {91528#true} is VALID [2022-04-28 08:37:08,959 INFO L290 TraceCheckUtils]: 107: Hoare triple {91528#true} #res := 0; {91528#true} is VALID [2022-04-28 08:37:08,959 INFO L290 TraceCheckUtils]: 108: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,959 INFO L284 TraceCheckUtils]: 109: Hoare quadruple {91528#true} {91528#true} #1194#return; {91528#true} is VALID [2022-04-28 08:37:08,959 INFO L290 TraceCheckUtils]: 110: Hoare triple {91528#true} assume -2147483648 <= #t~ret110 && #t~ret110 <= 2147483647;havoc #t~ret110; {91528#true} is VALID [2022-04-28 08:37:08,959 INFO L290 TraceCheckUtils]: 111: Hoare triple {91528#true} assume ~status~3 >= 0; {91528#true} is VALID [2022-04-28 08:37:08,959 INFO L290 TraceCheckUtils]: 112: Hoare triple {91528#true} assume ~myStatus~0 >= 0;call write~int(1, ~devExt~3.base, 52 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 54 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 53 + ~devExt~3.offset, 1); {91528#true} is VALID [2022-04-28 08:37:08,959 INFO L290 TraceCheckUtils]: 113: Hoare triple {91528#true} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {91528#true} is VALID [2022-04-28 08:37:08,959 INFO L272 TraceCheckUtils]: 114: Hoare triple {91528#true} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {91721#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:37:08,960 INFO L290 TraceCheckUtils]: 115: Hoare triple {91721#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {91528#true} is VALID [2022-04-28 08:37:08,960 INFO L290 TraceCheckUtils]: 116: Hoare triple {91528#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {91528#true} is VALID [2022-04-28 08:37:08,960 INFO L290 TraceCheckUtils]: 117: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,960 INFO L284 TraceCheckUtils]: 118: Hoare quadruple {91528#true} {91528#true} #1196#return; {91528#true} is VALID [2022-04-28 08:37:08,960 INFO L290 TraceCheckUtils]: 119: Hoare triple {91528#true} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {91528#true} is VALID [2022-04-28 08:37:08,960 INFO L290 TraceCheckUtils]: 120: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:08,960 INFO L284 TraceCheckUtils]: 121: Hoare quadruple {91528#true} {91529#false} #1230#return; {91529#false} is VALID [2022-04-28 08:37:08,960 INFO L290 TraceCheckUtils]: 122: Hoare triple {91529#false} assume -2147483648 <= #t~ret174 && #t~ret174 <= 2147483647;~status~5 := #t~ret174;havoc #t~ret174; {91529#false} is VALID [2022-04-28 08:37:08,960 INFO L290 TraceCheckUtils]: 123: Hoare triple {91529#false} assume 0 != ~we_should_unload~0; {91529#false} is VALID [2022-04-28 08:37:08,960 INFO L290 TraceCheckUtils]: 124: Hoare triple {91529#false} assume !(1 == ~pended~0); {91529#false} is VALID [2022-04-28 08:37:08,960 INFO L290 TraceCheckUtils]: 125: Hoare triple {91529#false} assume !(1 == ~pended~0); {91529#false} is VALID [2022-04-28 08:37:08,960 INFO L290 TraceCheckUtils]: 126: Hoare triple {91529#false} assume !(~s~0 == ~UNLOADED~0); {91529#false} is VALID [2022-04-28 08:37:08,960 INFO L290 TraceCheckUtils]: 127: Hoare triple {91529#false} assume !(-1 == ~status~5); {91529#false} is VALID [2022-04-28 08:37:08,960 INFO L290 TraceCheckUtils]: 128: Hoare triple {91529#false} assume ~s~0 != ~SKIP2~0; {91529#false} is VALID [2022-04-28 08:37:08,961 INFO L290 TraceCheckUtils]: 129: Hoare triple {91529#false} assume ~s~0 != ~IPC~0; {91529#false} is VALID [2022-04-28 08:37:08,961 INFO L290 TraceCheckUtils]: 130: Hoare triple {91529#false} assume !(~s~0 != ~DC~0); {91529#false} is VALID [2022-04-28 08:37:08,961 INFO L290 TraceCheckUtils]: 131: Hoare triple {91529#false} assume !(1 == ~pended~0); {91529#false} is VALID [2022-04-28 08:37:08,961 INFO L290 TraceCheckUtils]: 132: Hoare triple {91529#false} assume ~s~0 == ~DC~0; {91529#false} is VALID [2022-04-28 08:37:08,961 INFO L290 TraceCheckUtils]: 133: Hoare triple {91529#false} assume 259 == ~status~5; {91529#false} is VALID [2022-04-28 08:37:08,961 INFO L272 TraceCheckUtils]: 134: Hoare triple {91529#false} call errorFn(); {91529#false} is VALID [2022-04-28 08:37:08,961 INFO L290 TraceCheckUtils]: 135: Hoare triple {91529#false} assume !false; {91529#false} is VALID [2022-04-28 08:37:08,961 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:37:08,961 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:37:08,961 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1136738553] [2022-04-28 08:37:08,962 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1136738553] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 08:37:08,962 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1822920858] [2022-04-28 08:37:08,962 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-04-28 08:37:08,962 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 08:37:08,962 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 08:37:08,963 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 08:37:08,964 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-04-28 08:37:10,280 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2022-04-28 08:37:10,280 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-04-28 08:37:10,288 INFO L263 TraceCheckSpWp]: Trace formula consists of 1877 conjuncts, 5 conjunts are in the unsatisfiable core [2022-04-28 08:37:10,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:10,330 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 08:37:10,595 INFO L272 TraceCheckUtils]: 0: Hoare triple {91528#true} call ULTIMATE.init(); {91528#true} is VALID [2022-04-28 08:37:10,595 INFO L290 TraceCheckUtils]: 1: Hoare triple {91528#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {91528#true} is VALID [2022-04-28 08:37:10,595 INFO L290 TraceCheckUtils]: 2: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:10,595 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {91528#true} {91528#true} #1270#return; {91528#true} is VALID [2022-04-28 08:37:10,596 INFO L272 TraceCheckUtils]: 4: Hoare triple {91528#true} call #t~ret213 := main(); {91528#true} is VALID [2022-04-28 08:37:10,596 INFO L290 TraceCheckUtils]: 5: Hoare triple {91528#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {91528#true} is VALID [2022-04-28 08:37:10,596 INFO L272 TraceCheckUtils]: 6: Hoare triple {91528#true} call _BLAST_init(); {91528#true} is VALID [2022-04-28 08:37:10,596 INFO L290 TraceCheckUtils]: 7: Hoare triple {91528#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {91528#true} is VALID [2022-04-28 08:37:10,596 INFO L290 TraceCheckUtils]: 8: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:10,596 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {91528#true} {91528#true} #1216#return; {91528#true} is VALID [2022-04-28 08:37:10,596 INFO L272 TraceCheckUtils]: 10: Hoare triple {91528#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {91528#true} is VALID [2022-04-28 08:37:10,596 INFO L290 TraceCheckUtils]: 11: Hoare triple {91528#true} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {91528#true} is VALID [2022-04-28 08:37:10,596 INFO L272 TraceCheckUtils]: 12: Hoare triple {91528#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {91528#true} is VALID [2022-04-28 08:37:10,596 INFO L290 TraceCheckUtils]: 13: Hoare triple {91528#true} ~cond := #in~cond; {91528#true} is VALID [2022-04-28 08:37:10,596 INFO L290 TraceCheckUtils]: 14: Hoare triple {91528#true} assume !(0 == ~cond); {91528#true} is VALID [2022-04-28 08:37:10,596 INFO L290 TraceCheckUtils]: 15: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:10,596 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {91528#true} {91528#true} #1254#return; {91528#true} is VALID [2022-04-28 08:37:10,597 INFO L290 TraceCheckUtils]: 17: Hoare triple {91528#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {91528#true} is VALID [2022-04-28 08:37:10,597 INFO L290 TraceCheckUtils]: 18: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:10,597 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {91528#true} {91528#true} #1218#return; {91528#true} is VALID [2022-04-28 08:37:10,597 INFO L290 TraceCheckUtils]: 20: Hoare triple {91528#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {91528#true} is VALID [2022-04-28 08:37:10,597 INFO L290 TraceCheckUtils]: 21: Hoare triple {91528#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {91528#true} is VALID [2022-04-28 08:37:10,597 INFO L290 TraceCheckUtils]: 22: Hoare triple {91528#true} assume !(0 == ~irp_choice~0); {91528#true} is VALID [2022-04-28 08:37:10,597 INFO L272 TraceCheckUtils]: 23: Hoare triple {91528#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {91528#true} is VALID [2022-04-28 08:37:10,597 INFO L290 TraceCheckUtils]: 24: Hoare triple {91528#true} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {91528#true} is VALID [2022-04-28 08:37:10,597 INFO L272 TraceCheckUtils]: 25: Hoare triple {91528#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {91528#true} is VALID [2022-04-28 08:37:10,597 INFO L290 TraceCheckUtils]: 26: Hoare triple {91528#true} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {91528#true} is VALID [2022-04-28 08:37:10,597 INFO L290 TraceCheckUtils]: 27: Hoare triple {91528#true} assume 0 == ~__BLAST_NONDET~5; {91528#true} is VALID [2022-04-28 08:37:10,597 INFO L290 TraceCheckUtils]: 28: Hoare triple {91528#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {91528#true} is VALID [2022-04-28 08:37:10,597 INFO L290 TraceCheckUtils]: 29: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:10,597 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {91528#true} {91528#true} #1176#return; {91528#true} is VALID [2022-04-28 08:37:10,597 INFO L290 TraceCheckUtils]: 31: Hoare triple {91528#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {91528#true} is VALID [2022-04-28 08:37:10,598 INFO L290 TraceCheckUtils]: 32: Hoare triple {91528#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {91528#true} is VALID [2022-04-28 08:37:10,598 INFO L272 TraceCheckUtils]: 33: Hoare triple {91528#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {91528#true} is VALID [2022-04-28 08:37:10,598 INFO L290 TraceCheckUtils]: 34: Hoare triple {91528#true} #t~loopctr214 := 0; {91528#true} is VALID [2022-04-28 08:37:10,598 INFO L290 TraceCheckUtils]: 35: Hoare triple {91528#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {91528#true} is VALID [2022-04-28 08:37:10,598 INFO L290 TraceCheckUtils]: 36: Hoare triple {91528#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {91528#true} is VALID [2022-04-28 08:37:10,598 INFO L290 TraceCheckUtils]: 37: Hoare triple {91528#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {91528#true} is VALID [2022-04-28 08:37:10,598 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {91528#true} {91528#true} #1178#return; {91528#true} is VALID [2022-04-28 08:37:10,598 INFO L290 TraceCheckUtils]: 39: Hoare triple {91528#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {91528#true} is VALID [2022-04-28 08:37:10,598 INFO L272 TraceCheckUtils]: 40: Hoare triple {91528#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {91528#true} is VALID [2022-04-28 08:37:10,598 INFO L290 TraceCheckUtils]: 41: Hoare triple {91528#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {91528#true} is VALID [2022-04-28 08:37:10,598 INFO L290 TraceCheckUtils]: 42: Hoare triple {91528#true} assume 0 == ~__BLAST_NONDET~2; {91528#true} is VALID [2022-04-28 08:37:10,598 INFO L290 TraceCheckUtils]: 43: Hoare triple {91528#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {91528#true} is VALID [2022-04-28 08:37:10,598 INFO L290 TraceCheckUtils]: 44: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:10,598 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {91528#true} {91528#true} #1180#return; {91528#true} is VALID [2022-04-28 08:37:10,599 INFO L290 TraceCheckUtils]: 46: Hoare triple {91528#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {91528#true} is VALID [2022-04-28 08:37:10,599 INFO L290 TraceCheckUtils]: 47: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:10,599 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {91528#true} {91528#true} #1220#return; {91528#true} is VALID [2022-04-28 08:37:10,599 INFO L290 TraceCheckUtils]: 49: Hoare triple {91528#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {91528#true} is VALID [2022-04-28 08:37:10,599 INFO L272 TraceCheckUtils]: 50: Hoare triple {91528#true} call stub_driver_init(); {91528#true} is VALID [2022-04-28 08:37:10,599 INFO L290 TraceCheckUtils]: 51: Hoare triple {91528#true} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {91528#true} is VALID [2022-04-28 08:37:10,599 INFO L290 TraceCheckUtils]: 52: Hoare triple {91528#true} assume true; {91528#true} is VALID [2022-04-28 08:37:10,599 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {91528#true} {91528#true} #1222#return; {91528#true} is VALID [2022-04-28 08:37:10,599 INFO L290 TraceCheckUtils]: 54: Hoare triple {91528#true} assume !!(~status~5 >= 0); {91528#true} is VALID [2022-04-28 08:37:10,599 INFO L290 TraceCheckUtils]: 55: Hoare triple {91528#true} assume !(0 == ~__BLAST_NONDET~0); {91528#true} is VALID [2022-04-28 08:37:10,599 INFO L290 TraceCheckUtils]: 56: Hoare triple {91528#true} assume !(1 == ~__BLAST_NONDET~0); {91528#true} is VALID [2022-04-28 08:37:10,599 INFO L290 TraceCheckUtils]: 57: Hoare triple {91528#true} assume !(2 == ~__BLAST_NONDET~0); {91528#true} is VALID [2022-04-28 08:37:10,599 INFO L290 TraceCheckUtils]: 58: Hoare triple {91528#true} assume 3 == ~__BLAST_NONDET~0; {91528#true} is VALID [2022-04-28 08:37:10,599 INFO L272 TraceCheckUtils]: 59: Hoare triple {91528#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {91528#true} is VALID [2022-04-28 08:37:10,599 INFO L290 TraceCheckUtils]: 60: Hoare triple {91528#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {91528#true} is VALID [2022-04-28 08:37:10,600 INFO L290 TraceCheckUtils]: 61: Hoare triple {91528#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {91528#true} is VALID [2022-04-28 08:37:10,600 INFO L290 TraceCheckUtils]: 62: Hoare triple {91528#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {91528#true} is VALID [2022-04-28 08:37:10,600 INFO L272 TraceCheckUtils]: 63: Hoare triple {91528#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {91528#true} is VALID [2022-04-28 08:37:10,600 INFO L290 TraceCheckUtils]: 64: Hoare triple {91528#true} #t~loopctr215 := 0; {91918#(= |#Ultimate.C_memmove_#t~loopctr215| 0)} is VALID [2022-04-28 08:37:10,600 INFO L290 TraceCheckUtils]: 65: Hoare triple {91918#(= |#Ultimate.C_memmove_#t~loopctr215| 0)} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {91922#(not (< 0 (mod |#Ultimate.C_memmove_size| 4294967296)))} is VALID [2022-04-28 08:37:10,601 INFO L290 TraceCheckUtils]: 66: Hoare triple {91922#(not (< 0 (mod |#Ultimate.C_memmove_size| 4294967296)))} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {91922#(not (< 0 (mod |#Ultimate.C_memmove_size| 4294967296)))} is VALID [2022-04-28 08:37:10,601 INFO L290 TraceCheckUtils]: 67: Hoare triple {91922#(not (< 0 (mod |#Ultimate.C_memmove_size| 4294967296)))} assume #res.base == dest.base && #res.offset == dest.offset; {91922#(not (< 0 (mod |#Ultimate.C_memmove_size| 4294967296)))} is VALID [2022-04-28 08:37:10,602 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {91922#(not (< 0 (mod |#Ultimate.C_memmove_size| 4294967296)))} {91528#true} #1186#return; {91529#false} is VALID [2022-04-28 08:37:10,602 INFO L290 TraceCheckUtils]: 69: Hoare triple {91529#false} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {91529#false} is VALID [2022-04-28 08:37:10,602 INFO L290 TraceCheckUtils]: 70: Hoare triple {91529#false} assume !(~s~0 != ~NP~0); {91529#false} is VALID [2022-04-28 08:37:10,602 INFO L290 TraceCheckUtils]: 71: Hoare triple {91529#false} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {91529#false} is VALID [2022-04-28 08:37:10,602 INFO L290 TraceCheckUtils]: 72: Hoare triple {91529#false} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {91529#false} is VALID [2022-04-28 08:37:10,602 INFO L272 TraceCheckUtils]: 73: Hoare triple {91529#false} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {91529#false} is VALID [2022-04-28 08:37:10,602 INFO L290 TraceCheckUtils]: 74: Hoare triple {91529#false} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {91529#false} is VALID [2022-04-28 08:37:10,602 INFO L290 TraceCheckUtils]: 75: Hoare triple {91529#false} assume 0 != ~compRegistered~0; {91529#false} is VALID [2022-04-28 08:37:10,603 INFO L272 TraceCheckUtils]: 76: Hoare triple {91529#false} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {91529#false} is VALID [2022-04-28 08:37:10,603 INFO L290 TraceCheckUtils]: 77: Hoare triple {91529#false} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {91529#false} is VALID [2022-04-28 08:37:10,603 INFO L272 TraceCheckUtils]: 78: Hoare triple {91529#false} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {91529#false} is VALID [2022-04-28 08:37:10,603 INFO L290 TraceCheckUtils]: 79: Hoare triple {91529#false} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {91529#false} is VALID [2022-04-28 08:37:10,603 INFO L290 TraceCheckUtils]: 80: Hoare triple {91529#false} assume true; {91529#false} is VALID [2022-04-28 08:37:10,603 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {91529#false} {91529#false} #1174#return; {91529#false} is VALID [2022-04-28 08:37:10,603 INFO L290 TraceCheckUtils]: 82: Hoare triple {91529#false} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {91529#false} is VALID [2022-04-28 08:37:10,603 INFO L290 TraceCheckUtils]: 83: Hoare triple {91529#false} assume true; {91529#false} is VALID [2022-04-28 08:37:10,603 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {91529#false} {91529#false} #1210#return; {91529#false} is VALID [2022-04-28 08:37:10,603 INFO L290 TraceCheckUtils]: 85: Hoare triple {91529#false} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {91529#false} is VALID [2022-04-28 08:37:10,603 INFO L290 TraceCheckUtils]: 86: Hoare triple {91529#false} assume -1073741802 == ~compRetStatus~0; {91529#false} is VALID [2022-04-28 08:37:10,603 INFO L272 TraceCheckUtils]: 87: Hoare triple {91529#false} call stubMoreProcessingRequired(); {91529#false} is VALID [2022-04-28 08:37:10,603 INFO L290 TraceCheckUtils]: 88: Hoare triple {91529#false} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {91529#false} is VALID [2022-04-28 08:37:10,603 INFO L290 TraceCheckUtils]: 89: Hoare triple {91529#false} assume true; {91529#false} is VALID [2022-04-28 08:37:10,603 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {91529#false} {91529#false} #1212#return; {91529#false} is VALID [2022-04-28 08:37:10,604 INFO L290 TraceCheckUtils]: 91: Hoare triple {91529#false} assume !(0 == ~__BLAST_NONDET~11); {91529#false} is VALID [2022-04-28 08:37:10,604 INFO L290 TraceCheckUtils]: 92: Hoare triple {91529#false} assume !(1 == ~__BLAST_NONDET~11); {91529#false} is VALID [2022-04-28 08:37:10,604 INFO L290 TraceCheckUtils]: 93: Hoare triple {91529#false} ~returnVal2~0 := 259; {91529#false} is VALID [2022-04-28 08:37:10,604 INFO L290 TraceCheckUtils]: 94: Hoare triple {91529#false} assume !(~s~0 == ~NP~0); {91529#false} is VALID [2022-04-28 08:37:10,604 INFO L290 TraceCheckUtils]: 95: Hoare triple {91529#false} assume ~s~0 == ~MPR1~0; {91529#false} is VALID [2022-04-28 08:37:10,604 INFO L290 TraceCheckUtils]: 96: Hoare triple {91529#false} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {91529#false} is VALID [2022-04-28 08:37:10,604 INFO L290 TraceCheckUtils]: 97: Hoare triple {91529#false} #res := ~returnVal2~0; {91529#false} is VALID [2022-04-28 08:37:10,604 INFO L290 TraceCheckUtils]: 98: Hoare triple {91529#false} assume true; {91529#false} is VALID [2022-04-28 08:37:10,604 INFO L284 TraceCheckUtils]: 99: Hoare quadruple {91529#false} {91529#false} #1192#return; {91529#false} is VALID [2022-04-28 08:37:10,604 INFO L290 TraceCheckUtils]: 100: Hoare triple {91529#false} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {91529#false} is VALID [2022-04-28 08:37:10,604 INFO L290 TraceCheckUtils]: 101: Hoare triple {91529#false} assume 259 == ~status~3; {91529#false} is VALID [2022-04-28 08:37:10,604 INFO L272 TraceCheckUtils]: 102: Hoare triple {91529#false} call #t~ret110 := KeWaitForSingleObject(~#event~1.base, ~#event~1.offset, 0, 0, 0, 0, 0); {91529#false} is VALID [2022-04-28 08:37:10,604 INFO L290 TraceCheckUtils]: 103: Hoare triple {91529#false} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {91529#false} is VALID [2022-04-28 08:37:10,604 INFO L290 TraceCheckUtils]: 104: Hoare triple {91529#false} assume ~s~0 == ~MPR3~0; {91529#false} is VALID [2022-04-28 08:37:10,604 INFO L290 TraceCheckUtils]: 105: Hoare triple {91529#false} assume 1 == ~setEventCalled~0;~s~0 := ~NP~0;~setEventCalled~0 := 0; {91529#false} is VALID [2022-04-28 08:37:10,605 INFO L290 TraceCheckUtils]: 106: Hoare triple {91529#false} assume 0 == ~__BLAST_NONDET~13; {91529#false} is VALID [2022-04-28 08:37:10,605 INFO L290 TraceCheckUtils]: 107: Hoare triple {91529#false} #res := 0; {91529#false} is VALID [2022-04-28 08:37:10,605 INFO L290 TraceCheckUtils]: 108: Hoare triple {91529#false} assume true; {91529#false} is VALID [2022-04-28 08:37:10,605 INFO L284 TraceCheckUtils]: 109: Hoare quadruple {91529#false} {91529#false} #1194#return; {91529#false} is VALID [2022-04-28 08:37:10,605 INFO L290 TraceCheckUtils]: 110: Hoare triple {91529#false} assume -2147483648 <= #t~ret110 && #t~ret110 <= 2147483647;havoc #t~ret110; {91529#false} is VALID [2022-04-28 08:37:10,605 INFO L290 TraceCheckUtils]: 111: Hoare triple {91529#false} assume ~status~3 >= 0; {91529#false} is VALID [2022-04-28 08:37:10,605 INFO L290 TraceCheckUtils]: 112: Hoare triple {91529#false} assume ~myStatus~0 >= 0;call write~int(1, ~devExt~3.base, 52 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 54 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 53 + ~devExt~3.offset, 1); {91529#false} is VALID [2022-04-28 08:37:10,605 INFO L290 TraceCheckUtils]: 113: Hoare triple {91529#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {91529#false} is VALID [2022-04-28 08:37:10,605 INFO L272 TraceCheckUtils]: 114: Hoare triple {91529#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {91529#false} is VALID [2022-04-28 08:37:10,605 INFO L290 TraceCheckUtils]: 115: Hoare triple {91529#false} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {91529#false} is VALID [2022-04-28 08:37:10,605 INFO L290 TraceCheckUtils]: 116: Hoare triple {91529#false} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {91529#false} is VALID [2022-04-28 08:37:10,605 INFO L290 TraceCheckUtils]: 117: Hoare triple {91529#false} assume true; {91529#false} is VALID [2022-04-28 08:37:10,605 INFO L284 TraceCheckUtils]: 118: Hoare quadruple {91529#false} {91529#false} #1196#return; {91529#false} is VALID [2022-04-28 08:37:10,605 INFO L290 TraceCheckUtils]: 119: Hoare triple {91529#false} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {91529#false} is VALID [2022-04-28 08:37:10,605 INFO L290 TraceCheckUtils]: 120: Hoare triple {91529#false} assume true; {91529#false} is VALID [2022-04-28 08:37:10,606 INFO L284 TraceCheckUtils]: 121: Hoare quadruple {91529#false} {91528#true} #1230#return; {91529#false} is VALID [2022-04-28 08:37:10,606 INFO L290 TraceCheckUtils]: 122: Hoare triple {91529#false} assume -2147483648 <= #t~ret174 && #t~ret174 <= 2147483647;~status~5 := #t~ret174;havoc #t~ret174; {91529#false} is VALID [2022-04-28 08:37:10,606 INFO L290 TraceCheckUtils]: 123: Hoare triple {91529#false} assume 0 != ~we_should_unload~0; {91529#false} is VALID [2022-04-28 08:37:10,606 INFO L290 TraceCheckUtils]: 124: Hoare triple {91529#false} assume !(1 == ~pended~0); {91529#false} is VALID [2022-04-28 08:37:10,606 INFO L290 TraceCheckUtils]: 125: Hoare triple {91529#false} assume !(1 == ~pended~0); {91529#false} is VALID [2022-04-28 08:37:10,606 INFO L290 TraceCheckUtils]: 126: Hoare triple {91529#false} assume !(~s~0 == ~UNLOADED~0); {91529#false} is VALID [2022-04-28 08:37:10,606 INFO L290 TraceCheckUtils]: 127: Hoare triple {91529#false} assume !(-1 == ~status~5); {91529#false} is VALID [2022-04-28 08:37:10,606 INFO L290 TraceCheckUtils]: 128: Hoare triple {91529#false} assume ~s~0 != ~SKIP2~0; {91529#false} is VALID [2022-04-28 08:37:10,606 INFO L290 TraceCheckUtils]: 129: Hoare triple {91529#false} assume ~s~0 != ~IPC~0; {91529#false} is VALID [2022-04-28 08:37:10,606 INFO L290 TraceCheckUtils]: 130: Hoare triple {91529#false} assume !(~s~0 != ~DC~0); {91529#false} is VALID [2022-04-28 08:37:10,606 INFO L290 TraceCheckUtils]: 131: Hoare triple {91529#false} assume !(1 == ~pended~0); {91529#false} is VALID [2022-04-28 08:37:10,606 INFO L290 TraceCheckUtils]: 132: Hoare triple {91529#false} assume ~s~0 == ~DC~0; {91529#false} is VALID [2022-04-28 08:37:10,606 INFO L290 TraceCheckUtils]: 133: Hoare triple {91529#false} assume 259 == ~status~5; {91529#false} is VALID [2022-04-28 08:37:10,606 INFO L272 TraceCheckUtils]: 134: Hoare triple {91529#false} call errorFn(); {91529#false} is VALID [2022-04-28 08:37:10,606 INFO L290 TraceCheckUtils]: 135: Hoare triple {91529#false} assume !false; {91529#false} is VALID [2022-04-28 08:37:10,607 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 08:37:10,607 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-04-28 08:37:10,607 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1822920858] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:37:10,607 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-04-28 08:37:10,607 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [15] total 17 [2022-04-28 08:37:10,607 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:37:10,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1287046019] [2022-04-28 08:37:10,607 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1287046019] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:37:10,607 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:37:10,607 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-04-28 08:37:10,607 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [809138482] [2022-04-28 08:37:10,608 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:37:10,608 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 25.0) internal successors, (100), 4 states have internal predecessors, (100), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 136 [2022-04-28 08:37:10,608 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:37:10,608 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 25.0) internal successors, (100), 4 states have internal predecessors, (100), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-04-28 08:37:10,700 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 136 edges. 136 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:37:10,700 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-04-28 08:37:10,700 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:37:10,700 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-04-28 08:37:10,700 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=57, Invalid=215, Unknown=0, NotChecked=0, Total=272 [2022-04-28 08:37:10,701 INFO L87 Difference]: Start difference. First operand 233 states and 248 transitions. Second operand has 4 states, 4 states have (on average 25.0) internal successors, (100), 4 states have internal predecessors, (100), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-04-28 08:37:18,518 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:37:18,519 INFO L93 Difference]: Finished difference Result 361 states and 386 transitions. [2022-04-28 08:37:18,519 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-04-28 08:37:18,519 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 25.0) internal successors, (100), 4 states have internal predecessors, (100), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 136 [2022-04-28 08:37:18,519 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:37:18,519 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 25.0) internal successors, (100), 4 states have internal predecessors, (100), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-04-28 08:37:18,520 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 228 transitions. [2022-04-28 08:37:18,520 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 25.0) internal successors, (100), 4 states have internal predecessors, (100), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-04-28 08:37:18,522 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 228 transitions. [2022-04-28 08:37:18,522 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 4 states and 228 transitions. [2022-04-28 08:37:18,632 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 228 edges. 228 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:37:18,635 INFO L225 Difference]: With dead ends: 361 [2022-04-28 08:37:18,635 INFO L226 Difference]: Without dead ends: 235 [2022-04-28 08:37:18,636 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 175 GetRequests, 159 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 42 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=61, Invalid=245, Unknown=0, NotChecked=0, Total=306 [2022-04-28 08:37:18,643 INFO L413 NwaCegarLoop]: 144 mSDtfsCounter, 3 mSDsluCounter, 286 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 430 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-04-28 08:37:18,643 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 430 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-04-28 08:37:18,643 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2022-04-28 08:37:19,031 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 235. [2022-04-28 08:37:19,032 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:37:19,032 INFO L82 GeneralOperation]: Start isEquivalent. First operand 235 states. Second operand has 235 states, 175 states have (on average 1.0857142857142856) internal successors, (190), 175 states have internal predecessors, (190), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) [2022-04-28 08:37:19,032 INFO L74 IsIncluded]: Start isIncluded. First operand 235 states. Second operand has 235 states, 175 states have (on average 1.0857142857142856) internal successors, (190), 175 states have internal predecessors, (190), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) [2022-04-28 08:37:19,032 INFO L87 Difference]: Start difference. First operand 235 states. Second operand has 235 states, 175 states have (on average 1.0857142857142856) internal successors, (190), 175 states have internal predecessors, (190), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) [2022-04-28 08:37:19,037 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:37:19,037 INFO L93 Difference]: Finished difference Result 235 states and 250 transitions. [2022-04-28 08:37:19,037 INFO L276 IsEmpty]: Start isEmpty. Operand 235 states and 250 transitions. [2022-04-28 08:37:19,037 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:37:19,037 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:37:19,037 INFO L74 IsIncluded]: Start isIncluded. First operand has 235 states, 175 states have (on average 1.0857142857142856) internal successors, (190), 175 states have internal predecessors, (190), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) Second operand 235 states. [2022-04-28 08:37:19,038 INFO L87 Difference]: Start difference. First operand has 235 states, 175 states have (on average 1.0857142857142856) internal successors, (190), 175 states have internal predecessors, (190), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) Second operand 235 states. [2022-04-28 08:37:19,040 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:37:19,040 INFO L93 Difference]: Finished difference Result 235 states and 250 transitions. [2022-04-28 08:37:19,040 INFO L276 IsEmpty]: Start isEmpty. Operand 235 states and 250 transitions. [2022-04-28 08:37:19,040 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:37:19,040 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:37:19,040 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:37:19,040 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:37:19,041 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 235 states, 175 states have (on average 1.0857142857142856) internal successors, (190), 175 states have internal predecessors, (190), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) [2022-04-28 08:37:19,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 235 states to 235 states and 250 transitions. [2022-04-28 08:37:19,044 INFO L78 Accepts]: Start accepts. Automaton has 235 states and 250 transitions. Word has length 136 [2022-04-28 08:37:19,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:37:19,044 INFO L495 AbstractCegarLoop]: Abstraction has 235 states and 250 transitions. [2022-04-28 08:37:19,044 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 25.0) internal successors, (100), 4 states have internal predecessors, (100), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-04-28 08:37:19,044 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 235 states and 250 transitions. [2022-04-28 08:37:19,662 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 250 edges. 250 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:37:19,662 INFO L276 IsEmpty]: Start isEmpty. Operand 235 states and 250 transitions. [2022-04-28 08:37:19,663 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 138 [2022-04-28 08:37:19,663 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:37:19,663 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:37:19,688 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-04-28 08:37:19,874 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable38,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 08:37:19,874 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:37:19,875 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:37:19,875 INFO L85 PathProgramCache]: Analyzing trace with hash 144997928, now seen corresponding path program 1 times [2022-04-28 08:37:19,875 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:37:19,875 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1951787732] [2022-04-28 08:37:19,877 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 0 HavocedVariables, 4 AssignedVariables, -1 ReadonlyVariables, Eigenvalues: {}, 0 SequentialAcceleration, 0 AlternatingAcceleration, 0 QuantifierFreeResult [2022-04-28 08:37:19,878 WARN L91 AcceleratorJordan]: Jordan acceleration failed, because NONINTEGER_UPDATE [2022-04-28 08:37:19,878 INFO L274 tedInterpolationCore]: Could not compute an accelerate. [2022-04-28 08:37:19,878 INFO L85 PathProgramCache]: Analyzing trace with hash 144997928, now seen corresponding path program 2 times [2022-04-28 08:37:19,878 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:37:19,878 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [634745246] [2022-04-28 08:37:19,878 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:37:19,878 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:37:20,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:37:20,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,262 INFO L290 TraceCheckUtils]: 0: Hoare triple {93904#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {93796#true} is VALID [2022-04-28 08:37:20,262 INFO L290 TraceCheckUtils]: 1: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,262 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {93796#true} {93796#true} #1270#return; {93796#true} is VALID [2022-04-28 08:37:20,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:37:20,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,291 INFO L290 TraceCheckUtils]: 0: Hoare triple {93905#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {93796#true} is VALID [2022-04-28 08:37:20,292 INFO L290 TraceCheckUtils]: 1: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,292 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {93796#true} {93796#true} #1216#return; {93796#true} is VALID [2022-04-28 08:37:20,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:37:20,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:37:20,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,314 INFO L290 TraceCheckUtils]: 0: Hoare triple {93796#true} ~cond := #in~cond; {93796#true} is VALID [2022-04-28 08:37:20,314 INFO L290 TraceCheckUtils]: 1: Hoare triple {93796#true} assume !(0 == ~cond); {93796#true} is VALID [2022-04-28 08:37:20,314 INFO L290 TraceCheckUtils]: 2: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,314 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {93796#true} {93796#true} #1254#return; {93796#true} is VALID [2022-04-28 08:37:20,314 INFO L290 TraceCheckUtils]: 0: Hoare triple {93906#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {93796#true} is VALID [2022-04-28 08:37:20,314 INFO L272 TraceCheckUtils]: 1: Hoare triple {93796#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {93796#true} is VALID [2022-04-28 08:37:20,314 INFO L290 TraceCheckUtils]: 2: Hoare triple {93796#true} ~cond := #in~cond; {93796#true} is VALID [2022-04-28 08:37:20,314 INFO L290 TraceCheckUtils]: 3: Hoare triple {93796#true} assume !(0 == ~cond); {93796#true} is VALID [2022-04-28 08:37:20,314 INFO L290 TraceCheckUtils]: 4: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,314 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {93796#true} {93796#true} #1254#return; {93796#true} is VALID [2022-04-28 08:37:20,314 INFO L290 TraceCheckUtils]: 6: Hoare triple {93796#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {93796#true} is VALID [2022-04-28 08:37:20,314 INFO L290 TraceCheckUtils]: 7: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,315 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {93796#true} {93796#true} #1218#return; {93796#true} is VALID [2022-04-28 08:37:20,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:37:20,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:37:20,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,363 INFO L290 TraceCheckUtils]: 0: Hoare triple {93911#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {93796#true} is VALID [2022-04-28 08:37:20,364 INFO L290 TraceCheckUtils]: 1: Hoare triple {93796#true} assume 0 == ~__BLAST_NONDET~5; {93796#true} is VALID [2022-04-28 08:37:20,364 INFO L290 TraceCheckUtils]: 2: Hoare triple {93796#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {93796#true} is VALID [2022-04-28 08:37:20,364 INFO L290 TraceCheckUtils]: 3: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,364 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {93796#true} {93796#true} #1176#return; {93796#true} is VALID [2022-04-28 08:37:20,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:37:20,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,438 INFO L290 TraceCheckUtils]: 0: Hoare triple {93906#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {93927#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:37:20,439 INFO L290 TraceCheckUtils]: 1: Hoare triple {93927#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {93928#(and (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (or (and (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0))) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))))} is VALID [2022-04-28 08:37:20,440 INFO L290 TraceCheckUtils]: 2: Hoare triple {93928#(and (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (or (and (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0))) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {93929#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:20,440 INFO L290 TraceCheckUtils]: 3: Hoare triple {93929#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {93929#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:20,441 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {93929#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} {93796#true} #1178#return; {93797#false} is VALID [2022-04-28 08:37:20,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-04-28 08:37:20,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,446 INFO L290 TraceCheckUtils]: 0: Hoare triple {93796#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {93796#true} is VALID [2022-04-28 08:37:20,447 INFO L290 TraceCheckUtils]: 1: Hoare triple {93796#true} assume 0 == ~__BLAST_NONDET~2; {93796#true} is VALID [2022-04-28 08:37:20,447 INFO L290 TraceCheckUtils]: 2: Hoare triple {93796#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {93796#true} is VALID [2022-04-28 08:37:20,447 INFO L290 TraceCheckUtils]: 3: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,447 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {93796#true} {93797#false} #1180#return; {93797#false} is VALID [2022-04-28 08:37:20,447 INFO L290 TraceCheckUtils]: 0: Hoare triple {93911#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {93796#true} is VALID [2022-04-28 08:37:20,448 INFO L272 TraceCheckUtils]: 1: Hoare triple {93796#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {93911#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:37:20,448 INFO L290 TraceCheckUtils]: 2: Hoare triple {93911#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {93796#true} is VALID [2022-04-28 08:37:20,448 INFO L290 TraceCheckUtils]: 3: Hoare triple {93796#true} assume 0 == ~__BLAST_NONDET~5; {93796#true} is VALID [2022-04-28 08:37:20,448 INFO L290 TraceCheckUtils]: 4: Hoare triple {93796#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {93796#true} is VALID [2022-04-28 08:37:20,448 INFO L290 TraceCheckUtils]: 5: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,448 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {93796#true} {93796#true} #1176#return; {93796#true} is VALID [2022-04-28 08:37:20,449 INFO L290 TraceCheckUtils]: 7: Hoare triple {93796#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {93796#true} is VALID [2022-04-28 08:37:20,449 INFO L290 TraceCheckUtils]: 8: Hoare triple {93796#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {93796#true} is VALID [2022-04-28 08:37:20,449 INFO L272 TraceCheckUtils]: 9: Hoare triple {93796#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {93906#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:37:20,450 INFO L290 TraceCheckUtils]: 10: Hoare triple {93906#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {93927#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:37:20,451 INFO L290 TraceCheckUtils]: 11: Hoare triple {93927#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {93928#(and (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (or (and (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0))) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))))} is VALID [2022-04-28 08:37:20,452 INFO L290 TraceCheckUtils]: 12: Hoare triple {93928#(and (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (or (and (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0))) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {93929#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:20,452 INFO L290 TraceCheckUtils]: 13: Hoare triple {93929#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {93929#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:20,453 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {93929#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} {93796#true} #1178#return; {93797#false} is VALID [2022-04-28 08:37:20,453 INFO L290 TraceCheckUtils]: 15: Hoare triple {93797#false} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {93797#false} is VALID [2022-04-28 08:37:20,453 INFO L272 TraceCheckUtils]: 16: Hoare triple {93797#false} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {93796#true} is VALID [2022-04-28 08:37:20,453 INFO L290 TraceCheckUtils]: 17: Hoare triple {93796#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {93796#true} is VALID [2022-04-28 08:37:20,453 INFO L290 TraceCheckUtils]: 18: Hoare triple {93796#true} assume 0 == ~__BLAST_NONDET~2; {93796#true} is VALID [2022-04-28 08:37:20,453 INFO L290 TraceCheckUtils]: 19: Hoare triple {93796#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {93796#true} is VALID [2022-04-28 08:37:20,453 INFO L290 TraceCheckUtils]: 20: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,453 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {93796#true} {93797#false} #1180#return; {93797#false} is VALID [2022-04-28 08:37:20,453 INFO L290 TraceCheckUtils]: 22: Hoare triple {93797#false} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {93797#false} is VALID [2022-04-28 08:37:20,453 INFO L290 TraceCheckUtils]: 23: Hoare triple {93797#false} assume true; {93797#false} is VALID [2022-04-28 08:37:20,453 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {93797#false} {93796#true} #1220#return; {93797#false} is VALID [2022-04-28 08:37:20,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-04-28 08:37:20,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,475 INFO L290 TraceCheckUtils]: 0: Hoare triple {93930#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {93796#true} is VALID [2022-04-28 08:37:20,475 INFO L290 TraceCheckUtils]: 1: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,475 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {93796#true} {93797#false} #1222#return; {93797#false} is VALID [2022-04-28 08:37:20,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-04-28 08:37:20,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-28 08:37:20,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,540 INFO L290 TraceCheckUtils]: 0: Hoare triple {93906#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {93796#true} is VALID [2022-04-28 08:37:20,540 INFO L290 TraceCheckUtils]: 1: Hoare triple {93796#true} assume #t~loopctr215 % 4294967296 < size % 4294967296;call #t~mem216 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 1);call write~unchecked~int(#t~mem216, dest.base, dest.offset + #t~loopctr215, 1);call #t~mem217 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem217, dest.base, dest.offset + #t~loopctr215, 4);call #t~mem218 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 1);call write~unchecked~int(#t~mem218, dest.base, dest.offset + #t~loopctr215, 1);call #t~mem219 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem219, dest.base, dest.offset + #t~loopctr215, 4);call #t~mem220 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem220, dest.base, dest.offset + #t~loopctr215, 4);#t~loopctr215 := 1 + #t~loopctr215; {93796#true} is VALID [2022-04-28 08:37:20,540 INFO L290 TraceCheckUtils]: 2: Hoare triple {93796#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {93796#true} is VALID [2022-04-28 08:37:20,540 INFO L290 TraceCheckUtils]: 3: Hoare triple {93796#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {93796#true} is VALID [2022-04-28 08:37:20,540 INFO L290 TraceCheckUtils]: 4: Hoare triple {93796#true} assume #res.base == dest.base && #res.offset == dest.offset; {93796#true} is VALID [2022-04-28 08:37:20,540 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {93796#true} {93796#true} #1186#return; {93796#true} is VALID [2022-04-28 08:37:20,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-04-28 08:37:20,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:37:20,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:37:20,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,578 INFO L290 TraceCheckUtils]: 0: Hoare triple {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {93796#true} is VALID [2022-04-28 08:37:20,579 INFO L290 TraceCheckUtils]: 1: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,579 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {93796#true} {93796#true} #1174#return; {93796#true} is VALID [2022-04-28 08:37:20,579 INFO L290 TraceCheckUtils]: 0: Hoare triple {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {93796#true} is VALID [2022-04-28 08:37:20,579 INFO L272 TraceCheckUtils]: 1: Hoare triple {93796#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:20,579 INFO L290 TraceCheckUtils]: 2: Hoare triple {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {93796#true} is VALID [2022-04-28 08:37:20,580 INFO L290 TraceCheckUtils]: 3: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,580 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {93796#true} {93796#true} #1174#return; {93796#true} is VALID [2022-04-28 08:37:20,580 INFO L290 TraceCheckUtils]: 5: Hoare triple {93796#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {93796#true} is VALID [2022-04-28 08:37:20,580 INFO L290 TraceCheckUtils]: 6: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,580 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {93796#true} {93796#true} #1210#return; {93796#true} is VALID [2022-04-28 08:37:20,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:37:20,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,593 INFO L290 TraceCheckUtils]: 0: Hoare triple {93991#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {93796#true} is VALID [2022-04-28 08:37:20,593 INFO L290 TraceCheckUtils]: 1: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,593 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {93796#true} {93796#true} #1212#return; {93796#true} is VALID [2022-04-28 08:37:20,594 INFO L290 TraceCheckUtils]: 0: Hoare triple {93975#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {93796#true} is VALID [2022-04-28 08:37:20,594 INFO L290 TraceCheckUtils]: 1: Hoare triple {93796#true} assume 0 != ~compRegistered~0; {93796#true} is VALID [2022-04-28 08:37:20,596 INFO L272 TraceCheckUtils]: 2: Hoare triple {93796#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:20,596 INFO L290 TraceCheckUtils]: 3: Hoare triple {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {93796#true} is VALID [2022-04-28 08:37:20,596 INFO L272 TraceCheckUtils]: 4: Hoare triple {93796#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:20,596 INFO L290 TraceCheckUtils]: 5: Hoare triple {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {93796#true} is VALID [2022-04-28 08:37:20,597 INFO L290 TraceCheckUtils]: 6: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,597 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {93796#true} {93796#true} #1174#return; {93796#true} is VALID [2022-04-28 08:37:20,597 INFO L290 TraceCheckUtils]: 8: Hoare triple {93796#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {93796#true} is VALID [2022-04-28 08:37:20,597 INFO L290 TraceCheckUtils]: 9: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,597 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {93796#true} {93796#true} #1210#return; {93796#true} is VALID [2022-04-28 08:37:20,597 INFO L290 TraceCheckUtils]: 11: Hoare triple {93796#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {93796#true} is VALID [2022-04-28 08:37:20,597 INFO L290 TraceCheckUtils]: 12: Hoare triple {93796#true} assume -1073741802 == ~compRetStatus~0; {93796#true} is VALID [2022-04-28 08:37:20,597 INFO L272 TraceCheckUtils]: 13: Hoare triple {93796#true} call stubMoreProcessingRequired(); {93991#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:37:20,597 INFO L290 TraceCheckUtils]: 14: Hoare triple {93991#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {93796#true} is VALID [2022-04-28 08:37:20,597 INFO L290 TraceCheckUtils]: 15: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,598 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {93796#true} {93796#true} #1212#return; {93796#true} is VALID [2022-04-28 08:37:20,598 INFO L290 TraceCheckUtils]: 17: Hoare triple {93796#true} assume !(0 == ~__BLAST_NONDET~11); {93796#true} is VALID [2022-04-28 08:37:20,598 INFO L290 TraceCheckUtils]: 18: Hoare triple {93796#true} assume !(1 == ~__BLAST_NONDET~11); {93796#true} is VALID [2022-04-28 08:37:20,598 INFO L290 TraceCheckUtils]: 19: Hoare triple {93796#true} ~returnVal2~0 := 259; {93796#true} is VALID [2022-04-28 08:37:20,598 INFO L290 TraceCheckUtils]: 20: Hoare triple {93796#true} assume !(~s~0 == ~NP~0); {93796#true} is VALID [2022-04-28 08:37:20,598 INFO L290 TraceCheckUtils]: 21: Hoare triple {93796#true} assume ~s~0 == ~MPR1~0; {93796#true} is VALID [2022-04-28 08:37:20,598 INFO L290 TraceCheckUtils]: 22: Hoare triple {93796#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {93796#true} is VALID [2022-04-28 08:37:20,598 INFO L290 TraceCheckUtils]: 23: Hoare triple {93796#true} #res := ~returnVal2~0; {93796#true} is VALID [2022-04-28 08:37:20,598 INFO L290 TraceCheckUtils]: 24: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,598 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {93796#true} {93796#true} #1192#return; {93796#true} is VALID [2022-04-28 08:37:20,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-04-28 08:37:20,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,616 INFO L290 TraceCheckUtils]: 0: Hoare triple {93992#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {93796#true} is VALID [2022-04-28 08:37:20,616 INFO L290 TraceCheckUtils]: 1: Hoare triple {93796#true} assume ~s~0 == ~MPR3~0; {93796#true} is VALID [2022-04-28 08:37:20,617 INFO L290 TraceCheckUtils]: 2: Hoare triple {93796#true} assume 1 == ~setEventCalled~0;~s~0 := ~NP~0;~setEventCalled~0 := 0; {93796#true} is VALID [2022-04-28 08:37:20,617 INFO L290 TraceCheckUtils]: 3: Hoare triple {93796#true} assume 0 == ~__BLAST_NONDET~13; {93796#true} is VALID [2022-04-28 08:37:20,617 INFO L290 TraceCheckUtils]: 4: Hoare triple {93796#true} #res := 0; {93796#true} is VALID [2022-04-28 08:37:20,617 INFO L290 TraceCheckUtils]: 5: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,617 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {93796#true} {93796#true} #1194#return; {93796#true} is VALID [2022-04-28 08:37:20,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-04-28 08:37:20,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:20,621 INFO L290 TraceCheckUtils]: 0: Hoare triple {93991#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {93796#true} is VALID [2022-04-28 08:37:20,621 INFO L290 TraceCheckUtils]: 1: Hoare triple {93796#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {93796#true} is VALID [2022-04-28 08:37:20,621 INFO L290 TraceCheckUtils]: 2: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,621 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {93796#true} {93796#true} #1196#return; {93796#true} is VALID [2022-04-28 08:37:20,621 INFO L290 TraceCheckUtils]: 0: Hoare triple {93931#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {93796#true} is VALID [2022-04-28 08:37:20,622 INFO L290 TraceCheckUtils]: 1: Hoare triple {93796#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {93796#true} is VALID [2022-04-28 08:37:20,622 INFO L290 TraceCheckUtils]: 2: Hoare triple {93796#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {93796#true} is VALID [2022-04-28 08:37:20,622 INFO L272 TraceCheckUtils]: 3: Hoare triple {93796#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {93906#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:37:20,622 INFO L290 TraceCheckUtils]: 4: Hoare triple {93906#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {93796#true} is VALID [2022-04-28 08:37:20,623 INFO L290 TraceCheckUtils]: 5: Hoare triple {93796#true} assume #t~loopctr215 % 4294967296 < size % 4294967296;call #t~mem216 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 1);call write~unchecked~int(#t~mem216, dest.base, dest.offset + #t~loopctr215, 1);call #t~mem217 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem217, dest.base, dest.offset + #t~loopctr215, 4);call #t~mem218 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 1);call write~unchecked~int(#t~mem218, dest.base, dest.offset + #t~loopctr215, 1);call #t~mem219 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem219, dest.base, dest.offset + #t~loopctr215, 4);call #t~mem220 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem220, dest.base, dest.offset + #t~loopctr215, 4);#t~loopctr215 := 1 + #t~loopctr215; {93796#true} is VALID [2022-04-28 08:37:20,623 INFO L290 TraceCheckUtils]: 6: Hoare triple {93796#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {93796#true} is VALID [2022-04-28 08:37:20,623 INFO L290 TraceCheckUtils]: 7: Hoare triple {93796#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {93796#true} is VALID [2022-04-28 08:37:20,623 INFO L290 TraceCheckUtils]: 8: Hoare triple {93796#true} assume #res.base == dest.base && #res.offset == dest.offset; {93796#true} is VALID [2022-04-28 08:37:20,623 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {93796#true} {93796#true} #1186#return; {93796#true} is VALID [2022-04-28 08:37:20,623 INFO L290 TraceCheckUtils]: 10: Hoare triple {93796#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {93796#true} is VALID [2022-04-28 08:37:20,623 INFO L290 TraceCheckUtils]: 11: Hoare triple {93796#true} assume !(~s~0 != ~NP~0); {93796#true} is VALID [2022-04-28 08:37:20,623 INFO L290 TraceCheckUtils]: 12: Hoare triple {93796#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {93796#true} is VALID [2022-04-28 08:37:20,623 INFO L290 TraceCheckUtils]: 13: Hoare triple {93796#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {93796#true} is VALID [2022-04-28 08:37:20,624 INFO L272 TraceCheckUtils]: 14: Hoare triple {93796#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {93975#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:20,624 INFO L290 TraceCheckUtils]: 15: Hoare triple {93975#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {93796#true} is VALID [2022-04-28 08:37:20,624 INFO L290 TraceCheckUtils]: 16: Hoare triple {93796#true} assume 0 != ~compRegistered~0; {93796#true} is VALID [2022-04-28 08:37:20,625 INFO L272 TraceCheckUtils]: 17: Hoare triple {93796#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:20,625 INFO L290 TraceCheckUtils]: 18: Hoare triple {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {93796#true} is VALID [2022-04-28 08:37:20,625 INFO L272 TraceCheckUtils]: 19: Hoare triple {93796#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:20,625 INFO L290 TraceCheckUtils]: 20: Hoare triple {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {93796#true} is VALID [2022-04-28 08:37:20,626 INFO L290 TraceCheckUtils]: 21: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,626 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {93796#true} {93796#true} #1174#return; {93796#true} is VALID [2022-04-28 08:37:20,626 INFO L290 TraceCheckUtils]: 23: Hoare triple {93796#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {93796#true} is VALID [2022-04-28 08:37:20,626 INFO L290 TraceCheckUtils]: 24: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,626 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {93796#true} {93796#true} #1210#return; {93796#true} is VALID [2022-04-28 08:37:20,626 INFO L290 TraceCheckUtils]: 26: Hoare triple {93796#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {93796#true} is VALID [2022-04-28 08:37:20,626 INFO L290 TraceCheckUtils]: 27: Hoare triple {93796#true} assume -1073741802 == ~compRetStatus~0; {93796#true} is VALID [2022-04-28 08:37:20,626 INFO L272 TraceCheckUtils]: 28: Hoare triple {93796#true} call stubMoreProcessingRequired(); {93991#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:37:20,626 INFO L290 TraceCheckUtils]: 29: Hoare triple {93991#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {93796#true} is VALID [2022-04-28 08:37:20,626 INFO L290 TraceCheckUtils]: 30: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,626 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {93796#true} {93796#true} #1212#return; {93796#true} is VALID [2022-04-28 08:37:20,627 INFO L290 TraceCheckUtils]: 32: Hoare triple {93796#true} assume !(0 == ~__BLAST_NONDET~11); {93796#true} is VALID [2022-04-28 08:37:20,627 INFO L290 TraceCheckUtils]: 33: Hoare triple {93796#true} assume !(1 == ~__BLAST_NONDET~11); {93796#true} is VALID [2022-04-28 08:37:20,627 INFO L290 TraceCheckUtils]: 34: Hoare triple {93796#true} ~returnVal2~0 := 259; {93796#true} is VALID [2022-04-28 08:37:20,627 INFO L290 TraceCheckUtils]: 35: Hoare triple {93796#true} assume !(~s~0 == ~NP~0); {93796#true} is VALID [2022-04-28 08:37:20,627 INFO L290 TraceCheckUtils]: 36: Hoare triple {93796#true} assume ~s~0 == ~MPR1~0; {93796#true} is VALID [2022-04-28 08:37:20,627 INFO L290 TraceCheckUtils]: 37: Hoare triple {93796#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {93796#true} is VALID [2022-04-28 08:37:20,627 INFO L290 TraceCheckUtils]: 38: Hoare triple {93796#true} #res := ~returnVal2~0; {93796#true} is VALID [2022-04-28 08:37:20,627 INFO L290 TraceCheckUtils]: 39: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,627 INFO L284 TraceCheckUtils]: 40: Hoare quadruple {93796#true} {93796#true} #1192#return; {93796#true} is VALID [2022-04-28 08:37:20,627 INFO L290 TraceCheckUtils]: 41: Hoare triple {93796#true} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {93796#true} is VALID [2022-04-28 08:37:20,627 INFO L290 TraceCheckUtils]: 42: Hoare triple {93796#true} assume 259 == ~status~3; {93796#true} is VALID [2022-04-28 08:37:20,628 INFO L272 TraceCheckUtils]: 43: Hoare triple {93796#true} call #t~ret110 := KeWaitForSingleObject(~#event~1.base, ~#event~1.offset, 0, 0, 0, 0, 0); {93992#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:20,628 INFO L290 TraceCheckUtils]: 44: Hoare triple {93992#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {93796#true} is VALID [2022-04-28 08:37:20,628 INFO L290 TraceCheckUtils]: 45: Hoare triple {93796#true} assume ~s~0 == ~MPR3~0; {93796#true} is VALID [2022-04-28 08:37:20,628 INFO L290 TraceCheckUtils]: 46: Hoare triple {93796#true} assume 1 == ~setEventCalled~0;~s~0 := ~NP~0;~setEventCalled~0 := 0; {93796#true} is VALID [2022-04-28 08:37:20,628 INFO L290 TraceCheckUtils]: 47: Hoare triple {93796#true} assume 0 == ~__BLAST_NONDET~13; {93796#true} is VALID [2022-04-28 08:37:20,628 INFO L290 TraceCheckUtils]: 48: Hoare triple {93796#true} #res := 0; {93796#true} is VALID [2022-04-28 08:37:20,628 INFO L290 TraceCheckUtils]: 49: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,628 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {93796#true} {93796#true} #1194#return; {93796#true} is VALID [2022-04-28 08:37:20,629 INFO L290 TraceCheckUtils]: 51: Hoare triple {93796#true} assume -2147483648 <= #t~ret110 && #t~ret110 <= 2147483647;havoc #t~ret110; {93796#true} is VALID [2022-04-28 08:37:20,629 INFO L290 TraceCheckUtils]: 52: Hoare triple {93796#true} assume ~status~3 >= 0; {93796#true} is VALID [2022-04-28 08:37:20,629 INFO L290 TraceCheckUtils]: 53: Hoare triple {93796#true} assume ~myStatus~0 >= 0;call write~int(1, ~devExt~3.base, 52 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 54 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 53 + ~devExt~3.offset, 1); {93796#true} is VALID [2022-04-28 08:37:20,629 INFO L290 TraceCheckUtils]: 54: Hoare triple {93796#true} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {93796#true} is VALID [2022-04-28 08:37:20,629 INFO L272 TraceCheckUtils]: 55: Hoare triple {93796#true} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {93991#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:37:20,629 INFO L290 TraceCheckUtils]: 56: Hoare triple {93991#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {93796#true} is VALID [2022-04-28 08:37:20,629 INFO L290 TraceCheckUtils]: 57: Hoare triple {93796#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {93796#true} is VALID [2022-04-28 08:37:20,629 INFO L290 TraceCheckUtils]: 58: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,630 INFO L284 TraceCheckUtils]: 59: Hoare quadruple {93796#true} {93796#true} #1196#return; {93796#true} is VALID [2022-04-28 08:37:20,630 INFO L290 TraceCheckUtils]: 60: Hoare triple {93796#true} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {93796#true} is VALID [2022-04-28 08:37:20,630 INFO L290 TraceCheckUtils]: 61: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,630 INFO L284 TraceCheckUtils]: 62: Hoare quadruple {93796#true} {93797#false} #1230#return; {93797#false} is VALID [2022-04-28 08:37:20,631 INFO L272 TraceCheckUtils]: 0: Hoare triple {93796#true} call ULTIMATE.init(); {93904#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:37:20,631 INFO L290 TraceCheckUtils]: 1: Hoare triple {93904#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {93796#true} is VALID [2022-04-28 08:37:20,631 INFO L290 TraceCheckUtils]: 2: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,631 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {93796#true} {93796#true} #1270#return; {93796#true} is VALID [2022-04-28 08:37:20,631 INFO L272 TraceCheckUtils]: 4: Hoare triple {93796#true} call #t~ret213 := main(); {93796#true} is VALID [2022-04-28 08:37:20,631 INFO L290 TraceCheckUtils]: 5: Hoare triple {93796#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {93796#true} is VALID [2022-04-28 08:37:20,632 INFO L272 TraceCheckUtils]: 6: Hoare triple {93796#true} call _BLAST_init(); {93905#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:20,632 INFO L290 TraceCheckUtils]: 7: Hoare triple {93905#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {93796#true} is VALID [2022-04-28 08:37:20,632 INFO L290 TraceCheckUtils]: 8: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,632 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {93796#true} {93796#true} #1216#return; {93796#true} is VALID [2022-04-28 08:37:20,633 INFO L272 TraceCheckUtils]: 10: Hoare triple {93796#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {93906#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:37:20,633 INFO L290 TraceCheckUtils]: 11: Hoare triple {93906#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {93796#true} is VALID [2022-04-28 08:37:20,633 INFO L272 TraceCheckUtils]: 12: Hoare triple {93796#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {93796#true} is VALID [2022-04-28 08:37:20,633 INFO L290 TraceCheckUtils]: 13: Hoare triple {93796#true} ~cond := #in~cond; {93796#true} is VALID [2022-04-28 08:37:20,633 INFO L290 TraceCheckUtils]: 14: Hoare triple {93796#true} assume !(0 == ~cond); {93796#true} is VALID [2022-04-28 08:37:20,633 INFO L290 TraceCheckUtils]: 15: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,633 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {93796#true} {93796#true} #1254#return; {93796#true} is VALID [2022-04-28 08:37:20,634 INFO L290 TraceCheckUtils]: 17: Hoare triple {93796#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {93796#true} is VALID [2022-04-28 08:37:20,634 INFO L290 TraceCheckUtils]: 18: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,634 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {93796#true} {93796#true} #1218#return; {93796#true} is VALID [2022-04-28 08:37:20,634 INFO L290 TraceCheckUtils]: 20: Hoare triple {93796#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {93796#true} is VALID [2022-04-28 08:37:20,634 INFO L290 TraceCheckUtils]: 21: Hoare triple {93796#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {93796#true} is VALID [2022-04-28 08:37:20,634 INFO L290 TraceCheckUtils]: 22: Hoare triple {93796#true} assume !(0 == ~irp_choice~0); {93796#true} is VALID [2022-04-28 08:37:20,635 INFO L272 TraceCheckUtils]: 23: Hoare triple {93796#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {93911#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:37:20,635 INFO L290 TraceCheckUtils]: 24: Hoare triple {93911#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {93796#true} is VALID [2022-04-28 08:37:20,636 INFO L272 TraceCheckUtils]: 25: Hoare triple {93796#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {93911#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:37:20,636 INFO L290 TraceCheckUtils]: 26: Hoare triple {93911#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {93796#true} is VALID [2022-04-28 08:37:20,636 INFO L290 TraceCheckUtils]: 27: Hoare triple {93796#true} assume 0 == ~__BLAST_NONDET~5; {93796#true} is VALID [2022-04-28 08:37:20,636 INFO L290 TraceCheckUtils]: 28: Hoare triple {93796#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {93796#true} is VALID [2022-04-28 08:37:20,636 INFO L290 TraceCheckUtils]: 29: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,636 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {93796#true} {93796#true} #1176#return; {93796#true} is VALID [2022-04-28 08:37:20,636 INFO L290 TraceCheckUtils]: 31: Hoare triple {93796#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {93796#true} is VALID [2022-04-28 08:37:20,636 INFO L290 TraceCheckUtils]: 32: Hoare triple {93796#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {93796#true} is VALID [2022-04-28 08:37:20,637 INFO L272 TraceCheckUtils]: 33: Hoare triple {93796#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {93906#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:37:20,637 INFO L290 TraceCheckUtils]: 34: Hoare triple {93906#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {93927#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:37:20,638 INFO L290 TraceCheckUtils]: 35: Hoare triple {93927#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {93928#(and (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (or (and (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0))) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))))} is VALID [2022-04-28 08:37:20,639 INFO L290 TraceCheckUtils]: 36: Hoare triple {93928#(and (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (or (and (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0))) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {93929#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:20,639 INFO L290 TraceCheckUtils]: 37: Hoare triple {93929#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {93929#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:20,640 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {93929#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} {93796#true} #1178#return; {93797#false} is VALID [2022-04-28 08:37:20,640 INFO L290 TraceCheckUtils]: 39: Hoare triple {93797#false} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {93797#false} is VALID [2022-04-28 08:37:20,640 INFO L272 TraceCheckUtils]: 40: Hoare triple {93797#false} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {93796#true} is VALID [2022-04-28 08:37:20,640 INFO L290 TraceCheckUtils]: 41: Hoare triple {93796#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {93796#true} is VALID [2022-04-28 08:37:20,641 INFO L290 TraceCheckUtils]: 42: Hoare triple {93796#true} assume 0 == ~__BLAST_NONDET~2; {93796#true} is VALID [2022-04-28 08:37:20,641 INFO L290 TraceCheckUtils]: 43: Hoare triple {93796#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {93796#true} is VALID [2022-04-28 08:37:20,641 INFO L290 TraceCheckUtils]: 44: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,641 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {93796#true} {93797#false} #1180#return; {93797#false} is VALID [2022-04-28 08:37:20,641 INFO L290 TraceCheckUtils]: 46: Hoare triple {93797#false} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {93797#false} is VALID [2022-04-28 08:37:20,641 INFO L290 TraceCheckUtils]: 47: Hoare triple {93797#false} assume true; {93797#false} is VALID [2022-04-28 08:37:20,641 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {93797#false} {93796#true} #1220#return; {93797#false} is VALID [2022-04-28 08:37:20,641 INFO L290 TraceCheckUtils]: 49: Hoare triple {93797#false} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {93797#false} is VALID [2022-04-28 08:37:20,641 INFO L272 TraceCheckUtils]: 50: Hoare triple {93797#false} call stub_driver_init(); {93930#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:20,641 INFO L290 TraceCheckUtils]: 51: Hoare triple {93930#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {93796#true} is VALID [2022-04-28 08:37:20,641 INFO L290 TraceCheckUtils]: 52: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,641 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {93796#true} {93797#false} #1222#return; {93797#false} is VALID [2022-04-28 08:37:20,641 INFO L290 TraceCheckUtils]: 54: Hoare triple {93797#false} assume !!(~status~5 >= 0); {93797#false} is VALID [2022-04-28 08:37:20,641 INFO L290 TraceCheckUtils]: 55: Hoare triple {93797#false} assume !(0 == ~__BLAST_NONDET~0); {93797#false} is VALID [2022-04-28 08:37:20,641 INFO L290 TraceCheckUtils]: 56: Hoare triple {93797#false} assume !(1 == ~__BLAST_NONDET~0); {93797#false} is VALID [2022-04-28 08:37:20,642 INFO L290 TraceCheckUtils]: 57: Hoare triple {93797#false} assume !(2 == ~__BLAST_NONDET~0); {93797#false} is VALID [2022-04-28 08:37:20,642 INFO L290 TraceCheckUtils]: 58: Hoare triple {93797#false} assume 3 == ~__BLAST_NONDET~0; {93797#false} is VALID [2022-04-28 08:37:20,642 INFO L272 TraceCheckUtils]: 59: Hoare triple {93797#false} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {93931#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:20,642 INFO L290 TraceCheckUtils]: 60: Hoare triple {93931#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {93796#true} is VALID [2022-04-28 08:37:20,642 INFO L290 TraceCheckUtils]: 61: Hoare triple {93796#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {93796#true} is VALID [2022-04-28 08:37:20,642 INFO L290 TraceCheckUtils]: 62: Hoare triple {93796#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {93796#true} is VALID [2022-04-28 08:37:20,643 INFO L272 TraceCheckUtils]: 63: Hoare triple {93796#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {93906#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:37:20,643 INFO L290 TraceCheckUtils]: 64: Hoare triple {93906#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {93796#true} is VALID [2022-04-28 08:37:20,643 INFO L290 TraceCheckUtils]: 65: Hoare triple {93796#true} assume #t~loopctr215 % 4294967296 < size % 4294967296;call #t~mem216 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 1);call write~unchecked~int(#t~mem216, dest.base, dest.offset + #t~loopctr215, 1);call #t~mem217 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem217, dest.base, dest.offset + #t~loopctr215, 4);call #t~mem218 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 1);call write~unchecked~int(#t~mem218, dest.base, dest.offset + #t~loopctr215, 1);call #t~mem219 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem219, dest.base, dest.offset + #t~loopctr215, 4);call #t~mem220 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem220, dest.base, dest.offset + #t~loopctr215, 4);#t~loopctr215 := 1 + #t~loopctr215; {93796#true} is VALID [2022-04-28 08:37:20,643 INFO L290 TraceCheckUtils]: 66: Hoare triple {93796#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {93796#true} is VALID [2022-04-28 08:37:20,643 INFO L290 TraceCheckUtils]: 67: Hoare triple {93796#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {93796#true} is VALID [2022-04-28 08:37:20,643 INFO L290 TraceCheckUtils]: 68: Hoare triple {93796#true} assume #res.base == dest.base && #res.offset == dest.offset; {93796#true} is VALID [2022-04-28 08:37:20,643 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {93796#true} {93796#true} #1186#return; {93796#true} is VALID [2022-04-28 08:37:20,643 INFO L290 TraceCheckUtils]: 70: Hoare triple {93796#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {93796#true} is VALID [2022-04-28 08:37:20,643 INFO L290 TraceCheckUtils]: 71: Hoare triple {93796#true} assume !(~s~0 != ~NP~0); {93796#true} is VALID [2022-04-28 08:37:20,643 INFO L290 TraceCheckUtils]: 72: Hoare triple {93796#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {93796#true} is VALID [2022-04-28 08:37:20,643 INFO L290 TraceCheckUtils]: 73: Hoare triple {93796#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {93796#true} is VALID [2022-04-28 08:37:20,644 INFO L272 TraceCheckUtils]: 74: Hoare triple {93796#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {93975#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:20,644 INFO L290 TraceCheckUtils]: 75: Hoare triple {93975#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {93796#true} is VALID [2022-04-28 08:37:20,644 INFO L290 TraceCheckUtils]: 76: Hoare triple {93796#true} assume 0 != ~compRegistered~0; {93796#true} is VALID [2022-04-28 08:37:20,645 INFO L272 TraceCheckUtils]: 77: Hoare triple {93796#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:20,645 INFO L290 TraceCheckUtils]: 78: Hoare triple {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {93796#true} is VALID [2022-04-28 08:37:20,646 INFO L272 TraceCheckUtils]: 79: Hoare triple {93796#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:20,646 INFO L290 TraceCheckUtils]: 80: Hoare triple {93987#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {93796#true} is VALID [2022-04-28 08:37:20,646 INFO L290 TraceCheckUtils]: 81: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,646 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {93796#true} {93796#true} #1174#return; {93796#true} is VALID [2022-04-28 08:37:20,646 INFO L290 TraceCheckUtils]: 83: Hoare triple {93796#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {93796#true} is VALID [2022-04-28 08:37:20,646 INFO L290 TraceCheckUtils]: 84: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,646 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {93796#true} {93796#true} #1210#return; {93796#true} is VALID [2022-04-28 08:37:20,646 INFO L290 TraceCheckUtils]: 86: Hoare triple {93796#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {93796#true} is VALID [2022-04-28 08:37:20,646 INFO L290 TraceCheckUtils]: 87: Hoare triple {93796#true} assume -1073741802 == ~compRetStatus~0; {93796#true} is VALID [2022-04-28 08:37:20,647 INFO L272 TraceCheckUtils]: 88: Hoare triple {93796#true} call stubMoreProcessingRequired(); {93991#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:37:20,647 INFO L290 TraceCheckUtils]: 89: Hoare triple {93991#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {93796#true} is VALID [2022-04-28 08:37:20,647 INFO L290 TraceCheckUtils]: 90: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,647 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {93796#true} {93796#true} #1212#return; {93796#true} is VALID [2022-04-28 08:37:20,647 INFO L290 TraceCheckUtils]: 92: Hoare triple {93796#true} assume !(0 == ~__BLAST_NONDET~11); {93796#true} is VALID [2022-04-28 08:37:20,647 INFO L290 TraceCheckUtils]: 93: Hoare triple {93796#true} assume !(1 == ~__BLAST_NONDET~11); {93796#true} is VALID [2022-04-28 08:37:20,647 INFO L290 TraceCheckUtils]: 94: Hoare triple {93796#true} ~returnVal2~0 := 259; {93796#true} is VALID [2022-04-28 08:37:20,647 INFO L290 TraceCheckUtils]: 95: Hoare triple {93796#true} assume !(~s~0 == ~NP~0); {93796#true} is VALID [2022-04-28 08:37:20,647 INFO L290 TraceCheckUtils]: 96: Hoare triple {93796#true} assume ~s~0 == ~MPR1~0; {93796#true} is VALID [2022-04-28 08:37:20,647 INFO L290 TraceCheckUtils]: 97: Hoare triple {93796#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {93796#true} is VALID [2022-04-28 08:37:20,647 INFO L290 TraceCheckUtils]: 98: Hoare triple {93796#true} #res := ~returnVal2~0; {93796#true} is VALID [2022-04-28 08:37:20,647 INFO L290 TraceCheckUtils]: 99: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,647 INFO L284 TraceCheckUtils]: 100: Hoare quadruple {93796#true} {93796#true} #1192#return; {93796#true} is VALID [2022-04-28 08:37:20,647 INFO L290 TraceCheckUtils]: 101: Hoare triple {93796#true} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {93796#true} is VALID [2022-04-28 08:37:20,647 INFO L290 TraceCheckUtils]: 102: Hoare triple {93796#true} assume 259 == ~status~3; {93796#true} is VALID [2022-04-28 08:37:20,648 INFO L272 TraceCheckUtils]: 103: Hoare triple {93796#true} call #t~ret110 := KeWaitForSingleObject(~#event~1.base, ~#event~1.offset, 0, 0, 0, 0, 0); {93992#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:20,648 INFO L290 TraceCheckUtils]: 104: Hoare triple {93992#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {93796#true} is VALID [2022-04-28 08:37:20,648 INFO L290 TraceCheckUtils]: 105: Hoare triple {93796#true} assume ~s~0 == ~MPR3~0; {93796#true} is VALID [2022-04-28 08:37:20,648 INFO L290 TraceCheckUtils]: 106: Hoare triple {93796#true} assume 1 == ~setEventCalled~0;~s~0 := ~NP~0;~setEventCalled~0 := 0; {93796#true} is VALID [2022-04-28 08:37:20,648 INFO L290 TraceCheckUtils]: 107: Hoare triple {93796#true} assume 0 == ~__BLAST_NONDET~13; {93796#true} is VALID [2022-04-28 08:37:20,649 INFO L290 TraceCheckUtils]: 108: Hoare triple {93796#true} #res := 0; {93796#true} is VALID [2022-04-28 08:37:20,649 INFO L290 TraceCheckUtils]: 109: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,649 INFO L284 TraceCheckUtils]: 110: Hoare quadruple {93796#true} {93796#true} #1194#return; {93796#true} is VALID [2022-04-28 08:37:20,649 INFO L290 TraceCheckUtils]: 111: Hoare triple {93796#true} assume -2147483648 <= #t~ret110 && #t~ret110 <= 2147483647;havoc #t~ret110; {93796#true} is VALID [2022-04-28 08:37:20,649 INFO L290 TraceCheckUtils]: 112: Hoare triple {93796#true} assume ~status~3 >= 0; {93796#true} is VALID [2022-04-28 08:37:20,649 INFO L290 TraceCheckUtils]: 113: Hoare triple {93796#true} assume ~myStatus~0 >= 0;call write~int(1, ~devExt~3.base, 52 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 54 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 53 + ~devExt~3.offset, 1); {93796#true} is VALID [2022-04-28 08:37:20,649 INFO L290 TraceCheckUtils]: 114: Hoare triple {93796#true} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {93796#true} is VALID [2022-04-28 08:37:20,649 INFO L272 TraceCheckUtils]: 115: Hoare triple {93796#true} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {93991#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:37:20,650 INFO L290 TraceCheckUtils]: 116: Hoare triple {93991#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {93796#true} is VALID [2022-04-28 08:37:20,650 INFO L290 TraceCheckUtils]: 117: Hoare triple {93796#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {93796#true} is VALID [2022-04-28 08:37:20,650 INFO L290 TraceCheckUtils]: 118: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,650 INFO L284 TraceCheckUtils]: 119: Hoare quadruple {93796#true} {93796#true} #1196#return; {93796#true} is VALID [2022-04-28 08:37:20,650 INFO L290 TraceCheckUtils]: 120: Hoare triple {93796#true} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {93796#true} is VALID [2022-04-28 08:37:20,650 INFO L290 TraceCheckUtils]: 121: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:20,650 INFO L284 TraceCheckUtils]: 122: Hoare quadruple {93796#true} {93797#false} #1230#return; {93797#false} is VALID [2022-04-28 08:37:20,650 INFO L290 TraceCheckUtils]: 123: Hoare triple {93797#false} assume -2147483648 <= #t~ret174 && #t~ret174 <= 2147483647;~status~5 := #t~ret174;havoc #t~ret174; {93797#false} is VALID [2022-04-28 08:37:20,650 INFO L290 TraceCheckUtils]: 124: Hoare triple {93797#false} assume 0 != ~we_should_unload~0; {93797#false} is VALID [2022-04-28 08:37:20,650 INFO L290 TraceCheckUtils]: 125: Hoare triple {93797#false} assume !(1 == ~pended~0); {93797#false} is VALID [2022-04-28 08:37:20,650 INFO L290 TraceCheckUtils]: 126: Hoare triple {93797#false} assume !(1 == ~pended~0); {93797#false} is VALID [2022-04-28 08:37:20,650 INFO L290 TraceCheckUtils]: 127: Hoare triple {93797#false} assume !(~s~0 == ~UNLOADED~0); {93797#false} is VALID [2022-04-28 08:37:20,650 INFO L290 TraceCheckUtils]: 128: Hoare triple {93797#false} assume !(-1 == ~status~5); {93797#false} is VALID [2022-04-28 08:37:20,650 INFO L290 TraceCheckUtils]: 129: Hoare triple {93797#false} assume ~s~0 != ~SKIP2~0; {93797#false} is VALID [2022-04-28 08:37:20,650 INFO L290 TraceCheckUtils]: 130: Hoare triple {93797#false} assume ~s~0 != ~IPC~0; {93797#false} is VALID [2022-04-28 08:37:20,651 INFO L290 TraceCheckUtils]: 131: Hoare triple {93797#false} assume !(~s~0 != ~DC~0); {93797#false} is VALID [2022-04-28 08:37:20,651 INFO L290 TraceCheckUtils]: 132: Hoare triple {93797#false} assume !(1 == ~pended~0); {93797#false} is VALID [2022-04-28 08:37:20,651 INFO L290 TraceCheckUtils]: 133: Hoare triple {93797#false} assume ~s~0 == ~DC~0; {93797#false} is VALID [2022-04-28 08:37:20,651 INFO L290 TraceCheckUtils]: 134: Hoare triple {93797#false} assume 259 == ~status~5; {93797#false} is VALID [2022-04-28 08:37:20,651 INFO L272 TraceCheckUtils]: 135: Hoare triple {93797#false} call errorFn(); {93797#false} is VALID [2022-04-28 08:37:20,651 INFO L290 TraceCheckUtils]: 136: Hoare triple {93797#false} assume !false; {93797#false} is VALID [2022-04-28 08:37:20,651 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 08:37:20,651 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:37:20,651 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [634745246] [2022-04-28 08:37:20,651 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [634745246] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 08:37:20,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [149176974] [2022-04-28 08:37:20,652 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-04-28 08:37:20,652 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 08:37:20,652 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 08:37:20,653 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 08:37:20,654 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-04-28 08:37:22,137 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2022-04-28 08:37:22,137 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-04-28 08:37:22,145 INFO L263 TraceCheckSpWp]: Trace formula consists of 1877 conjuncts, 5 conjunts are in the unsatisfiable core [2022-04-28 08:37:22,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:22,189 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 08:37:22,453 INFO L272 TraceCheckUtils]: 0: Hoare triple {93796#true} call ULTIMATE.init(); {93796#true} is VALID [2022-04-28 08:37:22,453 INFO L290 TraceCheckUtils]: 1: Hoare triple {93796#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {93796#true} is VALID [2022-04-28 08:37:22,454 INFO L290 TraceCheckUtils]: 2: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:22,454 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {93796#true} {93796#true} #1270#return; {93796#true} is VALID [2022-04-28 08:37:22,454 INFO L272 TraceCheckUtils]: 4: Hoare triple {93796#true} call #t~ret213 := main(); {93796#true} is VALID [2022-04-28 08:37:22,454 INFO L290 TraceCheckUtils]: 5: Hoare triple {93796#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {93796#true} is VALID [2022-04-28 08:37:22,454 INFO L272 TraceCheckUtils]: 6: Hoare triple {93796#true} call _BLAST_init(); {93796#true} is VALID [2022-04-28 08:37:22,454 INFO L290 TraceCheckUtils]: 7: Hoare triple {93796#true} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {93796#true} is VALID [2022-04-28 08:37:22,454 INFO L290 TraceCheckUtils]: 8: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:22,454 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {93796#true} {93796#true} #1216#return; {93796#true} is VALID [2022-04-28 08:37:22,454 INFO L272 TraceCheckUtils]: 10: Hoare triple {93796#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {93796#true} is VALID [2022-04-28 08:37:22,454 INFO L290 TraceCheckUtils]: 11: Hoare triple {93796#true} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {93796#true} is VALID [2022-04-28 08:37:22,454 INFO L272 TraceCheckUtils]: 12: Hoare triple {93796#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {93796#true} is VALID [2022-04-28 08:37:22,454 INFO L290 TraceCheckUtils]: 13: Hoare triple {93796#true} ~cond := #in~cond; {93796#true} is VALID [2022-04-28 08:37:22,454 INFO L290 TraceCheckUtils]: 14: Hoare triple {93796#true} assume !(0 == ~cond); {93796#true} is VALID [2022-04-28 08:37:22,454 INFO L290 TraceCheckUtils]: 15: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:22,455 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {93796#true} {93796#true} #1254#return; {93796#true} is VALID [2022-04-28 08:37:22,455 INFO L290 TraceCheckUtils]: 17: Hoare triple {93796#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {93796#true} is VALID [2022-04-28 08:37:22,455 INFO L290 TraceCheckUtils]: 18: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:22,455 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {93796#true} {93796#true} #1218#return; {93796#true} is VALID [2022-04-28 08:37:22,455 INFO L290 TraceCheckUtils]: 20: Hoare triple {93796#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {93796#true} is VALID [2022-04-28 08:37:22,455 INFO L290 TraceCheckUtils]: 21: Hoare triple {93796#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {93796#true} is VALID [2022-04-28 08:37:22,455 INFO L290 TraceCheckUtils]: 22: Hoare triple {93796#true} assume !(0 == ~irp_choice~0); {93796#true} is VALID [2022-04-28 08:37:22,455 INFO L272 TraceCheckUtils]: 23: Hoare triple {93796#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {93796#true} is VALID [2022-04-28 08:37:22,455 INFO L290 TraceCheckUtils]: 24: Hoare triple {93796#true} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {93796#true} is VALID [2022-04-28 08:37:22,455 INFO L272 TraceCheckUtils]: 25: Hoare triple {93796#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {93796#true} is VALID [2022-04-28 08:37:22,455 INFO L290 TraceCheckUtils]: 26: Hoare triple {93796#true} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {93796#true} is VALID [2022-04-28 08:37:22,455 INFO L290 TraceCheckUtils]: 27: Hoare triple {93796#true} assume 0 == ~__BLAST_NONDET~5; {93796#true} is VALID [2022-04-28 08:37:22,455 INFO L290 TraceCheckUtils]: 28: Hoare triple {93796#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {93796#true} is VALID [2022-04-28 08:37:22,455 INFO L290 TraceCheckUtils]: 29: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:22,455 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {93796#true} {93796#true} #1176#return; {93796#true} is VALID [2022-04-28 08:37:22,456 INFO L290 TraceCheckUtils]: 31: Hoare triple {93796#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {93796#true} is VALID [2022-04-28 08:37:22,456 INFO L290 TraceCheckUtils]: 32: Hoare triple {93796#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {93796#true} is VALID [2022-04-28 08:37:22,456 INFO L272 TraceCheckUtils]: 33: Hoare triple {93796#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {93796#true} is VALID [2022-04-28 08:37:22,456 INFO L290 TraceCheckUtils]: 34: Hoare triple {93796#true} #t~loopctr214 := 0; {93796#true} is VALID [2022-04-28 08:37:22,456 INFO L290 TraceCheckUtils]: 35: Hoare triple {93796#true} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {93796#true} is VALID [2022-04-28 08:37:22,456 INFO L290 TraceCheckUtils]: 36: Hoare triple {93796#true} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {93796#true} is VALID [2022-04-28 08:37:22,456 INFO L290 TraceCheckUtils]: 37: Hoare triple {93796#true} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {93796#true} is VALID [2022-04-28 08:37:22,456 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {93796#true} {93796#true} #1178#return; {93796#true} is VALID [2022-04-28 08:37:22,456 INFO L290 TraceCheckUtils]: 39: Hoare triple {93796#true} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {93796#true} is VALID [2022-04-28 08:37:22,456 INFO L272 TraceCheckUtils]: 40: Hoare triple {93796#true} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {93796#true} is VALID [2022-04-28 08:37:22,456 INFO L290 TraceCheckUtils]: 41: Hoare triple {93796#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {93796#true} is VALID [2022-04-28 08:37:22,456 INFO L290 TraceCheckUtils]: 42: Hoare triple {93796#true} assume 0 == ~__BLAST_NONDET~2; {93796#true} is VALID [2022-04-28 08:37:22,456 INFO L290 TraceCheckUtils]: 43: Hoare triple {93796#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {93796#true} is VALID [2022-04-28 08:37:22,456 INFO L290 TraceCheckUtils]: 44: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:22,456 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {93796#true} {93796#true} #1180#return; {93796#true} is VALID [2022-04-28 08:37:22,457 INFO L290 TraceCheckUtils]: 46: Hoare triple {93796#true} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {93796#true} is VALID [2022-04-28 08:37:22,457 INFO L290 TraceCheckUtils]: 47: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:22,457 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {93796#true} {93796#true} #1220#return; {93796#true} is VALID [2022-04-28 08:37:22,457 INFO L290 TraceCheckUtils]: 49: Hoare triple {93796#true} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {93796#true} is VALID [2022-04-28 08:37:22,457 INFO L272 TraceCheckUtils]: 50: Hoare triple {93796#true} call stub_driver_init(); {93796#true} is VALID [2022-04-28 08:37:22,457 INFO L290 TraceCheckUtils]: 51: Hoare triple {93796#true} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {93796#true} is VALID [2022-04-28 08:37:22,457 INFO L290 TraceCheckUtils]: 52: Hoare triple {93796#true} assume true; {93796#true} is VALID [2022-04-28 08:37:22,457 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {93796#true} {93796#true} #1222#return; {93796#true} is VALID [2022-04-28 08:37:22,457 INFO L290 TraceCheckUtils]: 54: Hoare triple {93796#true} assume !!(~status~5 >= 0); {93796#true} is VALID [2022-04-28 08:37:22,457 INFO L290 TraceCheckUtils]: 55: Hoare triple {93796#true} assume !(0 == ~__BLAST_NONDET~0); {93796#true} is VALID [2022-04-28 08:37:22,457 INFO L290 TraceCheckUtils]: 56: Hoare triple {93796#true} assume !(1 == ~__BLAST_NONDET~0); {93796#true} is VALID [2022-04-28 08:37:22,457 INFO L290 TraceCheckUtils]: 57: Hoare triple {93796#true} assume !(2 == ~__BLAST_NONDET~0); {93796#true} is VALID [2022-04-28 08:37:22,457 INFO L290 TraceCheckUtils]: 58: Hoare triple {93796#true} assume 3 == ~__BLAST_NONDET~0; {93796#true} is VALID [2022-04-28 08:37:22,457 INFO L272 TraceCheckUtils]: 59: Hoare triple {93796#true} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {93796#true} is VALID [2022-04-28 08:37:22,457 INFO L290 TraceCheckUtils]: 60: Hoare triple {93796#true} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {93796#true} is VALID [2022-04-28 08:37:22,458 INFO L290 TraceCheckUtils]: 61: Hoare triple {93796#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {93796#true} is VALID [2022-04-28 08:37:22,458 INFO L290 TraceCheckUtils]: 62: Hoare triple {93796#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {93796#true} is VALID [2022-04-28 08:37:22,458 INFO L272 TraceCheckUtils]: 63: Hoare triple {93796#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {93796#true} is VALID [2022-04-28 08:37:22,458 INFO L290 TraceCheckUtils]: 64: Hoare triple {93796#true} #t~loopctr215 := 0; {93796#true} is VALID [2022-04-28 08:37:22,458 INFO L290 TraceCheckUtils]: 65: Hoare triple {93796#true} assume #t~loopctr215 % 4294967296 < size % 4294967296;call #t~mem216 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 1);call write~unchecked~int(#t~mem216, dest.base, dest.offset + #t~loopctr215, 1);call #t~mem217 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem217, dest.base, dest.offset + #t~loopctr215, 4);call #t~mem218 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 1);call write~unchecked~int(#t~mem218, dest.base, dest.offset + #t~loopctr215, 1);call #t~mem219 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem219, dest.base, dest.offset + #t~loopctr215, 4);call #t~mem220 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem220, dest.base, dest.offset + #t~loopctr215, 4);#t~loopctr215 := 1 + #t~loopctr215; {93796#true} is VALID [2022-04-28 08:37:22,458 INFO L290 TraceCheckUtils]: 66: Hoare triple {93796#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {94194#(= |#Ultimate.C_memmove_#t~loopctr221| 0)} is VALID [2022-04-28 08:37:22,459 INFO L290 TraceCheckUtils]: 67: Hoare triple {94194#(= |#Ultimate.C_memmove_#t~loopctr221| 0)} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {94198#(not (< 0 (mod |#Ultimate.C_memmove_size| 4294967296)))} is VALID [2022-04-28 08:37:22,459 INFO L290 TraceCheckUtils]: 68: Hoare triple {94198#(not (< 0 (mod |#Ultimate.C_memmove_size| 4294967296)))} assume #res.base == dest.base && #res.offset == dest.offset; {94198#(not (< 0 (mod |#Ultimate.C_memmove_size| 4294967296)))} is VALID [2022-04-28 08:37:22,460 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {94198#(not (< 0 (mod |#Ultimate.C_memmove_size| 4294967296)))} {93796#true} #1186#return; {93797#false} is VALID [2022-04-28 08:37:22,460 INFO L290 TraceCheckUtils]: 70: Hoare triple {93797#false} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {93797#false} is VALID [2022-04-28 08:37:22,460 INFO L290 TraceCheckUtils]: 71: Hoare triple {93797#false} assume !(~s~0 != ~NP~0); {93797#false} is VALID [2022-04-28 08:37:22,460 INFO L290 TraceCheckUtils]: 72: Hoare triple {93797#false} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {93797#false} is VALID [2022-04-28 08:37:22,460 INFO L290 TraceCheckUtils]: 73: Hoare triple {93797#false} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {93797#false} is VALID [2022-04-28 08:37:22,460 INFO L272 TraceCheckUtils]: 74: Hoare triple {93797#false} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {93797#false} is VALID [2022-04-28 08:37:22,460 INFO L290 TraceCheckUtils]: 75: Hoare triple {93797#false} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {93797#false} is VALID [2022-04-28 08:37:22,460 INFO L290 TraceCheckUtils]: 76: Hoare triple {93797#false} assume 0 != ~compRegistered~0; {93797#false} is VALID [2022-04-28 08:37:22,460 INFO L272 TraceCheckUtils]: 77: Hoare triple {93797#false} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {93797#false} is VALID [2022-04-28 08:37:22,460 INFO L290 TraceCheckUtils]: 78: Hoare triple {93797#false} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {93797#false} is VALID [2022-04-28 08:37:22,460 INFO L272 TraceCheckUtils]: 79: Hoare triple {93797#false} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {93797#false} is VALID [2022-04-28 08:37:22,461 INFO L290 TraceCheckUtils]: 80: Hoare triple {93797#false} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {93797#false} is VALID [2022-04-28 08:37:22,461 INFO L290 TraceCheckUtils]: 81: Hoare triple {93797#false} assume true; {93797#false} is VALID [2022-04-28 08:37:22,461 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {93797#false} {93797#false} #1174#return; {93797#false} is VALID [2022-04-28 08:37:22,461 INFO L290 TraceCheckUtils]: 83: Hoare triple {93797#false} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {93797#false} is VALID [2022-04-28 08:37:22,461 INFO L290 TraceCheckUtils]: 84: Hoare triple {93797#false} assume true; {93797#false} is VALID [2022-04-28 08:37:22,461 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {93797#false} {93797#false} #1210#return; {93797#false} is VALID [2022-04-28 08:37:22,461 INFO L290 TraceCheckUtils]: 86: Hoare triple {93797#false} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {93797#false} is VALID [2022-04-28 08:37:22,461 INFO L290 TraceCheckUtils]: 87: Hoare triple {93797#false} assume -1073741802 == ~compRetStatus~0; {93797#false} is VALID [2022-04-28 08:37:22,461 INFO L272 TraceCheckUtils]: 88: Hoare triple {93797#false} call stubMoreProcessingRequired(); {93797#false} is VALID [2022-04-28 08:37:22,461 INFO L290 TraceCheckUtils]: 89: Hoare triple {93797#false} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {93797#false} is VALID [2022-04-28 08:37:22,461 INFO L290 TraceCheckUtils]: 90: Hoare triple {93797#false} assume true; {93797#false} is VALID [2022-04-28 08:37:22,461 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {93797#false} {93797#false} #1212#return; {93797#false} is VALID [2022-04-28 08:37:22,461 INFO L290 TraceCheckUtils]: 92: Hoare triple {93797#false} assume !(0 == ~__BLAST_NONDET~11); {93797#false} is VALID [2022-04-28 08:37:22,461 INFO L290 TraceCheckUtils]: 93: Hoare triple {93797#false} assume !(1 == ~__BLAST_NONDET~11); {93797#false} is VALID [2022-04-28 08:37:22,461 INFO L290 TraceCheckUtils]: 94: Hoare triple {93797#false} ~returnVal2~0 := 259; {93797#false} is VALID [2022-04-28 08:37:22,462 INFO L290 TraceCheckUtils]: 95: Hoare triple {93797#false} assume !(~s~0 == ~NP~0); {93797#false} is VALID [2022-04-28 08:37:22,462 INFO L290 TraceCheckUtils]: 96: Hoare triple {93797#false} assume ~s~0 == ~MPR1~0; {93797#false} is VALID [2022-04-28 08:37:22,462 INFO L290 TraceCheckUtils]: 97: Hoare triple {93797#false} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {93797#false} is VALID [2022-04-28 08:37:22,462 INFO L290 TraceCheckUtils]: 98: Hoare triple {93797#false} #res := ~returnVal2~0; {93797#false} is VALID [2022-04-28 08:37:22,462 INFO L290 TraceCheckUtils]: 99: Hoare triple {93797#false} assume true; {93797#false} is VALID [2022-04-28 08:37:22,462 INFO L284 TraceCheckUtils]: 100: Hoare quadruple {93797#false} {93797#false} #1192#return; {93797#false} is VALID [2022-04-28 08:37:22,462 INFO L290 TraceCheckUtils]: 101: Hoare triple {93797#false} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {93797#false} is VALID [2022-04-28 08:37:22,462 INFO L290 TraceCheckUtils]: 102: Hoare triple {93797#false} assume 259 == ~status~3; {93797#false} is VALID [2022-04-28 08:37:22,462 INFO L272 TraceCheckUtils]: 103: Hoare triple {93797#false} call #t~ret110 := KeWaitForSingleObject(~#event~1.base, ~#event~1.offset, 0, 0, 0, 0, 0); {93797#false} is VALID [2022-04-28 08:37:22,462 INFO L290 TraceCheckUtils]: 104: Hoare triple {93797#false} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {93797#false} is VALID [2022-04-28 08:37:22,462 INFO L290 TraceCheckUtils]: 105: Hoare triple {93797#false} assume ~s~0 == ~MPR3~0; {93797#false} is VALID [2022-04-28 08:37:22,462 INFO L290 TraceCheckUtils]: 106: Hoare triple {93797#false} assume 1 == ~setEventCalled~0;~s~0 := ~NP~0;~setEventCalled~0 := 0; {93797#false} is VALID [2022-04-28 08:37:22,462 INFO L290 TraceCheckUtils]: 107: Hoare triple {93797#false} assume 0 == ~__BLAST_NONDET~13; {93797#false} is VALID [2022-04-28 08:37:22,462 INFO L290 TraceCheckUtils]: 108: Hoare triple {93797#false} #res := 0; {93797#false} is VALID [2022-04-28 08:37:22,462 INFO L290 TraceCheckUtils]: 109: Hoare triple {93797#false} assume true; {93797#false} is VALID [2022-04-28 08:37:22,463 INFO L284 TraceCheckUtils]: 110: Hoare quadruple {93797#false} {93797#false} #1194#return; {93797#false} is VALID [2022-04-28 08:37:22,463 INFO L290 TraceCheckUtils]: 111: Hoare triple {93797#false} assume -2147483648 <= #t~ret110 && #t~ret110 <= 2147483647;havoc #t~ret110; {93797#false} is VALID [2022-04-28 08:37:22,463 INFO L290 TraceCheckUtils]: 112: Hoare triple {93797#false} assume ~status~3 >= 0; {93797#false} is VALID [2022-04-28 08:37:22,463 INFO L290 TraceCheckUtils]: 113: Hoare triple {93797#false} assume ~myStatus~0 >= 0;call write~int(1, ~devExt~3.base, 52 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 54 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 53 + ~devExt~3.offset, 1); {93797#false} is VALID [2022-04-28 08:37:22,463 INFO L290 TraceCheckUtils]: 114: Hoare triple {93797#false} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {93797#false} is VALID [2022-04-28 08:37:22,463 INFO L272 TraceCheckUtils]: 115: Hoare triple {93797#false} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {93797#false} is VALID [2022-04-28 08:37:22,463 INFO L290 TraceCheckUtils]: 116: Hoare triple {93797#false} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {93797#false} is VALID [2022-04-28 08:37:22,463 INFO L290 TraceCheckUtils]: 117: Hoare triple {93797#false} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {93797#false} is VALID [2022-04-28 08:37:22,463 INFO L290 TraceCheckUtils]: 118: Hoare triple {93797#false} assume true; {93797#false} is VALID [2022-04-28 08:37:22,463 INFO L284 TraceCheckUtils]: 119: Hoare quadruple {93797#false} {93797#false} #1196#return; {93797#false} is VALID [2022-04-28 08:37:22,463 INFO L290 TraceCheckUtils]: 120: Hoare triple {93797#false} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {93797#false} is VALID [2022-04-28 08:37:22,463 INFO L290 TraceCheckUtils]: 121: Hoare triple {93797#false} assume true; {93797#false} is VALID [2022-04-28 08:37:22,463 INFO L284 TraceCheckUtils]: 122: Hoare quadruple {93797#false} {93796#true} #1230#return; {93797#false} is VALID [2022-04-28 08:37:22,463 INFO L290 TraceCheckUtils]: 123: Hoare triple {93797#false} assume -2147483648 <= #t~ret174 && #t~ret174 <= 2147483647;~status~5 := #t~ret174;havoc #t~ret174; {93797#false} is VALID [2022-04-28 08:37:22,464 INFO L290 TraceCheckUtils]: 124: Hoare triple {93797#false} assume 0 != ~we_should_unload~0; {93797#false} is VALID [2022-04-28 08:37:22,464 INFO L290 TraceCheckUtils]: 125: Hoare triple {93797#false} assume !(1 == ~pended~0); {93797#false} is VALID [2022-04-28 08:37:22,464 INFO L290 TraceCheckUtils]: 126: Hoare triple {93797#false} assume !(1 == ~pended~0); {93797#false} is VALID [2022-04-28 08:37:22,464 INFO L290 TraceCheckUtils]: 127: Hoare triple {93797#false} assume !(~s~0 == ~UNLOADED~0); {93797#false} is VALID [2022-04-28 08:37:22,464 INFO L290 TraceCheckUtils]: 128: Hoare triple {93797#false} assume !(-1 == ~status~5); {93797#false} is VALID [2022-04-28 08:37:22,464 INFO L290 TraceCheckUtils]: 129: Hoare triple {93797#false} assume ~s~0 != ~SKIP2~0; {93797#false} is VALID [2022-04-28 08:37:22,464 INFO L290 TraceCheckUtils]: 130: Hoare triple {93797#false} assume ~s~0 != ~IPC~0; {93797#false} is VALID [2022-04-28 08:37:22,464 INFO L290 TraceCheckUtils]: 131: Hoare triple {93797#false} assume !(~s~0 != ~DC~0); {93797#false} is VALID [2022-04-28 08:37:22,464 INFO L290 TraceCheckUtils]: 132: Hoare triple {93797#false} assume !(1 == ~pended~0); {93797#false} is VALID [2022-04-28 08:37:22,464 INFO L290 TraceCheckUtils]: 133: Hoare triple {93797#false} assume ~s~0 == ~DC~0; {93797#false} is VALID [2022-04-28 08:37:22,464 INFO L290 TraceCheckUtils]: 134: Hoare triple {93797#false} assume 259 == ~status~5; {93797#false} is VALID [2022-04-28 08:37:22,464 INFO L272 TraceCheckUtils]: 135: Hoare triple {93797#false} call errorFn(); {93797#false} is VALID [2022-04-28 08:37:22,464 INFO L290 TraceCheckUtils]: 136: Hoare triple {93797#false} assume !false; {93797#false} is VALID [2022-04-28 08:37:22,465 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 08:37:22,465 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-04-28 08:37:22,465 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [149176974] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:37:22,465 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-04-28 08:37:22,465 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [15] total 17 [2022-04-28 08:37:22,465 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:37:22,465 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1951787732] [2022-04-28 08:37:22,465 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1951787732] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:37:22,465 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:37:22,465 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-04-28 08:37:22,465 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [664388158] [2022-04-28 08:37:22,465 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:37:22,466 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 25.25) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 137 [2022-04-28 08:37:22,466 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:37:22,466 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 25.25) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-04-28 08:37:22,562 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 137 edges. 137 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:37:22,562 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-04-28 08:37:22,562 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:37:22,563 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-04-28 08:37:22,563 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=57, Invalid=215, Unknown=0, NotChecked=0, Total=272 [2022-04-28 08:37:22,563 INFO L87 Difference]: Start difference. First operand 235 states and 250 transitions. Second operand has 4 states, 4 states have (on average 25.25) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-04-28 08:37:29,789 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:37:29,789 INFO L93 Difference]: Finished difference Result 355 states and 376 transitions. [2022-04-28 08:37:29,789 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-04-28 08:37:29,790 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 25.25) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 137 [2022-04-28 08:37:29,790 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:37:29,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 25.25) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-04-28 08:37:29,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 222 transitions. [2022-04-28 08:37:29,791 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 25.25) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-04-28 08:37:29,792 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 222 transitions. [2022-04-28 08:37:29,792 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 4 states and 222 transitions. [2022-04-28 08:37:29,937 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 222 edges. 222 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:37:29,940 INFO L225 Difference]: With dead ends: 355 [2022-04-28 08:37:29,940 INFO L226 Difference]: Without dead ends: 237 [2022-04-28 08:37:29,941 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 160 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 42 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=61, Invalid=245, Unknown=0, NotChecked=0, Total=306 [2022-04-28 08:37:29,941 INFO L413 NwaCegarLoop]: 145 mSDtfsCounter, 2 mSDsluCounter, 286 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 431 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-04-28 08:37:29,941 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 431 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-04-28 08:37:29,942 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 237 states. [2022-04-28 08:37:30,548 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 237 to 237. [2022-04-28 08:37:30,549 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:37:30,549 INFO L82 GeneralOperation]: Start isEquivalent. First operand 237 states. Second operand has 237 states, 177 states have (on average 1.0847457627118644) internal successors, (192), 177 states have internal predecessors, (192), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) [2022-04-28 08:37:30,549 INFO L74 IsIncluded]: Start isIncluded. First operand 237 states. Second operand has 237 states, 177 states have (on average 1.0847457627118644) internal successors, (192), 177 states have internal predecessors, (192), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) [2022-04-28 08:37:30,549 INFO L87 Difference]: Start difference. First operand 237 states. Second operand has 237 states, 177 states have (on average 1.0847457627118644) internal successors, (192), 177 states have internal predecessors, (192), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) [2022-04-28 08:37:30,552 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:37:30,552 INFO L93 Difference]: Finished difference Result 237 states and 252 transitions. [2022-04-28 08:37:30,552 INFO L276 IsEmpty]: Start isEmpty. Operand 237 states and 252 transitions. [2022-04-28 08:37:30,552 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:37:30,552 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:37:30,552 INFO L74 IsIncluded]: Start isIncluded. First operand has 237 states, 177 states have (on average 1.0847457627118644) internal successors, (192), 177 states have internal predecessors, (192), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) Second operand 237 states. [2022-04-28 08:37:30,552 INFO L87 Difference]: Start difference. First operand has 237 states, 177 states have (on average 1.0847457627118644) internal successors, (192), 177 states have internal predecessors, (192), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) Second operand 237 states. [2022-04-28 08:37:30,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:37:30,555 INFO L93 Difference]: Finished difference Result 237 states and 252 transitions. [2022-04-28 08:37:30,555 INFO L276 IsEmpty]: Start isEmpty. Operand 237 states and 252 transitions. [2022-04-28 08:37:30,555 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:37:30,555 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:37:30,555 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:37:30,555 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:37:30,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 237 states, 177 states have (on average 1.0847457627118644) internal successors, (192), 177 states have internal predecessors, (192), 31 states have call successors, (31), 31 states have call predecessors, (31), 28 states have return successors, (29), 28 states have call predecessors, (29), 29 states have call successors, (29) [2022-04-28 08:37:30,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 237 states to 237 states and 252 transitions. [2022-04-28 08:37:30,558 INFO L78 Accepts]: Start accepts. Automaton has 237 states and 252 transitions. Word has length 137 [2022-04-28 08:37:30,558 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:37:30,558 INFO L495 AbstractCegarLoop]: Abstraction has 237 states and 252 transitions. [2022-04-28 08:37:30,558 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 25.25) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-04-28 08:37:30,559 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 237 states and 252 transitions. [2022-04-28 08:37:31,302 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 252 edges. 252 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:37:31,303 INFO L276 IsEmpty]: Start isEmpty. Operand 237 states and 252 transitions. [2022-04-28 08:37:31,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2022-04-28 08:37:31,303 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:37:31,303 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:37:31,331 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-04-28 08:37:31,504 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-04-28 08:37:31,504 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:37:31,504 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:37:31,504 INFO L85 PathProgramCache]: Analyzing trace with hash -1381815261, now seen corresponding path program 1 times [2022-04-28 08:37:31,505 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:37:31,505 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [107133222] [2022-04-28 08:37:31,506 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 0 HavocedVariables, 4 AssignedVariables, -1 ReadonlyVariables, Eigenvalues: {}, 0 SequentialAcceleration, 0 AlternatingAcceleration, 0 QuantifierFreeResult [2022-04-28 08:37:31,506 WARN L91 AcceleratorJordan]: Jordan acceleration failed, because NONINTEGER_UPDATE [2022-04-28 08:37:31,507 INFO L274 tedInterpolationCore]: Could not compute an accelerate. [2022-04-28 08:37:31,507 INFO L85 PathProgramCache]: Analyzing trace with hash -1381815261, now seen corresponding path program 2 times [2022-04-28 08:37:31,507 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:37:31,507 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [529776484] [2022-04-28 08:37:31,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:37:31,507 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:37:31,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:31,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:37:31,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:31,993 INFO L290 TraceCheckUtils]: 0: Hoare triple {96174#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {96065#true} is VALID [2022-04-28 08:37:31,993 INFO L290 TraceCheckUtils]: 1: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:31,993 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {96065#true} {96065#true} #1270#return; {96065#true} is VALID [2022-04-28 08:37:32,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:37:32,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,021 INFO L290 TraceCheckUtils]: 0: Hoare triple {96175#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {96065#true} is VALID [2022-04-28 08:37:32,022 INFO L290 TraceCheckUtils]: 1: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,022 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {96065#true} {96065#true} #1216#return; {96065#true} is VALID [2022-04-28 08:37:32,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-04-28 08:37:32,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:37:32,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,043 INFO L290 TraceCheckUtils]: 0: Hoare triple {96065#true} ~cond := #in~cond; {96065#true} is VALID [2022-04-28 08:37:32,043 INFO L290 TraceCheckUtils]: 1: Hoare triple {96065#true} assume !(0 == ~cond); {96065#true} is VALID [2022-04-28 08:37:32,043 INFO L290 TraceCheckUtils]: 2: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,043 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {96065#true} {96065#true} #1254#return; {96065#true} is VALID [2022-04-28 08:37:32,043 INFO L290 TraceCheckUtils]: 0: Hoare triple {96176#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {96065#true} is VALID [2022-04-28 08:37:32,044 INFO L272 TraceCheckUtils]: 1: Hoare triple {96065#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {96065#true} is VALID [2022-04-28 08:37:32,044 INFO L290 TraceCheckUtils]: 2: Hoare triple {96065#true} ~cond := #in~cond; {96065#true} is VALID [2022-04-28 08:37:32,044 INFO L290 TraceCheckUtils]: 3: Hoare triple {96065#true} assume !(0 == ~cond); {96065#true} is VALID [2022-04-28 08:37:32,044 INFO L290 TraceCheckUtils]: 4: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,044 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {96065#true} {96065#true} #1254#return; {96065#true} is VALID [2022-04-28 08:37:32,044 INFO L290 TraceCheckUtils]: 6: Hoare triple {96065#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {96065#true} is VALID [2022-04-28 08:37:32,044 INFO L290 TraceCheckUtils]: 7: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,044 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {96065#true} {96065#true} #1218#return; {96065#true} is VALID [2022-04-28 08:37:32,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-04-28 08:37:32,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:37:32,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,090 INFO L290 TraceCheckUtils]: 0: Hoare triple {96181#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {96065#true} is VALID [2022-04-28 08:37:32,090 INFO L290 TraceCheckUtils]: 1: Hoare triple {96065#true} assume 0 == ~__BLAST_NONDET~5; {96065#true} is VALID [2022-04-28 08:37:32,091 INFO L290 TraceCheckUtils]: 2: Hoare triple {96065#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {96065#true} is VALID [2022-04-28 08:37:32,091 INFO L290 TraceCheckUtils]: 3: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,091 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {96065#true} {96065#true} #1176#return; {96065#true} is VALID [2022-04-28 08:37:32,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-04-28 08:37:32,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,159 INFO L290 TraceCheckUtils]: 0: Hoare triple {96176#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {96197#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:37:32,160 INFO L290 TraceCheckUtils]: 1: Hoare triple {96197#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {96198#(and (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (or (and (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0))) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))))} is VALID [2022-04-28 08:37:32,160 INFO L290 TraceCheckUtils]: 2: Hoare triple {96198#(and (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (or (and (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0))) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {96199#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:32,161 INFO L290 TraceCheckUtils]: 3: Hoare triple {96199#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {96199#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:32,162 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {96199#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} {96065#true} #1178#return; {96066#false} is VALID [2022-04-28 08:37:32,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-04-28 08:37:32,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,167 INFO L290 TraceCheckUtils]: 0: Hoare triple {96065#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {96065#true} is VALID [2022-04-28 08:37:32,167 INFO L290 TraceCheckUtils]: 1: Hoare triple {96065#true} assume 0 == ~__BLAST_NONDET~2; {96065#true} is VALID [2022-04-28 08:37:32,167 INFO L290 TraceCheckUtils]: 2: Hoare triple {96065#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {96065#true} is VALID [2022-04-28 08:37:32,167 INFO L290 TraceCheckUtils]: 3: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,167 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {96065#true} {96066#false} #1180#return; {96066#false} is VALID [2022-04-28 08:37:32,167 INFO L290 TraceCheckUtils]: 0: Hoare triple {96181#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {96065#true} is VALID [2022-04-28 08:37:32,168 INFO L272 TraceCheckUtils]: 1: Hoare triple {96065#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {96181#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:37:32,169 INFO L290 TraceCheckUtils]: 2: Hoare triple {96181#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {96065#true} is VALID [2022-04-28 08:37:32,169 INFO L290 TraceCheckUtils]: 3: Hoare triple {96065#true} assume 0 == ~__BLAST_NONDET~5; {96065#true} is VALID [2022-04-28 08:37:32,169 INFO L290 TraceCheckUtils]: 4: Hoare triple {96065#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {96065#true} is VALID [2022-04-28 08:37:32,169 INFO L290 TraceCheckUtils]: 5: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,169 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {96065#true} {96065#true} #1176#return; {96065#true} is VALID [2022-04-28 08:37:32,169 INFO L290 TraceCheckUtils]: 7: Hoare triple {96065#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {96065#true} is VALID [2022-04-28 08:37:32,169 INFO L290 TraceCheckUtils]: 8: Hoare triple {96065#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {96065#true} is VALID [2022-04-28 08:37:32,170 INFO L272 TraceCheckUtils]: 9: Hoare triple {96065#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {96176#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:37:32,170 INFO L290 TraceCheckUtils]: 10: Hoare triple {96176#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {96197#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:37:32,171 INFO L290 TraceCheckUtils]: 11: Hoare triple {96197#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {96198#(and (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (or (and (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0))) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))))} is VALID [2022-04-28 08:37:32,172 INFO L290 TraceCheckUtils]: 12: Hoare triple {96198#(and (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (or (and (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0))) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {96199#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:32,172 INFO L290 TraceCheckUtils]: 13: Hoare triple {96199#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {96199#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:32,173 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {96199#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} {96065#true} #1178#return; {96066#false} is VALID [2022-04-28 08:37:32,173 INFO L290 TraceCheckUtils]: 15: Hoare triple {96066#false} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {96066#false} is VALID [2022-04-28 08:37:32,173 INFO L272 TraceCheckUtils]: 16: Hoare triple {96066#false} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {96065#true} is VALID [2022-04-28 08:37:32,173 INFO L290 TraceCheckUtils]: 17: Hoare triple {96065#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {96065#true} is VALID [2022-04-28 08:37:32,173 INFO L290 TraceCheckUtils]: 18: Hoare triple {96065#true} assume 0 == ~__BLAST_NONDET~2; {96065#true} is VALID [2022-04-28 08:37:32,173 INFO L290 TraceCheckUtils]: 19: Hoare triple {96065#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {96065#true} is VALID [2022-04-28 08:37:32,173 INFO L290 TraceCheckUtils]: 20: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,174 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {96065#true} {96066#false} #1180#return; {96066#false} is VALID [2022-04-28 08:37:32,174 INFO L290 TraceCheckUtils]: 22: Hoare triple {96066#false} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {96066#false} is VALID [2022-04-28 08:37:32,174 INFO L290 TraceCheckUtils]: 23: Hoare triple {96066#false} assume true; {96066#false} is VALID [2022-04-28 08:37:32,174 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {96066#false} {96065#true} #1220#return; {96066#false} is VALID [2022-04-28 08:37:32,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-04-28 08:37:32,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,195 INFO L290 TraceCheckUtils]: 0: Hoare triple {96200#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {96065#true} is VALID [2022-04-28 08:37:32,195 INFO L290 TraceCheckUtils]: 1: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,195 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {96065#true} {96066#false} #1222#return; {96066#false} is VALID [2022-04-28 08:37:32,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-04-28 08:37:32,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-28 08:37:32,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,270 INFO L290 TraceCheckUtils]: 0: Hoare triple {96176#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {96065#true} is VALID [2022-04-28 08:37:32,270 INFO L290 TraceCheckUtils]: 1: Hoare triple {96065#true} assume #t~loopctr215 % 4294967296 < size % 4294967296;call #t~mem216 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 1);call write~unchecked~int(#t~mem216, dest.base, dest.offset + #t~loopctr215, 1);call #t~mem217 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem217, dest.base, dest.offset + #t~loopctr215, 4);call #t~mem218 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 1);call write~unchecked~int(#t~mem218, dest.base, dest.offset + #t~loopctr215, 1);call #t~mem219 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem219, dest.base, dest.offset + #t~loopctr215, 4);call #t~mem220 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem220, dest.base, dest.offset + #t~loopctr215, 4);#t~loopctr215 := 1 + #t~loopctr215; {96065#true} is VALID [2022-04-28 08:37:32,270 INFO L290 TraceCheckUtils]: 2: Hoare triple {96065#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {96065#true} is VALID [2022-04-28 08:37:32,271 INFO L290 TraceCheckUtils]: 3: Hoare triple {96065#true} assume #t~loopctr221 % 4294967296 < size % 4294967296;call #t~mem222.base, #t~mem222.offset := read~unchecked~$Pointer$(src.base, src.offset + #t~loopctr221, 4);call write~unchecked~$Pointer$(#t~mem222.base, #t~mem222.offset, dest.base, dest.offset + #t~loopctr221, 4);#t~loopctr221 := 4 + #t~loopctr221; {96065#true} is VALID [2022-04-28 08:37:32,271 INFO L290 TraceCheckUtils]: 4: Hoare triple {96065#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {96065#true} is VALID [2022-04-28 08:37:32,271 INFO L290 TraceCheckUtils]: 5: Hoare triple {96065#true} assume #res.base == dest.base && #res.offset == dest.offset; {96065#true} is VALID [2022-04-28 08:37:32,271 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {96065#true} {96065#true} #1186#return; {96065#true} is VALID [2022-04-28 08:37:32,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-04-28 08:37:32,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:37:32,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:37:32,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,310 INFO L290 TraceCheckUtils]: 0: Hoare triple {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {96065#true} is VALID [2022-04-28 08:37:32,310 INFO L290 TraceCheckUtils]: 1: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,311 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {96065#true} {96065#true} #1174#return; {96065#true} is VALID [2022-04-28 08:37:32,311 INFO L290 TraceCheckUtils]: 0: Hoare triple {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {96065#true} is VALID [2022-04-28 08:37:32,311 INFO L272 TraceCheckUtils]: 1: Hoare triple {96065#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:32,311 INFO L290 TraceCheckUtils]: 2: Hoare triple {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {96065#true} is VALID [2022-04-28 08:37:32,311 INFO L290 TraceCheckUtils]: 3: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,311 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {96065#true} {96065#true} #1174#return; {96065#true} is VALID [2022-04-28 08:37:32,312 INFO L290 TraceCheckUtils]: 5: Hoare triple {96065#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {96065#true} is VALID [2022-04-28 08:37:32,312 INFO L290 TraceCheckUtils]: 6: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,312 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {96065#true} {96065#true} #1210#return; {96065#true} is VALID [2022-04-28 08:37:32,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:37:32,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,341 INFO L290 TraceCheckUtils]: 0: Hoare triple {96262#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {96065#true} is VALID [2022-04-28 08:37:32,341 INFO L290 TraceCheckUtils]: 1: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,341 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {96065#true} {96065#true} #1212#return; {96065#true} is VALID [2022-04-28 08:37:32,341 INFO L290 TraceCheckUtils]: 0: Hoare triple {96246#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {96065#true} is VALID [2022-04-28 08:37:32,341 INFO L290 TraceCheckUtils]: 1: Hoare triple {96065#true} assume 0 != ~compRegistered~0; {96065#true} is VALID [2022-04-28 08:37:32,342 INFO L272 TraceCheckUtils]: 2: Hoare triple {96065#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:32,342 INFO L290 TraceCheckUtils]: 3: Hoare triple {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {96065#true} is VALID [2022-04-28 08:37:32,343 INFO L272 TraceCheckUtils]: 4: Hoare triple {96065#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:32,343 INFO L290 TraceCheckUtils]: 5: Hoare triple {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {96065#true} is VALID [2022-04-28 08:37:32,343 INFO L290 TraceCheckUtils]: 6: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,343 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {96065#true} {96065#true} #1174#return; {96065#true} is VALID [2022-04-28 08:37:32,343 INFO L290 TraceCheckUtils]: 8: Hoare triple {96065#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {96065#true} is VALID [2022-04-28 08:37:32,343 INFO L290 TraceCheckUtils]: 9: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,343 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {96065#true} {96065#true} #1210#return; {96065#true} is VALID [2022-04-28 08:37:32,343 INFO L290 TraceCheckUtils]: 11: Hoare triple {96065#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {96065#true} is VALID [2022-04-28 08:37:32,343 INFO L290 TraceCheckUtils]: 12: Hoare triple {96065#true} assume -1073741802 == ~compRetStatus~0; {96065#true} is VALID [2022-04-28 08:37:32,344 INFO L272 TraceCheckUtils]: 13: Hoare triple {96065#true} call stubMoreProcessingRequired(); {96262#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:37:32,344 INFO L290 TraceCheckUtils]: 14: Hoare triple {96262#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {96065#true} is VALID [2022-04-28 08:37:32,344 INFO L290 TraceCheckUtils]: 15: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,344 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {96065#true} {96065#true} #1212#return; {96065#true} is VALID [2022-04-28 08:37:32,344 INFO L290 TraceCheckUtils]: 17: Hoare triple {96065#true} assume !(0 == ~__BLAST_NONDET~11); {96065#true} is VALID [2022-04-28 08:37:32,344 INFO L290 TraceCheckUtils]: 18: Hoare triple {96065#true} assume !(1 == ~__BLAST_NONDET~11); {96065#true} is VALID [2022-04-28 08:37:32,344 INFO L290 TraceCheckUtils]: 19: Hoare triple {96065#true} ~returnVal2~0 := 259; {96065#true} is VALID [2022-04-28 08:37:32,344 INFO L290 TraceCheckUtils]: 20: Hoare triple {96065#true} assume !(~s~0 == ~NP~0); {96065#true} is VALID [2022-04-28 08:37:32,344 INFO L290 TraceCheckUtils]: 21: Hoare triple {96065#true} assume ~s~0 == ~MPR1~0; {96065#true} is VALID [2022-04-28 08:37:32,344 INFO L290 TraceCheckUtils]: 22: Hoare triple {96065#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {96065#true} is VALID [2022-04-28 08:37:32,344 INFO L290 TraceCheckUtils]: 23: Hoare triple {96065#true} #res := ~returnVal2~0; {96065#true} is VALID [2022-04-28 08:37:32,345 INFO L290 TraceCheckUtils]: 24: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,345 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {96065#true} {96065#true} #1192#return; {96065#true} is VALID [2022-04-28 08:37:32,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-04-28 08:37:32,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,362 INFO L290 TraceCheckUtils]: 0: Hoare triple {96263#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {96065#true} is VALID [2022-04-28 08:37:32,362 INFO L290 TraceCheckUtils]: 1: Hoare triple {96065#true} assume ~s~0 == ~MPR3~0; {96065#true} is VALID [2022-04-28 08:37:32,362 INFO L290 TraceCheckUtils]: 2: Hoare triple {96065#true} assume 1 == ~setEventCalled~0;~s~0 := ~NP~0;~setEventCalled~0 := 0; {96065#true} is VALID [2022-04-28 08:37:32,362 INFO L290 TraceCheckUtils]: 3: Hoare triple {96065#true} assume 0 == ~__BLAST_NONDET~13; {96065#true} is VALID [2022-04-28 08:37:32,363 INFO L290 TraceCheckUtils]: 4: Hoare triple {96065#true} #res := 0; {96065#true} is VALID [2022-04-28 08:37:32,363 INFO L290 TraceCheckUtils]: 5: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,363 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {96065#true} {96065#true} #1194#return; {96065#true} is VALID [2022-04-28 08:37:32,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-04-28 08:37:32,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:37:32,367 INFO L290 TraceCheckUtils]: 0: Hoare triple {96262#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {96065#true} is VALID [2022-04-28 08:37:32,367 INFO L290 TraceCheckUtils]: 1: Hoare triple {96065#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {96065#true} is VALID [2022-04-28 08:37:32,367 INFO L290 TraceCheckUtils]: 2: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,367 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {96065#true} {96065#true} #1196#return; {96065#true} is VALID [2022-04-28 08:37:32,367 INFO L290 TraceCheckUtils]: 0: Hoare triple {96201#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {96065#true} is VALID [2022-04-28 08:37:32,367 INFO L290 TraceCheckUtils]: 1: Hoare triple {96065#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {96065#true} is VALID [2022-04-28 08:37:32,367 INFO L290 TraceCheckUtils]: 2: Hoare triple {96065#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {96065#true} is VALID [2022-04-28 08:37:32,368 INFO L272 TraceCheckUtils]: 3: Hoare triple {96065#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {96176#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:37:32,368 INFO L290 TraceCheckUtils]: 4: Hoare triple {96176#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {96065#true} is VALID [2022-04-28 08:37:32,368 INFO L290 TraceCheckUtils]: 5: Hoare triple {96065#true} assume #t~loopctr215 % 4294967296 < size % 4294967296;call #t~mem216 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 1);call write~unchecked~int(#t~mem216, dest.base, dest.offset + #t~loopctr215, 1);call #t~mem217 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem217, dest.base, dest.offset + #t~loopctr215, 4);call #t~mem218 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 1);call write~unchecked~int(#t~mem218, dest.base, dest.offset + #t~loopctr215, 1);call #t~mem219 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem219, dest.base, dest.offset + #t~loopctr215, 4);call #t~mem220 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem220, dest.base, dest.offset + #t~loopctr215, 4);#t~loopctr215 := 1 + #t~loopctr215; {96065#true} is VALID [2022-04-28 08:37:32,368 INFO L290 TraceCheckUtils]: 6: Hoare triple {96065#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {96065#true} is VALID [2022-04-28 08:37:32,368 INFO L290 TraceCheckUtils]: 7: Hoare triple {96065#true} assume #t~loopctr221 % 4294967296 < size % 4294967296;call #t~mem222.base, #t~mem222.offset := read~unchecked~$Pointer$(src.base, src.offset + #t~loopctr221, 4);call write~unchecked~$Pointer$(#t~mem222.base, #t~mem222.offset, dest.base, dest.offset + #t~loopctr221, 4);#t~loopctr221 := 4 + #t~loopctr221; {96065#true} is VALID [2022-04-28 08:37:32,368 INFO L290 TraceCheckUtils]: 8: Hoare triple {96065#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {96065#true} is VALID [2022-04-28 08:37:32,368 INFO L290 TraceCheckUtils]: 9: Hoare triple {96065#true} assume #res.base == dest.base && #res.offset == dest.offset; {96065#true} is VALID [2022-04-28 08:37:32,368 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {96065#true} {96065#true} #1186#return; {96065#true} is VALID [2022-04-28 08:37:32,369 INFO L290 TraceCheckUtils]: 11: Hoare triple {96065#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {96065#true} is VALID [2022-04-28 08:37:32,369 INFO L290 TraceCheckUtils]: 12: Hoare triple {96065#true} assume !(~s~0 != ~NP~0); {96065#true} is VALID [2022-04-28 08:37:32,369 INFO L290 TraceCheckUtils]: 13: Hoare triple {96065#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {96065#true} is VALID [2022-04-28 08:37:32,369 INFO L290 TraceCheckUtils]: 14: Hoare triple {96065#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {96065#true} is VALID [2022-04-28 08:37:32,369 INFO L272 TraceCheckUtils]: 15: Hoare triple {96065#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {96246#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:32,369 INFO L290 TraceCheckUtils]: 16: Hoare triple {96246#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {96065#true} is VALID [2022-04-28 08:37:32,370 INFO L290 TraceCheckUtils]: 17: Hoare triple {96065#true} assume 0 != ~compRegistered~0; {96065#true} is VALID [2022-04-28 08:37:32,370 INFO L272 TraceCheckUtils]: 18: Hoare triple {96065#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:32,370 INFO L290 TraceCheckUtils]: 19: Hoare triple {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {96065#true} is VALID [2022-04-28 08:37:32,371 INFO L272 TraceCheckUtils]: 20: Hoare triple {96065#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:32,371 INFO L290 TraceCheckUtils]: 21: Hoare triple {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {96065#true} is VALID [2022-04-28 08:37:32,371 INFO L290 TraceCheckUtils]: 22: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,371 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {96065#true} {96065#true} #1174#return; {96065#true} is VALID [2022-04-28 08:37:32,371 INFO L290 TraceCheckUtils]: 24: Hoare triple {96065#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {96065#true} is VALID [2022-04-28 08:37:32,371 INFO L290 TraceCheckUtils]: 25: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,371 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {96065#true} {96065#true} #1210#return; {96065#true} is VALID [2022-04-28 08:37:32,371 INFO L290 TraceCheckUtils]: 27: Hoare triple {96065#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {96065#true} is VALID [2022-04-28 08:37:32,371 INFO L290 TraceCheckUtils]: 28: Hoare triple {96065#true} assume -1073741802 == ~compRetStatus~0; {96065#true} is VALID [2022-04-28 08:37:32,372 INFO L272 TraceCheckUtils]: 29: Hoare triple {96065#true} call stubMoreProcessingRequired(); {96262#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:37:32,372 INFO L290 TraceCheckUtils]: 30: Hoare triple {96262#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {96065#true} is VALID [2022-04-28 08:37:32,372 INFO L290 TraceCheckUtils]: 31: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,372 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {96065#true} {96065#true} #1212#return; {96065#true} is VALID [2022-04-28 08:37:32,372 INFO L290 TraceCheckUtils]: 33: Hoare triple {96065#true} assume !(0 == ~__BLAST_NONDET~11); {96065#true} is VALID [2022-04-28 08:37:32,372 INFO L290 TraceCheckUtils]: 34: Hoare triple {96065#true} assume !(1 == ~__BLAST_NONDET~11); {96065#true} is VALID [2022-04-28 08:37:32,372 INFO L290 TraceCheckUtils]: 35: Hoare triple {96065#true} ~returnVal2~0 := 259; {96065#true} is VALID [2022-04-28 08:37:32,372 INFO L290 TraceCheckUtils]: 36: Hoare triple {96065#true} assume !(~s~0 == ~NP~0); {96065#true} is VALID [2022-04-28 08:37:32,372 INFO L290 TraceCheckUtils]: 37: Hoare triple {96065#true} assume ~s~0 == ~MPR1~0; {96065#true} is VALID [2022-04-28 08:37:32,372 INFO L290 TraceCheckUtils]: 38: Hoare triple {96065#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {96065#true} is VALID [2022-04-28 08:37:32,372 INFO L290 TraceCheckUtils]: 39: Hoare triple {96065#true} #res := ~returnVal2~0; {96065#true} is VALID [2022-04-28 08:37:32,373 INFO L290 TraceCheckUtils]: 40: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,373 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {96065#true} {96065#true} #1192#return; {96065#true} is VALID [2022-04-28 08:37:32,373 INFO L290 TraceCheckUtils]: 42: Hoare triple {96065#true} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {96065#true} is VALID [2022-04-28 08:37:32,373 INFO L290 TraceCheckUtils]: 43: Hoare triple {96065#true} assume 259 == ~status~3; {96065#true} is VALID [2022-04-28 08:37:32,373 INFO L272 TraceCheckUtils]: 44: Hoare triple {96065#true} call #t~ret110 := KeWaitForSingleObject(~#event~1.base, ~#event~1.offset, 0, 0, 0, 0, 0); {96263#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:32,374 INFO L290 TraceCheckUtils]: 45: Hoare triple {96263#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {96065#true} is VALID [2022-04-28 08:37:32,374 INFO L290 TraceCheckUtils]: 46: Hoare triple {96065#true} assume ~s~0 == ~MPR3~0; {96065#true} is VALID [2022-04-28 08:37:32,374 INFO L290 TraceCheckUtils]: 47: Hoare triple {96065#true} assume 1 == ~setEventCalled~0;~s~0 := ~NP~0;~setEventCalled~0 := 0; {96065#true} is VALID [2022-04-28 08:37:32,374 INFO L290 TraceCheckUtils]: 48: Hoare triple {96065#true} assume 0 == ~__BLAST_NONDET~13; {96065#true} is VALID [2022-04-28 08:37:32,374 INFO L290 TraceCheckUtils]: 49: Hoare triple {96065#true} #res := 0; {96065#true} is VALID [2022-04-28 08:37:32,374 INFO L290 TraceCheckUtils]: 50: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,374 INFO L284 TraceCheckUtils]: 51: Hoare quadruple {96065#true} {96065#true} #1194#return; {96065#true} is VALID [2022-04-28 08:37:32,374 INFO L290 TraceCheckUtils]: 52: Hoare triple {96065#true} assume -2147483648 <= #t~ret110 && #t~ret110 <= 2147483647;havoc #t~ret110; {96065#true} is VALID [2022-04-28 08:37:32,374 INFO L290 TraceCheckUtils]: 53: Hoare triple {96065#true} assume ~status~3 >= 0; {96065#true} is VALID [2022-04-28 08:37:32,374 INFO L290 TraceCheckUtils]: 54: Hoare triple {96065#true} assume ~myStatus~0 >= 0;call write~int(1, ~devExt~3.base, 52 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 54 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 53 + ~devExt~3.offset, 1); {96065#true} is VALID [2022-04-28 08:37:32,374 INFO L290 TraceCheckUtils]: 55: Hoare triple {96065#true} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {96065#true} is VALID [2022-04-28 08:37:32,375 INFO L272 TraceCheckUtils]: 56: Hoare triple {96065#true} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {96262#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:37:32,375 INFO L290 TraceCheckUtils]: 57: Hoare triple {96262#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {96065#true} is VALID [2022-04-28 08:37:32,375 INFO L290 TraceCheckUtils]: 58: Hoare triple {96065#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {96065#true} is VALID [2022-04-28 08:37:32,375 INFO L290 TraceCheckUtils]: 59: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,375 INFO L284 TraceCheckUtils]: 60: Hoare quadruple {96065#true} {96065#true} #1196#return; {96065#true} is VALID [2022-04-28 08:37:32,375 INFO L290 TraceCheckUtils]: 61: Hoare triple {96065#true} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {96065#true} is VALID [2022-04-28 08:37:32,375 INFO L290 TraceCheckUtils]: 62: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,375 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {96065#true} {96066#false} #1230#return; {96066#false} is VALID [2022-04-28 08:37:32,376 INFO L272 TraceCheckUtils]: 0: Hoare triple {96065#true} call ULTIMATE.init(); {96174#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:37:32,376 INFO L290 TraceCheckUtils]: 1: Hoare triple {96174#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pirp~0.base |old(~pirp~0.base)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= ~pirp~0.offset |old(~pirp~0.offset)|) (= |old(~_SLAM_alloc_dummy~0)| ~_SLAM_alloc_dummy~0) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(18, 2);call #Ultimate.allocInit(12, 3);~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~pirp~0.base, ~pirp~0.offset := 0, 0;~_SLAM_alloc_dummy~0 := 0; {96065#true} is VALID [2022-04-28 08:37:32,377 INFO L290 TraceCheckUtils]: 2: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,377 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {96065#true} {96065#true} #1270#return; {96065#true} is VALID [2022-04-28 08:37:32,377 INFO L272 TraceCheckUtils]: 4: Hoare triple {96065#true} call #t~ret213 := main(); {96065#true} is VALID [2022-04-28 08:37:32,377 INFO L290 TraceCheckUtils]: 5: Hoare triple {96065#true} call ~#d~0.base, ~#d~0.offset := #Ultimate.allocOnStack(168);call ~#u~0.base, ~#u~0.offset := #Ultimate.allocOnStack(8);havoc ~status~5;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~we_should_unload~0 := #t~nondet154;havoc #t~nondet154;call ~#irp~0.base, ~#irp~0.offset := #Ultimate.allocOnStack(111);assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~__BLAST_NONDET~0 := #t~nondet155;havoc #t~nondet155;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~irp_choice~0 := #t~nondet156;havoc #t~nondet156;call ~#devext~0.base, ~#devext~0.offset := #Ultimate.allocOnStack(55);call ~#devobj~0.base, ~#devobj~0.offset := #Ultimate.allocOnStack(175);call write~$Pointer$(~#devext~0.base, ~#devext~0.offset, ~#devobj~0.base, 40 + ~#devobj~0.offset, 4);call ~#ext~0.base, ~#ext~0.offset := #Ultimate.allocOnStack(20);call write~$Pointer$(~#ext~0.base, ~#ext~0.offset, ~#d~0.base, 24 + ~#d~0.offset, 4);call ~#hookkb~0.base, ~#hookkb~0.offset := #Ultimate.allocOnStack(24);call ~#stack~0.base, ~#stack~0.offset := #Ultimate.allocOnStack(108);call write~int(#t~nondet157, ~#stack~0.base, ~#stack~0.offset, 1);havoc #t~nondet157;call write~int(#t~nondet158, ~#stack~0.base, 36 + ~#stack~0.offset, 1);havoc #t~nondet158;call write~int(#t~nondet159, ~#stack~0.base, 72 + ~#stack~0.offset, 1);havoc #t~nondet159;call write~int(#t~nondet160, ~#stack~0.base, 1 + ~#stack~0.offset, 1);havoc #t~nondet160;call write~int(#t~nondet161, ~#stack~0.base, 37 + ~#stack~0.offset, 1);havoc #t~nondet161;call write~int(#t~nondet162, ~#stack~0.base, 73 + ~#stack~0.offset, 1);havoc #t~nondet162;call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 16 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 52 + ~#stack~0.offset, 4);call write~$Pointer$(~#hookkb~0.base, ~#hookkb~0.offset, ~#stack~0.base, 88 + ~#stack~0.offset, 4);call write~int(#t~nondet163, ~#stack~0.base, 8 + ~#stack~0.offset, 4);havoc #t~nondet163;call write~int(#t~nondet164, ~#stack~0.base, 44 + ~#stack~0.offset, 4);havoc #t~nondet164;call write~int(#t~nondet165, ~#stack~0.base, 80 + ~#stack~0.offset, 4);havoc #t~nondet165;call write~int(#t~nondet166, ~#stack~0.base, 12 + ~#stack~0.offset, 4);havoc #t~nondet166;call write~int(#t~nondet167, ~#stack~0.base, 48 + ~#stack~0.offset, 4);havoc #t~nondet167;call write~int(#t~nondet168, ~#stack~0.base, 84 + ~#stack~0.offset, 4);havoc #t~nondet168;call write~$Pointer$(~#stack~0.base, 36 + ~#stack~0.offset, ~#irp~0.base, 96 + ~#irp~0.offset, 4);~pirp~0.base, ~pirp~0.offset := ~#irp~0.base, ~#irp~0.offset; {96065#true} is VALID [2022-04-28 08:37:32,378 INFO L272 TraceCheckUtils]: 6: Hoare triple {96065#true} call _BLAST_init(); {96175#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:32,378 INFO L290 TraceCheckUtils]: 7: Hoare triple {96175#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {96065#true} is VALID [2022-04-28 08:37:32,378 INFO L290 TraceCheckUtils]: 8: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,378 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {96065#true} {96065#true} #1216#return; {96065#true} is VALID [2022-04-28 08:37:32,379 INFO L272 TraceCheckUtils]: 10: Hoare triple {96065#true} call #t~ret169 := DriverEntry(~#d~0.base, ~#d~0.offset, ~#u~0.base, ~#u~0.offset); {96176#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:37:32,379 INFO L290 TraceCheckUtils]: 11: Hoare triple {96176#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~RegistryPath.base, ~RegistryPath.offset := #in~RegistryPath.base, #in~RegistryPath.offset;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~i~0 := #t~nondet20;havoc #t~nondet20; {96065#true} is VALID [2022-04-28 08:37:32,379 INFO L272 TraceCheckUtils]: 12: Hoare triple {96065#true} call assume_abort_if_not((if ~i~0 % 4294967296 < 28 then 1 else 0)); {96065#true} is VALID [2022-04-28 08:37:32,379 INFO L290 TraceCheckUtils]: 13: Hoare triple {96065#true} ~cond := #in~cond; {96065#true} is VALID [2022-04-28 08:37:32,379 INFO L290 TraceCheckUtils]: 14: Hoare triple {96065#true} assume !(0 == ~cond); {96065#true} is VALID [2022-04-28 08:37:32,379 INFO L290 TraceCheckUtils]: 15: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,379 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {96065#true} {96065#true} #1254#return; {96065#true} is VALID [2022-04-28 08:37:32,379 INFO L290 TraceCheckUtils]: 17: Hoare triple {96065#true} call write~$Pointer$(#funAddr~KbFilter_DispatchPassThrough.base, #funAddr~KbFilter_DispatchPassThrough.offset, ~DriverObject.base, 56 + ~DriverObject.offset + 4 * (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296), 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 56 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_CreateClose.base, #funAddr~KbFilter_CreateClose.offset, ~DriverObject.base, 64 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_PnP.base, #funAddr~KbFilter_PnP.offset, ~DriverObject.base, 164 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Power.base, #funAddr~KbFilter_Power.offset, ~DriverObject.base, 144 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_InternIoCtl.base, #funAddr~KbFilter_InternIoCtl.offset, ~DriverObject.base, 116 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_Unload.base, #funAddr~KbFilter_Unload.offset, ~DriverObject.base, 52 + ~DriverObject.offset, 4);call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~DriverObject.base, 24 + ~DriverObject.offset, 4);call write~$Pointer$(#funAddr~KbFilter_AddDevice.base, #funAddr~KbFilter_AddDevice.offset, #t~mem21.base, 4 + #t~mem21.offset, 4);havoc #t~mem21.base, #t~mem21.offset;#res := 0; {96065#true} is VALID [2022-04-28 08:37:32,379 INFO L290 TraceCheckUtils]: 18: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,379 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {96065#true} {96065#true} #1218#return; {96065#true} is VALID [2022-04-28 08:37:32,379 INFO L290 TraceCheckUtils]: 20: Hoare triple {96065#true} assume -2147483648 <= #t~ret169 && #t~ret169 <= 2147483647;~status~5 := #t~ret169;havoc #t~ret169; {96065#true} is VALID [2022-04-28 08:37:32,379 INFO L290 TraceCheckUtils]: 21: Hoare triple {96065#true} assume ~status~5 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0.base, ~compFptr~0.offset := 0, ~compRegistered~0;~pended~0 := ~compFptr~0.base + ~compFptr~0.offset;call write~int(0, ~pirp~0.base, 24 + ~pirp~0.offset, 4);~myStatus~0 := 0; {96065#true} is VALID [2022-04-28 08:37:32,379 INFO L290 TraceCheckUtils]: 22: Hoare triple {96065#true} assume !(0 == ~irp_choice~0); {96065#true} is VALID [2022-04-28 08:37:32,380 INFO L272 TraceCheckUtils]: 23: Hoare triple {96065#true} call #t~ret170 := KbFilter_AddDevice(~#d~0.base, ~#d~0.offset, ~#devobj~0.base, ~#devobj~0.offset); {96181#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:37:32,380 INFO L290 TraceCheckUtils]: 24: Hoare triple {96181#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~Driver.base, ~Driver.offset := #in~Driver.base, #in~Driver.offset;~PDO.base, ~PDO.offset := #in~PDO.base, #in~PDO.offset;havoc ~devExt~0.base, ~devExt~0.offset;call ~#device~0.base, ~#device~0.offset := #Ultimate.allocOnStack(4);havoc ~status~0;~status~0 := 0; {96065#true} is VALID [2022-04-28 08:37:32,381 INFO L272 TraceCheckUtils]: 25: Hoare triple {96065#true} call #t~ret22 := IoCreateDevice(~Driver.base, ~Driver.offset, 55, 0, 0, 11, 0, 0, ~#device~0.base, ~#device~0.offset); {96181#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} is VALID [2022-04-28 08:37:32,381 INFO L290 TraceCheckUtils]: 26: Hoare triple {96181#(and (= |old(#length)| |#length|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(#valid)| |#valid|))} ~DriverObject.base, ~DriverObject.offset := #in~DriverObject.base, #in~DriverObject.offset;~DeviceExtensionSize := #in~DeviceExtensionSize;~DeviceName.base, ~DeviceName.offset := #in~DeviceName.base, #in~DeviceName.offset;~DeviceType := #in~DeviceType;~DeviceCharacteristics := #in~DeviceCharacteristics;~Exclusive := #in~Exclusive;~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;assume -2147483648 <= #t~nondet185 && #t~nondet185 <= 2147483647;~__BLAST_NONDET~5 := #t~nondet185;havoc #t~nondet185;havoc ~tmp~8.base, ~tmp~8.offset; {96065#true} is VALID [2022-04-28 08:37:32,381 INFO L290 TraceCheckUtils]: 27: Hoare triple {96065#true} assume 0 == ~__BLAST_NONDET~5; {96065#true} is VALID [2022-04-28 08:37:32,381 INFO L290 TraceCheckUtils]: 28: Hoare triple {96065#true} call #t~malloc186.base, #t~malloc186.offset := #Ultimate.allocOnHeap(175);~tmp~8.base, ~tmp~8.offset := #t~malloc186.base, #t~malloc186.offset;havoc #t~malloc186.base, #t~malloc186.offset;call write~$Pointer$(~tmp~8.base, ~tmp~8.offset, ~DeviceObject.base, ~DeviceObject.offset, 4);call #t~mem187.base, #t~mem187.offset := read~$Pointer$(~DeviceObject.base, ~DeviceObject.offset, 4);call #t~malloc188.base, #t~malloc188.offset := #Ultimate.allocOnHeap(~DeviceExtensionSize);call write~$Pointer$(#t~malloc188.base, #t~malloc188.offset, #t~mem187.base, 40 + #t~mem187.offset, 4);havoc #t~mem187.base, #t~mem187.offset;havoc #t~malloc188.base, #t~malloc188.offset;#res := 0; {96065#true} is VALID [2022-04-28 08:37:32,382 INFO L290 TraceCheckUtils]: 29: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,382 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {96065#true} {96065#true} #1176#return; {96065#true} is VALID [2022-04-28 08:37:32,382 INFO L290 TraceCheckUtils]: 31: Hoare triple {96065#true} assume -2147483648 <= #t~ret22 && #t~ret22 <= 2147483647;~status~0 := #t~ret22;havoc #t~ret22; {96065#true} is VALID [2022-04-28 08:37:32,382 INFO L290 TraceCheckUtils]: 32: Hoare triple {96065#true} assume !!(~status~0 >= 0);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(#t~mem23.base, 40 + #t~mem23.offset, 4); {96065#true} is VALID [2022-04-28 08:37:32,382 INFO L272 TraceCheckUtils]: 33: Hoare triple {96065#true} call #t~memset~res25.base, #t~memset~res25.offset := #Ultimate.C_memset(#t~mem24.base, #t~mem24.offset, 0, 55); {96176#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:37:32,383 INFO L290 TraceCheckUtils]: 34: Hoare triple {96176#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr214 := 0; {96197#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} is VALID [2022-04-28 08:37:32,384 INFO L290 TraceCheckUtils]: 35: Hoare triple {96197#(and (<= 0 |#Ultimate.C_memset_#t~loopctr214|) (<= |#Ultimate.C_memset_#t~loopctr214| 0))} assume #t~loopctr214 % 4294967296 < #amount % 4294967296;#memory_int := #memory_int[#ptr.base,#ptr.offset + #t~loopctr214 := #value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#ptr.base,#ptr.offset + #t~loopctr214 := 0], #memory_$Pointer$.offset[#ptr.base,#ptr.offset + #t~loopctr214 := #value % 256];#t~loopctr214 := 1 + #t~loopctr214; {96198#(and (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (or (and (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0))) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))))} is VALID [2022-04-28 08:37:32,384 INFO L290 TraceCheckUtils]: 36: Hoare triple {96198#(and (or (not (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))) (<= |#Ultimate.C_memset_#t~loopctr214| 1)) (or (and (<= (+ (* (div |#Ultimate.C_memset_#amount| 4294967296) 4294967296) 1) |#Ultimate.C_memset_#amount|) (not (<= (+ (div |#Ultimate.C_memset_#t~loopctr214| 4294967296) 1) 0))) (<= (div |#Ultimate.C_memset_#amount| 4294967296) (div |#Ultimate.C_memset_#t~loopctr214| 4294967296))))} assume !(#t~loopctr214 % 4294967296 < #amount % 4294967296); {96199#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:32,385 INFO L290 TraceCheckUtils]: 37: Hoare triple {96199#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} assume #res.base == #ptr.base && #res.offset == #ptr.offset; {96199#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} is VALID [2022-04-28 08:37:32,385 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {96199#(or (<= |#Ultimate.C_memset_#amount| 1) (<= 4294967297 |#Ultimate.C_memset_#amount|))} {96065#true} #1178#return; {96066#false} is VALID [2022-04-28 08:37:32,386 INFO L290 TraceCheckUtils]: 39: Hoare triple {96066#false} havoc #t~mem23.base, #t~mem23.offset;havoc #t~mem24.base, #t~mem24.offset;havoc #t~memset~res25.base, #t~memset~res25.offset;call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem27.base, #t~mem27.offset := read~$Pointer$(#t~mem26.base, 40 + #t~mem26.offset, 4);~devExt~0.base, ~devExt~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem26.base, #t~mem26.offset;havoc #t~mem27.base, #t~mem27.offset;call #t~mem28.base, #t~mem28.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4); {96066#false} is VALID [2022-04-28 08:37:32,386 INFO L272 TraceCheckUtils]: 40: Hoare triple {96066#false} call #t~ret29.base, #t~ret29.offset := IoAttachDeviceToDeviceStack(#t~mem28.base, #t~mem28.offset, ~PDO.base, ~PDO.offset); {96065#true} is VALID [2022-04-28 08:37:32,386 INFO L290 TraceCheckUtils]: 41: Hoare triple {96065#true} ~SourceDevice.base, ~SourceDevice.offset := #in~SourceDevice.base, #in~SourceDevice.offset;~TargetDevice.base, ~TargetDevice.offset := #in~TargetDevice.base, #in~TargetDevice.offset;assume -2147483648 <= #t~nondet180 && #t~nondet180 <= 2147483647;~__BLAST_NONDET~2 := #t~nondet180;havoc #t~nondet180; {96065#true} is VALID [2022-04-28 08:37:32,386 INFO L290 TraceCheckUtils]: 42: Hoare triple {96065#true} assume 0 == ~__BLAST_NONDET~2; {96065#true} is VALID [2022-04-28 08:37:32,386 INFO L290 TraceCheckUtils]: 43: Hoare triple {96065#true} #res.base, #res.offset := ~TargetDevice.base, ~TargetDevice.offset; {96065#true} is VALID [2022-04-28 08:37:32,386 INFO L290 TraceCheckUtils]: 44: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,386 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {96065#true} {96066#false} #1180#return; {96066#false} is VALID [2022-04-28 08:37:32,386 INFO L290 TraceCheckUtils]: 46: Hoare triple {96066#false} call write~$Pointer$(#t~ret29.base, #t~ret29.offset, ~devExt~0.base, 8 + ~devExt~0.offset, 4);havoc #t~mem28.base, #t~mem28.offset;havoc #t~ret29.base, #t~ret29.offset;call #t~mem30.base, #t~mem30.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call write~$Pointer$(#t~mem30.base, #t~mem30.offset, ~devExt~0.base, ~devExt~0.offset, 4);havoc #t~mem30.base, #t~mem30.offset;call write~$Pointer$(~PDO.base, ~PDO.offset, ~devExt~0.base, 4 + ~devExt~0.offset, 4);call write~int(1, ~devExt~0.base, 48 + ~devExt~0.offset, 4);call write~int(0, ~devExt~0.base, 53 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 54 + ~devExt~0.offset, 1);call write~int(0, ~devExt~0.base, 52 + ~devExt~0.offset, 1);call #t~mem31.base, #t~mem31.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem32 := read~int(#t~mem31.base, 28 + #t~mem31.offset, 4);call write~int(~bitwiseOr(#t~mem32, 8196), #t~mem31.base, 28 + #t~mem31.offset, 4);havoc #t~mem31.base, #t~mem31.offset;havoc #t~mem32;call #t~mem33.base, #t~mem33.offset := read~$Pointer$(~#device~0.base, ~#device~0.offset, 4);call #t~mem34 := read~int(#t~mem33.base, 28 + #t~mem33.offset, 4);call write~int((if 0 == #t~mem34 then 0 else (if 1 == #t~mem34 then 1 else ~bitwiseAnd(#t~mem34, 4294967167))), #t~mem33.base, 28 + #t~mem33.offset, 4);havoc #t~mem33.base, #t~mem33.offset;havoc #t~mem34;#res := ~status~0;call ULTIMATE.dealloc(~#device~0.base, ~#device~0.offset);havoc ~#device~0.base, ~#device~0.offset; {96066#false} is VALID [2022-04-28 08:37:32,386 INFO L290 TraceCheckUtils]: 47: Hoare triple {96066#false} assume true; {96066#false} is VALID [2022-04-28 08:37:32,386 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {96066#false} {96065#true} #1220#return; {96066#false} is VALID [2022-04-28 08:37:32,386 INFO L290 TraceCheckUtils]: 49: Hoare triple {96066#false} assume -2147483648 <= #t~ret170 && #t~ret170 <= 2147483647;~status~5 := #t~ret170;havoc #t~ret170; {96066#false} is VALID [2022-04-28 08:37:32,386 INFO L272 TraceCheckUtils]: 50: Hoare triple {96066#false} call stub_driver_init(); {96200#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:32,386 INFO L290 TraceCheckUtils]: 51: Hoare triple {96200#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 |old(~pended~0)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0.base, ~compFptr~0.offset := 0, 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {96065#true} is VALID [2022-04-28 08:37:32,386 INFO L290 TraceCheckUtils]: 52: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,386 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {96065#true} {96066#false} #1222#return; {96066#false} is VALID [2022-04-28 08:37:32,387 INFO L290 TraceCheckUtils]: 54: Hoare triple {96066#false} assume !!(~status~5 >= 0); {96066#false} is VALID [2022-04-28 08:37:32,387 INFO L290 TraceCheckUtils]: 55: Hoare triple {96066#false} assume !(0 == ~__BLAST_NONDET~0); {96066#false} is VALID [2022-04-28 08:37:32,387 INFO L290 TraceCheckUtils]: 56: Hoare triple {96066#false} assume !(1 == ~__BLAST_NONDET~0); {96066#false} is VALID [2022-04-28 08:37:32,387 INFO L290 TraceCheckUtils]: 57: Hoare triple {96066#false} assume !(2 == ~__BLAST_NONDET~0); {96066#false} is VALID [2022-04-28 08:37:32,387 INFO L290 TraceCheckUtils]: 58: Hoare triple {96066#false} assume 3 == ~__BLAST_NONDET~0; {96066#false} is VALID [2022-04-28 08:37:32,387 INFO L272 TraceCheckUtils]: 59: Hoare triple {96066#false} call #t~ret174 := KbFilter_PnP(~#devobj~0.base, ~#devobj~0.offset, ~pirp~0.base, ~pirp~0.offset); {96201#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:32,387 INFO L290 TraceCheckUtils]: 60: Hoare triple {96201#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(#length)| |#length|) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= ~myStatus~0 |old(~myStatus~0)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= |old(~compFptr~0.base)| ~compFptr~0.base) (= |old(~compFptr~0.offset)| ~compFptr~0.offset) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |old(#valid)| |#valid|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;havoc ~devExt~3.base, ~devExt~3.offset;havoc ~irpStack~3.base, ~irpStack~3.offset;havoc ~status~3;call ~#event~1.base, ~#event~1.offset := #Ultimate.allocOnStack(16);havoc ~irpSp~0.base, ~irpSp~0.offset;havoc ~nextIrpSp~0.base, ~nextIrpSp~0.offset;havoc ~irpSp___0~0.base, ~irpSp___0~0.offset;~status~3 := 0;call #t~mem79.base, #t~mem79.offset := read~$Pointer$(~DeviceObject.base, 40 + ~DeviceObject.offset, 4);~devExt~3.base, ~devExt~3.offset := #t~mem79.base, #t~mem79.offset;havoc #t~mem79.base, #t~mem79.offset;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpStack~3.base, ~irpStack~3.offset := #t~mem80.base, #t~mem80.offset;havoc #t~mem80.base, #t~mem80.offset;call #t~mem81 := read~int(~irpStack~3.base, 1 + ~irpStack~3.offset, 1); {96065#true} is VALID [2022-04-28 08:37:32,387 INFO L290 TraceCheckUtils]: 61: Hoare triple {96065#true} assume 0 == #t~mem81 % 256;havoc #t~mem81; {96065#true} is VALID [2022-04-28 08:37:32,387 INFO L290 TraceCheckUtils]: 62: Hoare triple {96065#true} call #t~mem102.base, #t~mem102.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp~0.base, ~irpSp~0.offset := #t~mem102.base, #t~mem102.offset;havoc #t~mem102.base, #t~mem102.offset;call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~nextIrpSp~0.base, ~nextIrpSp~0.offset := #t~mem103.base, #t~mem103.offset - 36;havoc #t~mem103.base, #t~mem103.offset; {96065#true} is VALID [2022-04-28 08:37:32,388 INFO L272 TraceCheckUtils]: 63: Hoare triple {96065#true} call #t~memmove~res104.base, #t~memmove~res104.offset := #Ultimate.C_memmove(~nextIrpSp~0.base, ~nextIrpSp~0.offset, ~irpSp~0.base, ~irpSp~0.offset, 28); {96176#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} is VALID [2022-04-28 08:37:32,388 INFO L290 TraceCheckUtils]: 64: Hoare triple {96176#(and (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))} #t~loopctr215 := 0; {96065#true} is VALID [2022-04-28 08:37:32,388 INFO L290 TraceCheckUtils]: 65: Hoare triple {96065#true} assume #t~loopctr215 % 4294967296 < size % 4294967296;call #t~mem216 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 1);call write~unchecked~int(#t~mem216, dest.base, dest.offset + #t~loopctr215, 1);call #t~mem217 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem217, dest.base, dest.offset + #t~loopctr215, 4);call #t~mem218 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 1);call write~unchecked~int(#t~mem218, dest.base, dest.offset + #t~loopctr215, 1);call #t~mem219 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem219, dest.base, dest.offset + #t~loopctr215, 4);call #t~mem220 := read~unchecked~int(src.base, src.offset + #t~loopctr215, 4);call write~unchecked~int(#t~mem220, dest.base, dest.offset + #t~loopctr215, 4);#t~loopctr215 := 1 + #t~loopctr215; {96065#true} is VALID [2022-04-28 08:37:32,388 INFO L290 TraceCheckUtils]: 66: Hoare triple {96065#true} assume !(#t~loopctr215 % 4294967296 < size % 4294967296);#t~loopctr221 := 0; {96065#true} is VALID [2022-04-28 08:37:32,388 INFO L290 TraceCheckUtils]: 67: Hoare triple {96065#true} assume #t~loopctr221 % 4294967296 < size % 4294967296;call #t~mem222.base, #t~mem222.offset := read~unchecked~$Pointer$(src.base, src.offset + #t~loopctr221, 4);call write~unchecked~$Pointer$(#t~mem222.base, #t~mem222.offset, dest.base, dest.offset + #t~loopctr221, 4);#t~loopctr221 := 4 + #t~loopctr221; {96065#true} is VALID [2022-04-28 08:37:32,388 INFO L290 TraceCheckUtils]: 68: Hoare triple {96065#true} assume !(#t~loopctr221 % 4294967296 < size % 4294967296); {96065#true} is VALID [2022-04-28 08:37:32,388 INFO L290 TraceCheckUtils]: 69: Hoare triple {96065#true} assume #res.base == dest.base && #res.offset == dest.offset; {96065#true} is VALID [2022-04-28 08:37:32,388 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {96065#true} {96065#true} #1186#return; {96065#true} is VALID [2022-04-28 08:37:32,388 INFO L290 TraceCheckUtils]: 71: Hoare triple {96065#true} havoc #t~memmove~res104.base, #t~memmove~res104.offset;call write~int(0, ~nextIrpSp~0.base, 3 + ~nextIrpSp~0.offset, 1); {96065#true} is VALID [2022-04-28 08:37:32,388 INFO L290 TraceCheckUtils]: 72: Hoare triple {96065#true} assume !(~s~0 != ~NP~0); {96065#true} is VALID [2022-04-28 08:37:32,388 INFO L290 TraceCheckUtils]: 73: Hoare triple {96065#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~compFptr~0.base, ~compFptr~0.offset := #funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset; {96065#true} is VALID [2022-04-28 08:37:32,389 INFO L290 TraceCheckUtils]: 74: Hoare triple {96065#true} call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~Irp.base, 96 + ~Irp.offset, 4);~irpSp___0~0.base, ~irpSp___0~0.offset := #t~mem105.base, #t~mem105.offset - 36;havoc #t~mem105.base, #t~mem105.offset;call write~$Pointer$(#funAddr~KbFilter_Complete.base, #funAddr~KbFilter_Complete.offset, ~irpSp___0~0.base, 28 + ~irpSp___0~0.offset, 4);call write~$Pointer$(~#event~1.base, ~#event~1.offset, ~irpSp___0~0.base, 32 + ~irpSp___0~0.offset, 4);call write~int(0, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(64, ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call #t~mem106 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem106 % 256, 128), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem106;call #t~mem107 := read~int(~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);call write~int(~bitwiseOr(#t~mem107 % 256, 32), ~irpSp___0~0.base, 3 + ~irpSp___0~0.offset, 1);havoc #t~mem107;call #t~mem108.base, #t~mem108.offset := read~$Pointer$(~devExt~3.base, 8 + ~devExt~3.offset, 4); {96065#true} is VALID [2022-04-28 08:37:32,389 INFO L272 TraceCheckUtils]: 75: Hoare triple {96065#true} call #t~ret109 := IofCallDriver(#t~mem108.base, #t~mem108.offset, ~Irp.base, ~Irp.offset); {96246#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:32,389 INFO L290 TraceCheckUtils]: 76: Hoare triple {96246#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;assume -2147483648 <= #t~nondet195 && #t~nondet195 <= 2147483647;~__BLAST_NONDET~11 := #t~nondet195;havoc #t~nondet195;havoc ~returnVal2~0;havoc ~compRetStatus~0;~lcontext~0.base, ~lcontext~0.offset := 0, 0;havoc ~tmp~10; {96065#true} is VALID [2022-04-28 08:37:32,389 INFO L290 TraceCheckUtils]: 77: Hoare triple {96065#true} assume 0 != ~compRegistered~0; {96065#true} is VALID [2022-04-28 08:37:32,390 INFO L272 TraceCheckUtils]: 78: Hoare triple {96065#true} call #t~ret196 := KbFilter_Complete(~DeviceObject.base, ~DeviceObject.offset, ~Irp.base, ~Irp.offset, ~lcontext~0.base, ~lcontext~0.offset); {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:32,390 INFO L290 TraceCheckUtils]: 79: Hoare triple {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject.base, ~DeviceObject.offset := #in~DeviceObject.base, #in~DeviceObject.offset;~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~Context.base, ~Context.offset := #in~Context.base, #in~Context.offset;havoc ~event~0.base, ~event~0.offset;~event~0.base, ~event~0.offset := ~Context.base, ~Context.offset; {96065#true} is VALID [2022-04-28 08:37:32,391 INFO L272 TraceCheckUtils]: 80: Hoare triple {96065#true} call #t~ret35 := KeSetEvent(~event~0.base, ~event~0.offset, 0, 0); {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:37:32,391 INFO L290 TraceCheckUtils]: 81: Hoare triple {96258#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event.base, ~Event.offset := #in~Event.base, #in~Event.offset;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet199 && #t~nondet199 <= 2147483647;~l~0 := #t~nondet199;havoc #t~nondet199;~setEventCalled~0 := 1;#res := ~l~0; {96065#true} is VALID [2022-04-28 08:37:32,391 INFO L290 TraceCheckUtils]: 82: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,391 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {96065#true} {96065#true} #1174#return; {96065#true} is VALID [2022-04-28 08:37:32,391 INFO L290 TraceCheckUtils]: 84: Hoare triple {96065#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;havoc #t~ret35;#res := -1073741802; {96065#true} is VALID [2022-04-28 08:37:32,391 INFO L290 TraceCheckUtils]: 85: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,391 INFO L284 TraceCheckUtils]: 86: Hoare quadruple {96065#true} {96065#true} #1210#return; {96065#true} is VALID [2022-04-28 08:37:32,391 INFO L290 TraceCheckUtils]: 87: Hoare triple {96065#true} assume -2147483648 <= #t~ret196 && #t~ret196 <= 2147483647;~tmp~10 := #t~ret196;havoc #t~ret196;~compRetStatus~0 := ~tmp~10; {96065#true} is VALID [2022-04-28 08:37:32,391 INFO L290 TraceCheckUtils]: 88: Hoare triple {96065#true} assume -1073741802 == ~compRetStatus~0; {96065#true} is VALID [2022-04-28 08:37:32,392 INFO L272 TraceCheckUtils]: 89: Hoare triple {96065#true} call stubMoreProcessingRequired(); {96262#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:37:32,392 INFO L290 TraceCheckUtils]: 90: Hoare triple {96262#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {96065#true} is VALID [2022-04-28 08:37:32,392 INFO L290 TraceCheckUtils]: 91: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,392 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {96065#true} {96065#true} #1212#return; {96065#true} is VALID [2022-04-28 08:37:32,392 INFO L290 TraceCheckUtils]: 93: Hoare triple {96065#true} assume !(0 == ~__BLAST_NONDET~11); {96065#true} is VALID [2022-04-28 08:37:32,392 INFO L290 TraceCheckUtils]: 94: Hoare triple {96065#true} assume !(1 == ~__BLAST_NONDET~11); {96065#true} is VALID [2022-04-28 08:37:32,392 INFO L290 TraceCheckUtils]: 95: Hoare triple {96065#true} ~returnVal2~0 := 259; {96065#true} is VALID [2022-04-28 08:37:32,392 INFO L290 TraceCheckUtils]: 96: Hoare triple {96065#true} assume !(~s~0 == ~NP~0); {96065#true} is VALID [2022-04-28 08:37:32,392 INFO L290 TraceCheckUtils]: 97: Hoare triple {96065#true} assume ~s~0 == ~MPR1~0; {96065#true} is VALID [2022-04-28 08:37:32,392 INFO L290 TraceCheckUtils]: 98: Hoare triple {96065#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {96065#true} is VALID [2022-04-28 08:37:32,392 INFO L290 TraceCheckUtils]: 99: Hoare triple {96065#true} #res := ~returnVal2~0; {96065#true} is VALID [2022-04-28 08:37:32,392 INFO L290 TraceCheckUtils]: 100: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,392 INFO L284 TraceCheckUtils]: 101: Hoare quadruple {96065#true} {96065#true} #1192#return; {96065#true} is VALID [2022-04-28 08:37:32,392 INFO L290 TraceCheckUtils]: 102: Hoare triple {96065#true} assume -2147483648 <= #t~ret109 && #t~ret109 <= 2147483647;~status~3 := #t~ret109;havoc #t~mem108.base, #t~mem108.offset;havoc #t~ret109; {96065#true} is VALID [2022-04-28 08:37:32,392 INFO L290 TraceCheckUtils]: 103: Hoare triple {96065#true} assume 259 == ~status~3; {96065#true} is VALID [2022-04-28 08:37:32,393 INFO L272 TraceCheckUtils]: 104: Hoare triple {96065#true} call #t~ret110 := KeWaitForSingleObject(~#event~1.base, ~#event~1.offset, 0, 0, 0, 0, 0); {96263#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:37:32,393 INFO L290 TraceCheckUtils]: 105: Hoare triple {96263#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object.base, ~Object.offset := #in~Object.base, #in~Object.offset;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout.base, ~Timeout.offset := #in~Timeout.base, #in~Timeout.offset;assume -2147483648 <= #t~nondet200 && #t~nondet200 <= 2147483647;~__BLAST_NONDET~13 := #t~nondet200;havoc #t~nondet200; {96065#true} is VALID [2022-04-28 08:37:32,393 INFO L290 TraceCheckUtils]: 106: Hoare triple {96065#true} assume ~s~0 == ~MPR3~0; {96065#true} is VALID [2022-04-28 08:37:32,393 INFO L290 TraceCheckUtils]: 107: Hoare triple {96065#true} assume 1 == ~setEventCalled~0;~s~0 := ~NP~0;~setEventCalled~0 := 0; {96065#true} is VALID [2022-04-28 08:37:32,393 INFO L290 TraceCheckUtils]: 108: Hoare triple {96065#true} assume 0 == ~__BLAST_NONDET~13; {96065#true} is VALID [2022-04-28 08:37:32,393 INFO L290 TraceCheckUtils]: 109: Hoare triple {96065#true} #res := 0; {96065#true} is VALID [2022-04-28 08:37:32,394 INFO L290 TraceCheckUtils]: 110: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,394 INFO L284 TraceCheckUtils]: 111: Hoare quadruple {96065#true} {96065#true} #1194#return; {96065#true} is VALID [2022-04-28 08:37:32,394 INFO L290 TraceCheckUtils]: 112: Hoare triple {96065#true} assume -2147483648 <= #t~ret110 && #t~ret110 <= 2147483647;havoc #t~ret110; {96065#true} is VALID [2022-04-28 08:37:32,394 INFO L290 TraceCheckUtils]: 113: Hoare triple {96065#true} assume ~status~3 >= 0; {96065#true} is VALID [2022-04-28 08:37:32,394 INFO L290 TraceCheckUtils]: 114: Hoare triple {96065#true} assume ~myStatus~0 >= 0;call write~int(1, ~devExt~3.base, 52 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 54 + ~devExt~3.offset, 1);call write~int(0, ~devExt~3.base, 53 + ~devExt~3.offset, 1); {96065#true} is VALID [2022-04-28 08:37:32,394 INFO L290 TraceCheckUtils]: 115: Hoare triple {96065#true} call write~int(~status~3, ~Irp.base, 24 + ~Irp.offset, 4);~myStatus~0 := ~status~3;call write~int(0, ~Irp.base, 28 + ~Irp.offset, 4); {96065#true} is VALID [2022-04-28 08:37:32,394 INFO L272 TraceCheckUtils]: 116: Hoare triple {96065#true} call IofCompleteRequest(~Irp.base, ~Irp.offset, 0); {96262#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:37:32,394 INFO L290 TraceCheckUtils]: 117: Hoare triple {96262#(= ~s~0 |old(~s~0)|)} ~Irp.base, ~Irp.offset := #in~Irp.base, #in~Irp.offset;~PriorityBoost := #in~PriorityBoost; {96065#true} is VALID [2022-04-28 08:37:32,395 INFO L290 TraceCheckUtils]: 118: Hoare triple {96065#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {96065#true} is VALID [2022-04-28 08:37:32,395 INFO L290 TraceCheckUtils]: 119: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,395 INFO L284 TraceCheckUtils]: 120: Hoare quadruple {96065#true} {96065#true} #1196#return; {96065#true} is VALID [2022-04-28 08:37:32,395 INFO L290 TraceCheckUtils]: 121: Hoare triple {96065#true} #res := ~status~3;call ULTIMATE.dealloc(~#event~1.base, ~#event~1.offset);havoc ~#event~1.base, ~#event~1.offset; {96065#true} is VALID [2022-04-28 08:37:32,395 INFO L290 TraceCheckUtils]: 122: Hoare triple {96065#true} assume true; {96065#true} is VALID [2022-04-28 08:37:32,395 INFO L284 TraceCheckUtils]: 123: Hoare quadruple {96065#true} {96066#false} #1230#return; {96066#false} is VALID [2022-04-28 08:37:32,395 INFO L290 TraceCheckUtils]: 124: Hoare triple {96066#false} assume -2147483648 <= #t~ret174 && #t~ret174 <= 2147483647;~status~5 := #t~ret174;havoc #t~ret174; {96066#false} is VALID [2022-04-28 08:37:32,395 INFO L290 TraceCheckUtils]: 125: Hoare triple {96066#false} assume 0 != ~we_should_unload~0; {96066#false} is VALID [2022-04-28 08:37:32,395 INFO L290 TraceCheckUtils]: 126: Hoare triple {96066#false} assume !(1 == ~pended~0); {96066#false} is VALID [2022-04-28 08:37:32,395 INFO L290 TraceCheckUtils]: 127: Hoare triple {96066#false} assume !(1 == ~pended~0); {96066#false} is VALID [2022-04-28 08:37:32,395 INFO L290 TraceCheckUtils]: 128: Hoare triple {96066#false} assume !(~s~0 == ~UNLOADED~0); {96066#false} is VALID [2022-04-28 08:37:32,395 INFO L290 TraceCheckUtils]: 129: Hoare triple {96066#false} assume !(-1 == ~status~5); {96066#false} is VALID [2022-04-28 08:37:32,395 INFO L290 TraceCheckUtils]: 130: Hoare triple {96066#false} assume ~s~0 != ~SKIP2~0; {96066#false} is VALID [2022-04-28 08:37:32,395 INFO L290 TraceCheckUtils]: 131: Hoare triple {96066#false} assume ~s~0 != ~IPC~0; {96066#false} is VALID [2022-04-28 08:37:32,395 INFO L290 TraceCheckUtils]: 132: Hoare triple {96066#false} assume !(~s~0 != ~DC~0); {96066#false} is VALID [2022-04-28 08:37:32,395 INFO L290 TraceCheckUtils]: 133: Hoare triple {96066#false} assume !(1 == ~pended~0); {96066#false} is VALID [2022-04-28 08:37:32,396 INFO L290 TraceCheckUtils]: 134: Hoare triple {96066#false} assume ~s~0 == ~DC~0; {96066#false} is VALID [2022-04-28 08:37:32,396 INFO L290 TraceCheckUtils]: 135: Hoare triple {96066#false} assume 259 == ~status~5; {96066#false} is VALID [2022-04-28 08:37:32,396 INFO L272 TraceCheckUtils]: 136: Hoare triple {96066#false} call errorFn(); {96066#false} is VALID [2022-04-28 08:37:32,396 INFO L290 TraceCheckUtils]: 137: Hoare triple {96066#false} assume !false; {96066#false} is VALID [2022-04-28 08:37:32,396 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 08:37:32,396 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:37:32,396 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [529776484] [2022-04-28 08:37:32,396 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [529776484] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 08:37:32,396 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [750883793] [2022-04-28 08:37:32,396 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-04-28 08:37:32,397 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 08:37:32,397 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 08:37:32,398 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 08:37:32,398 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process