/usr/bin/java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationJordan_32.epf -i ../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-1.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-fb4f59a-m [2022-04-28 08:11:33,359 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-04-28 08:11:33,361 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-04-28 08:11:33,394 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-04-28 08:11:33,394 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-04-28 08:11:33,395 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-04-28 08:11:33,399 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-04-28 08:11:33,401 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-04-28 08:11:33,403 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-04-28 08:11:33,406 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-04-28 08:11:33,407 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-04-28 08:11:33,408 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-04-28 08:11:33,408 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-04-28 08:11:33,409 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-04-28 08:11:33,409 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-04-28 08:11:33,410 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-04-28 08:11:33,410 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-04-28 08:11:33,411 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-04-28 08:11:33,412 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-04-28 08:11:33,413 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-04-28 08:11:33,414 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-04-28 08:11:33,415 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-04-28 08:11:33,416 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-04-28 08:11:33,416 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-04-28 08:11:33,417 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-04-28 08:11:33,419 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-04-28 08:11:33,419 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-04-28 08:11:33,420 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-04-28 08:11:33,420 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-04-28 08:11:33,421 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-04-28 08:11:33,421 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-04-28 08:11:33,422 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-04-28 08:11:33,422 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-04-28 08:11:33,423 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-04-28 08:11:33,423 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-04-28 08:11:33,424 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-04-28 08:11:33,424 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-04-28 08:11:33,425 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-04-28 08:11:33,425 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-04-28 08:11:33,425 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-04-28 08:11:33,426 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-04-28 08:11:33,426 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-04-28 08:11:33,427 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationJordan_32.epf [2022-04-28 08:11:33,435 INFO L113 SettingsManager]: Loading preferences was successful [2022-04-28 08:11:33,436 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-04-28 08:11:33,437 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-04-28 08:11:33,437 INFO L138 SettingsManager]: * sizeof long=4 [2022-04-28 08:11:33,438 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-04-28 08:11:33,438 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-04-28 08:11:33,438 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-04-28 08:11:33,438 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-04-28 08:11:33,438 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-04-28 08:11:33,439 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-04-28 08:11:33,439 INFO L138 SettingsManager]: * sizeof long double=12 [2022-04-28 08:11:33,439 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-04-28 08:11:33,439 INFO L138 SettingsManager]: * Use constant arrays=true [2022-04-28 08:11:33,439 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-04-28 08:11:33,439 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-04-28 08:11:33,440 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-04-28 08:11:33,440 INFO L138 SettingsManager]: * To the following directory=./dump/ [2022-04-28 08:11:33,440 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-04-28 08:11:33,440 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-28 08:11:33,440 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-04-28 08:11:33,440 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=Craig_NestedInterpolation [2022-04-28 08:11:33,440 INFO L138 SettingsManager]: * Trace refinement strategy=ACCELERATED_INTERPOLATION [2022-04-28 08:11:33,440 INFO L138 SettingsManager]: * Trace refinement strategy used in Accelerated Interpolation=CAMEL [2022-04-28 08:11:33,440 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-04-28 08:11:33,441 INFO L138 SettingsManager]: * Loop acceleration method that is used by accelerated interpolation=JORDAN [2022-04-28 08:11:33,441 INFO L138 SettingsManager]: * Use separate solver for trace checks=false WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-04-28 08:11:33,643 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-04-28 08:11:33,659 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-04-28 08:11:33,661 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-04-28 08:11:33,662 INFO L271 PluginConnector]: Initializing CDTParser... [2022-04-28 08:11:33,662 INFO L275 PluginConnector]: CDTParser initialized [2022-04-28 08:11:33,663 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-1.c [2022-04-28 08:11:33,711 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/aa1c7bdb4/04b1dd992dd942d3be23bd3fbd391ac8/FLAG0a7559fea [2022-04-28 08:11:34,103 INFO L306 CDTParser]: Found 1 translation units. [2022-04-28 08:11:34,104 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-1.c [2022-04-28 08:11:34,113 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/aa1c7bdb4/04b1dd992dd942d3be23bd3fbd391ac8/FLAG0a7559fea [2022-04-28 08:11:34,124 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/aa1c7bdb4/04b1dd992dd942d3be23bd3fbd391ac8 [2022-04-28 08:11:34,126 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-04-28 08:11:34,127 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2022-04-28 08:11:34,128 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-04-28 08:11:34,129 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-04-28 08:11:34,131 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-04-28 08:11:34,132 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.04 08:11:34" (1/1) ... [2022-04-28 08:11:34,133 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@22a2385 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:34, skipping insertion in model container [2022-04-28 08:11:34,133 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.04 08:11:34" (1/1) ... [2022-04-28 08:11:34,137 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-04-28 08:11:34,170 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-04-28 08:11:34,404 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-1.c[29620,29633] [2022-04-28 08:11:34,406 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-28 08:11:34,414 INFO L203 MainTranslator]: Completed pre-run [2022-04-28 08:11:34,482 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-1.c[29620,29633] [2022-04-28 08:11:34,483 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-28 08:11:34,495 INFO L208 MainTranslator]: Completed translation [2022-04-28 08:11:34,496 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:34 WrapperNode [2022-04-28 08:11:34,496 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-04-28 08:11:34,497 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-04-28 08:11:34,497 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-04-28 08:11:34,497 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-04-28 08:11:34,507 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:34" (1/1) ... [2022-04-28 08:11:34,507 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:34" (1/1) ... [2022-04-28 08:11:34,518 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:34" (1/1) ... [2022-04-28 08:11:34,518 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:34" (1/1) ... [2022-04-28 08:11:34,541 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:34" (1/1) ... [2022-04-28 08:11:34,575 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:34" (1/1) ... [2022-04-28 08:11:34,578 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:34" (1/1) ... [2022-04-28 08:11:34,583 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-04-28 08:11:34,584 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-04-28 08:11:34,584 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-04-28 08:11:34,584 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-04-28 08:11:34,585 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:34" (1/1) ... [2022-04-28 08:11:34,598 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-28 08:11:34,609 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 08:11:34,619 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-04-28 08:11:34,621 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-04-28 08:11:34,651 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2022-04-28 08:11:34,651 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-04-28 08:11:34,651 INFO L138 BoogieDeclarations]: Found implementation of procedure reach_error [2022-04-28 08:11:34,651 INFO L138 BoogieDeclarations]: Found implementation of procedure stub_driver_init [2022-04-28 08:11:34,651 INFO L138 BoogieDeclarations]: Found implementation of procedure _BLAST_init [2022-04-28 08:11:34,651 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_PnP [2022-04-28 08:11:34,651 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2022-04-28 08:11:34,652 INFO L138 BoogieDeclarations]: Found implementation of procedure stubMoreProcessingRequired [2022-04-28 08:11:34,652 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCallDriver [2022-04-28 08:11:34,652 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCompleteRequest [2022-04-28 08:11:34,653 INFO L138 BoogieDeclarations]: Found implementation of procedure KeSetEvent [2022-04-28 08:11:34,653 INFO L138 BoogieDeclarations]: Found implementation of procedure KeWaitForSingleObject [2022-04-28 08:11:34,653 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Complete [2022-04-28 08:11:34,653 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_CreateClose [2022-04-28 08:11:34,653 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_DispatchPassThrough [2022-04-28 08:11:34,653 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Power [2022-04-28 08:11:34,654 INFO L138 BoogieDeclarations]: Found implementation of procedure PoCallDriver [2022-04-28 08:11:34,654 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_InternIoCtl [2022-04-28 08:11:34,654 INFO L138 BoogieDeclarations]: Found implementation of procedure errorFn [2022-04-28 08:11:34,654 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2022-04-28 08:11:34,654 INFO L130 BoogieDeclarations]: Found specification of procedure __assert_fail [2022-04-28 08:11:34,654 INFO L130 BoogieDeclarations]: Found specification of procedure reach_error [2022-04-28 08:11:34,654 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-04-28 08:11:34,654 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_char [2022-04-28 08:11:34,654 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2022-04-28 08:11:34,655 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_long [2022-04-28 08:11:34,655 INFO L130 BoogieDeclarations]: Found specification of procedure PoCallDriver [2022-04-28 08:11:34,655 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_PnP [2022-04-28 08:11:34,655 INFO L130 BoogieDeclarations]: Found specification of procedure IofCallDriver [2022-04-28 08:11:34,655 INFO L130 BoogieDeclarations]: Found specification of procedure KeSetEvent [2022-04-28 08:11:34,655 INFO L130 BoogieDeclarations]: Found specification of procedure KeWaitForSingleObject [2022-04-28 08:11:34,655 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Complete [2022-04-28 08:11:34,655 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_CreateClose [2022-04-28 08:11:34,655 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_DispatchPassThrough [2022-04-28 08:11:34,656 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Power [2022-04-28 08:11:34,656 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_InternIoCtl [2022-04-28 08:11:34,656 INFO L130 BoogieDeclarations]: Found specification of procedure stub_driver_init [2022-04-28 08:11:34,656 INFO L130 BoogieDeclarations]: Found specification of procedure _BLAST_init [2022-04-28 08:11:34,656 INFO L130 BoogieDeclarations]: Found specification of procedure IofCompleteRequest [2022-04-28 08:11:34,656 INFO L130 BoogieDeclarations]: Found specification of procedure errorFn [2022-04-28 08:11:34,656 INFO L130 BoogieDeclarations]: Found specification of procedure main [2022-04-28 08:11:34,656 INFO L130 BoogieDeclarations]: Found specification of procedure stubMoreProcessingRequired [2022-04-28 08:11:34,656 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2022-04-28 08:11:34,656 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-04-28 08:11:34,657 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-04-28 08:11:34,657 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-04-28 08:11:34,657 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-04-28 08:11:34,657 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-04-28 08:11:34,823 INFO L234 CfgBuilder]: Building ICFG [2022-04-28 08:11:34,827 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-04-28 08:11:34,889 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:11:35,009 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##18: assume false; [2022-04-28 08:11:35,009 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##19: assume !false; [2022-04-28 08:11:35,014 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:11:35,065 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-28 08:11:35,065 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-28 08:11:35,192 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:11:35,205 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##16: assume !false; [2022-04-28 08:11:35,205 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##15: assume false; [2022-04-28 08:11:35,211 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:11:35,334 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##43: assume false; [2022-04-28 08:11:35,334 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##44: assume !false; [2022-04-28 08:11:35,342 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:11:35,383 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##10: assume !false; [2022-04-28 08:11:35,383 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##9: assume false; [2022-04-28 08:11:35,393 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:11:35,431 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-28 08:11:35,431 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-28 08:11:35,479 INFO L275 CfgBuilder]: Performing block encoding [2022-04-28 08:11:35,496 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-04-28 08:11:35,496 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-04-28 08:11:35,499 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.04 08:11:35 BoogieIcfgContainer [2022-04-28 08:11:35,499 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-04-28 08:11:35,501 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-04-28 08:11:35,502 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-04-28 08:11:35,504 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-04-28 08:11:35,505 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.04 08:11:34" (1/3) ... [2022-04-28 08:11:35,505 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@605f3fc6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.04 08:11:35, skipping insertion in model container [2022-04-28 08:11:35,506 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:34" (2/3) ... [2022-04-28 08:11:35,506 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@605f3fc6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.04 08:11:35, skipping insertion in model container [2022-04-28 08:11:35,506 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.04 08:11:35" (3/3) ... [2022-04-28 08:11:35,507 INFO L111 eAbstractionObserver]: Analyzing ICFG kbfiltr_simpl2.cil-1.c [2022-04-28 08:11:35,524 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:Craig_NestedInterpolation Determinization: PREDICATE_ABSTRACTION [2022-04-28 08:11:35,524 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-04-28 08:11:35,582 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-04-28 08:11:35,588 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=Craig_NestedInterpolation, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@2b4fd295, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@dc629e3 [2022-04-28 08:11:35,589 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-04-28 08:11:35,608 INFO L276 IsEmpty]: Start isEmpty. Operand has 239 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 199 states have internal predecessors, (284), 38 states have call successors, (38), 17 states have call predecessors, (38), 17 states have return successors, (38), 37 states have call predecessors, (38), 38 states have call successors, (38) [2022-04-28 08:11:35,620 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-04-28 08:11:35,620 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:11:35,621 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:11:35,621 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:11:35,626 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:11:35,626 INFO L85 PathProgramCache]: Analyzing trace with hash 1606654013, now seen corresponding path program 1 times [2022-04-28 08:11:35,636 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:35,637 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1476492623] [2022-04-28 08:11:35,650 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:11:35,650 INFO L85 PathProgramCache]: Analyzing trace with hash 1606654013, now seen corresponding path program 2 times [2022-04-28 08:11:35,653 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:11:35,654 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1069135445] [2022-04-28 08:11:35,654 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:11:35,654 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:11:35,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:35,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:11:35,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:36,021 INFO L290 TraceCheckUtils]: 0: Hoare triple {251#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {242#true} is VALID [2022-04-28 08:11:36,021 INFO L290 TraceCheckUtils]: 1: Hoare triple {242#true} assume true; {242#true} is VALID [2022-04-28 08:11:36,022 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {242#true} {242#true} #780#return; {242#true} is VALID [2022-04-28 08:11:36,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:11:36,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:36,094 INFO L290 TraceCheckUtils]: 0: Hoare triple {252#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {242#true} is VALID [2022-04-28 08:11:36,094 INFO L290 TraceCheckUtils]: 1: Hoare triple {242#true} assume true; {242#true} is VALID [2022-04-28 08:11:36,095 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {242#true} {247#(= main_~status~1 0)} #714#return; {247#(= main_~status~1 0)} is VALID [2022-04-28 08:11:36,097 INFO L272 TraceCheckUtils]: 0: Hoare triple {242#true} call ULTIMATE.init(); {251#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:11:36,097 INFO L290 TraceCheckUtils]: 1: Hoare triple {251#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {242#true} is VALID [2022-04-28 08:11:36,097 INFO L290 TraceCheckUtils]: 2: Hoare triple {242#true} assume true; {242#true} is VALID [2022-04-28 08:11:36,098 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {242#true} {242#true} #780#return; {242#true} is VALID [2022-04-28 08:11:36,098 INFO L272 TraceCheckUtils]: 4: Hoare triple {242#true} call #t~ret83 := main(); {242#true} is VALID [2022-04-28 08:11:36,098 INFO L290 TraceCheckUtils]: 5: Hoare triple {242#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {247#(= main_~status~1 0)} is VALID [2022-04-28 08:11:36,100 INFO L272 TraceCheckUtils]: 6: Hoare triple {247#(= main_~status~1 0)} call _BLAST_init(); {252#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:36,100 INFO L290 TraceCheckUtils]: 7: Hoare triple {252#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {242#true} is VALID [2022-04-28 08:11:36,101 INFO L290 TraceCheckUtils]: 8: Hoare triple {242#true} assume true; {242#true} is VALID [2022-04-28 08:11:36,101 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {242#true} {247#(= main_~status~1 0)} #714#return; {247#(= main_~status~1 0)} is VALID [2022-04-28 08:11:36,102 INFO L290 TraceCheckUtils]: 10: Hoare triple {247#(= main_~status~1 0)} assume !(~status~1 >= 0); {243#false} is VALID [2022-04-28 08:11:36,102 INFO L290 TraceCheckUtils]: 11: Hoare triple {243#false} assume !(1 == ~pended~0); {243#false} is VALID [2022-04-28 08:11:36,104 INFO L290 TraceCheckUtils]: 12: Hoare triple {243#false} assume !(1 == ~pended~0); {243#false} is VALID [2022-04-28 08:11:36,104 INFO L290 TraceCheckUtils]: 13: Hoare triple {243#false} assume ~s~0 != ~UNLOADED~0; {243#false} is VALID [2022-04-28 08:11:36,104 INFO L290 TraceCheckUtils]: 14: Hoare triple {243#false} assume -1 != ~status~1; {243#false} is VALID [2022-04-28 08:11:36,105 INFO L290 TraceCheckUtils]: 15: Hoare triple {243#false} assume !(~s~0 != ~SKIP2~0); {243#false} is VALID [2022-04-28 08:11:36,105 INFO L290 TraceCheckUtils]: 16: Hoare triple {243#false} assume 1 == ~pended~0; {243#false} is VALID [2022-04-28 08:11:36,105 INFO L290 TraceCheckUtils]: 17: Hoare triple {243#false} assume 259 != ~status~1; {243#false} is VALID [2022-04-28 08:11:36,105 INFO L272 TraceCheckUtils]: 18: Hoare triple {243#false} call errorFn(); {243#false} is VALID [2022-04-28 08:11:36,106 INFO L290 TraceCheckUtils]: 19: Hoare triple {243#false} assume !false; {243#false} is VALID [2022-04-28 08:11:36,106 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:11:36,107 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:11:36,107 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1069135445] [2022-04-28 08:11:36,108 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1069135445] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:36,109 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:36,111 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-28 08:11:36,113 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:11:36,119 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1476492623] [2022-04-28 08:11:36,120 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1476492623] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:36,120 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:36,120 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-28 08:11:36,120 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [532964499] [2022-04-28 08:11:36,121 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:11:36,126 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-28 08:11:36,128 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:11:36,130 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-28 08:11:36,155 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:36,155 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-04-28 08:11:36,155 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:36,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-04-28 08:11:36,189 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-28 08:11:36,199 INFO L87 Difference]: Start difference. First operand has 239 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 199 states have internal predecessors, (284), 38 states have call successors, (38), 17 states have call predecessors, (38), 17 states have return successors, (38), 37 states have call predecessors, (38), 38 states have call successors, (38) Second operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-28 08:11:38,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:38,280 INFO L93 Difference]: Finished difference Result 415 states and 624 transitions. [2022-04-28 08:11:38,280 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-04-28 08:11:38,281 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-28 08:11:38,281 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:11:38,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-28 08:11:38,310 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 624 transitions. [2022-04-28 08:11:38,310 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-28 08:11:38,326 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 624 transitions. [2022-04-28 08:11:38,326 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 5 states and 624 transitions. [2022-04-28 08:11:38,976 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 624 edges. 624 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:38,995 INFO L225 Difference]: With dead ends: 415 [2022-04-28 08:11:38,995 INFO L226 Difference]: Without dead ends: 256 [2022-04-28 08:11:38,999 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-28 08:11:39,002 INFO L413 NwaCegarLoop]: 296 mSDtfsCounter, 173 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 583 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 179 SdHoareTripleChecker+Valid, 446 SdHoareTripleChecker+Invalid, 624 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 583 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-28 08:11:39,003 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [179 Valid, 446 Invalid, 624 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 583 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-28 08:11:39,018 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2022-04-28 08:11:39,055 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 228. [2022-04-28 08:11:39,055 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:11:39,057 INFO L82 GeneralOperation]: Start isEquivalent. First operand 256 states. Second operand has 228 states, 174 states have (on average 1.4942528735632183) internal successors, (260), 189 states have internal predecessors, (260), 38 states have call successors, (38), 17 states have call predecessors, (38), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-28 08:11:39,059 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand has 228 states, 174 states have (on average 1.4942528735632183) internal successors, (260), 189 states have internal predecessors, (260), 38 states have call successors, (38), 17 states have call predecessors, (38), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-28 08:11:39,060 INFO L87 Difference]: Start difference. First operand 256 states. Second operand has 228 states, 174 states have (on average 1.4942528735632183) internal successors, (260), 189 states have internal predecessors, (260), 38 states have call successors, (38), 17 states have call predecessors, (38), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-28 08:11:39,074 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:39,074 INFO L93 Difference]: Finished difference Result 256 states and 363 transitions. [2022-04-28 08:11:39,074 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 363 transitions. [2022-04-28 08:11:39,077 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:39,077 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:39,079 INFO L74 IsIncluded]: Start isIncluded. First operand has 228 states, 174 states have (on average 1.4942528735632183) internal successors, (260), 189 states have internal predecessors, (260), 38 states have call successors, (38), 17 states have call predecessors, (38), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 256 states. [2022-04-28 08:11:39,079 INFO L87 Difference]: Start difference. First operand has 228 states, 174 states have (on average 1.4942528735632183) internal successors, (260), 189 states have internal predecessors, (260), 38 states have call successors, (38), 17 states have call predecessors, (38), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 256 states. [2022-04-28 08:11:39,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:39,092 INFO L93 Difference]: Finished difference Result 256 states and 363 transitions. [2022-04-28 08:11:39,092 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 363 transitions. [2022-04-28 08:11:39,094 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:39,094 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:39,094 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:11:39,095 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:11:39,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 228 states, 174 states have (on average 1.4942528735632183) internal successors, (260), 189 states have internal predecessors, (260), 38 states have call successors, (38), 17 states have call predecessors, (38), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-28 08:11:39,107 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 228 states to 228 states and 322 transitions. [2022-04-28 08:11:39,108 INFO L78 Accepts]: Start accepts. Automaton has 228 states and 322 transitions. Word has length 20 [2022-04-28 08:11:39,108 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:11:39,109 INFO L495 AbstractCegarLoop]: Abstraction has 228 states and 322 transitions. [2022-04-28 08:11:39,109 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-28 08:11:39,109 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 228 states and 322 transitions. [2022-04-28 08:11:39,473 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 322 edges. 322 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:39,473 INFO L276 IsEmpty]: Start isEmpty. Operand 228 states and 322 transitions. [2022-04-28 08:11:39,474 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-28 08:11:39,474 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:11:39,474 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:11:39,475 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-04-28 08:11:39,475 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:11:39,475 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:11:39,475 INFO L85 PathProgramCache]: Analyzing trace with hash -584418248, now seen corresponding path program 1 times [2022-04-28 08:11:39,476 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:39,476 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [544093246] [2022-04-28 08:11:39,476 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:11:39,477 INFO L85 PathProgramCache]: Analyzing trace with hash -584418248, now seen corresponding path program 2 times [2022-04-28 08:11:39,477 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:11:39,477 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [582323509] [2022-04-28 08:11:39,477 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:11:39,477 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:11:39,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:39,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:11:39,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:39,581 INFO L290 TraceCheckUtils]: 0: Hoare triple {2065#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {2053#true} is VALID [2022-04-28 08:11:39,582 INFO L290 TraceCheckUtils]: 1: Hoare triple {2053#true} assume true; {2053#true} is VALID [2022-04-28 08:11:39,582 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2053#true} {2053#true} #780#return; {2053#true} is VALID [2022-04-28 08:11:39,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:11:39,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:39,613 INFO L290 TraceCheckUtils]: 0: Hoare triple {2066#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2053#true} is VALID [2022-04-28 08:11:39,613 INFO L290 TraceCheckUtils]: 1: Hoare triple {2053#true} assume true; {2053#true} is VALID [2022-04-28 08:11:39,613 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2053#true} {2053#true} #714#return; {2053#true} is VALID [2022-04-28 08:11:39,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:11:39,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:39,633 INFO L290 TraceCheckUtils]: 0: Hoare triple {2067#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2064#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:39,633 INFO L290 TraceCheckUtils]: 1: Hoare triple {2064#(= ~s~0 ~NP~0)} assume true; {2064#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:39,634 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2064#(= ~s~0 ~NP~0)} {2053#true} #716#return; {2064#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:39,635 INFO L272 TraceCheckUtils]: 0: Hoare triple {2053#true} call ULTIMATE.init(); {2065#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:11:39,635 INFO L290 TraceCheckUtils]: 1: Hoare triple {2065#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {2053#true} is VALID [2022-04-28 08:11:39,636 INFO L290 TraceCheckUtils]: 2: Hoare triple {2053#true} assume true; {2053#true} is VALID [2022-04-28 08:11:39,636 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {2053#true} {2053#true} #780#return; {2053#true} is VALID [2022-04-28 08:11:39,636 INFO L272 TraceCheckUtils]: 4: Hoare triple {2053#true} call #t~ret83 := main(); {2053#true} is VALID [2022-04-28 08:11:39,636 INFO L290 TraceCheckUtils]: 5: Hoare triple {2053#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {2053#true} is VALID [2022-04-28 08:11:39,638 INFO L272 TraceCheckUtils]: 6: Hoare triple {2053#true} call _BLAST_init(); {2066#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:39,638 INFO L290 TraceCheckUtils]: 7: Hoare triple {2066#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2053#true} is VALID [2022-04-28 08:11:39,638 INFO L290 TraceCheckUtils]: 8: Hoare triple {2053#true} assume true; {2053#true} is VALID [2022-04-28 08:11:39,638 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {2053#true} {2053#true} #714#return; {2053#true} is VALID [2022-04-28 08:11:39,639 INFO L290 TraceCheckUtils]: 10: Hoare triple {2053#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {2053#true} is VALID [2022-04-28 08:11:39,639 INFO L290 TraceCheckUtils]: 11: Hoare triple {2053#true} assume !(0 == ~irp_choice~0); {2053#true} is VALID [2022-04-28 08:11:39,640 INFO L272 TraceCheckUtils]: 12: Hoare triple {2053#true} call stub_driver_init(); {2067#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:39,640 INFO L290 TraceCheckUtils]: 13: Hoare triple {2067#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2064#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:39,644 INFO L290 TraceCheckUtils]: 14: Hoare triple {2064#(= ~s~0 ~NP~0)} assume true; {2064#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:39,644 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {2064#(= ~s~0 ~NP~0)} {2053#true} #716#return; {2064#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:39,645 INFO L290 TraceCheckUtils]: 16: Hoare triple {2064#(= ~s~0 ~NP~0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {2064#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:39,645 INFO L290 TraceCheckUtils]: 17: Hoare triple {2064#(= ~s~0 ~NP~0)} assume 0 == ~tmp_ndt_1~0; {2064#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:39,646 INFO L272 TraceCheckUtils]: 18: Hoare triple {2064#(= ~s~0 ~NP~0)} call #t~ret31 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {2064#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:39,646 INFO L290 TraceCheckUtils]: 19: Hoare triple {2064#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet43 && #t~nondet43 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet43;havoc #t~nondet43;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet44;havoc #t~nondet44;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {2064#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:39,647 INFO L290 TraceCheckUtils]: 20: Hoare triple {2064#(= ~s~0 ~NP~0)} assume 0 == ~irpStack__MajorFunction~0; {2064#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:39,649 INFO L290 TraceCheckUtils]: 21: Hoare triple {2064#(= ~s~0 ~NP~0)} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {2064#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:39,649 INFO L290 TraceCheckUtils]: 22: Hoare triple {2064#(= ~s~0 ~NP~0)} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {2064#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:39,650 INFO L272 TraceCheckUtils]: 23: Hoare triple {2064#(= ~s~0 ~NP~0)} call #t~ret45 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {2064#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:39,650 INFO L290 TraceCheckUtils]: 24: Hoare triple {2064#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet46;havoc #t~nondet46;assume -2147483648 <= #t~nondet47 && #t~nondet47 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet47;havoc #t~nondet47;assume -2147483648 <= #t~nondet48 && #t~nondet48 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet48;havoc #t~nondet48;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {2064#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:39,651 INFO L290 TraceCheckUtils]: 25: Hoare triple {2064#(= ~s~0 ~NP~0)} assume !(~s~0 == ~NP~0); {2054#false} is VALID [2022-04-28 08:11:39,651 INFO L272 TraceCheckUtils]: 26: Hoare triple {2054#false} call errorFn(); {2054#false} is VALID [2022-04-28 08:11:39,651 INFO L290 TraceCheckUtils]: 27: Hoare triple {2054#false} assume !false; {2054#false} is VALID [2022-04-28 08:11:39,652 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:11:39,652 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:11:39,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [582323509] [2022-04-28 08:11:39,653 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [582323509] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:39,653 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:39,653 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 08:11:39,653 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:11:39,653 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [544093246] [2022-04-28 08:11:39,654 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [544093246] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:39,654 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:39,654 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 08:11:39,654 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2011842762] [2022-04-28 08:11:39,654 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:11:39,655 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-28 08:11:39,655 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:11:39,656 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:39,678 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:39,679 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-28 08:11:39,679 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:39,679 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-28 08:11:39,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-28 08:11:39,680 INFO L87 Difference]: Start difference. First operand 228 states and 322 transitions. Second operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:41,605 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:41,605 INFO L93 Difference]: Finished difference Result 401 states and 553 transitions. [2022-04-28 08:11:41,605 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-28 08:11:41,605 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-28 08:11:41,606 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:11:41,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:41,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 553 transitions. [2022-04-28 08:11:41,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:41,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 553 transitions. [2022-04-28 08:11:41,624 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 553 transitions. [2022-04-28 08:11:42,137 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 553 edges. 553 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:42,148 INFO L225 Difference]: With dead ends: 401 [2022-04-28 08:11:42,148 INFO L226 Difference]: Without dead ends: 343 [2022-04-28 08:11:42,149 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-28 08:11:42,150 INFO L413 NwaCegarLoop]: 350 mSDtfsCounter, 382 mSDsluCounter, 110 mSDsCounter, 0 mSdLazyCounter, 602 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 382 SdHoareTripleChecker+Valid, 460 SdHoareTripleChecker+Invalid, 664 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 602 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-28 08:11:42,150 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [382 Valid, 460 Invalid, 664 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 602 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-28 08:11:42,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-04-28 08:11:42,185 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 301. [2022-04-28 08:11:42,186 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:11:42,187 INFO L82 GeneralOperation]: Start isEquivalent. First operand 343 states. Second operand has 301 states, 237 states have (on average 1.3924050632911393) internal successors, (330), 240 states have internal predecessors, (330), 37 states have call successors, (37), 23 states have call predecessors, (37), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-28 08:11:42,188 INFO L74 IsIncluded]: Start isIncluded. First operand 343 states. Second operand has 301 states, 237 states have (on average 1.3924050632911393) internal successors, (330), 240 states have internal predecessors, (330), 37 states have call successors, (37), 23 states have call predecessors, (37), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-28 08:11:42,189 INFO L87 Difference]: Start difference. First operand 343 states. Second operand has 301 states, 237 states have (on average 1.3924050632911393) internal successors, (330), 240 states have internal predecessors, (330), 37 states have call successors, (37), 23 states have call predecessors, (37), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-28 08:11:42,202 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:42,202 INFO L93 Difference]: Finished difference Result 343 states and 469 transitions. [2022-04-28 08:11:42,202 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 469 transitions. [2022-04-28 08:11:42,204 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:42,204 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:42,205 INFO L74 IsIncluded]: Start isIncluded. First operand has 301 states, 237 states have (on average 1.3924050632911393) internal successors, (330), 240 states have internal predecessors, (330), 37 states have call successors, (37), 23 states have call predecessors, (37), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 343 states. [2022-04-28 08:11:42,206 INFO L87 Difference]: Start difference. First operand has 301 states, 237 states have (on average 1.3924050632911393) internal successors, (330), 240 states have internal predecessors, (330), 37 states have call successors, (37), 23 states have call predecessors, (37), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 343 states. [2022-04-28 08:11:42,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:42,219 INFO L93 Difference]: Finished difference Result 343 states and 469 transitions. [2022-04-28 08:11:42,219 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 469 transitions. [2022-04-28 08:11:42,220 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:42,221 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:42,221 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:11:42,221 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:11:42,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 301 states, 237 states have (on average 1.3924050632911393) internal successors, (330), 240 states have internal predecessors, (330), 37 states have call successors, (37), 23 states have call predecessors, (37), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-28 08:11:42,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 301 states to 301 states and 411 transitions. [2022-04-28 08:11:42,235 INFO L78 Accepts]: Start accepts. Automaton has 301 states and 411 transitions. Word has length 28 [2022-04-28 08:11:42,235 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:11:42,235 INFO L495 AbstractCegarLoop]: Abstraction has 301 states and 411 transitions. [2022-04-28 08:11:42,235 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:42,235 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 301 states and 411 transitions. [2022-04-28 08:11:42,654 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 411 edges. 411 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:42,654 INFO L276 IsEmpty]: Start isEmpty. Operand 301 states and 411 transitions. [2022-04-28 08:11:42,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-28 08:11:42,655 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:11:42,655 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:11:42,656 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-04-28 08:11:42,656 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:11:42,656 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:11:42,656 INFO L85 PathProgramCache]: Analyzing trace with hash 1124228951, now seen corresponding path program 1 times [2022-04-28 08:11:42,656 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:42,656 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1991359817] [2022-04-28 08:11:42,657 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:11:42,657 INFO L85 PathProgramCache]: Analyzing trace with hash 1124228951, now seen corresponding path program 2 times [2022-04-28 08:11:42,657 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:11:42,657 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1603498123] [2022-04-28 08:11:42,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:11:42,657 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:11:42,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:42,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:11:42,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:42,752 INFO L290 TraceCheckUtils]: 0: Hoare triple {4177#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {4165#true} is VALID [2022-04-28 08:11:42,752 INFO L290 TraceCheckUtils]: 1: Hoare triple {4165#true} assume true; {4165#true} is VALID [2022-04-28 08:11:42,752 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4165#true} {4165#true} #780#return; {4165#true} is VALID [2022-04-28 08:11:42,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:11:42,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:42,783 INFO L290 TraceCheckUtils]: 0: Hoare triple {4178#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4165#true} is VALID [2022-04-28 08:11:42,783 INFO L290 TraceCheckUtils]: 1: Hoare triple {4165#true} assume true; {4165#true} is VALID [2022-04-28 08:11:42,783 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4165#true} {4165#true} #714#return; {4165#true} is VALID [2022-04-28 08:11:42,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:11:42,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:42,801 INFO L290 TraceCheckUtils]: 0: Hoare triple {4179#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4176#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:42,802 INFO L290 TraceCheckUtils]: 1: Hoare triple {4176#(= ~compRegistered~0 0)} assume true; {4176#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:42,802 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4176#(= ~compRegistered~0 0)} {4165#true} #716#return; {4176#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:42,804 INFO L272 TraceCheckUtils]: 0: Hoare triple {4165#true} call ULTIMATE.init(); {4177#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:11:42,804 INFO L290 TraceCheckUtils]: 1: Hoare triple {4177#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {4165#true} is VALID [2022-04-28 08:11:42,804 INFO L290 TraceCheckUtils]: 2: Hoare triple {4165#true} assume true; {4165#true} is VALID [2022-04-28 08:11:42,804 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {4165#true} {4165#true} #780#return; {4165#true} is VALID [2022-04-28 08:11:42,804 INFO L272 TraceCheckUtils]: 4: Hoare triple {4165#true} call #t~ret83 := main(); {4165#true} is VALID [2022-04-28 08:11:42,804 INFO L290 TraceCheckUtils]: 5: Hoare triple {4165#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {4165#true} is VALID [2022-04-28 08:11:42,805 INFO L272 TraceCheckUtils]: 6: Hoare triple {4165#true} call _BLAST_init(); {4178#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:42,806 INFO L290 TraceCheckUtils]: 7: Hoare triple {4178#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4165#true} is VALID [2022-04-28 08:11:42,806 INFO L290 TraceCheckUtils]: 8: Hoare triple {4165#true} assume true; {4165#true} is VALID [2022-04-28 08:11:42,806 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {4165#true} {4165#true} #714#return; {4165#true} is VALID [2022-04-28 08:11:42,806 INFO L290 TraceCheckUtils]: 10: Hoare triple {4165#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {4165#true} is VALID [2022-04-28 08:11:42,806 INFO L290 TraceCheckUtils]: 11: Hoare triple {4165#true} assume !(0 == ~irp_choice~0); {4165#true} is VALID [2022-04-28 08:11:42,807 INFO L272 TraceCheckUtils]: 12: Hoare triple {4165#true} call stub_driver_init(); {4179#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:42,807 INFO L290 TraceCheckUtils]: 13: Hoare triple {4179#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4176#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:42,808 INFO L290 TraceCheckUtils]: 14: Hoare triple {4176#(= ~compRegistered~0 0)} assume true; {4176#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:42,808 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {4176#(= ~compRegistered~0 0)} {4165#true} #716#return; {4176#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:42,808 INFO L290 TraceCheckUtils]: 16: Hoare triple {4176#(= ~compRegistered~0 0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {4176#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:42,809 INFO L290 TraceCheckUtils]: 17: Hoare triple {4176#(= ~compRegistered~0 0)} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {4176#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:42,815 INFO L290 TraceCheckUtils]: 18: Hoare triple {4176#(= ~compRegistered~0 0)} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {4176#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:42,816 INFO L290 TraceCheckUtils]: 19: Hoare triple {4176#(= ~compRegistered~0 0)} assume 3 == ~tmp_ndt_3~0; {4176#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:42,817 INFO L272 TraceCheckUtils]: 20: Hoare triple {4176#(= ~compRegistered~0 0)} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {4176#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:42,817 INFO L290 TraceCheckUtils]: 21: Hoare triple {4176#(= ~compRegistered~0 0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {4176#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:42,817 INFO L290 TraceCheckUtils]: 22: Hoare triple {4176#(= ~compRegistered~0 0)} assume 0 == ~irpStack__MinorFunction~0; {4176#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:42,818 INFO L290 TraceCheckUtils]: 23: Hoare triple {4176#(= ~compRegistered~0 0)} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {4176#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:42,818 INFO L290 TraceCheckUtils]: 24: Hoare triple {4176#(= ~compRegistered~0 0)} assume !(~s~0 != ~NP~0); {4176#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:42,819 INFO L290 TraceCheckUtils]: 25: Hoare triple {4176#(= ~compRegistered~0 0)} assume 0 != ~compRegistered~0; {4166#false} is VALID [2022-04-28 08:11:42,819 INFO L272 TraceCheckUtils]: 26: Hoare triple {4166#false} call errorFn(); {4166#false} is VALID [2022-04-28 08:11:42,819 INFO L290 TraceCheckUtils]: 27: Hoare triple {4166#false} assume !false; {4166#false} is VALID [2022-04-28 08:11:42,820 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:11:42,820 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:11:42,821 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1603498123] [2022-04-28 08:11:42,821 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1603498123] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:42,821 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:42,821 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 08:11:42,822 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:11:42,822 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1991359817] [2022-04-28 08:11:42,825 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1991359817] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:42,825 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:42,826 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 08:11:42,826 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [324478133] [2022-04-28 08:11:42,826 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:11:42,826 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-28 08:11:42,827 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:11:42,827 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:42,848 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:42,848 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-28 08:11:42,849 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:42,849 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-28 08:11:42,849 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-28 08:11:42,849 INFO L87 Difference]: Start difference. First operand 301 states and 411 transitions. Second operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:44,509 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:44,510 INFO L93 Difference]: Finished difference Result 478 states and 635 transitions. [2022-04-28 08:11:44,510 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-28 08:11:44,510 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-28 08:11:44,510 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:11:44,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:44,518 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 503 transitions. [2022-04-28 08:11:44,518 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:44,525 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 503 transitions. [2022-04-28 08:11:44,525 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 503 transitions. [2022-04-28 08:11:44,958 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 503 edges. 503 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:44,969 INFO L225 Difference]: With dead ends: 478 [2022-04-28 08:11:44,969 INFO L226 Difference]: Without dead ends: 362 [2022-04-28 08:11:44,970 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-28 08:11:44,971 INFO L413 NwaCegarLoop]: 263 mSDtfsCounter, 404 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 467 mSolverCounterSat, 64 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 404 SdHoareTripleChecker+Valid, 379 SdHoareTripleChecker+Invalid, 531 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 64 IncrementalHoareTripleChecker+Valid, 467 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-04-28 08:11:44,971 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [404 Valid, 379 Invalid, 531 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [64 Valid, 467 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-04-28 08:11:44,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 362 states. [2022-04-28 08:11:45,007 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 362 to 341. [2022-04-28 08:11:45,007 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:11:45,008 INFO L82 GeneralOperation]: Start isEquivalent. First operand 362 states. Second operand has 341 states, 278 states have (on average 1.3848920863309353) internal successors, (385), 279 states have internal predecessors, (385), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:45,009 INFO L74 IsIncluded]: Start isIncluded. First operand 362 states. Second operand has 341 states, 278 states have (on average 1.3848920863309353) internal successors, (385), 279 states have internal predecessors, (385), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:45,010 INFO L87 Difference]: Start difference. First operand 362 states. Second operand has 341 states, 278 states have (on average 1.3848920863309353) internal successors, (385), 279 states have internal predecessors, (385), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:45,023 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:45,024 INFO L93 Difference]: Finished difference Result 362 states and 486 transitions. [2022-04-28 08:11:45,024 INFO L276 IsEmpty]: Start isEmpty. Operand 362 states and 486 transitions. [2022-04-28 08:11:45,025 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:45,025 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:45,026 INFO L74 IsIncluded]: Start isIncluded. First operand has 341 states, 278 states have (on average 1.3848920863309353) internal successors, (385), 279 states have internal predecessors, (385), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 362 states. [2022-04-28 08:11:45,027 INFO L87 Difference]: Start difference. First operand has 341 states, 278 states have (on average 1.3848920863309353) internal successors, (385), 279 states have internal predecessors, (385), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 362 states. [2022-04-28 08:11:45,043 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:45,043 INFO L93 Difference]: Finished difference Result 362 states and 486 transitions. [2022-04-28 08:11:45,043 INFO L276 IsEmpty]: Start isEmpty. Operand 362 states and 486 transitions. [2022-04-28 08:11:45,046 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:45,046 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:45,046 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:11:45,046 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:11:45,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 341 states, 278 states have (on average 1.3848920863309353) internal successors, (385), 279 states have internal predecessors, (385), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:45,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 341 states to 341 states and 462 transitions. [2022-04-28 08:11:45,062 INFO L78 Accepts]: Start accepts. Automaton has 341 states and 462 transitions. Word has length 28 [2022-04-28 08:11:45,062 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:11:45,062 INFO L495 AbstractCegarLoop]: Abstraction has 341 states and 462 transitions. [2022-04-28 08:11:45,062 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:45,062 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 341 states and 462 transitions. [2022-04-28 08:11:45,519 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 462 edges. 462 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:45,519 INFO L276 IsEmpty]: Start isEmpty. Operand 341 states and 462 transitions. [2022-04-28 08:11:45,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-04-28 08:11:45,520 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:11:45,520 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:11:45,520 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-04-28 08:11:45,520 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:11:45,521 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:11:45,521 INFO L85 PathProgramCache]: Analyzing trace with hash 512919532, now seen corresponding path program 1 times [2022-04-28 08:11:45,521 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:45,521 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1885876012] [2022-04-28 08:11:45,523 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:11:45,523 INFO L85 PathProgramCache]: Analyzing trace with hash 512919532, now seen corresponding path program 2 times [2022-04-28 08:11:45,523 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:11:45,524 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1986024620] [2022-04-28 08:11:45,524 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:11:45,524 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:11:45,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:45,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:11:45,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:45,626 INFO L290 TraceCheckUtils]: 0: Hoare triple {6561#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6549#true} is VALID [2022-04-28 08:11:45,628 INFO L290 TraceCheckUtils]: 1: Hoare triple {6549#true} assume true; {6549#true} is VALID [2022-04-28 08:11:45,628 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6549#true} {6549#true} #780#return; {6549#true} is VALID [2022-04-28 08:11:45,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:11:45,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:45,657 INFO L290 TraceCheckUtils]: 0: Hoare triple {6562#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6549#true} is VALID [2022-04-28 08:11:45,657 INFO L290 TraceCheckUtils]: 1: Hoare triple {6549#true} assume true; {6549#true} is VALID [2022-04-28 08:11:45,658 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6549#true} {6549#true} #714#return; {6549#true} is VALID [2022-04-28 08:11:45,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:11:45,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:45,683 INFO L290 TraceCheckUtils]: 0: Hoare triple {6563#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6549#true} is VALID [2022-04-28 08:11:45,684 INFO L290 TraceCheckUtils]: 1: Hoare triple {6549#true} assume true; {6549#true} is VALID [2022-04-28 08:11:45,684 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6549#true} {6549#true} #716#return; {6549#true} is VALID [2022-04-28 08:11:45,685 INFO L272 TraceCheckUtils]: 0: Hoare triple {6549#true} call ULTIMATE.init(); {6561#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:11:45,685 INFO L290 TraceCheckUtils]: 1: Hoare triple {6561#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6549#true} is VALID [2022-04-28 08:11:45,686 INFO L290 TraceCheckUtils]: 2: Hoare triple {6549#true} assume true; {6549#true} is VALID [2022-04-28 08:11:45,686 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {6549#true} {6549#true} #780#return; {6549#true} is VALID [2022-04-28 08:11:45,686 INFO L272 TraceCheckUtils]: 4: Hoare triple {6549#true} call #t~ret83 := main(); {6549#true} is VALID [2022-04-28 08:11:45,687 INFO L290 TraceCheckUtils]: 5: Hoare triple {6549#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {6549#true} is VALID [2022-04-28 08:11:45,688 INFO L272 TraceCheckUtils]: 6: Hoare triple {6549#true} call _BLAST_init(); {6562#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:45,688 INFO L290 TraceCheckUtils]: 7: Hoare triple {6562#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6549#true} is VALID [2022-04-28 08:11:45,690 INFO L290 TraceCheckUtils]: 8: Hoare triple {6549#true} assume true; {6549#true} is VALID [2022-04-28 08:11:45,690 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {6549#true} {6549#true} #714#return; {6549#true} is VALID [2022-04-28 08:11:45,698 INFO L290 TraceCheckUtils]: 10: Hoare triple {6549#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {6549#true} is VALID [2022-04-28 08:11:45,699 INFO L290 TraceCheckUtils]: 11: Hoare triple {6549#true} assume !(0 == ~irp_choice~0); {6549#true} is VALID [2022-04-28 08:11:45,699 INFO L272 TraceCheckUtils]: 12: Hoare triple {6549#true} call stub_driver_init(); {6563#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:45,700 INFO L290 TraceCheckUtils]: 13: Hoare triple {6563#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6549#true} is VALID [2022-04-28 08:11:45,700 INFO L290 TraceCheckUtils]: 14: Hoare triple {6549#true} assume true; {6549#true} is VALID [2022-04-28 08:11:45,700 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {6549#true} {6549#true} #716#return; {6549#true} is VALID [2022-04-28 08:11:45,700 INFO L290 TraceCheckUtils]: 16: Hoare triple {6549#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {6549#true} is VALID [2022-04-28 08:11:45,700 INFO L290 TraceCheckUtils]: 17: Hoare triple {6549#true} assume 0 == ~tmp_ndt_1~0; {6549#true} is VALID [2022-04-28 08:11:45,700 INFO L272 TraceCheckUtils]: 18: Hoare triple {6549#true} call #t~ret31 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {6549#true} is VALID [2022-04-28 08:11:45,701 INFO L290 TraceCheckUtils]: 19: Hoare triple {6549#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet43 && #t~nondet43 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet43;havoc #t~nondet43;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet44;havoc #t~nondet44;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {6549#true} is VALID [2022-04-28 08:11:45,701 INFO L290 TraceCheckUtils]: 20: Hoare triple {6549#true} assume 0 == ~irpStack__MajorFunction~0; {6549#true} is VALID [2022-04-28 08:11:45,701 INFO L290 TraceCheckUtils]: 21: Hoare triple {6549#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {6549#true} is VALID [2022-04-28 08:11:45,701 INFO L290 TraceCheckUtils]: 22: Hoare triple {6549#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {6549#true} is VALID [2022-04-28 08:11:45,701 INFO L272 TraceCheckUtils]: 23: Hoare triple {6549#true} call #t~ret45 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {6549#true} is VALID [2022-04-28 08:11:45,701 INFO L290 TraceCheckUtils]: 24: Hoare triple {6549#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet46;havoc #t~nondet46;assume -2147483648 <= #t~nondet47 && #t~nondet47 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet47;havoc #t~nondet47;assume -2147483648 <= #t~nondet48 && #t~nondet48 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet48;havoc #t~nondet48;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {6549#true} is VALID [2022-04-28 08:11:45,702 INFO L290 TraceCheckUtils]: 25: Hoare triple {6549#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {6560#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:45,704 INFO L290 TraceCheckUtils]: 26: Hoare triple {6560#(= ~SKIP1~0 ~s~0)} #t~post49 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post49;havoc #t~post49;#t~post50 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post50;havoc #t~post50; {6560#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:45,705 INFO L272 TraceCheckUtils]: 27: Hoare triple {6560#(= ~SKIP1~0 ~s~0)} call #t~ret51 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {6560#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:45,705 INFO L290 TraceCheckUtils]: 28: Hoare triple {6560#(= ~SKIP1~0 ~s~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {6560#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:45,706 INFO L290 TraceCheckUtils]: 29: Hoare triple {6560#(= ~SKIP1~0 ~s~0)} assume !(0 != ~compRegistered~0); {6560#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:45,706 INFO L290 TraceCheckUtils]: 30: Hoare triple {6560#(= ~SKIP1~0 ~s~0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {6560#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:45,707 INFO L290 TraceCheckUtils]: 31: Hoare triple {6560#(= ~SKIP1~0 ~s~0)} assume 0 == ~tmp_ndt_6~0; {6560#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:45,707 INFO L290 TraceCheckUtils]: 32: Hoare triple {6560#(= ~SKIP1~0 ~s~0)} ~returnVal2~0 := 0; {6560#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:45,707 INFO L290 TraceCheckUtils]: 33: Hoare triple {6560#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~NP~0); {6560#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:45,708 INFO L290 TraceCheckUtils]: 34: Hoare triple {6560#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~MPR1~0); {6560#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:45,708 INFO L290 TraceCheckUtils]: 35: Hoare triple {6560#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~SKIP1~0); {6550#false} is VALID [2022-04-28 08:11:45,708 INFO L272 TraceCheckUtils]: 36: Hoare triple {6550#false} call errorFn(); {6550#false} is VALID [2022-04-28 08:11:45,708 INFO L290 TraceCheckUtils]: 37: Hoare triple {6550#false} assume !false; {6550#false} is VALID [2022-04-28 08:11:45,708 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:11:45,709 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:11:45,709 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1986024620] [2022-04-28 08:11:45,709 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1986024620] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:45,709 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:45,709 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 08:11:45,709 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:11:45,709 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1885876012] [2022-04-28 08:11:45,709 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1885876012] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:45,709 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:45,710 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 08:11:45,710 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [237160745] [2022-04-28 08:11:45,710 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:11:45,710 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-28 08:11:45,710 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:11:45,710 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:45,737 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 38 edges. 38 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:45,737 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-28 08:11:45,737 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:45,738 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-28 08:11:45,738 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-28 08:11:45,738 INFO L87 Difference]: Start difference. First operand 341 states and 462 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:47,084 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:47,084 INFO L93 Difference]: Finished difference Result 344 states and 464 transitions. [2022-04-28 08:11:47,084 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-28 08:11:47,084 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-28 08:11:47,084 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:11:47,085 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:47,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 334 transitions. [2022-04-28 08:11:47,088 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:47,091 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 334 transitions. [2022-04-28 08:11:47,091 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 334 transitions. [2022-04-28 08:11:47,384 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 334 edges. 334 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:47,394 INFO L225 Difference]: With dead ends: 344 [2022-04-28 08:11:47,395 INFO L226 Difference]: Without dead ends: 340 [2022-04-28 08:11:47,395 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-04-28 08:11:47,396 INFO L413 NwaCegarLoop]: 264 mSDtfsCounter, 341 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 443 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 341 SdHoareTripleChecker+Valid, 413 SdHoareTripleChecker+Invalid, 503 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 443 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-28 08:11:47,396 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [341 Valid, 413 Invalid, 503 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 443 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-28 08:11:47,397 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 340 states. [2022-04-28 08:11:47,422 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 340 to 340. [2022-04-28 08:11:47,423 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:11:47,424 INFO L82 GeneralOperation]: Start isEquivalent. First operand 340 states. Second operand has 340 states, 278 states have (on average 1.3776978417266188) internal successors, (383), 278 states have internal predecessors, (383), 32 states have call successors, (32), 23 states have call predecessors, (32), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:47,424 INFO L74 IsIncluded]: Start isIncluded. First operand 340 states. Second operand has 340 states, 278 states have (on average 1.3776978417266188) internal successors, (383), 278 states have internal predecessors, (383), 32 states have call successors, (32), 23 states have call predecessors, (32), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:47,425 INFO L87 Difference]: Start difference. First operand 340 states. Second operand has 340 states, 278 states have (on average 1.3776978417266188) internal successors, (383), 278 states have internal predecessors, (383), 32 states have call successors, (32), 23 states have call predecessors, (32), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:47,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:47,435 INFO L93 Difference]: Finished difference Result 340 states and 459 transitions. [2022-04-28 08:11:47,435 INFO L276 IsEmpty]: Start isEmpty. Operand 340 states and 459 transitions. [2022-04-28 08:11:47,436 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:47,436 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:47,437 INFO L74 IsIncluded]: Start isIncluded. First operand has 340 states, 278 states have (on average 1.3776978417266188) internal successors, (383), 278 states have internal predecessors, (383), 32 states have call successors, (32), 23 states have call predecessors, (32), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 340 states. [2022-04-28 08:11:47,438 INFO L87 Difference]: Start difference. First operand has 340 states, 278 states have (on average 1.3776978417266188) internal successors, (383), 278 states have internal predecessors, (383), 32 states have call successors, (32), 23 states have call predecessors, (32), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 340 states. [2022-04-28 08:11:47,447 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:47,448 INFO L93 Difference]: Finished difference Result 340 states and 459 transitions. [2022-04-28 08:11:47,448 INFO L276 IsEmpty]: Start isEmpty. Operand 340 states and 459 transitions. [2022-04-28 08:11:47,449 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:47,449 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:47,449 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:11:47,449 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:11:47,450 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 340 states, 278 states have (on average 1.3776978417266188) internal successors, (383), 278 states have internal predecessors, (383), 32 states have call successors, (32), 23 states have call predecessors, (32), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:47,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 340 states to 340 states and 459 transitions. [2022-04-28 08:11:47,462 INFO L78 Accepts]: Start accepts. Automaton has 340 states and 459 transitions. Word has length 38 [2022-04-28 08:11:47,462 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:11:47,462 INFO L495 AbstractCegarLoop]: Abstraction has 340 states and 459 transitions. [2022-04-28 08:11:47,462 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:47,463 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 340 states and 459 transitions. [2022-04-28 08:11:47,904 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 459 edges. 459 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:47,904 INFO L276 IsEmpty]: Start isEmpty. Operand 340 states and 459 transitions. [2022-04-28 08:11:47,906 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-28 08:11:47,906 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:11:47,906 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:11:47,906 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-04-28 08:11:47,906 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:11:47,906 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:11:47,906 INFO L85 PathProgramCache]: Analyzing trace with hash 708737618, now seen corresponding path program 1 times [2022-04-28 08:11:47,907 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:47,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1171676191] [2022-04-28 08:11:47,907 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:11:47,907 INFO L85 PathProgramCache]: Analyzing trace with hash 708737618, now seen corresponding path program 2 times [2022-04-28 08:11:47,907 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:11:47,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [542921030] [2022-04-28 08:11:47,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:11:47,907 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:11:47,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:47,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:11:47,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:47,987 INFO L290 TraceCheckUtils]: 0: Hoare triple {8638#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8617#true} is VALID [2022-04-28 08:11:47,987 INFO L290 TraceCheckUtils]: 1: Hoare triple {8617#true} assume true; {8617#true} is VALID [2022-04-28 08:11:47,987 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8617#true} {8617#true} #780#return; {8617#true} is VALID [2022-04-28 08:11:48,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:11:48,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:48,011 INFO L290 TraceCheckUtils]: 0: Hoare triple {8639#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8617#true} is VALID [2022-04-28 08:11:48,011 INFO L290 TraceCheckUtils]: 1: Hoare triple {8617#true} assume true; {8617#true} is VALID [2022-04-28 08:11:48,012 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8617#true} {8617#true} #714#return; {8617#true} is VALID [2022-04-28 08:11:48,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:11:48,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:48,026 INFO L290 TraceCheckUtils]: 0: Hoare triple {8640#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8617#true} is VALID [2022-04-28 08:11:48,026 INFO L290 TraceCheckUtils]: 1: Hoare triple {8617#true} assume true; {8617#true} is VALID [2022-04-28 08:11:48,026 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8617#true} {8617#true} #716#return; {8617#true} is VALID [2022-04-28 08:11:48,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:11:48,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:48,047 INFO L290 TraceCheckUtils]: 0: Hoare triple {8641#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {8617#true} is VALID [2022-04-28 08:11:48,048 INFO L290 TraceCheckUtils]: 1: Hoare triple {8617#true} assume !(0 != ~compRegistered~0); {8642#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:48,048 INFO L290 TraceCheckUtils]: 2: Hoare triple {8642#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {8642#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:48,049 INFO L290 TraceCheckUtils]: 3: Hoare triple {8642#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {8642#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:48,049 INFO L290 TraceCheckUtils]: 4: Hoare triple {8642#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {8642#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:48,049 INFO L290 TraceCheckUtils]: 5: Hoare triple {8642#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {8642#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:48,050 INFO L290 TraceCheckUtils]: 6: Hoare triple {8642#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {8642#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:48,050 INFO L290 TraceCheckUtils]: 7: Hoare triple {8642#(<= ~compRegistered~0 0)} assume true; {8642#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:48,051 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {8642#(<= ~compRegistered~0 0)} {8628#(= ~compRegistered~0 1)} #752#return; {8618#false} is VALID [2022-04-28 08:11:48,052 INFO L272 TraceCheckUtils]: 0: Hoare triple {8617#true} call ULTIMATE.init(); {8638#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:11:48,052 INFO L290 TraceCheckUtils]: 1: Hoare triple {8638#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8617#true} is VALID [2022-04-28 08:11:48,052 INFO L290 TraceCheckUtils]: 2: Hoare triple {8617#true} assume true; {8617#true} is VALID [2022-04-28 08:11:48,052 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {8617#true} {8617#true} #780#return; {8617#true} is VALID [2022-04-28 08:11:48,052 INFO L272 TraceCheckUtils]: 4: Hoare triple {8617#true} call #t~ret83 := main(); {8617#true} is VALID [2022-04-28 08:11:48,053 INFO L290 TraceCheckUtils]: 5: Hoare triple {8617#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {8617#true} is VALID [2022-04-28 08:11:48,053 INFO L272 TraceCheckUtils]: 6: Hoare triple {8617#true} call _BLAST_init(); {8639#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:48,054 INFO L290 TraceCheckUtils]: 7: Hoare triple {8639#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8617#true} is VALID [2022-04-28 08:11:48,054 INFO L290 TraceCheckUtils]: 8: Hoare triple {8617#true} assume true; {8617#true} is VALID [2022-04-28 08:11:48,054 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {8617#true} {8617#true} #714#return; {8617#true} is VALID [2022-04-28 08:11:48,054 INFO L290 TraceCheckUtils]: 10: Hoare triple {8617#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {8617#true} is VALID [2022-04-28 08:11:48,054 INFO L290 TraceCheckUtils]: 11: Hoare triple {8617#true} assume !(0 == ~irp_choice~0); {8617#true} is VALID [2022-04-28 08:11:48,055 INFO L272 TraceCheckUtils]: 12: Hoare triple {8617#true} call stub_driver_init(); {8640#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:48,055 INFO L290 TraceCheckUtils]: 13: Hoare triple {8640#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8617#true} is VALID [2022-04-28 08:11:48,055 INFO L290 TraceCheckUtils]: 14: Hoare triple {8617#true} assume true; {8617#true} is VALID [2022-04-28 08:11:48,055 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {8617#true} {8617#true} #716#return; {8617#true} is VALID [2022-04-28 08:11:48,055 INFO L290 TraceCheckUtils]: 16: Hoare triple {8617#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {8617#true} is VALID [2022-04-28 08:11:48,056 INFO L290 TraceCheckUtils]: 17: Hoare triple {8617#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {8617#true} is VALID [2022-04-28 08:11:48,056 INFO L290 TraceCheckUtils]: 18: Hoare triple {8617#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {8617#true} is VALID [2022-04-28 08:11:48,056 INFO L290 TraceCheckUtils]: 19: Hoare triple {8617#true} assume 3 == ~tmp_ndt_3~0; {8617#true} is VALID [2022-04-28 08:11:48,056 INFO L272 TraceCheckUtils]: 20: Hoare triple {8617#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {8617#true} is VALID [2022-04-28 08:11:48,056 INFO L290 TraceCheckUtils]: 21: Hoare triple {8617#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {8617#true} is VALID [2022-04-28 08:11:48,056 INFO L290 TraceCheckUtils]: 22: Hoare triple {8617#true} assume 0 == ~irpStack__MinorFunction~0; {8617#true} is VALID [2022-04-28 08:11:48,056 INFO L290 TraceCheckUtils]: 23: Hoare triple {8617#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {8617#true} is VALID [2022-04-28 08:11:48,056 INFO L290 TraceCheckUtils]: 24: Hoare triple {8617#true} assume !(~s~0 != ~NP~0); {8617#true} is VALID [2022-04-28 08:11:48,057 INFO L290 TraceCheckUtils]: 25: Hoare triple {8617#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {8628#(= ~compRegistered~0 1)} is VALID [2022-04-28 08:11:48,057 INFO L290 TraceCheckUtils]: 26: Hoare triple {8628#(= ~compRegistered~0 1)} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {8628#(= ~compRegistered~0 1)} is VALID [2022-04-28 08:11:48,059 INFO L272 TraceCheckUtils]: 27: Hoare triple {8628#(= ~compRegistered~0 1)} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {8641#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:48,059 INFO L290 TraceCheckUtils]: 28: Hoare triple {8641#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {8617#true} is VALID [2022-04-28 08:11:48,059 INFO L290 TraceCheckUtils]: 29: Hoare triple {8617#true} assume !(0 != ~compRegistered~0); {8642#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:48,060 INFO L290 TraceCheckUtils]: 30: Hoare triple {8642#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {8642#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:48,060 INFO L290 TraceCheckUtils]: 31: Hoare triple {8642#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {8642#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:48,060 INFO L290 TraceCheckUtils]: 32: Hoare triple {8642#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {8642#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:48,061 INFO L290 TraceCheckUtils]: 33: Hoare triple {8642#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {8642#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:48,064 INFO L290 TraceCheckUtils]: 34: Hoare triple {8642#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {8642#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:48,064 INFO L290 TraceCheckUtils]: 35: Hoare triple {8642#(<= ~compRegistered~0 0)} assume true; {8642#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:48,065 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {8642#(<= ~compRegistered~0 0)} {8628#(= ~compRegistered~0 1)} #752#return; {8618#false} is VALID [2022-04-28 08:11:48,065 INFO L290 TraceCheckUtils]: 37: Hoare triple {8618#false} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {8618#false} is VALID [2022-04-28 08:11:48,065 INFO L290 TraceCheckUtils]: 38: Hoare triple {8618#false} assume 259 == ~__cil_tmp23~0; {8618#false} is VALID [2022-04-28 08:11:48,065 INFO L272 TraceCheckUtils]: 39: Hoare triple {8618#false} call #t~ret13 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {8618#false} is VALID [2022-04-28 08:11:48,065 INFO L290 TraceCheckUtils]: 40: Hoare triple {8618#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {8618#false} is VALID [2022-04-28 08:11:48,066 INFO L290 TraceCheckUtils]: 41: Hoare triple {8618#false} assume !(~s~0 == ~MPR3~0); {8618#false} is VALID [2022-04-28 08:11:48,066 INFO L290 TraceCheckUtils]: 42: Hoare triple {8618#false} assume !(1 == ~customIrp~0); {8618#false} is VALID [2022-04-28 08:11:48,066 INFO L290 TraceCheckUtils]: 43: Hoare triple {8618#false} assume ~s~0 == ~MPR3~0; {8618#false} is VALID [2022-04-28 08:11:48,066 INFO L272 TraceCheckUtils]: 44: Hoare triple {8618#false} call errorFn(); {8618#false} is VALID [2022-04-28 08:11:48,066 INFO L290 TraceCheckUtils]: 45: Hoare triple {8618#false} assume !false; {8618#false} is VALID [2022-04-28 08:11:48,066 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:11:48,066 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:11:48,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [542921030] [2022-04-28 08:11:48,067 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [542921030] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:48,067 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:48,067 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:11:48,067 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:11:48,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1171676191] [2022-04-28 08:11:48,067 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1171676191] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:48,067 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:48,067 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:11:48,067 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1907637558] [2022-04-28 08:11:48,068 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:11:48,068 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-28 08:11:48,068 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:11:48,068 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-28 08:11:48,100 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:48,100 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 08:11:48,100 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:48,100 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 08:11:48,100 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-04-28 08:11:48,100 INFO L87 Difference]: Start difference. First operand 340 states and 459 transitions. Second operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-28 08:11:49,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:49,673 INFO L93 Difference]: Finished difference Result 385 states and 508 transitions. [2022-04-28 08:11:49,673 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-28 08:11:49,674 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-28 08:11:49,674 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:11:49,674 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-28 08:11:49,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 413 transitions. [2022-04-28 08:11:49,678 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-28 08:11:49,682 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 413 transitions. [2022-04-28 08:11:49,682 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 413 transitions. [2022-04-28 08:11:50,086 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 413 edges. 413 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:50,095 INFO L225 Difference]: With dead ends: 385 [2022-04-28 08:11:50,096 INFO L226 Difference]: Without dead ends: 319 [2022-04-28 08:11:50,096 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:11:50,097 INFO L413 NwaCegarLoop]: 298 mSDtfsCounter, 746 mSDsluCounter, 220 mSDsCounter, 0 mSdLazyCounter, 343 mSolverCounterSat, 114 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 746 SdHoareTripleChecker+Valid, 518 SdHoareTripleChecker+Invalid, 457 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 114 IncrementalHoareTripleChecker+Valid, 343 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-28 08:11:50,097 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [746 Valid, 518 Invalid, 457 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [114 Valid, 343 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-28 08:11:50,098 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 319 states. [2022-04-28 08:11:50,237 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 319 to 301. [2022-04-28 08:11:50,238 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:11:50,238 INFO L82 GeneralOperation]: Start isEquivalent. First operand 319 states. Second operand has 301 states, 244 states have (on average 1.3688524590163935) internal successors, (334), 244 states have internal predecessors, (334), 29 states have call successors, (29), 21 states have call predecessors, (29), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-28 08:11:50,239 INFO L74 IsIncluded]: Start isIncluded. First operand 319 states. Second operand has 301 states, 244 states have (on average 1.3688524590163935) internal successors, (334), 244 states have internal predecessors, (334), 29 states have call successors, (29), 21 states have call predecessors, (29), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-28 08:11:50,240 INFO L87 Difference]: Start difference. First operand 319 states. Second operand has 301 states, 244 states have (on average 1.3688524590163935) internal successors, (334), 244 states have internal predecessors, (334), 29 states have call successors, (29), 21 states have call predecessors, (29), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-28 08:11:50,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:50,249 INFO L93 Difference]: Finished difference Result 319 states and 423 transitions. [2022-04-28 08:11:50,249 INFO L276 IsEmpty]: Start isEmpty. Operand 319 states and 423 transitions. [2022-04-28 08:11:50,250 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:50,250 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:50,251 INFO L74 IsIncluded]: Start isIncluded. First operand has 301 states, 244 states have (on average 1.3688524590163935) internal successors, (334), 244 states have internal predecessors, (334), 29 states have call successors, (29), 21 states have call predecessors, (29), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 319 states. [2022-04-28 08:11:50,251 INFO L87 Difference]: Start difference. First operand has 301 states, 244 states have (on average 1.3688524590163935) internal successors, (334), 244 states have internal predecessors, (334), 29 states have call successors, (29), 21 states have call predecessors, (29), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 319 states. [2022-04-28 08:11:50,260 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:50,260 INFO L93 Difference]: Finished difference Result 319 states and 423 transitions. [2022-04-28 08:11:50,261 INFO L276 IsEmpty]: Start isEmpty. Operand 319 states and 423 transitions. [2022-04-28 08:11:50,261 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:50,261 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:50,261 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:11:50,262 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:11:50,262 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 301 states, 244 states have (on average 1.3688524590163935) internal successors, (334), 244 states have internal predecessors, (334), 29 states have call successors, (29), 21 states have call predecessors, (29), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-28 08:11:50,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 301 states to 301 states and 402 transitions. [2022-04-28 08:11:50,272 INFO L78 Accepts]: Start accepts. Automaton has 301 states and 402 transitions. Word has length 46 [2022-04-28 08:11:50,273 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:11:50,273 INFO L495 AbstractCegarLoop]: Abstraction has 301 states and 402 transitions. [2022-04-28 08:11:50,273 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-28 08:11:50,273 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 301 states and 402 transitions. [2022-04-28 08:11:50,720 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 402 edges. 402 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:50,720 INFO L276 IsEmpty]: Start isEmpty. Operand 301 states and 402 transitions. [2022-04-28 08:11:50,721 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-04-28 08:11:50,721 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:11:50,721 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:11:50,722 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-04-28 08:11:50,722 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:11:50,722 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:11:50,722 INFO L85 PathProgramCache]: Analyzing trace with hash -1153649594, now seen corresponding path program 1 times [2022-04-28 08:11:50,722 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:50,722 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1203422745] [2022-04-28 08:11:50,723 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:11:50,723 INFO L85 PathProgramCache]: Analyzing trace with hash -1153649594, now seen corresponding path program 2 times [2022-04-28 08:11:50,723 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:11:50,723 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [226597781] [2022-04-28 08:11:50,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:11:50,723 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:11:50,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:50,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:11:50,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:50,883 INFO L290 TraceCheckUtils]: 0: Hoare triple {10690#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {10665#true} is VALID [2022-04-28 08:11:50,883 INFO L290 TraceCheckUtils]: 1: Hoare triple {10665#true} assume true; {10665#true} is VALID [2022-04-28 08:11:50,883 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10665#true} {10665#true} #780#return; {10665#true} is VALID [2022-04-28 08:11:50,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:11:50,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:50,921 INFO L290 TraceCheckUtils]: 0: Hoare triple {10691#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10692#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:11:50,922 INFO L290 TraceCheckUtils]: 1: Hoare triple {10692#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {10692#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:11:50,922 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10692#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {10665#true} #714#return; {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:11:50,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:11:50,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:50,938 INFO L290 TraceCheckUtils]: 0: Hoare triple {10693#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10665#true} is VALID [2022-04-28 08:11:50,938 INFO L290 TraceCheckUtils]: 1: Hoare triple {10665#true} assume true; {10665#true} is VALID [2022-04-28 08:11:50,938 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10665#true} {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #716#return; {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:11:50,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-28 08:11:50,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:51,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-28 08:11:51,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:51,031 INFO L290 TraceCheckUtils]: 0: Hoare triple {10700#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10665#true} is VALID [2022-04-28 08:11:51,032 INFO L290 TraceCheckUtils]: 1: Hoare triple {10665#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10701#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:11:51,032 INFO L290 TraceCheckUtils]: 2: Hoare triple {10701#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10701#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:11:51,033 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10701#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10665#true} #740#return; {10699#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:11:51,033 INFO L290 TraceCheckUtils]: 0: Hoare triple {10694#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet70;havoc #t~nondet70;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet71;havoc #t~nondet71;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet72;havoc #t~nondet72;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp20~0 := #t~nondet73;havoc #t~nondet73;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp24~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp28~0 := #t~nondet75;havoc #t~nondet75;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp29~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp32~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp35~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp38~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet80 && #t~nondet80 <= 2147483647;~__cil_tmp41~0 := #t~nondet80;havoc #t~nondet80;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet81 && #t~nondet81 <= 2147483647;~__cil_tmp44~0 := #t~nondet81;havoc #t~nondet81;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {10665#true} is VALID [2022-04-28 08:11:51,033 INFO L290 TraceCheckUtils]: 1: Hoare triple {10665#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {10665#true} is VALID [2022-04-28 08:11:51,034 INFO L290 TraceCheckUtils]: 2: Hoare triple {10665#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {10665#true} is VALID [2022-04-28 08:11:51,034 INFO L290 TraceCheckUtils]: 3: Hoare triple {10665#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {10665#true} is VALID [2022-04-28 08:11:51,034 INFO L272 TraceCheckUtils]: 4: Hoare triple {10665#true} call IofCompleteRequest(~Irp, 0); {10700#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:11:51,034 INFO L290 TraceCheckUtils]: 5: Hoare triple {10700#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10665#true} is VALID [2022-04-28 08:11:51,035 INFO L290 TraceCheckUtils]: 6: Hoare triple {10665#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10701#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:11:51,035 INFO L290 TraceCheckUtils]: 7: Hoare triple {10701#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10701#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:11:51,036 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {10701#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10665#true} #740#return; {10699#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:11:51,036 INFO L290 TraceCheckUtils]: 9: Hoare triple {10699#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {10699#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:11:51,037 INFO L290 TraceCheckUtils]: 10: Hoare triple {10699#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {10699#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:11:51,038 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {10699#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #726#return; {10689#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:11:51,039 INFO L272 TraceCheckUtils]: 0: Hoare triple {10665#true} call ULTIMATE.init(); {10690#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:11:51,039 INFO L290 TraceCheckUtils]: 1: Hoare triple {10690#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {10665#true} is VALID [2022-04-28 08:11:51,039 INFO L290 TraceCheckUtils]: 2: Hoare triple {10665#true} assume true; {10665#true} is VALID [2022-04-28 08:11:51,040 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10665#true} {10665#true} #780#return; {10665#true} is VALID [2022-04-28 08:11:51,040 INFO L272 TraceCheckUtils]: 4: Hoare triple {10665#true} call #t~ret83 := main(); {10665#true} is VALID [2022-04-28 08:11:51,040 INFO L290 TraceCheckUtils]: 5: Hoare triple {10665#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {10665#true} is VALID [2022-04-28 08:11:51,041 INFO L272 TraceCheckUtils]: 6: Hoare triple {10665#true} call _BLAST_init(); {10691#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:51,046 INFO L290 TraceCheckUtils]: 7: Hoare triple {10691#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10692#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:11:51,047 INFO L290 TraceCheckUtils]: 8: Hoare triple {10692#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {10692#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:11:51,048 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {10692#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {10665#true} #714#return; {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:11:51,052 INFO L290 TraceCheckUtils]: 10: Hoare triple {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:11:51,054 INFO L290 TraceCheckUtils]: 11: Hoare triple {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~irp_choice~0); {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:11:51,054 INFO L272 TraceCheckUtils]: 12: Hoare triple {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call stub_driver_init(); {10693#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:51,055 INFO L290 TraceCheckUtils]: 13: Hoare triple {10693#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10665#true} is VALID [2022-04-28 08:11:51,055 INFO L290 TraceCheckUtils]: 14: Hoare triple {10665#true} assume true; {10665#true} is VALID [2022-04-28 08:11:51,055 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {10665#true} {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #716#return; {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:11:51,056 INFO L290 TraceCheckUtils]: 16: Hoare triple {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:11:51,057 INFO L290 TraceCheckUtils]: 17: Hoare triple {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:11:51,058 INFO L290 TraceCheckUtils]: 18: Hoare triple {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:11:51,060 INFO L290 TraceCheckUtils]: 19: Hoare triple {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647;~tmp_ndt_4~0 := #t~nondet29;havoc #t~nondet29; {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:11:51,061 INFO L290 TraceCheckUtils]: 20: Hoare triple {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647;~tmp_ndt_5~0 := #t~nondet30;havoc #t~nondet30; {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:11:51,062 INFO L290 TraceCheckUtils]: 21: Hoare triple {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume 8 == ~tmp_ndt_5~0; {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:11:51,062 INFO L272 TraceCheckUtils]: 22: Hoare triple {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call #t~ret35 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {10694#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:51,063 INFO L290 TraceCheckUtils]: 23: Hoare triple {10694#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet70;havoc #t~nondet70;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet71;havoc #t~nondet71;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet72;havoc #t~nondet72;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp20~0 := #t~nondet73;havoc #t~nondet73;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp24~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp28~0 := #t~nondet75;havoc #t~nondet75;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp29~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp32~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp35~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp38~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet80 && #t~nondet80 <= 2147483647;~__cil_tmp41~0 := #t~nondet80;havoc #t~nondet80;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet81 && #t~nondet81 <= 2147483647;~__cil_tmp44~0 := #t~nondet81;havoc #t~nondet81;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {10665#true} is VALID [2022-04-28 08:11:51,063 INFO L290 TraceCheckUtils]: 24: Hoare triple {10665#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {10665#true} is VALID [2022-04-28 08:11:51,063 INFO L290 TraceCheckUtils]: 25: Hoare triple {10665#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {10665#true} is VALID [2022-04-28 08:11:51,063 INFO L290 TraceCheckUtils]: 26: Hoare triple {10665#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {10665#true} is VALID [2022-04-28 08:11:51,063 INFO L272 TraceCheckUtils]: 27: Hoare triple {10665#true} call IofCompleteRequest(~Irp, 0); {10700#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:11:51,063 INFO L290 TraceCheckUtils]: 28: Hoare triple {10700#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10665#true} is VALID [2022-04-28 08:11:51,064 INFO L290 TraceCheckUtils]: 29: Hoare triple {10665#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10701#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:11:51,064 INFO L290 TraceCheckUtils]: 30: Hoare triple {10701#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10701#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:11:51,065 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {10701#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10665#true} #740#return; {10699#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:11:51,065 INFO L290 TraceCheckUtils]: 32: Hoare triple {10699#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {10699#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:11:51,066 INFO L290 TraceCheckUtils]: 33: Hoare triple {10699#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {10699#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:11:51,067 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {10699#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {10673#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #726#return; {10689#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:11:51,067 INFO L290 TraceCheckUtils]: 35: Hoare triple {10689#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~status~1 := #t~ret35;havoc #t~ret35; {10689#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:11:51,068 INFO L290 TraceCheckUtils]: 36: Hoare triple {10689#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {10689#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:11:51,068 INFO L290 TraceCheckUtils]: 37: Hoare triple {10689#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {10689#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:11:51,068 INFO L290 TraceCheckUtils]: 38: Hoare triple {10689#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume ~s~0 != ~UNLOADED~0; {10689#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:11:51,069 INFO L290 TraceCheckUtils]: 39: Hoare triple {10689#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -1 != ~status~1; {10689#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:11:51,069 INFO L290 TraceCheckUtils]: 40: Hoare triple {10689#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(~s~0 != ~SKIP2~0); {10666#false} is VALID [2022-04-28 08:11:51,069 INFO L290 TraceCheckUtils]: 41: Hoare triple {10666#false} assume 1 == ~pended~0; {10666#false} is VALID [2022-04-28 08:11:51,069 INFO L290 TraceCheckUtils]: 42: Hoare triple {10666#false} assume 259 != ~status~1; {10666#false} is VALID [2022-04-28 08:11:51,069 INFO L272 TraceCheckUtils]: 43: Hoare triple {10666#false} call errorFn(); {10666#false} is VALID [2022-04-28 08:11:51,069 INFO L290 TraceCheckUtils]: 44: Hoare triple {10666#false} assume !false; {10666#false} is VALID [2022-04-28 08:11:51,070 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:11:51,071 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:11:51,071 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [226597781] [2022-04-28 08:11:51,071 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [226597781] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:51,071 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:51,071 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:11:51,071 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:11:51,071 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1203422745] [2022-04-28 08:11:51,071 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1203422745] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:51,071 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:51,072 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:11:51,072 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [877912106] [2022-04-28 08:11:51,072 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:11:51,072 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-28 08:11:51,073 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:11:51,073 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:11:51,112 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:51,112 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 08:11:51,112 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:51,113 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 08:11:51,113 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:11:51,113 INFO L87 Difference]: Start difference. First operand 301 states and 402 transitions. Second operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:11:54,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:54,461 INFO L93 Difference]: Finished difference Result 327 states and 430 transitions. [2022-04-28 08:11:54,461 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 08:11:54,461 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-28 08:11:54,461 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:11:54,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:11:54,465 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 355 transitions. [2022-04-28 08:11:54,465 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:11:54,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 355 transitions. [2022-04-28 08:11:54,469 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 355 transitions. [2022-04-28 08:11:54,910 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 355 edges. 355 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:54,917 INFO L225 Difference]: With dead ends: 327 [2022-04-28 08:11:54,917 INFO L226 Difference]: Without dead ends: 322 [2022-04-28 08:11:54,917 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-28 08:11:54,918 INFO L413 NwaCegarLoop]: 252 mSDtfsCounter, 1050 mSDsluCounter, 356 mSDsCounter, 0 mSdLazyCounter, 883 mSolverCounterSat, 199 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1052 SdHoareTripleChecker+Valid, 608 SdHoareTripleChecker+Invalid, 1082 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 199 IncrementalHoareTripleChecker+Valid, 883 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-28 08:11:54,918 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1052 Valid, 608 Invalid, 1082 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [199 Valid, 883 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-28 08:11:54,919 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 322 states. [2022-04-28 08:11:55,256 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 322 to 315. [2022-04-28 08:11:55,256 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:11:55,257 INFO L82 GeneralOperation]: Start isEquivalent. First operand 322 states. Second operand has 315 states, 256 states have (on average 1.359375) internal successors, (348), 255 states have internal predecessors, (348), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:11:55,258 INFO L74 IsIncluded]: Start isIncluded. First operand 322 states. Second operand has 315 states, 256 states have (on average 1.359375) internal successors, (348), 255 states have internal predecessors, (348), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:11:55,259 INFO L87 Difference]: Start difference. First operand 322 states. Second operand has 315 states, 256 states have (on average 1.359375) internal successors, (348), 255 states have internal predecessors, (348), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:11:55,268 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:55,268 INFO L93 Difference]: Finished difference Result 322 states and 425 transitions. [2022-04-28 08:11:55,268 INFO L276 IsEmpty]: Start isEmpty. Operand 322 states and 425 transitions. [2022-04-28 08:11:55,269 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:55,269 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:55,270 INFO L74 IsIncluded]: Start isIncluded. First operand has 315 states, 256 states have (on average 1.359375) internal successors, (348), 255 states have internal predecessors, (348), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 322 states. [2022-04-28 08:11:55,270 INFO L87 Difference]: Start difference. First operand has 315 states, 256 states have (on average 1.359375) internal successors, (348), 255 states have internal predecessors, (348), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 322 states. [2022-04-28 08:11:55,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:55,279 INFO L93 Difference]: Finished difference Result 322 states and 425 transitions. [2022-04-28 08:11:55,280 INFO L276 IsEmpty]: Start isEmpty. Operand 322 states and 425 transitions. [2022-04-28 08:11:55,280 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:55,280 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:55,280 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:11:55,280 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:11:55,281 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 315 states, 256 states have (on average 1.359375) internal successors, (348), 255 states have internal predecessors, (348), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:11:55,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 315 states to 315 states and 418 transitions. [2022-04-28 08:11:55,292 INFO L78 Accepts]: Start accepts. Automaton has 315 states and 418 transitions. Word has length 45 [2022-04-28 08:11:55,292 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:11:55,292 INFO L495 AbstractCegarLoop]: Abstraction has 315 states and 418 transitions. [2022-04-28 08:11:55,292 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:11:55,293 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 315 states and 418 transitions. [2022-04-28 08:11:55,793 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 418 edges. 418 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:55,793 INFO L276 IsEmpty]: Start isEmpty. Operand 315 states and 418 transitions. [2022-04-28 08:11:55,794 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-28 08:11:55,794 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:11:55,794 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:11:55,795 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-04-28 08:11:55,795 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:11:55,795 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:11:55,795 INFO L85 PathProgramCache]: Analyzing trace with hash -1782707845, now seen corresponding path program 1 times [2022-04-28 08:11:55,795 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:55,795 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [2008073457] [2022-04-28 08:11:55,796 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:11:55,796 INFO L85 PathProgramCache]: Analyzing trace with hash -1782707845, now seen corresponding path program 2 times [2022-04-28 08:11:55,796 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:11:55,796 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1769118759] [2022-04-28 08:11:55,796 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:11:55,796 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:11:55,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:55,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:11:55,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:55,953 INFO L290 TraceCheckUtils]: 0: Hoare triple {12674#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12649#true} is VALID [2022-04-28 08:11:55,953 INFO L290 TraceCheckUtils]: 1: Hoare triple {12649#true} assume true; {12649#true} is VALID [2022-04-28 08:11:55,953 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12649#true} {12649#true} #780#return; {12649#true} is VALID [2022-04-28 08:11:55,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:11:55,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:56,000 INFO L290 TraceCheckUtils]: 0: Hoare triple {12675#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12676#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 08:11:56,001 INFO L290 TraceCheckUtils]: 1: Hoare triple {12676#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {12676#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 08:11:56,002 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12676#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {12649#true} #714#return; {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:11:56,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:56,024 INFO L290 TraceCheckUtils]: 0: Hoare triple {12677#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12649#true} is VALID [2022-04-28 08:11:56,024 INFO L290 TraceCheckUtils]: 1: Hoare triple {12649#true} assume true; {12649#true} is VALID [2022-04-28 08:11:56,025 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12649#true} {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #716#return; {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-28 08:11:56,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:56,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-28 08:11:56,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:56,116 INFO L290 TraceCheckUtils]: 0: Hoare triple {12684#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12649#true} is VALID [2022-04-28 08:11:56,117 INFO L290 TraceCheckUtils]: 1: Hoare triple {12649#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12685#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:11:56,117 INFO L290 TraceCheckUtils]: 2: Hoare triple {12685#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12685#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:11:56,118 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12685#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12649#true} #740#return; {12683#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:11:56,118 INFO L290 TraceCheckUtils]: 0: Hoare triple {12678#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet70;havoc #t~nondet70;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet71;havoc #t~nondet71;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet72;havoc #t~nondet72;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp20~0 := #t~nondet73;havoc #t~nondet73;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp24~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp28~0 := #t~nondet75;havoc #t~nondet75;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp29~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp32~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp35~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp38~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet80 && #t~nondet80 <= 2147483647;~__cil_tmp41~0 := #t~nondet80;havoc #t~nondet80;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet81 && #t~nondet81 <= 2147483647;~__cil_tmp44~0 := #t~nondet81;havoc #t~nondet81;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {12649#true} is VALID [2022-04-28 08:11:56,118 INFO L290 TraceCheckUtils]: 1: Hoare triple {12649#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {12649#true} is VALID [2022-04-28 08:11:56,118 INFO L290 TraceCheckUtils]: 2: Hoare triple {12649#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {12649#true} is VALID [2022-04-28 08:11:56,118 INFO L290 TraceCheckUtils]: 3: Hoare triple {12649#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {12649#true} is VALID [2022-04-28 08:11:56,119 INFO L272 TraceCheckUtils]: 4: Hoare triple {12649#true} call IofCompleteRequest(~Irp, 0); {12684#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:11:56,119 INFO L290 TraceCheckUtils]: 5: Hoare triple {12684#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12649#true} is VALID [2022-04-28 08:11:56,119 INFO L290 TraceCheckUtils]: 6: Hoare triple {12649#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12685#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:11:56,120 INFO L290 TraceCheckUtils]: 7: Hoare triple {12685#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12685#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:11:56,120 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {12685#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12649#true} #740#return; {12683#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:11:56,121 INFO L290 TraceCheckUtils]: 9: Hoare triple {12683#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {12683#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:11:56,122 INFO L290 TraceCheckUtils]: 10: Hoare triple {12683#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {12683#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:11:56,123 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {12683#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #726#return; {12673#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,125 INFO L272 TraceCheckUtils]: 0: Hoare triple {12649#true} call ULTIMATE.init(); {12674#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:11:56,125 INFO L290 TraceCheckUtils]: 1: Hoare triple {12674#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12649#true} is VALID [2022-04-28 08:11:56,125 INFO L290 TraceCheckUtils]: 2: Hoare triple {12649#true} assume true; {12649#true} is VALID [2022-04-28 08:11:56,125 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12649#true} {12649#true} #780#return; {12649#true} is VALID [2022-04-28 08:11:56,125 INFO L272 TraceCheckUtils]: 4: Hoare triple {12649#true} call #t~ret83 := main(); {12649#true} is VALID [2022-04-28 08:11:56,125 INFO L290 TraceCheckUtils]: 5: Hoare triple {12649#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {12649#true} is VALID [2022-04-28 08:11:56,126 INFO L272 TraceCheckUtils]: 6: Hoare triple {12649#true} call _BLAST_init(); {12675#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:56,127 INFO L290 TraceCheckUtils]: 7: Hoare triple {12675#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12676#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 08:11:56,127 INFO L290 TraceCheckUtils]: 8: Hoare triple {12676#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {12676#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 08:11:56,128 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {12676#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {12649#true} #714#return; {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,128 INFO L290 TraceCheckUtils]: 10: Hoare triple {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,129 INFO L290 TraceCheckUtils]: 11: Hoare triple {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~irp_choice~0); {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,129 INFO L272 TraceCheckUtils]: 12: Hoare triple {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call stub_driver_init(); {12677#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:56,130 INFO L290 TraceCheckUtils]: 13: Hoare triple {12677#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12649#true} is VALID [2022-04-28 08:11:56,130 INFO L290 TraceCheckUtils]: 14: Hoare triple {12649#true} assume true; {12649#true} is VALID [2022-04-28 08:11:56,130 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {12649#true} {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #716#return; {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,130 INFO L290 TraceCheckUtils]: 16: Hoare triple {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,131 INFO L290 TraceCheckUtils]: 17: Hoare triple {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,131 INFO L290 TraceCheckUtils]: 18: Hoare triple {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,132 INFO L290 TraceCheckUtils]: 19: Hoare triple {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647;~tmp_ndt_4~0 := #t~nondet29;havoc #t~nondet29; {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,132 INFO L290 TraceCheckUtils]: 20: Hoare triple {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647;~tmp_ndt_5~0 := #t~nondet30;havoc #t~nondet30; {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,138 INFO L290 TraceCheckUtils]: 21: Hoare triple {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume 8 == ~tmp_ndt_5~0; {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,139 INFO L272 TraceCheckUtils]: 22: Hoare triple {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call #t~ret35 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {12678#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:56,139 INFO L290 TraceCheckUtils]: 23: Hoare triple {12678#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet70;havoc #t~nondet70;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet71;havoc #t~nondet71;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet72;havoc #t~nondet72;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp20~0 := #t~nondet73;havoc #t~nondet73;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp24~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp28~0 := #t~nondet75;havoc #t~nondet75;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp29~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp32~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp35~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp38~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet80 && #t~nondet80 <= 2147483647;~__cil_tmp41~0 := #t~nondet80;havoc #t~nondet80;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet81 && #t~nondet81 <= 2147483647;~__cil_tmp44~0 := #t~nondet81;havoc #t~nondet81;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {12649#true} is VALID [2022-04-28 08:11:56,139 INFO L290 TraceCheckUtils]: 24: Hoare triple {12649#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {12649#true} is VALID [2022-04-28 08:11:56,139 INFO L290 TraceCheckUtils]: 25: Hoare triple {12649#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {12649#true} is VALID [2022-04-28 08:11:56,139 INFO L290 TraceCheckUtils]: 26: Hoare triple {12649#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {12649#true} is VALID [2022-04-28 08:11:56,139 INFO L272 TraceCheckUtils]: 27: Hoare triple {12649#true} call IofCompleteRequest(~Irp, 0); {12684#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:11:56,140 INFO L290 TraceCheckUtils]: 28: Hoare triple {12684#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12649#true} is VALID [2022-04-28 08:11:56,140 INFO L290 TraceCheckUtils]: 29: Hoare triple {12649#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12685#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:11:56,140 INFO L290 TraceCheckUtils]: 30: Hoare triple {12685#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12685#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:11:56,141 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {12685#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12649#true} #740#return; {12683#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:11:56,141 INFO L290 TraceCheckUtils]: 32: Hoare triple {12683#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {12683#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:11:56,142 INFO L290 TraceCheckUtils]: 33: Hoare triple {12683#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {12683#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:11:56,143 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {12683#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {12657#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #726#return; {12673#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,143 INFO L290 TraceCheckUtils]: 35: Hoare triple {12673#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~status~1 := #t~ret35;havoc #t~ret35; {12673#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,144 INFO L290 TraceCheckUtils]: 36: Hoare triple {12673#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {12673#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,144 INFO L290 TraceCheckUtils]: 37: Hoare triple {12673#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {12673#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,145 INFO L290 TraceCheckUtils]: 38: Hoare triple {12673#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~UNLOADED~0; {12673#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,145 INFO L290 TraceCheckUtils]: 39: Hoare triple {12673#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -1 != ~status~1; {12673#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,145 INFO L290 TraceCheckUtils]: 40: Hoare triple {12673#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~SKIP2~0; {12673#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:11:56,153 INFO L290 TraceCheckUtils]: 41: Hoare triple {12673#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(~s~0 != ~IPC~0); {12650#false} is VALID [2022-04-28 08:11:56,153 INFO L290 TraceCheckUtils]: 42: Hoare triple {12650#false} assume 1 == ~pended~0; {12650#false} is VALID [2022-04-28 08:11:56,153 INFO L290 TraceCheckUtils]: 43: Hoare triple {12650#false} assume 259 != ~status~1; {12650#false} is VALID [2022-04-28 08:11:56,154 INFO L272 TraceCheckUtils]: 44: Hoare triple {12650#false} call errorFn(); {12650#false} is VALID [2022-04-28 08:11:56,154 INFO L290 TraceCheckUtils]: 45: Hoare triple {12650#false} assume !false; {12650#false} is VALID [2022-04-28 08:11:56,154 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:11:56,154 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:11:56,154 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1769118759] [2022-04-28 08:11:56,154 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1769118759] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:56,154 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:56,154 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:11:56,155 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:11:56,155 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [2008073457] [2022-04-28 08:11:56,155 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [2008073457] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:56,155 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:56,155 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:11:56,155 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1704230547] [2022-04-28 08:11:56,155 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:11:56,155 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-28 08:11:56,156 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:11:56,156 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:11:56,190 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:56,191 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 08:11:56,191 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:56,191 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 08:11:56,191 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:11:56,192 INFO L87 Difference]: Start difference. First operand 315 states and 418 transitions. Second operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:11:59,043 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:59,043 INFO L93 Difference]: Finished difference Result 327 states and 429 transitions. [2022-04-28 08:11:59,043 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 08:11:59,043 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-28 08:11:59,044 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:11:59,044 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:11:59,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 354 transitions. [2022-04-28 08:11:59,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:11:59,051 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 354 transitions. [2022-04-28 08:11:59,051 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 354 transitions. [2022-04-28 08:11:59,461 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 354 edges. 354 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:59,469 INFO L225 Difference]: With dead ends: 327 [2022-04-28 08:11:59,470 INFO L226 Difference]: Without dead ends: 322 [2022-04-28 08:11:59,470 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-28 08:11:59,471 INFO L413 NwaCegarLoop]: 253 mSDtfsCounter, 795 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 718 mSolverCounterSat, 140 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 797 SdHoareTripleChecker+Valid, 508 SdHoareTripleChecker+Invalid, 858 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 140 IncrementalHoareTripleChecker+Valid, 718 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-04-28 08:11:59,473 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [797 Valid, 508 Invalid, 858 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [140 Valid, 718 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-04-28 08:11:59,475 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 322 states. [2022-04-28 08:11:59,905 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 322 to 316. [2022-04-28 08:11:59,905 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:11:59,906 INFO L82 GeneralOperation]: Start isEquivalent. First operand 322 states. Second operand has 316 states, 257 states have (on average 1.3579766536964981) internal successors, (349), 256 states have internal predecessors, (349), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:11:59,906 INFO L74 IsIncluded]: Start isIncluded. First operand 322 states. Second operand has 316 states, 257 states have (on average 1.3579766536964981) internal successors, (349), 256 states have internal predecessors, (349), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:11:59,907 INFO L87 Difference]: Start difference. First operand 322 states. Second operand has 316 states, 257 states have (on average 1.3579766536964981) internal successors, (349), 256 states have internal predecessors, (349), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:11:59,915 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:59,916 INFO L93 Difference]: Finished difference Result 322 states and 424 transitions. [2022-04-28 08:11:59,916 INFO L276 IsEmpty]: Start isEmpty. Operand 322 states and 424 transitions. [2022-04-28 08:11:59,916 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:59,916 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:59,917 INFO L74 IsIncluded]: Start isIncluded. First operand has 316 states, 257 states have (on average 1.3579766536964981) internal successors, (349), 256 states have internal predecessors, (349), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 322 states. [2022-04-28 08:11:59,918 INFO L87 Difference]: Start difference. First operand has 316 states, 257 states have (on average 1.3579766536964981) internal successors, (349), 256 states have internal predecessors, (349), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 322 states. [2022-04-28 08:11:59,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:59,926 INFO L93 Difference]: Finished difference Result 322 states and 424 transitions. [2022-04-28 08:11:59,926 INFO L276 IsEmpty]: Start isEmpty. Operand 322 states and 424 transitions. [2022-04-28 08:11:59,927 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:59,927 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:59,927 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:11:59,927 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:11:59,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 316 states, 257 states have (on average 1.3579766536964981) internal successors, (349), 256 states have internal predecessors, (349), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:11:59,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 419 transitions. [2022-04-28 08:11:59,938 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 419 transitions. Word has length 46 [2022-04-28 08:11:59,938 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:11:59,938 INFO L495 AbstractCegarLoop]: Abstraction has 316 states and 419 transitions. [2022-04-28 08:11:59,938 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:11:59,938 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 316 states and 419 transitions. [2022-04-28 08:12:00,376 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 419 edges. 419 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:00,376 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 419 transitions. [2022-04-28 08:12:00,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-04-28 08:12:00,377 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:00,377 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:00,377 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-04-28 08:12:00,377 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:00,378 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:00,378 INFO L85 PathProgramCache]: Analyzing trace with hash 359403676, now seen corresponding path program 1 times [2022-04-28 08:12:00,378 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:00,378 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [90942036] [2022-04-28 08:12:00,378 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:00,378 INFO L85 PathProgramCache]: Analyzing trace with hash 359403676, now seen corresponding path program 2 times [2022-04-28 08:12:00,379 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:00,379 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2103489538] [2022-04-28 08:12:00,379 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:00,379 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:00,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:00,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:00,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:00,460 INFO L290 TraceCheckUtils]: 0: Hoare triple {14659#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14635#true} is VALID [2022-04-28 08:12:00,460 INFO L290 TraceCheckUtils]: 1: Hoare triple {14635#true} assume true; {14635#true} is VALID [2022-04-28 08:12:00,460 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14635#true} {14635#true} #780#return; {14635#true} is VALID [2022-04-28 08:12:00,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:00,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:00,484 INFO L290 TraceCheckUtils]: 0: Hoare triple {14660#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14635#true} is VALID [2022-04-28 08:12:00,485 INFO L290 TraceCheckUtils]: 1: Hoare triple {14635#true} assume true; {14635#true} is VALID [2022-04-28 08:12:00,485 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14635#true} {14635#true} #714#return; {14635#true} is VALID [2022-04-28 08:12:00,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:00,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:00,499 INFO L290 TraceCheckUtils]: 0: Hoare triple {14661#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14635#true} is VALID [2022-04-28 08:12:00,499 INFO L290 TraceCheckUtils]: 1: Hoare triple {14635#true} assume true; {14635#true} is VALID [2022-04-28 08:12:00,499 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14635#true} {14635#true} #716#return; {14635#true} is VALID [2022-04-28 08:12:00,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-28 08:12:00,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:00,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-28 08:12:00,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:00,530 INFO L290 TraceCheckUtils]: 0: Hoare triple {14667#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14635#true} is VALID [2022-04-28 08:12:00,530 INFO L290 TraceCheckUtils]: 1: Hoare triple {14635#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14635#true} is VALID [2022-04-28 08:12:00,530 INFO L290 TraceCheckUtils]: 2: Hoare triple {14635#true} assume true; {14635#true} is VALID [2022-04-28 08:12:00,530 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14635#true} {14635#true} #740#return; {14635#true} is VALID [2022-04-28 08:12:00,530 INFO L290 TraceCheckUtils]: 0: Hoare triple {14662#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet70;havoc #t~nondet70;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet71;havoc #t~nondet71;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet72;havoc #t~nondet72;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp20~0 := #t~nondet73;havoc #t~nondet73;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp24~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp28~0 := #t~nondet75;havoc #t~nondet75;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp29~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp32~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp35~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp38~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet80 && #t~nondet80 <= 2147483647;~__cil_tmp41~0 := #t~nondet80;havoc #t~nondet80;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet81 && #t~nondet81 <= 2147483647;~__cil_tmp44~0 := #t~nondet81;havoc #t~nondet81;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {14635#true} is VALID [2022-04-28 08:12:00,530 INFO L290 TraceCheckUtils]: 1: Hoare triple {14635#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {14635#true} is VALID [2022-04-28 08:12:00,530 INFO L290 TraceCheckUtils]: 2: Hoare triple {14635#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {14635#true} is VALID [2022-04-28 08:12:00,530 INFO L290 TraceCheckUtils]: 3: Hoare triple {14635#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {14635#true} is VALID [2022-04-28 08:12:00,531 INFO L272 TraceCheckUtils]: 4: Hoare triple {14635#true} call IofCompleteRequest(~Irp, 0); {14667#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:00,531 INFO L290 TraceCheckUtils]: 5: Hoare triple {14667#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14635#true} is VALID [2022-04-28 08:12:00,531 INFO L290 TraceCheckUtils]: 6: Hoare triple {14635#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14635#true} is VALID [2022-04-28 08:12:00,531 INFO L290 TraceCheckUtils]: 7: Hoare triple {14635#true} assume true; {14635#true} is VALID [2022-04-28 08:12:00,531 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {14635#true} {14635#true} #740#return; {14635#true} is VALID [2022-04-28 08:12:00,531 INFO L290 TraceCheckUtils]: 9: Hoare triple {14635#true} #res := ~status~3; {14635#true} is VALID [2022-04-28 08:12:00,532 INFO L290 TraceCheckUtils]: 10: Hoare triple {14635#true} assume true; {14635#true} is VALID [2022-04-28 08:12:00,532 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {14635#true} {14635#true} #726#return; {14635#true} is VALID [2022-04-28 08:12:00,541 INFO L272 TraceCheckUtils]: 0: Hoare triple {14635#true} call ULTIMATE.init(); {14659#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:00,541 INFO L290 TraceCheckUtils]: 1: Hoare triple {14659#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14635#true} is VALID [2022-04-28 08:12:00,541 INFO L290 TraceCheckUtils]: 2: Hoare triple {14635#true} assume true; {14635#true} is VALID [2022-04-28 08:12:00,541 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14635#true} {14635#true} #780#return; {14635#true} is VALID [2022-04-28 08:12:00,541 INFO L272 TraceCheckUtils]: 4: Hoare triple {14635#true} call #t~ret83 := main(); {14635#true} is VALID [2022-04-28 08:12:00,541 INFO L290 TraceCheckUtils]: 5: Hoare triple {14635#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {14635#true} is VALID [2022-04-28 08:12:00,542 INFO L272 TraceCheckUtils]: 6: Hoare triple {14635#true} call _BLAST_init(); {14660#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:00,542 INFO L290 TraceCheckUtils]: 7: Hoare triple {14660#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14635#true} is VALID [2022-04-28 08:12:00,543 INFO L290 TraceCheckUtils]: 8: Hoare triple {14635#true} assume true; {14635#true} is VALID [2022-04-28 08:12:00,543 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {14635#true} {14635#true} #714#return; {14635#true} is VALID [2022-04-28 08:12:00,543 INFO L290 TraceCheckUtils]: 10: Hoare triple {14635#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {14635#true} is VALID [2022-04-28 08:12:00,543 INFO L290 TraceCheckUtils]: 11: Hoare triple {14635#true} assume !(0 == ~irp_choice~0); {14635#true} is VALID [2022-04-28 08:12:00,544 INFO L272 TraceCheckUtils]: 12: Hoare triple {14635#true} call stub_driver_init(); {14661#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:00,544 INFO L290 TraceCheckUtils]: 13: Hoare triple {14661#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14635#true} is VALID [2022-04-28 08:12:00,544 INFO L290 TraceCheckUtils]: 14: Hoare triple {14635#true} assume true; {14635#true} is VALID [2022-04-28 08:12:00,544 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {14635#true} {14635#true} #716#return; {14635#true} is VALID [2022-04-28 08:12:00,544 INFO L290 TraceCheckUtils]: 16: Hoare triple {14635#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {14635#true} is VALID [2022-04-28 08:12:00,544 INFO L290 TraceCheckUtils]: 17: Hoare triple {14635#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {14635#true} is VALID [2022-04-28 08:12:00,544 INFO L290 TraceCheckUtils]: 18: Hoare triple {14635#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {14635#true} is VALID [2022-04-28 08:12:00,544 INFO L290 TraceCheckUtils]: 19: Hoare triple {14635#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647;~tmp_ndt_4~0 := #t~nondet29;havoc #t~nondet29; {14635#true} is VALID [2022-04-28 08:12:00,544 INFO L290 TraceCheckUtils]: 20: Hoare triple {14635#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647;~tmp_ndt_5~0 := #t~nondet30;havoc #t~nondet30; {14635#true} is VALID [2022-04-28 08:12:00,544 INFO L290 TraceCheckUtils]: 21: Hoare triple {14635#true} assume 8 == ~tmp_ndt_5~0; {14635#true} is VALID [2022-04-28 08:12:00,545 INFO L272 TraceCheckUtils]: 22: Hoare triple {14635#true} call #t~ret35 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {14662#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:00,545 INFO L290 TraceCheckUtils]: 23: Hoare triple {14662#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet70;havoc #t~nondet70;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet71;havoc #t~nondet71;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet72;havoc #t~nondet72;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp20~0 := #t~nondet73;havoc #t~nondet73;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp24~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp28~0 := #t~nondet75;havoc #t~nondet75;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp29~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp32~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp35~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp38~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet80 && #t~nondet80 <= 2147483647;~__cil_tmp41~0 := #t~nondet80;havoc #t~nondet80;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet81 && #t~nondet81 <= 2147483647;~__cil_tmp44~0 := #t~nondet81;havoc #t~nondet81;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {14635#true} is VALID [2022-04-28 08:12:00,545 INFO L290 TraceCheckUtils]: 24: Hoare triple {14635#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {14635#true} is VALID [2022-04-28 08:12:00,546 INFO L290 TraceCheckUtils]: 25: Hoare triple {14635#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {14635#true} is VALID [2022-04-28 08:12:00,546 INFO L290 TraceCheckUtils]: 26: Hoare triple {14635#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {14635#true} is VALID [2022-04-28 08:12:00,546 INFO L272 TraceCheckUtils]: 27: Hoare triple {14635#true} call IofCompleteRequest(~Irp, 0); {14667#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:00,546 INFO L290 TraceCheckUtils]: 28: Hoare triple {14667#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14635#true} is VALID [2022-04-28 08:12:00,546 INFO L290 TraceCheckUtils]: 29: Hoare triple {14635#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14635#true} is VALID [2022-04-28 08:12:00,546 INFO L290 TraceCheckUtils]: 30: Hoare triple {14635#true} assume true; {14635#true} is VALID [2022-04-28 08:12:00,547 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {14635#true} {14635#true} #740#return; {14635#true} is VALID [2022-04-28 08:12:00,547 INFO L290 TraceCheckUtils]: 32: Hoare triple {14635#true} #res := ~status~3; {14635#true} is VALID [2022-04-28 08:12:00,547 INFO L290 TraceCheckUtils]: 33: Hoare triple {14635#true} assume true; {14635#true} is VALID [2022-04-28 08:12:00,547 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {14635#true} {14635#true} #726#return; {14635#true} is VALID [2022-04-28 08:12:00,547 INFO L290 TraceCheckUtils]: 35: Hoare triple {14635#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~status~1 := #t~ret35;havoc #t~ret35; {14635#true} is VALID [2022-04-28 08:12:00,547 INFO L290 TraceCheckUtils]: 36: Hoare triple {14635#true} assume !(1 == ~pended~0); {14658#(not (= ~pended~0 1))} is VALID [2022-04-28 08:12:00,548 INFO L290 TraceCheckUtils]: 37: Hoare triple {14658#(not (= ~pended~0 1))} assume !(1 == ~pended~0); {14658#(not (= ~pended~0 1))} is VALID [2022-04-28 08:12:00,548 INFO L290 TraceCheckUtils]: 38: Hoare triple {14658#(not (= ~pended~0 1))} assume ~s~0 != ~UNLOADED~0; {14658#(not (= ~pended~0 1))} is VALID [2022-04-28 08:12:00,548 INFO L290 TraceCheckUtils]: 39: Hoare triple {14658#(not (= ~pended~0 1))} assume -1 != ~status~1; {14658#(not (= ~pended~0 1))} is VALID [2022-04-28 08:12:00,549 INFO L290 TraceCheckUtils]: 40: Hoare triple {14658#(not (= ~pended~0 1))} assume ~s~0 != ~SKIP2~0; {14658#(not (= ~pended~0 1))} is VALID [2022-04-28 08:12:00,549 INFO L290 TraceCheckUtils]: 41: Hoare triple {14658#(not (= ~pended~0 1))} assume ~s~0 != ~IPC~0; {14658#(not (= ~pended~0 1))} is VALID [2022-04-28 08:12:00,549 INFO L290 TraceCheckUtils]: 42: Hoare triple {14658#(not (= ~pended~0 1))} assume ~s~0 == ~DC~0; {14658#(not (= ~pended~0 1))} is VALID [2022-04-28 08:12:00,550 INFO L290 TraceCheckUtils]: 43: Hoare triple {14658#(not (= ~pended~0 1))} assume 1 == ~pended~0; {14636#false} is VALID [2022-04-28 08:12:00,550 INFO L290 TraceCheckUtils]: 44: Hoare triple {14636#false} assume 259 != ~status~1; {14636#false} is VALID [2022-04-28 08:12:00,550 INFO L272 TraceCheckUtils]: 45: Hoare triple {14636#false} call errorFn(); {14636#false} is VALID [2022-04-28 08:12:00,550 INFO L290 TraceCheckUtils]: 46: Hoare triple {14636#false} assume !false; {14636#false} is VALID [2022-04-28 08:12:00,550 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:00,550 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:00,550 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2103489538] [2022-04-28 08:12:00,551 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2103489538] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:00,551 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:00,551 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:12:00,551 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:00,551 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [90942036] [2022-04-28 08:12:00,551 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [90942036] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:00,551 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:00,551 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:12:00,551 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1595656257] [2022-04-28 08:12:00,551 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:00,553 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-28 08:12:00,553 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:00,553 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:00,584 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 47 edges. 47 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:00,585 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 08:12:00,585 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:00,585 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 08:12:00,585 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-04-28 08:12:00,585 INFO L87 Difference]: Start difference. First operand 316 states and 419 transitions. Second operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:02,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:02,415 INFO L93 Difference]: Finished difference Result 330 states and 436 transitions. [2022-04-28 08:12:02,415 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-28 08:12:02,415 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-28 08:12:02,415 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:02,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:02,418 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 338 transitions. [2022-04-28 08:12:02,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:02,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 338 transitions. [2022-04-28 08:12:02,421 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 338 transitions. [2022-04-28 08:12:02,727 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 338 edges. 338 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:02,729 INFO L225 Difference]: With dead ends: 330 [2022-04-28 08:12:02,729 INFO L226 Difference]: Without dead ends: 102 [2022-04-28 08:12:02,729 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=49, Invalid=83, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:12:02,730 INFO L413 NwaCegarLoop]: 247 mSDtfsCounter, 576 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 405 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 576 SdHoareTripleChecker+Valid, 423 SdHoareTripleChecker+Invalid, 497 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 405 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:02,730 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [576 Valid, 423 Invalid, 497 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 405 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-28 08:12:02,730 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102 states. [2022-04-28 08:12:02,850 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102 to 102. [2022-04-28 08:12:02,850 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:02,850 INFO L82 GeneralOperation]: Start isEquivalent. First operand 102 states. Second operand has 102 states, 77 states have (on average 1.2207792207792207) internal successors, (94), 79 states have internal predecessors, (94), 15 states have call successors, (15), 13 states have call predecessors, (15), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:02,850 INFO L74 IsIncluded]: Start isIncluded. First operand 102 states. Second operand has 102 states, 77 states have (on average 1.2207792207792207) internal successors, (94), 79 states have internal predecessors, (94), 15 states have call successors, (15), 13 states have call predecessors, (15), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:02,851 INFO L87 Difference]: Start difference. First operand 102 states. Second operand has 102 states, 77 states have (on average 1.2207792207792207) internal successors, (94), 79 states have internal predecessors, (94), 15 states have call successors, (15), 13 states have call predecessors, (15), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:02,852 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:02,852 INFO L93 Difference]: Finished difference Result 102 states and 118 transitions. [2022-04-28 08:12:02,853 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 118 transitions. [2022-04-28 08:12:02,853 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:02,853 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:02,853 INFO L74 IsIncluded]: Start isIncluded. First operand has 102 states, 77 states have (on average 1.2207792207792207) internal successors, (94), 79 states have internal predecessors, (94), 15 states have call successors, (15), 13 states have call predecessors, (15), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 102 states. [2022-04-28 08:12:02,853 INFO L87 Difference]: Start difference. First operand has 102 states, 77 states have (on average 1.2207792207792207) internal successors, (94), 79 states have internal predecessors, (94), 15 states have call successors, (15), 13 states have call predecessors, (15), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 102 states. [2022-04-28 08:12:02,855 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:02,855 INFO L93 Difference]: Finished difference Result 102 states and 118 transitions. [2022-04-28 08:12:02,855 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 118 transitions. [2022-04-28 08:12:02,855 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:02,855 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:02,855 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:02,855 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:02,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 102 states, 77 states have (on average 1.2207792207792207) internal successors, (94), 79 states have internal predecessors, (94), 15 states have call successors, (15), 13 states have call predecessors, (15), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:02,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102 states to 102 states and 118 transitions. [2022-04-28 08:12:02,857 INFO L78 Accepts]: Start accepts. Automaton has 102 states and 118 transitions. Word has length 47 [2022-04-28 08:12:02,858 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:02,858 INFO L495 AbstractCegarLoop]: Abstraction has 102 states and 118 transitions. [2022-04-28 08:12:02,858 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:02,858 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 102 states and 118 transitions. [2022-04-28 08:12:03,017 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 118 edges. 118 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:03,017 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 118 transitions. [2022-04-28 08:12:03,018 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-28 08:12:03,018 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:03,018 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:03,018 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-04-28 08:12:03,018 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:03,019 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:03,019 INFO L85 PathProgramCache]: Analyzing trace with hash -803867800, now seen corresponding path program 1 times [2022-04-28 08:12:03,019 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:03,019 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [3887043] [2022-04-28 08:12:03,019 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:03,019 INFO L85 PathProgramCache]: Analyzing trace with hash -803867800, now seen corresponding path program 2 times [2022-04-28 08:12:03,019 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:03,020 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [14740716] [2022-04-28 08:12:03,020 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:03,020 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:03,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:03,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:03,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:03,111 INFO L290 TraceCheckUtils]: 0: Hoare triple {15771#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {15748#true} is VALID [2022-04-28 08:12:03,111 INFO L290 TraceCheckUtils]: 1: Hoare triple {15748#true} assume true; {15748#true} is VALID [2022-04-28 08:12:03,111 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15748#true} {15748#true} #780#return; {15748#true} is VALID [2022-04-28 08:12:03,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:03,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:03,136 INFO L290 TraceCheckUtils]: 0: Hoare triple {15772#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15748#true} is VALID [2022-04-28 08:12:03,136 INFO L290 TraceCheckUtils]: 1: Hoare triple {15748#true} assume true; {15748#true} is VALID [2022-04-28 08:12:03,136 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15748#true} {15748#true} #714#return; {15748#true} is VALID [2022-04-28 08:12:03,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:03,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:03,151 INFO L290 TraceCheckUtils]: 0: Hoare triple {15773#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15748#true} is VALID [2022-04-28 08:12:03,151 INFO L290 TraceCheckUtils]: 1: Hoare triple {15748#true} assume true; {15748#true} is VALID [2022-04-28 08:12:03,151 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15748#true} {15748#true} #716#return; {15748#true} is VALID [2022-04-28 08:12:03,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-04-28 08:12:03,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:03,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:03,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:03,163 INFO L290 TraceCheckUtils]: 0: Hoare triple {15774#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {15748#true} is VALID [2022-04-28 08:12:03,163 INFO L290 TraceCheckUtils]: 1: Hoare triple {15748#true} assume true; {15748#true} is VALID [2022-04-28 08:12:03,164 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15748#true} {15748#true} #712#return; {15748#true} is VALID [2022-04-28 08:12:03,164 INFO L290 TraceCheckUtils]: 0: Hoare triple {15774#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {15748#true} is VALID [2022-04-28 08:12:03,164 INFO L272 TraceCheckUtils]: 1: Hoare triple {15748#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {15774#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:03,164 INFO L290 TraceCheckUtils]: 2: Hoare triple {15774#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {15748#true} is VALID [2022-04-28 08:12:03,164 INFO L290 TraceCheckUtils]: 3: Hoare triple {15748#true} assume true; {15748#true} is VALID [2022-04-28 08:12:03,165 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15748#true} {15748#true} #712#return; {15748#true} is VALID [2022-04-28 08:12:03,165 INFO L290 TraceCheckUtils]: 5: Hoare triple {15748#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {15748#true} is VALID [2022-04-28 08:12:03,165 INFO L290 TraceCheckUtils]: 6: Hoare triple {15748#true} assume true; {15748#true} is VALID [2022-04-28 08:12:03,165 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {15748#true} {15748#true} #774#return; {15748#true} is VALID [2022-04-28 08:12:03,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-04-28 08:12:03,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:03,174 INFO L290 TraceCheckUtils]: 0: Hoare triple {15778#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:03,175 INFO L290 TraceCheckUtils]: 1: Hoare triple {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:03,175 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {15748#true} #776#return; {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:03,176 INFO L272 TraceCheckUtils]: 0: Hoare triple {15748#true} call ULTIMATE.init(); {15771#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:03,176 INFO L290 TraceCheckUtils]: 1: Hoare triple {15771#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {15748#true} is VALID [2022-04-28 08:12:03,176 INFO L290 TraceCheckUtils]: 2: Hoare triple {15748#true} assume true; {15748#true} is VALID [2022-04-28 08:12:03,177 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {15748#true} {15748#true} #780#return; {15748#true} is VALID [2022-04-28 08:12:03,177 INFO L272 TraceCheckUtils]: 4: Hoare triple {15748#true} call #t~ret83 := main(); {15748#true} is VALID [2022-04-28 08:12:03,177 INFO L290 TraceCheckUtils]: 5: Hoare triple {15748#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {15748#true} is VALID [2022-04-28 08:12:03,178 INFO L272 TraceCheckUtils]: 6: Hoare triple {15748#true} call _BLAST_init(); {15772#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:03,178 INFO L290 TraceCheckUtils]: 7: Hoare triple {15772#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15748#true} is VALID [2022-04-28 08:12:03,178 INFO L290 TraceCheckUtils]: 8: Hoare triple {15748#true} assume true; {15748#true} is VALID [2022-04-28 08:12:03,178 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {15748#true} {15748#true} #714#return; {15748#true} is VALID [2022-04-28 08:12:03,178 INFO L290 TraceCheckUtils]: 10: Hoare triple {15748#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {15748#true} is VALID [2022-04-28 08:12:03,178 INFO L290 TraceCheckUtils]: 11: Hoare triple {15748#true} assume !(0 == ~irp_choice~0); {15748#true} is VALID [2022-04-28 08:12:03,179 INFO L272 TraceCheckUtils]: 12: Hoare triple {15748#true} call stub_driver_init(); {15773#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:03,179 INFO L290 TraceCheckUtils]: 13: Hoare triple {15773#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15748#true} is VALID [2022-04-28 08:12:03,179 INFO L290 TraceCheckUtils]: 14: Hoare triple {15748#true} assume true; {15748#true} is VALID [2022-04-28 08:12:03,179 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {15748#true} {15748#true} #716#return; {15748#true} is VALID [2022-04-28 08:12:03,179 INFO L290 TraceCheckUtils]: 16: Hoare triple {15748#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {15748#true} is VALID [2022-04-28 08:12:03,179 INFO L290 TraceCheckUtils]: 17: Hoare triple {15748#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {15748#true} is VALID [2022-04-28 08:12:03,179 INFO L290 TraceCheckUtils]: 18: Hoare triple {15748#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {15748#true} is VALID [2022-04-28 08:12:03,179 INFO L290 TraceCheckUtils]: 19: Hoare triple {15748#true} assume 3 == ~tmp_ndt_3~0; {15748#true} is VALID [2022-04-28 08:12:03,179 INFO L272 TraceCheckUtils]: 20: Hoare triple {15748#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {15748#true} is VALID [2022-04-28 08:12:03,180 INFO L290 TraceCheckUtils]: 21: Hoare triple {15748#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {15748#true} is VALID [2022-04-28 08:12:03,180 INFO L290 TraceCheckUtils]: 22: Hoare triple {15748#true} assume 0 == ~irpStack__MinorFunction~0; {15748#true} is VALID [2022-04-28 08:12:03,180 INFO L290 TraceCheckUtils]: 23: Hoare triple {15748#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {15748#true} is VALID [2022-04-28 08:12:03,180 INFO L290 TraceCheckUtils]: 24: Hoare triple {15748#true} assume !(~s~0 != ~NP~0); {15748#true} is VALID [2022-04-28 08:12:03,180 INFO L290 TraceCheckUtils]: 25: Hoare triple {15748#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {15748#true} is VALID [2022-04-28 08:12:03,180 INFO L290 TraceCheckUtils]: 26: Hoare triple {15748#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {15748#true} is VALID [2022-04-28 08:12:03,180 INFO L272 TraceCheckUtils]: 27: Hoare triple {15748#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {15748#true} is VALID [2022-04-28 08:12:03,180 INFO L290 TraceCheckUtils]: 28: Hoare triple {15748#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {15748#true} is VALID [2022-04-28 08:12:03,180 INFO L290 TraceCheckUtils]: 29: Hoare triple {15748#true} assume 0 != ~compRegistered~0; {15748#true} is VALID [2022-04-28 08:12:03,181 INFO L272 TraceCheckUtils]: 30: Hoare triple {15748#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {15774#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:03,181 INFO L290 TraceCheckUtils]: 31: Hoare triple {15774#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {15748#true} is VALID [2022-04-28 08:12:03,181 INFO L272 TraceCheckUtils]: 32: Hoare triple {15748#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {15774#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:03,182 INFO L290 TraceCheckUtils]: 33: Hoare triple {15774#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {15748#true} is VALID [2022-04-28 08:12:03,182 INFO L290 TraceCheckUtils]: 34: Hoare triple {15748#true} assume true; {15748#true} is VALID [2022-04-28 08:12:03,182 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {15748#true} {15748#true} #712#return; {15748#true} is VALID [2022-04-28 08:12:03,182 INFO L290 TraceCheckUtils]: 36: Hoare triple {15748#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {15748#true} is VALID [2022-04-28 08:12:03,182 INFO L290 TraceCheckUtils]: 37: Hoare triple {15748#true} assume true; {15748#true} is VALID [2022-04-28 08:12:03,182 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {15748#true} {15748#true} #774#return; {15748#true} is VALID [2022-04-28 08:12:03,182 INFO L290 TraceCheckUtils]: 39: Hoare triple {15748#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {15748#true} is VALID [2022-04-28 08:12:03,182 INFO L290 TraceCheckUtils]: 40: Hoare triple {15748#true} assume -1073741802 == ~__cil_tmp7~0; {15748#true} is VALID [2022-04-28 08:12:03,182 INFO L272 TraceCheckUtils]: 41: Hoare triple {15748#true} call stubMoreProcessingRequired(); {15778#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:03,183 INFO L290 TraceCheckUtils]: 42: Hoare triple {15778#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:03,183 INFO L290 TraceCheckUtils]: 43: Hoare triple {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:03,184 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {15748#true} #776#return; {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:03,184 INFO L290 TraceCheckUtils]: 45: Hoare triple {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:03,184 INFO L290 TraceCheckUtils]: 46: Hoare triple {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume 0 == ~tmp_ndt_6~0; {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:03,185 INFO L290 TraceCheckUtils]: 47: Hoare triple {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} ~returnVal2~0 := 0; {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:03,185 INFO L290 TraceCheckUtils]: 48: Hoare triple {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~NP~0); {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:03,185 INFO L290 TraceCheckUtils]: 49: Hoare triple {15770#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~MPR1~0); {15749#false} is VALID [2022-04-28 08:12:03,185 INFO L290 TraceCheckUtils]: 50: Hoare triple {15749#false} assume !(~s~0 == ~SKIP1~0); {15749#false} is VALID [2022-04-28 08:12:03,186 INFO L272 TraceCheckUtils]: 51: Hoare triple {15749#false} call errorFn(); {15749#false} is VALID [2022-04-28 08:12:03,186 INFO L290 TraceCheckUtils]: 52: Hoare triple {15749#false} assume !false; {15749#false} is VALID [2022-04-28 08:12:03,186 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:03,186 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:03,186 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [14740716] [2022-04-28 08:12:03,186 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [14740716] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:03,186 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:03,186 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:12:03,187 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:03,187 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [3887043] [2022-04-28 08:12:03,187 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [3887043] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:03,187 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:03,187 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:12:03,187 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2128822395] [2022-04-28 08:12:03,187 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:03,188 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-28 08:12:03,188 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:03,188 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:03,223 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:03,223 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 08:12:03,223 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:03,224 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 08:12:03,224 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-04-28 08:12:03,224 INFO L87 Difference]: Start difference. First operand 102 states and 118 transitions. Second operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:03,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:03,707 INFO L93 Difference]: Finished difference Result 130 states and 151 transitions. [2022-04-28 08:12:03,707 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-28 08:12:03,707 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-28 08:12:03,707 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:03,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:03,709 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 139 transitions. [2022-04-28 08:12:03,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:03,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 139 transitions. [2022-04-28 08:12:03,711 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 139 transitions. [2022-04-28 08:12:03,834 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 139 edges. 139 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:03,835 INFO L225 Difference]: With dead ends: 130 [2022-04-28 08:12:03,835 INFO L226 Difference]: Without dead ends: 100 [2022-04-28 08:12:03,836 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=67, Unknown=0, NotChecked=0, Total=110 [2022-04-28 08:12:03,836 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 74 mSDsluCounter, 113 mSDsCounter, 0 mSdLazyCounter, 105 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 197 SdHoareTripleChecker+Invalid, 137 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 105 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:03,837 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 197 Invalid, 137 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 105 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-04-28 08:12:03,837 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2022-04-28 08:12:03,948 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 100. [2022-04-28 08:12:03,949 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:03,949 INFO L82 GeneralOperation]: Start isEquivalent. First operand 100 states. Second operand has 100 states, 76 states have (on average 1.1973684210526316) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:03,949 INFO L74 IsIncluded]: Start isIncluded. First operand 100 states. Second operand has 100 states, 76 states have (on average 1.1973684210526316) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:03,949 INFO L87 Difference]: Start difference. First operand 100 states. Second operand has 100 states, 76 states have (on average 1.1973684210526316) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:03,951 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:03,951 INFO L93 Difference]: Finished difference Result 100 states and 114 transitions. [2022-04-28 08:12:03,951 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 114 transitions. [2022-04-28 08:12:03,951 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:03,951 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:03,951 INFO L74 IsIncluded]: Start isIncluded. First operand has 100 states, 76 states have (on average 1.1973684210526316) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 100 states. [2022-04-28 08:12:03,952 INFO L87 Difference]: Start difference. First operand has 100 states, 76 states have (on average 1.1973684210526316) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 100 states. [2022-04-28 08:12:03,953 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:03,953 INFO L93 Difference]: Finished difference Result 100 states and 114 transitions. [2022-04-28 08:12:03,953 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 114 transitions. [2022-04-28 08:12:03,953 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:03,954 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:03,954 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:03,954 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:03,954 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 76 states have (on average 1.1973684210526316) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:03,955 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 114 transitions. [2022-04-28 08:12:03,956 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 114 transitions. Word has length 53 [2022-04-28 08:12:03,956 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:03,956 INFO L495 AbstractCegarLoop]: Abstraction has 100 states and 114 transitions. [2022-04-28 08:12:03,956 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:03,956 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 100 states and 114 transitions. [2022-04-28 08:12:04,112 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 114 edges. 114 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:04,112 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 114 transitions. [2022-04-28 08:12:04,113 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-28 08:12:04,113 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:04,113 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:04,113 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-04-28 08:12:04,114 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:04,114 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:04,114 INFO L85 PathProgramCache]: Analyzing trace with hash -1055877385, now seen corresponding path program 1 times [2022-04-28 08:12:04,114 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:04,114 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [578959095] [2022-04-28 08:12:04,114 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:04,114 INFO L85 PathProgramCache]: Analyzing trace with hash -1055877385, now seen corresponding path program 2 times [2022-04-28 08:12:04,115 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:04,115 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1076273685] [2022-04-28 08:12:04,115 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:04,115 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:04,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:04,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:04,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:04,224 INFO L290 TraceCheckUtils]: 0: Hoare triple {16481#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16448#true} is VALID [2022-04-28 08:12:04,224 INFO L290 TraceCheckUtils]: 1: Hoare triple {16448#true} assume true; {16448#true} is VALID [2022-04-28 08:12:04,225 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16448#true} {16448#true} #780#return; {16448#true} is VALID [2022-04-28 08:12:04,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:04,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:04,258 INFO L290 TraceCheckUtils]: 0: Hoare triple {16482#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16448#true} is VALID [2022-04-28 08:12:04,258 INFO L290 TraceCheckUtils]: 1: Hoare triple {16448#true} assume true; {16448#true} is VALID [2022-04-28 08:12:04,258 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16448#true} {16448#true} #714#return; {16448#true} is VALID [2022-04-28 08:12:04,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:04,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:04,277 INFO L290 TraceCheckUtils]: 0: Hoare triple {16483#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16448#true} is VALID [2022-04-28 08:12:04,277 INFO L290 TraceCheckUtils]: 1: Hoare triple {16448#true} assume true; {16448#true} is VALID [2022-04-28 08:12:04,277 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16448#true} {16448#true} #716#return; {16448#true} is VALID [2022-04-28 08:12:04,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:12:04,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:04,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:12:04,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:04,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:04,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:04,365 INFO L290 TraceCheckUtils]: 0: Hoare triple {16495#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {16448#true} is VALID [2022-04-28 08:12:04,365 INFO L290 TraceCheckUtils]: 1: Hoare triple {16448#true} assume true; {16448#true} is VALID [2022-04-28 08:12:04,365 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16448#true} {16448#true} #712#return; {16448#true} is VALID [2022-04-28 08:12:04,365 INFO L290 TraceCheckUtils]: 0: Hoare triple {16495#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16448#true} is VALID [2022-04-28 08:12:04,366 INFO L272 TraceCheckUtils]: 1: Hoare triple {16448#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {16495#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:04,366 INFO L290 TraceCheckUtils]: 2: Hoare triple {16495#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {16448#true} is VALID [2022-04-28 08:12:04,366 INFO L290 TraceCheckUtils]: 3: Hoare triple {16448#true} assume true; {16448#true} is VALID [2022-04-28 08:12:04,366 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {16448#true} {16448#true} #712#return; {16448#true} is VALID [2022-04-28 08:12:04,366 INFO L290 TraceCheckUtils]: 5: Hoare triple {16448#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {16448#true} is VALID [2022-04-28 08:12:04,367 INFO L290 TraceCheckUtils]: 6: Hoare triple {16448#true} assume true; {16448#true} is VALID [2022-04-28 08:12:04,367 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {16448#true} {16448#true} #774#return; {16448#true} is VALID [2022-04-28 08:12:04,367 INFO L290 TraceCheckUtils]: 0: Hoare triple {16484#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {16448#true} is VALID [2022-04-28 08:12:04,368 INFO L290 TraceCheckUtils]: 1: Hoare triple {16448#true} assume 0 != ~compRegistered~0; {16448#true} is VALID [2022-04-28 08:12:04,369 INFO L272 TraceCheckUtils]: 2: Hoare triple {16448#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {16495#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:04,369 INFO L290 TraceCheckUtils]: 3: Hoare triple {16495#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16448#true} is VALID [2022-04-28 08:12:04,369 INFO L272 TraceCheckUtils]: 4: Hoare triple {16448#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {16495#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:04,370 INFO L290 TraceCheckUtils]: 5: Hoare triple {16495#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {16448#true} is VALID [2022-04-28 08:12:04,370 INFO L290 TraceCheckUtils]: 6: Hoare triple {16448#true} assume true; {16448#true} is VALID [2022-04-28 08:12:04,370 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {16448#true} {16448#true} #712#return; {16448#true} is VALID [2022-04-28 08:12:04,370 INFO L290 TraceCheckUtils]: 8: Hoare triple {16448#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {16448#true} is VALID [2022-04-28 08:12:04,370 INFO L290 TraceCheckUtils]: 9: Hoare triple {16448#true} assume true; {16448#true} is VALID [2022-04-28 08:12:04,370 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {16448#true} {16448#true} #774#return; {16448#true} is VALID [2022-04-28 08:12:04,370 INFO L290 TraceCheckUtils]: 11: Hoare triple {16448#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {16448#true} is VALID [2022-04-28 08:12:04,370 INFO L290 TraceCheckUtils]: 12: Hoare triple {16448#true} assume !(-1073741802 == ~__cil_tmp7~0); {16448#true} is VALID [2022-04-28 08:12:04,370 INFO L290 TraceCheckUtils]: 13: Hoare triple {16448#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {16448#true} is VALID [2022-04-28 08:12:04,370 INFO L290 TraceCheckUtils]: 14: Hoare triple {16448#true} assume 0 == ~tmp_ndt_6~0; {16448#true} is VALID [2022-04-28 08:12:04,371 INFO L290 TraceCheckUtils]: 15: Hoare triple {16448#true} ~returnVal2~0 := 0; {16493#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:04,371 INFO L290 TraceCheckUtils]: 16: Hoare triple {16493#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {16493#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:04,372 INFO L290 TraceCheckUtils]: 17: Hoare triple {16493#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {16494#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:04,372 INFO L290 TraceCheckUtils]: 18: Hoare triple {16494#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {16494#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:04,373 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {16494#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {16448#true} #752#return; {16479#(= |KbFilter_PnP_#t~ret12| 0)} is VALID [2022-04-28 08:12:04,374 INFO L272 TraceCheckUtils]: 0: Hoare triple {16448#true} call ULTIMATE.init(); {16481#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:04,375 INFO L290 TraceCheckUtils]: 1: Hoare triple {16481#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16448#true} is VALID [2022-04-28 08:12:04,375 INFO L290 TraceCheckUtils]: 2: Hoare triple {16448#true} assume true; {16448#true} is VALID [2022-04-28 08:12:04,375 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {16448#true} {16448#true} #780#return; {16448#true} is VALID [2022-04-28 08:12:04,375 INFO L272 TraceCheckUtils]: 4: Hoare triple {16448#true} call #t~ret83 := main(); {16448#true} is VALID [2022-04-28 08:12:04,375 INFO L290 TraceCheckUtils]: 5: Hoare triple {16448#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {16448#true} is VALID [2022-04-28 08:12:04,376 INFO L272 TraceCheckUtils]: 6: Hoare triple {16448#true} call _BLAST_init(); {16482#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:04,376 INFO L290 TraceCheckUtils]: 7: Hoare triple {16482#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16448#true} is VALID [2022-04-28 08:12:04,376 INFO L290 TraceCheckUtils]: 8: Hoare triple {16448#true} assume true; {16448#true} is VALID [2022-04-28 08:12:04,376 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {16448#true} {16448#true} #714#return; {16448#true} is VALID [2022-04-28 08:12:04,376 INFO L290 TraceCheckUtils]: 10: Hoare triple {16448#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {16448#true} is VALID [2022-04-28 08:12:04,376 INFO L290 TraceCheckUtils]: 11: Hoare triple {16448#true} assume !(0 == ~irp_choice~0); {16448#true} is VALID [2022-04-28 08:12:04,377 INFO L272 TraceCheckUtils]: 12: Hoare triple {16448#true} call stub_driver_init(); {16483#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:04,377 INFO L290 TraceCheckUtils]: 13: Hoare triple {16483#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16448#true} is VALID [2022-04-28 08:12:04,377 INFO L290 TraceCheckUtils]: 14: Hoare triple {16448#true} assume true; {16448#true} is VALID [2022-04-28 08:12:04,377 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {16448#true} {16448#true} #716#return; {16448#true} is VALID [2022-04-28 08:12:04,377 INFO L290 TraceCheckUtils]: 16: Hoare triple {16448#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {16448#true} is VALID [2022-04-28 08:12:04,378 INFO L290 TraceCheckUtils]: 17: Hoare triple {16448#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {16448#true} is VALID [2022-04-28 08:12:04,378 INFO L290 TraceCheckUtils]: 18: Hoare triple {16448#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {16448#true} is VALID [2022-04-28 08:12:04,378 INFO L290 TraceCheckUtils]: 19: Hoare triple {16448#true} assume 3 == ~tmp_ndt_3~0; {16448#true} is VALID [2022-04-28 08:12:04,378 INFO L272 TraceCheckUtils]: 20: Hoare triple {16448#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {16448#true} is VALID [2022-04-28 08:12:04,378 INFO L290 TraceCheckUtils]: 21: Hoare triple {16448#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {16448#true} is VALID [2022-04-28 08:12:04,378 INFO L290 TraceCheckUtils]: 22: Hoare triple {16448#true} assume 0 == ~irpStack__MinorFunction~0; {16448#true} is VALID [2022-04-28 08:12:04,378 INFO L290 TraceCheckUtils]: 23: Hoare triple {16448#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {16448#true} is VALID [2022-04-28 08:12:04,378 INFO L290 TraceCheckUtils]: 24: Hoare triple {16448#true} assume !(~s~0 != ~NP~0); {16448#true} is VALID [2022-04-28 08:12:04,378 INFO L290 TraceCheckUtils]: 25: Hoare triple {16448#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {16448#true} is VALID [2022-04-28 08:12:04,378 INFO L290 TraceCheckUtils]: 26: Hoare triple {16448#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {16448#true} is VALID [2022-04-28 08:12:04,379 INFO L272 TraceCheckUtils]: 27: Hoare triple {16448#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {16484#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:04,379 INFO L290 TraceCheckUtils]: 28: Hoare triple {16484#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {16448#true} is VALID [2022-04-28 08:12:04,380 INFO L290 TraceCheckUtils]: 29: Hoare triple {16448#true} assume 0 != ~compRegistered~0; {16448#true} is VALID [2022-04-28 08:12:04,380 INFO L272 TraceCheckUtils]: 30: Hoare triple {16448#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {16495#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:04,380 INFO L290 TraceCheckUtils]: 31: Hoare triple {16495#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16448#true} is VALID [2022-04-28 08:12:04,381 INFO L272 TraceCheckUtils]: 32: Hoare triple {16448#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {16495#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:04,381 INFO L290 TraceCheckUtils]: 33: Hoare triple {16495#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {16448#true} is VALID [2022-04-28 08:12:04,381 INFO L290 TraceCheckUtils]: 34: Hoare triple {16448#true} assume true; {16448#true} is VALID [2022-04-28 08:12:04,381 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {16448#true} {16448#true} #712#return; {16448#true} is VALID [2022-04-28 08:12:04,381 INFO L290 TraceCheckUtils]: 36: Hoare triple {16448#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {16448#true} is VALID [2022-04-28 08:12:04,381 INFO L290 TraceCheckUtils]: 37: Hoare triple {16448#true} assume true; {16448#true} is VALID [2022-04-28 08:12:04,381 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {16448#true} {16448#true} #774#return; {16448#true} is VALID [2022-04-28 08:12:04,381 INFO L290 TraceCheckUtils]: 39: Hoare triple {16448#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {16448#true} is VALID [2022-04-28 08:12:04,382 INFO L290 TraceCheckUtils]: 40: Hoare triple {16448#true} assume !(-1073741802 == ~__cil_tmp7~0); {16448#true} is VALID [2022-04-28 08:12:04,382 INFO L290 TraceCheckUtils]: 41: Hoare triple {16448#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {16448#true} is VALID [2022-04-28 08:12:04,382 INFO L290 TraceCheckUtils]: 42: Hoare triple {16448#true} assume 0 == ~tmp_ndt_6~0; {16448#true} is VALID [2022-04-28 08:12:04,383 INFO L290 TraceCheckUtils]: 43: Hoare triple {16448#true} ~returnVal2~0 := 0; {16493#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:04,383 INFO L290 TraceCheckUtils]: 44: Hoare triple {16493#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {16493#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:04,384 INFO L290 TraceCheckUtils]: 45: Hoare triple {16493#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {16494#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:04,384 INFO L290 TraceCheckUtils]: 46: Hoare triple {16494#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {16494#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:04,385 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {16494#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {16448#true} #752#return; {16479#(= |KbFilter_PnP_#t~ret12| 0)} is VALID [2022-04-28 08:12:04,385 INFO L290 TraceCheckUtils]: 48: Hoare triple {16479#(= |KbFilter_PnP_#t~ret12| 0)} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {16480#(= KbFilter_PnP_~__cil_tmp23~0 0)} is VALID [2022-04-28 08:12:04,386 INFO L290 TraceCheckUtils]: 49: Hoare triple {16480#(= KbFilter_PnP_~__cil_tmp23~0 0)} assume 259 == ~__cil_tmp23~0; {16449#false} is VALID [2022-04-28 08:12:04,386 INFO L272 TraceCheckUtils]: 50: Hoare triple {16449#false} call #t~ret13 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {16449#false} is VALID [2022-04-28 08:12:04,386 INFO L290 TraceCheckUtils]: 51: Hoare triple {16449#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {16449#false} is VALID [2022-04-28 08:12:04,386 INFO L290 TraceCheckUtils]: 52: Hoare triple {16449#false} assume !(~s~0 == ~MPR3~0); {16449#false} is VALID [2022-04-28 08:12:04,386 INFO L290 TraceCheckUtils]: 53: Hoare triple {16449#false} assume !(1 == ~customIrp~0); {16449#false} is VALID [2022-04-28 08:12:04,386 INFO L290 TraceCheckUtils]: 54: Hoare triple {16449#false} assume ~s~0 == ~MPR3~0; {16449#false} is VALID [2022-04-28 08:12:04,386 INFO L272 TraceCheckUtils]: 55: Hoare triple {16449#false} call errorFn(); {16449#false} is VALID [2022-04-28 08:12:04,386 INFO L290 TraceCheckUtils]: 56: Hoare triple {16449#false} assume !false; {16449#false} is VALID [2022-04-28 08:12:04,386 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:04,387 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:04,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1076273685] [2022-04-28 08:12:04,387 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1076273685] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:04,387 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:04,387 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:12:04,387 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:04,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [578959095] [2022-04-28 08:12:04,387 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [578959095] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:04,387 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:04,387 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:12:04,387 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1747489202] [2022-04-28 08:12:04,388 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:04,388 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-28 08:12:04,388 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:04,389 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:04,435 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:04,435 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 08:12:04,435 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:04,435 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 08:12:04,436 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-28 08:12:04,436 INFO L87 Difference]: Start difference. First operand 100 states and 114 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:05,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:05,314 INFO L93 Difference]: Finished difference Result 152 states and 177 transitions. [2022-04-28 08:12:05,314 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-28 08:12:05,315 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-28 08:12:05,315 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:05,315 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:05,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 143 transitions. [2022-04-28 08:12:05,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:05,318 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 143 transitions. [2022-04-28 08:12:05,318 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 143 transitions. [2022-04-28 08:12:05,438 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 143 edges. 143 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:05,440 INFO L225 Difference]: With dead ends: 152 [2022-04-28 08:12:05,440 INFO L226 Difference]: Without dead ends: 111 [2022-04-28 08:12:05,440 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=99, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:12:05,441 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 105 mSDsluCounter, 262 mSDsCounter, 0 mSdLazyCounter, 236 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 105 SdHoareTripleChecker+Valid, 338 SdHoareTripleChecker+Invalid, 291 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 236 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:05,441 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [105 Valid, 338 Invalid, 291 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 236 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-28 08:12:05,441 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 111 states. [2022-04-28 08:12:05,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 111 to 105. [2022-04-28 08:12:05,555 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:05,555 INFO L82 GeneralOperation]: Start isEquivalent. First operand 111 states. Second operand has 105 states, 80 states have (on average 1.1875) internal successors, (95), 81 states have internal predecessors, (95), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-28 08:12:05,556 INFO L74 IsIncluded]: Start isIncluded. First operand 111 states. Second operand has 105 states, 80 states have (on average 1.1875) internal successors, (95), 81 states have internal predecessors, (95), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-28 08:12:05,556 INFO L87 Difference]: Start difference. First operand 111 states. Second operand has 105 states, 80 states have (on average 1.1875) internal successors, (95), 81 states have internal predecessors, (95), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-28 08:12:05,557 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:05,558 INFO L93 Difference]: Finished difference Result 111 states and 127 transitions. [2022-04-28 08:12:05,558 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 127 transitions. [2022-04-28 08:12:05,558 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:05,558 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:05,558 INFO L74 IsIncluded]: Start isIncluded. First operand has 105 states, 80 states have (on average 1.1875) internal successors, (95), 81 states have internal predecessors, (95), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) Second operand 111 states. [2022-04-28 08:12:05,559 INFO L87 Difference]: Start difference. First operand has 105 states, 80 states have (on average 1.1875) internal successors, (95), 81 states have internal predecessors, (95), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) Second operand 111 states. [2022-04-28 08:12:05,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:05,560 INFO L93 Difference]: Finished difference Result 111 states and 127 transitions. [2022-04-28 08:12:05,560 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 127 transitions. [2022-04-28 08:12:05,561 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:05,561 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:05,561 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:05,561 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:05,561 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 80 states have (on average 1.1875) internal successors, (95), 81 states have internal predecessors, (95), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-28 08:12:05,563 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 119 transitions. [2022-04-28 08:12:05,563 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 119 transitions. Word has length 57 [2022-04-28 08:12:05,563 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:05,563 INFO L495 AbstractCegarLoop]: Abstraction has 105 states and 119 transitions. [2022-04-28 08:12:05,563 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:05,563 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 105 states and 119 transitions. [2022-04-28 08:12:05,695 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 119 edges. 119 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:05,695 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 119 transitions. [2022-04-28 08:12:05,696 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-28 08:12:05,696 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:05,696 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:05,696 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-04-28 08:12:05,696 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:05,696 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:05,696 INFO L85 PathProgramCache]: Analyzing trace with hash 1324274632, now seen corresponding path program 1 times [2022-04-28 08:12:05,696 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:05,696 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [95614083] [2022-04-28 08:12:05,697 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:05,697 INFO L85 PathProgramCache]: Analyzing trace with hash 1324274632, now seen corresponding path program 2 times [2022-04-28 08:12:05,697 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:05,697 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [488824032] [2022-04-28 08:12:05,697 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:05,697 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:05,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:05,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:05,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:05,781 INFO L290 TraceCheckUtils]: 0: Hoare triple {17272#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {17239#true} is VALID [2022-04-28 08:12:05,782 INFO L290 TraceCheckUtils]: 1: Hoare triple {17239#true} assume true; {17239#true} is VALID [2022-04-28 08:12:05,782 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17239#true} {17239#true} #780#return; {17239#true} is VALID [2022-04-28 08:12:05,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:05,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:05,807 INFO L290 TraceCheckUtils]: 0: Hoare triple {17273#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17239#true} is VALID [2022-04-28 08:12:05,807 INFO L290 TraceCheckUtils]: 1: Hoare triple {17239#true} assume true; {17239#true} is VALID [2022-04-28 08:12:05,807 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17239#true} {17239#true} #714#return; {17239#true} is VALID [2022-04-28 08:12:05,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:05,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:05,822 INFO L290 TraceCheckUtils]: 0: Hoare triple {17274#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17239#true} is VALID [2022-04-28 08:12:05,822 INFO L290 TraceCheckUtils]: 1: Hoare triple {17239#true} assume true; {17239#true} is VALID [2022-04-28 08:12:05,823 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17239#true} {17239#true} #716#return; {17239#true} is VALID [2022-04-28 08:12:05,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:12:05,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:05,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:12:05,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:05,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:05,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:05,887 INFO L290 TraceCheckUtils]: 0: Hoare triple {17286#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17239#true} is VALID [2022-04-28 08:12:05,887 INFO L290 TraceCheckUtils]: 1: Hoare triple {17239#true} assume true; {17239#true} is VALID [2022-04-28 08:12:05,887 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17239#true} {17239#true} #712#return; {17239#true} is VALID [2022-04-28 08:12:05,887 INFO L290 TraceCheckUtils]: 0: Hoare triple {17286#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {17239#true} is VALID [2022-04-28 08:12:05,888 INFO L272 TraceCheckUtils]: 1: Hoare triple {17239#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {17286#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:05,888 INFO L290 TraceCheckUtils]: 2: Hoare triple {17286#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17239#true} is VALID [2022-04-28 08:12:05,888 INFO L290 TraceCheckUtils]: 3: Hoare triple {17239#true} assume true; {17239#true} is VALID [2022-04-28 08:12:05,888 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {17239#true} {17239#true} #712#return; {17239#true} is VALID [2022-04-28 08:12:05,889 INFO L290 TraceCheckUtils]: 5: Hoare triple {17239#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {17239#true} is VALID [2022-04-28 08:12:05,889 INFO L290 TraceCheckUtils]: 6: Hoare triple {17239#true} assume true; {17239#true} is VALID [2022-04-28 08:12:05,889 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {17239#true} {17239#true} #774#return; {17239#true} is VALID [2022-04-28 08:12:05,889 INFO L290 TraceCheckUtils]: 0: Hoare triple {17275#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {17239#true} is VALID [2022-04-28 08:12:05,889 INFO L290 TraceCheckUtils]: 1: Hoare triple {17239#true} assume 0 != ~compRegistered~0; {17239#true} is VALID [2022-04-28 08:12:05,890 INFO L272 TraceCheckUtils]: 2: Hoare triple {17239#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {17286#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:05,890 INFO L290 TraceCheckUtils]: 3: Hoare triple {17286#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {17239#true} is VALID [2022-04-28 08:12:05,890 INFO L272 TraceCheckUtils]: 4: Hoare triple {17239#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {17286#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:05,890 INFO L290 TraceCheckUtils]: 5: Hoare triple {17286#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17239#true} is VALID [2022-04-28 08:12:05,890 INFO L290 TraceCheckUtils]: 6: Hoare triple {17239#true} assume true; {17239#true} is VALID [2022-04-28 08:12:05,891 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {17239#true} {17239#true} #712#return; {17239#true} is VALID [2022-04-28 08:12:05,891 INFO L290 TraceCheckUtils]: 8: Hoare triple {17239#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {17239#true} is VALID [2022-04-28 08:12:05,891 INFO L290 TraceCheckUtils]: 9: Hoare triple {17239#true} assume true; {17239#true} is VALID [2022-04-28 08:12:05,891 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {17239#true} {17239#true} #774#return; {17239#true} is VALID [2022-04-28 08:12:05,891 INFO L290 TraceCheckUtils]: 11: Hoare triple {17239#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {17239#true} is VALID [2022-04-28 08:12:05,891 INFO L290 TraceCheckUtils]: 12: Hoare triple {17239#true} assume !(-1073741802 == ~__cil_tmp7~0); {17239#true} is VALID [2022-04-28 08:12:05,891 INFO L290 TraceCheckUtils]: 13: Hoare triple {17239#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {17239#true} is VALID [2022-04-28 08:12:05,891 INFO L290 TraceCheckUtils]: 14: Hoare triple {17239#true} assume 0 == ~tmp_ndt_6~0; {17239#true} is VALID [2022-04-28 08:12:05,891 INFO L290 TraceCheckUtils]: 15: Hoare triple {17239#true} ~returnVal2~0 := 0; {17284#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:05,892 INFO L290 TraceCheckUtils]: 16: Hoare triple {17284#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {17284#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:05,892 INFO L290 TraceCheckUtils]: 17: Hoare triple {17284#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {17285#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:05,893 INFO L290 TraceCheckUtils]: 18: Hoare triple {17285#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {17285#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:05,893 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {17285#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {17239#true} #752#return; {17270#(= |KbFilter_PnP_#t~ret12| 0)} is VALID [2022-04-28 08:12:05,895 INFO L272 TraceCheckUtils]: 0: Hoare triple {17239#true} call ULTIMATE.init(); {17272#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:05,895 INFO L290 TraceCheckUtils]: 1: Hoare triple {17272#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {17239#true} is VALID [2022-04-28 08:12:05,895 INFO L290 TraceCheckUtils]: 2: Hoare triple {17239#true} assume true; {17239#true} is VALID [2022-04-28 08:12:05,895 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {17239#true} {17239#true} #780#return; {17239#true} is VALID [2022-04-28 08:12:05,896 INFO L272 TraceCheckUtils]: 4: Hoare triple {17239#true} call #t~ret83 := main(); {17239#true} is VALID [2022-04-28 08:12:05,896 INFO L290 TraceCheckUtils]: 5: Hoare triple {17239#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {17239#true} is VALID [2022-04-28 08:12:05,897 INFO L272 TraceCheckUtils]: 6: Hoare triple {17239#true} call _BLAST_init(); {17273#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:05,897 INFO L290 TraceCheckUtils]: 7: Hoare triple {17273#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17239#true} is VALID [2022-04-28 08:12:05,897 INFO L290 TraceCheckUtils]: 8: Hoare triple {17239#true} assume true; {17239#true} is VALID [2022-04-28 08:12:05,897 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {17239#true} {17239#true} #714#return; {17239#true} is VALID [2022-04-28 08:12:05,897 INFO L290 TraceCheckUtils]: 10: Hoare triple {17239#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {17239#true} is VALID [2022-04-28 08:12:05,897 INFO L290 TraceCheckUtils]: 11: Hoare triple {17239#true} assume !(0 == ~irp_choice~0); {17239#true} is VALID [2022-04-28 08:12:05,898 INFO L272 TraceCheckUtils]: 12: Hoare triple {17239#true} call stub_driver_init(); {17274#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:05,898 INFO L290 TraceCheckUtils]: 13: Hoare triple {17274#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17239#true} is VALID [2022-04-28 08:12:05,898 INFO L290 TraceCheckUtils]: 14: Hoare triple {17239#true} assume true; {17239#true} is VALID [2022-04-28 08:12:05,898 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {17239#true} {17239#true} #716#return; {17239#true} is VALID [2022-04-28 08:12:05,898 INFO L290 TraceCheckUtils]: 16: Hoare triple {17239#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {17239#true} is VALID [2022-04-28 08:12:05,898 INFO L290 TraceCheckUtils]: 17: Hoare triple {17239#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {17239#true} is VALID [2022-04-28 08:12:05,898 INFO L290 TraceCheckUtils]: 18: Hoare triple {17239#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {17239#true} is VALID [2022-04-28 08:12:05,898 INFO L290 TraceCheckUtils]: 19: Hoare triple {17239#true} assume 3 == ~tmp_ndt_3~0; {17239#true} is VALID [2022-04-28 08:12:05,898 INFO L272 TraceCheckUtils]: 20: Hoare triple {17239#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {17239#true} is VALID [2022-04-28 08:12:05,899 INFO L290 TraceCheckUtils]: 21: Hoare triple {17239#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {17239#true} is VALID [2022-04-28 08:12:05,899 INFO L290 TraceCheckUtils]: 22: Hoare triple {17239#true} assume 0 == ~irpStack__MinorFunction~0; {17239#true} is VALID [2022-04-28 08:12:05,899 INFO L290 TraceCheckUtils]: 23: Hoare triple {17239#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {17239#true} is VALID [2022-04-28 08:12:05,899 INFO L290 TraceCheckUtils]: 24: Hoare triple {17239#true} assume !(~s~0 != ~NP~0); {17239#true} is VALID [2022-04-28 08:12:05,899 INFO L290 TraceCheckUtils]: 25: Hoare triple {17239#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {17239#true} is VALID [2022-04-28 08:12:05,899 INFO L290 TraceCheckUtils]: 26: Hoare triple {17239#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {17239#true} is VALID [2022-04-28 08:12:05,908 INFO L272 TraceCheckUtils]: 27: Hoare triple {17239#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {17275#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:05,908 INFO L290 TraceCheckUtils]: 28: Hoare triple {17275#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {17239#true} is VALID [2022-04-28 08:12:05,908 INFO L290 TraceCheckUtils]: 29: Hoare triple {17239#true} assume 0 != ~compRegistered~0; {17239#true} is VALID [2022-04-28 08:12:05,909 INFO L272 TraceCheckUtils]: 30: Hoare triple {17239#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {17286#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:05,909 INFO L290 TraceCheckUtils]: 31: Hoare triple {17286#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {17239#true} is VALID [2022-04-28 08:12:05,909 INFO L272 TraceCheckUtils]: 32: Hoare triple {17239#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {17286#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:05,909 INFO L290 TraceCheckUtils]: 33: Hoare triple {17286#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17239#true} is VALID [2022-04-28 08:12:05,910 INFO L290 TraceCheckUtils]: 34: Hoare triple {17239#true} assume true; {17239#true} is VALID [2022-04-28 08:12:05,910 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {17239#true} {17239#true} #712#return; {17239#true} is VALID [2022-04-28 08:12:05,910 INFO L290 TraceCheckUtils]: 36: Hoare triple {17239#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {17239#true} is VALID [2022-04-28 08:12:05,910 INFO L290 TraceCheckUtils]: 37: Hoare triple {17239#true} assume true; {17239#true} is VALID [2022-04-28 08:12:05,910 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {17239#true} {17239#true} #774#return; {17239#true} is VALID [2022-04-28 08:12:05,910 INFO L290 TraceCheckUtils]: 39: Hoare triple {17239#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {17239#true} is VALID [2022-04-28 08:12:05,910 INFO L290 TraceCheckUtils]: 40: Hoare triple {17239#true} assume !(-1073741802 == ~__cil_tmp7~0); {17239#true} is VALID [2022-04-28 08:12:05,910 INFO L290 TraceCheckUtils]: 41: Hoare triple {17239#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {17239#true} is VALID [2022-04-28 08:12:05,910 INFO L290 TraceCheckUtils]: 42: Hoare triple {17239#true} assume 0 == ~tmp_ndt_6~0; {17239#true} is VALID [2022-04-28 08:12:05,911 INFO L290 TraceCheckUtils]: 43: Hoare triple {17239#true} ~returnVal2~0 := 0; {17284#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:05,916 INFO L290 TraceCheckUtils]: 44: Hoare triple {17284#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {17284#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:05,916 INFO L290 TraceCheckUtils]: 45: Hoare triple {17284#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {17285#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:05,917 INFO L290 TraceCheckUtils]: 46: Hoare triple {17285#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {17285#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:05,918 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {17285#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {17239#true} #752#return; {17270#(= |KbFilter_PnP_#t~ret12| 0)} is VALID [2022-04-28 08:12:05,918 INFO L290 TraceCheckUtils]: 48: Hoare triple {17270#(= |KbFilter_PnP_#t~ret12| 0)} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {17271#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-28 08:12:05,918 INFO L290 TraceCheckUtils]: 49: Hoare triple {17271#(= KbFilter_PnP_~status~0 0)} assume !(259 == ~__cil_tmp23~0); {17271#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-28 08:12:05,919 INFO L290 TraceCheckUtils]: 50: Hoare triple {17271#(= KbFilter_PnP_~status~0 0)} assume !(~status~0 >= 0); {17240#false} is VALID [2022-04-28 08:12:05,919 INFO L290 TraceCheckUtils]: 51: Hoare triple {17240#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {17240#false} is VALID [2022-04-28 08:12:05,919 INFO L272 TraceCheckUtils]: 52: Hoare triple {17240#false} call IofCompleteRequest(~Irp, 0); {17240#false} is VALID [2022-04-28 08:12:05,919 INFO L290 TraceCheckUtils]: 53: Hoare triple {17240#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {17240#false} is VALID [2022-04-28 08:12:05,919 INFO L290 TraceCheckUtils]: 54: Hoare triple {17240#false} assume !(~s~0 == ~NP~0); {17240#false} is VALID [2022-04-28 08:12:05,919 INFO L272 TraceCheckUtils]: 55: Hoare triple {17240#false} call errorFn(); {17240#false} is VALID [2022-04-28 08:12:05,919 INFO L290 TraceCheckUtils]: 56: Hoare triple {17240#false} assume !false; {17240#false} is VALID [2022-04-28 08:12:05,920 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:05,920 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:05,920 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [488824032] [2022-04-28 08:12:05,920 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [488824032] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:05,920 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:05,920 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:12:05,920 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:05,920 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [95614083] [2022-04-28 08:12:05,920 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [95614083] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:05,920 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:05,921 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:12:05,921 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [523514368] [2022-04-28 08:12:05,921 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:05,921 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-28 08:12:05,921 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:05,921 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:05,960 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:05,960 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 08:12:05,960 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:05,960 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 08:12:05,961 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-28 08:12:05,961 INFO L87 Difference]: Start difference. First operand 105 states and 119 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:06,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:06,777 INFO L93 Difference]: Finished difference Result 116 states and 131 transitions. [2022-04-28 08:12:06,777 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-04-28 08:12:06,777 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-28 08:12:06,777 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:06,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:06,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 111 transitions. [2022-04-28 08:12:06,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:06,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 111 transitions. [2022-04-28 08:12:06,779 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 10 states and 111 transitions. [2022-04-28 08:12:06,866 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 111 edges. 111 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:06,867 INFO L225 Difference]: With dead ends: 116 [2022-04-28 08:12:06,867 INFO L226 Difference]: Without dead ends: 109 [2022-04-28 08:12:06,868 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=51, Invalid=159, Unknown=0, NotChecked=0, Total=210 [2022-04-28 08:12:06,868 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 82 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 216 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 304 SdHoareTripleChecker+Invalid, 262 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 216 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:06,868 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [82 Valid, 304 Invalid, 262 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 216 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-28 08:12:06,869 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109 states. [2022-04-28 08:12:06,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109 to 106. [2022-04-28 08:12:06,979 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:06,980 INFO L82 GeneralOperation]: Start isEquivalent. First operand 109 states. Second operand has 106 states, 81 states have (on average 1.1851851851851851) internal successors, (96), 82 states have internal predecessors, (96), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-28 08:12:06,980 INFO L74 IsIncluded]: Start isIncluded. First operand 109 states. Second operand has 106 states, 81 states have (on average 1.1851851851851851) internal successors, (96), 82 states have internal predecessors, (96), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-28 08:12:06,980 INFO L87 Difference]: Start difference. First operand 109 states. Second operand has 106 states, 81 states have (on average 1.1851851851851851) internal successors, (96), 82 states have internal predecessors, (96), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-28 08:12:06,982 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:06,982 INFO L93 Difference]: Finished difference Result 109 states and 124 transitions. [2022-04-28 08:12:06,982 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 124 transitions. [2022-04-28 08:12:06,982 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:06,982 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:06,982 INFO L74 IsIncluded]: Start isIncluded. First operand has 106 states, 81 states have (on average 1.1851851851851851) internal successors, (96), 82 states have internal predecessors, (96), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) Second operand 109 states. [2022-04-28 08:12:06,983 INFO L87 Difference]: Start difference. First operand has 106 states, 81 states have (on average 1.1851851851851851) internal successors, (96), 82 states have internal predecessors, (96), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) Second operand 109 states. [2022-04-28 08:12:06,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:06,984 INFO L93 Difference]: Finished difference Result 109 states and 124 transitions. [2022-04-28 08:12:06,984 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 124 transitions. [2022-04-28 08:12:06,985 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:06,985 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:06,985 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:06,985 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:06,985 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106 states, 81 states have (on average 1.1851851851851851) internal successors, (96), 82 states have internal predecessors, (96), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-28 08:12:06,986 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 120 transitions. [2022-04-28 08:12:06,987 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 120 transitions. Word has length 57 [2022-04-28 08:12:06,987 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:06,987 INFO L495 AbstractCegarLoop]: Abstraction has 106 states and 120 transitions. [2022-04-28 08:12:06,987 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:06,987 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 106 states and 120 transitions. [2022-04-28 08:12:07,128 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 120 edges. 120 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:07,128 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 120 transitions. [2022-04-28 08:12:07,129 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-04-28 08:12:07,129 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:07,129 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:07,129 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-04-28 08:12:07,129 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:07,129 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:07,129 INFO L85 PathProgramCache]: Analyzing trace with hash -2097337179, now seen corresponding path program 1 times [2022-04-28 08:12:07,130 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:07,130 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1524224923] [2022-04-28 08:12:07,130 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:07,130 INFO L85 PathProgramCache]: Analyzing trace with hash -2097337179, now seen corresponding path program 2 times [2022-04-28 08:12:07,130 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:07,130 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1994064349] [2022-04-28 08:12:07,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:07,130 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:07,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:07,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:07,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:07,228 INFO L290 TraceCheckUtils]: 0: Hoare triple {17993#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {17962#true} is VALID [2022-04-28 08:12:07,228 INFO L290 TraceCheckUtils]: 1: Hoare triple {17962#true} assume true; {17962#true} is VALID [2022-04-28 08:12:07,228 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17962#true} {17962#true} #780#return; {17962#true} is VALID [2022-04-28 08:12:07,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:07,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:07,254 INFO L290 TraceCheckUtils]: 0: Hoare triple {17994#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17962#true} is VALID [2022-04-28 08:12:07,254 INFO L290 TraceCheckUtils]: 1: Hoare triple {17962#true} assume true; {17962#true} is VALID [2022-04-28 08:12:07,254 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17962#true} {17962#true} #714#return; {17962#true} is VALID [2022-04-28 08:12:07,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:07,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:07,269 INFO L290 TraceCheckUtils]: 0: Hoare triple {17995#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17962#true} is VALID [2022-04-28 08:12:07,269 INFO L290 TraceCheckUtils]: 1: Hoare triple {17962#true} assume true; {17962#true} is VALID [2022-04-28 08:12:07,269 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17962#true} {17962#true} #716#return; {17962#true} is VALID [2022-04-28 08:12:07,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:12:07,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:07,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:12:07,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:07,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:07,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:07,339 INFO L290 TraceCheckUtils]: 0: Hoare triple {18007#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17962#true} is VALID [2022-04-28 08:12:07,339 INFO L290 TraceCheckUtils]: 1: Hoare triple {17962#true} assume true; {17962#true} is VALID [2022-04-28 08:12:07,340 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17962#true} {17962#true} #712#return; {17962#true} is VALID [2022-04-28 08:12:07,340 INFO L290 TraceCheckUtils]: 0: Hoare triple {18007#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {17962#true} is VALID [2022-04-28 08:12:07,340 INFO L272 TraceCheckUtils]: 1: Hoare triple {17962#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {18007#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:07,340 INFO L290 TraceCheckUtils]: 2: Hoare triple {18007#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17962#true} is VALID [2022-04-28 08:12:07,341 INFO L290 TraceCheckUtils]: 3: Hoare triple {17962#true} assume true; {17962#true} is VALID [2022-04-28 08:12:07,341 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {17962#true} {17962#true} #712#return; {17962#true} is VALID [2022-04-28 08:12:07,341 INFO L290 TraceCheckUtils]: 5: Hoare triple {17962#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {18011#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 08:12:07,342 INFO L290 TraceCheckUtils]: 6: Hoare triple {18011#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {18011#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 08:12:07,342 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {18011#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {17962#true} #774#return; {18005#(= (+ |IofCallDriver_#t~ret37| 1073741802) 0)} is VALID [2022-04-28 08:12:07,343 INFO L290 TraceCheckUtils]: 0: Hoare triple {17996#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {17962#true} is VALID [2022-04-28 08:12:07,343 INFO L290 TraceCheckUtils]: 1: Hoare triple {17962#true} assume 0 != ~compRegistered~0; {17962#true} is VALID [2022-04-28 08:12:07,343 INFO L272 TraceCheckUtils]: 2: Hoare triple {17962#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {18007#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:07,344 INFO L290 TraceCheckUtils]: 3: Hoare triple {18007#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {17962#true} is VALID [2022-04-28 08:12:07,344 INFO L272 TraceCheckUtils]: 4: Hoare triple {17962#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {18007#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:07,344 INFO L290 TraceCheckUtils]: 5: Hoare triple {18007#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17962#true} is VALID [2022-04-28 08:12:07,344 INFO L290 TraceCheckUtils]: 6: Hoare triple {17962#true} assume true; {17962#true} is VALID [2022-04-28 08:12:07,344 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {17962#true} {17962#true} #712#return; {17962#true} is VALID [2022-04-28 08:12:07,345 INFO L290 TraceCheckUtils]: 8: Hoare triple {17962#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {18011#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 08:12:07,345 INFO L290 TraceCheckUtils]: 9: Hoare triple {18011#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {18011#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 08:12:07,346 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {18011#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {17962#true} #774#return; {18005#(= (+ |IofCallDriver_#t~ret37| 1073741802) 0)} is VALID [2022-04-28 08:12:07,346 INFO L290 TraceCheckUtils]: 11: Hoare triple {18005#(= (+ |IofCallDriver_#t~ret37| 1073741802) 0)} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {18006#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-28 08:12:07,347 INFO L290 TraceCheckUtils]: 12: Hoare triple {18006#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {17963#false} is VALID [2022-04-28 08:12:07,347 INFO L290 TraceCheckUtils]: 13: Hoare triple {17963#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {17963#false} is VALID [2022-04-28 08:12:07,347 INFO L290 TraceCheckUtils]: 14: Hoare triple {17963#false} assume 0 == ~tmp_ndt_6~0; {17963#false} is VALID [2022-04-28 08:12:07,347 INFO L290 TraceCheckUtils]: 15: Hoare triple {17963#false} ~returnVal2~0 := 0; {17963#false} is VALID [2022-04-28 08:12:07,347 INFO L290 TraceCheckUtils]: 16: Hoare triple {17963#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {17963#false} is VALID [2022-04-28 08:12:07,347 INFO L290 TraceCheckUtils]: 17: Hoare triple {17963#false} #res := ~returnVal2~0; {17963#false} is VALID [2022-04-28 08:12:07,347 INFO L290 TraceCheckUtils]: 18: Hoare triple {17963#false} assume true; {17963#false} is VALID [2022-04-28 08:12:07,347 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {17963#false} {17962#true} #752#return; {17963#false} is VALID [2022-04-28 08:12:07,349 INFO L272 TraceCheckUtils]: 0: Hoare triple {17962#true} call ULTIMATE.init(); {17993#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:07,349 INFO L290 TraceCheckUtils]: 1: Hoare triple {17993#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {17962#true} is VALID [2022-04-28 08:12:07,349 INFO L290 TraceCheckUtils]: 2: Hoare triple {17962#true} assume true; {17962#true} is VALID [2022-04-28 08:12:07,349 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {17962#true} {17962#true} #780#return; {17962#true} is VALID [2022-04-28 08:12:07,349 INFO L272 TraceCheckUtils]: 4: Hoare triple {17962#true} call #t~ret83 := main(); {17962#true} is VALID [2022-04-28 08:12:07,349 INFO L290 TraceCheckUtils]: 5: Hoare triple {17962#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {17962#true} is VALID [2022-04-28 08:12:07,351 INFO L272 TraceCheckUtils]: 6: Hoare triple {17962#true} call _BLAST_init(); {17994#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:07,351 INFO L290 TraceCheckUtils]: 7: Hoare triple {17994#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17962#true} is VALID [2022-04-28 08:12:07,351 INFO L290 TraceCheckUtils]: 8: Hoare triple {17962#true} assume true; {17962#true} is VALID [2022-04-28 08:12:07,351 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {17962#true} {17962#true} #714#return; {17962#true} is VALID [2022-04-28 08:12:07,351 INFO L290 TraceCheckUtils]: 10: Hoare triple {17962#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {17962#true} is VALID [2022-04-28 08:12:07,351 INFO L290 TraceCheckUtils]: 11: Hoare triple {17962#true} assume !(0 == ~irp_choice~0); {17962#true} is VALID [2022-04-28 08:12:07,352 INFO L272 TraceCheckUtils]: 12: Hoare triple {17962#true} call stub_driver_init(); {17995#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:07,352 INFO L290 TraceCheckUtils]: 13: Hoare triple {17995#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17962#true} is VALID [2022-04-28 08:12:07,352 INFO L290 TraceCheckUtils]: 14: Hoare triple {17962#true} assume true; {17962#true} is VALID [2022-04-28 08:12:07,352 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {17962#true} {17962#true} #716#return; {17962#true} is VALID [2022-04-28 08:12:07,352 INFO L290 TraceCheckUtils]: 16: Hoare triple {17962#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {17962#true} is VALID [2022-04-28 08:12:07,352 INFO L290 TraceCheckUtils]: 17: Hoare triple {17962#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {17962#true} is VALID [2022-04-28 08:12:07,352 INFO L290 TraceCheckUtils]: 18: Hoare triple {17962#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {17962#true} is VALID [2022-04-28 08:12:07,352 INFO L290 TraceCheckUtils]: 19: Hoare triple {17962#true} assume 3 == ~tmp_ndt_3~0; {17962#true} is VALID [2022-04-28 08:12:07,352 INFO L272 TraceCheckUtils]: 20: Hoare triple {17962#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {17962#true} is VALID [2022-04-28 08:12:07,352 INFO L290 TraceCheckUtils]: 21: Hoare triple {17962#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {17962#true} is VALID [2022-04-28 08:12:07,352 INFO L290 TraceCheckUtils]: 22: Hoare triple {17962#true} assume 0 == ~irpStack__MinorFunction~0; {17962#true} is VALID [2022-04-28 08:12:07,353 INFO L290 TraceCheckUtils]: 23: Hoare triple {17962#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {17962#true} is VALID [2022-04-28 08:12:07,353 INFO L290 TraceCheckUtils]: 24: Hoare triple {17962#true} assume !(~s~0 != ~NP~0); {17962#true} is VALID [2022-04-28 08:12:07,353 INFO L290 TraceCheckUtils]: 25: Hoare triple {17962#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {17962#true} is VALID [2022-04-28 08:12:07,353 INFO L290 TraceCheckUtils]: 26: Hoare triple {17962#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {17962#true} is VALID [2022-04-28 08:12:07,353 INFO L272 TraceCheckUtils]: 27: Hoare triple {17962#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {17996#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:07,353 INFO L290 TraceCheckUtils]: 28: Hoare triple {17996#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {17962#true} is VALID [2022-04-28 08:12:07,354 INFO L290 TraceCheckUtils]: 29: Hoare triple {17962#true} assume 0 != ~compRegistered~0; {17962#true} is VALID [2022-04-28 08:12:07,354 INFO L272 TraceCheckUtils]: 30: Hoare triple {17962#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {18007#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:07,354 INFO L290 TraceCheckUtils]: 31: Hoare triple {18007#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {17962#true} is VALID [2022-04-28 08:12:07,355 INFO L272 TraceCheckUtils]: 32: Hoare triple {17962#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {18007#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:07,355 INFO L290 TraceCheckUtils]: 33: Hoare triple {18007#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17962#true} is VALID [2022-04-28 08:12:07,355 INFO L290 TraceCheckUtils]: 34: Hoare triple {17962#true} assume true; {17962#true} is VALID [2022-04-28 08:12:07,355 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {17962#true} {17962#true} #712#return; {17962#true} is VALID [2022-04-28 08:12:07,355 INFO L290 TraceCheckUtils]: 36: Hoare triple {17962#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {18011#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 08:12:07,356 INFO L290 TraceCheckUtils]: 37: Hoare triple {18011#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {18011#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 08:12:07,357 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {18011#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {17962#true} #774#return; {18005#(= (+ |IofCallDriver_#t~ret37| 1073741802) 0)} is VALID [2022-04-28 08:12:07,357 INFO L290 TraceCheckUtils]: 39: Hoare triple {18005#(= (+ |IofCallDriver_#t~ret37| 1073741802) 0)} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {18006#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-28 08:12:07,357 INFO L290 TraceCheckUtils]: 40: Hoare triple {18006#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {17963#false} is VALID [2022-04-28 08:12:07,358 INFO L290 TraceCheckUtils]: 41: Hoare triple {17963#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {17963#false} is VALID [2022-04-28 08:12:07,358 INFO L290 TraceCheckUtils]: 42: Hoare triple {17963#false} assume 0 == ~tmp_ndt_6~0; {17963#false} is VALID [2022-04-28 08:12:07,358 INFO L290 TraceCheckUtils]: 43: Hoare triple {17963#false} ~returnVal2~0 := 0; {17963#false} is VALID [2022-04-28 08:12:07,361 INFO L290 TraceCheckUtils]: 44: Hoare triple {17963#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {17963#false} is VALID [2022-04-28 08:12:07,361 INFO L290 TraceCheckUtils]: 45: Hoare triple {17963#false} #res := ~returnVal2~0; {17963#false} is VALID [2022-04-28 08:12:07,361 INFO L290 TraceCheckUtils]: 46: Hoare triple {17963#false} assume true; {17963#false} is VALID [2022-04-28 08:12:07,361 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {17963#false} {17962#true} #752#return; {17963#false} is VALID [2022-04-28 08:12:07,361 INFO L290 TraceCheckUtils]: 48: Hoare triple {17963#false} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {17963#false} is VALID [2022-04-28 08:12:07,361 INFO L290 TraceCheckUtils]: 49: Hoare triple {17963#false} assume !(259 == ~__cil_tmp23~0); {17963#false} is VALID [2022-04-28 08:12:07,361 INFO L290 TraceCheckUtils]: 50: Hoare triple {17963#false} assume ~status~0 >= 0; {17963#false} is VALID [2022-04-28 08:12:07,361 INFO L290 TraceCheckUtils]: 51: Hoare triple {17963#false} assume ~myStatus~0 >= 0;~devExt__Started~0 := 1;~devExt__Removed~0 := 0;~devExt__SurpriseRemoved~0 := 0; {17963#false} is VALID [2022-04-28 08:12:07,362 INFO L290 TraceCheckUtils]: 52: Hoare triple {17963#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {17963#false} is VALID [2022-04-28 08:12:07,362 INFO L272 TraceCheckUtils]: 53: Hoare triple {17963#false} call IofCompleteRequest(~Irp, 0); {17963#false} is VALID [2022-04-28 08:12:07,362 INFO L290 TraceCheckUtils]: 54: Hoare triple {17963#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {17963#false} is VALID [2022-04-28 08:12:07,362 INFO L290 TraceCheckUtils]: 55: Hoare triple {17963#false} assume !(~s~0 == ~NP~0); {17963#false} is VALID [2022-04-28 08:12:07,362 INFO L272 TraceCheckUtils]: 56: Hoare triple {17963#false} call errorFn(); {17963#false} is VALID [2022-04-28 08:12:07,362 INFO L290 TraceCheckUtils]: 57: Hoare triple {17963#false} assume !false; {17963#false} is VALID [2022-04-28 08:12:07,362 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:07,362 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:07,362 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1994064349] [2022-04-28 08:12:07,362 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1994064349] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:07,363 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:07,363 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:12:07,365 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:07,365 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1524224923] [2022-04-28 08:12:07,365 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1524224923] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:07,365 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:07,365 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:12:07,365 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1826789395] [2022-04-28 08:12:07,366 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:07,366 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-28 08:12:07,366 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:07,366 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:07,411 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:07,411 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-28 08:12:07,411 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:07,412 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-28 08:12:07,412 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-28 08:12:07,412 INFO L87 Difference]: Start difference. First operand 106 states and 120 transitions. Second operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:08,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:08,181 INFO L93 Difference]: Finished difference Result 142 states and 161 transitions. [2022-04-28 08:12:08,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-28 08:12:08,181 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-28 08:12:08,182 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:08,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:08,183 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 135 transitions. [2022-04-28 08:12:08,183 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:08,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 135 transitions. [2022-04-28 08:12:08,184 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 135 transitions. [2022-04-28 08:12:08,287 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 135 edges. 135 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:08,288 INFO L225 Difference]: With dead ends: 142 [2022-04-28 08:12:08,289 INFO L226 Difference]: Without dead ends: 100 [2022-04-28 08:12:08,289 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-28 08:12:08,289 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 65 mSDsluCounter, 190 mSDsCounter, 0 mSdLazyCounter, 189 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 268 SdHoareTripleChecker+Invalid, 217 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 189 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:08,290 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 268 Invalid, 217 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 189 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-04-28 08:12:08,290 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2022-04-28 08:12:08,418 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 100. [2022-04-28 08:12:08,418 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:08,419 INFO L82 GeneralOperation]: Start isEquivalent. First operand 100 states. Second operand has 100 states, 75 states have (on average 1.16) internal successors, (87), 76 states have internal predecessors, (87), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-28 08:12:08,419 INFO L74 IsIncluded]: Start isIncluded. First operand 100 states. Second operand has 100 states, 75 states have (on average 1.16) internal successors, (87), 76 states have internal predecessors, (87), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-28 08:12:08,420 INFO L87 Difference]: Start difference. First operand 100 states. Second operand has 100 states, 75 states have (on average 1.16) internal successors, (87), 76 states have internal predecessors, (87), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-28 08:12:08,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:08,421 INFO L93 Difference]: Finished difference Result 100 states and 111 transitions. [2022-04-28 08:12:08,421 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 111 transitions. [2022-04-28 08:12:08,421 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:08,421 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:08,422 INFO L74 IsIncluded]: Start isIncluded. First operand has 100 states, 75 states have (on average 1.16) internal successors, (87), 76 states have internal predecessors, (87), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) Second operand 100 states. [2022-04-28 08:12:08,422 INFO L87 Difference]: Start difference. First operand has 100 states, 75 states have (on average 1.16) internal successors, (87), 76 states have internal predecessors, (87), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) Second operand 100 states. [2022-04-28 08:12:08,424 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:08,424 INFO L93 Difference]: Finished difference Result 100 states and 111 transitions. [2022-04-28 08:12:08,424 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 111 transitions. [2022-04-28 08:12:08,424 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:08,424 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:08,424 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:08,424 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:08,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 75 states have (on average 1.16) internal successors, (87), 76 states have internal predecessors, (87), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-28 08:12:08,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 111 transitions. [2022-04-28 08:12:08,427 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 111 transitions. Word has length 58 [2022-04-28 08:12:08,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:08,427 INFO L495 AbstractCegarLoop]: Abstraction has 100 states and 111 transitions. [2022-04-28 08:12:08,427 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:08,427 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 100 states and 111 transitions. [2022-04-28 08:12:08,558 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 111 edges. 111 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:08,558 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 111 transitions. [2022-04-28 08:12:08,559 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-04-28 08:12:08,559 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:08,559 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:08,559 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-04-28 08:12:08,559 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:08,559 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:08,559 INFO L85 PathProgramCache]: Analyzing trace with hash 1424142412, now seen corresponding path program 1 times [2022-04-28 08:12:08,560 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:08,560 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [598032367] [2022-04-28 08:12:08,560 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:08,560 INFO L85 PathProgramCache]: Analyzing trace with hash 1424142412, now seen corresponding path program 2 times [2022-04-28 08:12:08,560 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:08,560 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [160047024] [2022-04-28 08:12:08,560 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:08,560 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:08,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:08,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:08,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:08,653 INFO L290 TraceCheckUtils]: 0: Hoare triple {18734#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18698#true} is VALID [2022-04-28 08:12:08,653 INFO L290 TraceCheckUtils]: 1: Hoare triple {18698#true} assume true; {18698#true} is VALID [2022-04-28 08:12:08,654 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18698#true} {18698#true} #780#return; {18698#true} is VALID [2022-04-28 08:12:08,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:08,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:08,689 INFO L290 TraceCheckUtils]: 0: Hoare triple {18735#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,690 INFO L290 TraceCheckUtils]: 1: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume true; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,690 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} {18698#true} #714#return; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:08,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:08,708 INFO L290 TraceCheckUtils]: 0: Hoare triple {18736#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18698#true} is VALID [2022-04-28 08:12:08,708 INFO L290 TraceCheckUtils]: 1: Hoare triple {18698#true} assume true; {18698#true} is VALID [2022-04-28 08:12:08,708 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18698#true} {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #716#return; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:12:08,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:08,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:12:08,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:08,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:08,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:08,770 INFO L290 TraceCheckUtils]: 0: Hoare triple {18751#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {18698#true} is VALID [2022-04-28 08:12:08,770 INFO L290 TraceCheckUtils]: 1: Hoare triple {18698#true} assume true; {18698#true} is VALID [2022-04-28 08:12:08,771 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18698#true} {18698#true} #712#return; {18698#true} is VALID [2022-04-28 08:12:08,771 INFO L290 TraceCheckUtils]: 0: Hoare triple {18751#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {18698#true} is VALID [2022-04-28 08:12:08,771 INFO L272 TraceCheckUtils]: 1: Hoare triple {18698#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {18751#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:08,771 INFO L290 TraceCheckUtils]: 2: Hoare triple {18751#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {18698#true} is VALID [2022-04-28 08:12:08,771 INFO L290 TraceCheckUtils]: 3: Hoare triple {18698#true} assume true; {18698#true} is VALID [2022-04-28 08:12:08,772 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {18698#true} {18698#true} #712#return; {18698#true} is VALID [2022-04-28 08:12:08,772 INFO L290 TraceCheckUtils]: 5: Hoare triple {18698#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {18698#true} is VALID [2022-04-28 08:12:08,772 INFO L290 TraceCheckUtils]: 6: Hoare triple {18698#true} assume true; {18698#true} is VALID [2022-04-28 08:12:08,772 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {18698#true} {18698#true} #774#return; {18698#true} is VALID [2022-04-28 08:12:08,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:12:08,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:08,789 INFO L290 TraceCheckUtils]: 0: Hoare triple {18755#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {18756#(= ~MPR1~0 ~s~0)} is VALID [2022-04-28 08:12:08,789 INFO L290 TraceCheckUtils]: 1: Hoare triple {18756#(= ~MPR1~0 ~s~0)} assume true; {18756#(= ~MPR1~0 ~s~0)} is VALID [2022-04-28 08:12:08,790 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18756#(= ~MPR1~0 ~s~0)} {18698#true} #776#return; {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:12:08,790 INFO L290 TraceCheckUtils]: 0: Hoare triple {18737#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {18698#true} is VALID [2022-04-28 08:12:08,790 INFO L290 TraceCheckUtils]: 1: Hoare triple {18698#true} assume 0 != ~compRegistered~0; {18698#true} is VALID [2022-04-28 08:12:08,791 INFO L272 TraceCheckUtils]: 2: Hoare triple {18698#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {18751#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:08,791 INFO L290 TraceCheckUtils]: 3: Hoare triple {18751#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {18698#true} is VALID [2022-04-28 08:12:08,791 INFO L272 TraceCheckUtils]: 4: Hoare triple {18698#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {18751#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:08,791 INFO L290 TraceCheckUtils]: 5: Hoare triple {18751#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {18698#true} is VALID [2022-04-28 08:12:08,791 INFO L290 TraceCheckUtils]: 6: Hoare triple {18698#true} assume true; {18698#true} is VALID [2022-04-28 08:12:08,792 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {18698#true} {18698#true} #712#return; {18698#true} is VALID [2022-04-28 08:12:08,792 INFO L290 TraceCheckUtils]: 8: Hoare triple {18698#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {18698#true} is VALID [2022-04-28 08:12:08,792 INFO L290 TraceCheckUtils]: 9: Hoare triple {18698#true} assume true; {18698#true} is VALID [2022-04-28 08:12:08,792 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {18698#true} {18698#true} #774#return; {18698#true} is VALID [2022-04-28 08:12:08,792 INFO L290 TraceCheckUtils]: 11: Hoare triple {18698#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {18698#true} is VALID [2022-04-28 08:12:08,792 INFO L290 TraceCheckUtils]: 12: Hoare triple {18698#true} assume -1073741802 == ~__cil_tmp7~0; {18698#true} is VALID [2022-04-28 08:12:08,792 INFO L272 TraceCheckUtils]: 13: Hoare triple {18698#true} call stubMoreProcessingRequired(); {18755#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:08,793 INFO L290 TraceCheckUtils]: 14: Hoare triple {18755#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {18756#(= ~MPR1~0 ~s~0)} is VALID [2022-04-28 08:12:08,793 INFO L290 TraceCheckUtils]: 15: Hoare triple {18756#(= ~MPR1~0 ~s~0)} assume true; {18756#(= ~MPR1~0 ~s~0)} is VALID [2022-04-28 08:12:08,793 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {18756#(= ~MPR1~0 ~s~0)} {18698#true} #776#return; {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:12:08,794 INFO L290 TraceCheckUtils]: 17: Hoare triple {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:12:08,794 INFO L290 TraceCheckUtils]: 18: Hoare triple {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume 0 == ~tmp_ndt_6~0; {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:12:08,795 INFO L290 TraceCheckUtils]: 19: Hoare triple {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} ~returnVal2~0 := 0; {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:12:08,795 INFO L290 TraceCheckUtils]: 20: Hoare triple {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {18750#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-28 08:12:08,795 INFO L290 TraceCheckUtils]: 21: Hoare triple {18750#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} #res := ~returnVal2~0; {18750#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-28 08:12:08,796 INFO L290 TraceCheckUtils]: 22: Hoare triple {18750#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} assume true; {18750#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-28 08:12:08,796 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {18750#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #752#return; {18699#false} is VALID [2022-04-28 08:12:08,798 INFO L272 TraceCheckUtils]: 0: Hoare triple {18698#true} call ULTIMATE.init(); {18734#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:08,798 INFO L290 TraceCheckUtils]: 1: Hoare triple {18734#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18698#true} is VALID [2022-04-28 08:12:08,798 INFO L290 TraceCheckUtils]: 2: Hoare triple {18698#true} assume true; {18698#true} is VALID [2022-04-28 08:12:08,798 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {18698#true} {18698#true} #780#return; {18698#true} is VALID [2022-04-28 08:12:08,798 INFO L272 TraceCheckUtils]: 4: Hoare triple {18698#true} call #t~ret83 := main(); {18698#true} is VALID [2022-04-28 08:12:08,798 INFO L290 TraceCheckUtils]: 5: Hoare triple {18698#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {18698#true} is VALID [2022-04-28 08:12:08,800 INFO L272 TraceCheckUtils]: 6: Hoare triple {18698#true} call _BLAST_init(); {18735#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:08,800 INFO L290 TraceCheckUtils]: 7: Hoare triple {18735#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,801 INFO L290 TraceCheckUtils]: 8: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume true; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,801 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} {18698#true} #714#return; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,801 INFO L290 TraceCheckUtils]: 10: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,802 INFO L290 TraceCheckUtils]: 11: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(0 == ~irp_choice~0); {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,803 INFO L272 TraceCheckUtils]: 12: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} call stub_driver_init(); {18736#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:08,803 INFO L290 TraceCheckUtils]: 13: Hoare triple {18736#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18698#true} is VALID [2022-04-28 08:12:08,803 INFO L290 TraceCheckUtils]: 14: Hoare triple {18698#true} assume true; {18698#true} is VALID [2022-04-28 08:12:08,803 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {18698#true} {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #716#return; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,804 INFO L290 TraceCheckUtils]: 16: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,804 INFO L290 TraceCheckUtils]: 17: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,804 INFO L290 TraceCheckUtils]: 18: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,805 INFO L290 TraceCheckUtils]: 19: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume 3 == ~tmp_ndt_3~0; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,805 INFO L272 TraceCheckUtils]: 20: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,806 INFO L290 TraceCheckUtils]: 21: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,806 INFO L290 TraceCheckUtils]: 22: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume 0 == ~irpStack__MinorFunction~0; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,807 INFO L290 TraceCheckUtils]: 23: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,807 INFO L290 TraceCheckUtils]: 24: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(~s~0 != ~NP~0); {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,808 INFO L290 TraceCheckUtils]: 25: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,808 INFO L290 TraceCheckUtils]: 26: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-28 08:12:08,809 INFO L272 TraceCheckUtils]: 27: Hoare triple {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {18737#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:08,809 INFO L290 TraceCheckUtils]: 28: Hoare triple {18737#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {18698#true} is VALID [2022-04-28 08:12:08,809 INFO L290 TraceCheckUtils]: 29: Hoare triple {18698#true} assume 0 != ~compRegistered~0; {18698#true} is VALID [2022-04-28 08:12:08,810 INFO L272 TraceCheckUtils]: 30: Hoare triple {18698#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {18751#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:08,810 INFO L290 TraceCheckUtils]: 31: Hoare triple {18751#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {18698#true} is VALID [2022-04-28 08:12:08,810 INFO L272 TraceCheckUtils]: 32: Hoare triple {18698#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {18751#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:08,811 INFO L290 TraceCheckUtils]: 33: Hoare triple {18751#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {18698#true} is VALID [2022-04-28 08:12:08,811 INFO L290 TraceCheckUtils]: 34: Hoare triple {18698#true} assume true; {18698#true} is VALID [2022-04-28 08:12:08,811 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {18698#true} {18698#true} #712#return; {18698#true} is VALID [2022-04-28 08:12:08,811 INFO L290 TraceCheckUtils]: 36: Hoare triple {18698#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {18698#true} is VALID [2022-04-28 08:12:08,811 INFO L290 TraceCheckUtils]: 37: Hoare triple {18698#true} assume true; {18698#true} is VALID [2022-04-28 08:12:08,811 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {18698#true} {18698#true} #774#return; {18698#true} is VALID [2022-04-28 08:12:08,811 INFO L290 TraceCheckUtils]: 39: Hoare triple {18698#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {18698#true} is VALID [2022-04-28 08:12:08,811 INFO L290 TraceCheckUtils]: 40: Hoare triple {18698#true} assume -1073741802 == ~__cil_tmp7~0; {18698#true} is VALID [2022-04-28 08:12:08,812 INFO L272 TraceCheckUtils]: 41: Hoare triple {18698#true} call stubMoreProcessingRequired(); {18755#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:08,812 INFO L290 TraceCheckUtils]: 42: Hoare triple {18755#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {18756#(= ~MPR1~0 ~s~0)} is VALID [2022-04-28 08:12:08,812 INFO L290 TraceCheckUtils]: 43: Hoare triple {18756#(= ~MPR1~0 ~s~0)} assume true; {18756#(= ~MPR1~0 ~s~0)} is VALID [2022-04-28 08:12:08,813 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {18756#(= ~MPR1~0 ~s~0)} {18698#true} #776#return; {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:12:08,813 INFO L290 TraceCheckUtils]: 45: Hoare triple {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:12:08,813 INFO L290 TraceCheckUtils]: 46: Hoare triple {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume 0 == ~tmp_ndt_6~0; {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:12:08,814 INFO L290 TraceCheckUtils]: 47: Hoare triple {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} ~returnVal2~0 := 0; {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-28 08:12:08,814 INFO L290 TraceCheckUtils]: 48: Hoare triple {18749#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {18750#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-28 08:12:08,815 INFO L290 TraceCheckUtils]: 49: Hoare triple {18750#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} #res := ~returnVal2~0; {18750#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-28 08:12:08,815 INFO L290 TraceCheckUtils]: 50: Hoare triple {18750#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} assume true; {18750#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-28 08:12:08,816 INFO L284 TraceCheckUtils]: 51: Hoare quadruple {18750#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} {18706#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #752#return; {18699#false} is VALID [2022-04-28 08:12:08,816 INFO L290 TraceCheckUtils]: 52: Hoare triple {18699#false} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {18699#false} is VALID [2022-04-28 08:12:08,816 INFO L290 TraceCheckUtils]: 53: Hoare triple {18699#false} assume !(259 == ~__cil_tmp23~0); {18699#false} is VALID [2022-04-28 08:12:08,816 INFO L290 TraceCheckUtils]: 54: Hoare triple {18699#false} assume ~status~0 >= 0; {18699#false} is VALID [2022-04-28 08:12:08,816 INFO L290 TraceCheckUtils]: 55: Hoare triple {18699#false} assume ~myStatus~0 >= 0;~devExt__Started~0 := 1;~devExt__Removed~0 := 0;~devExt__SurpriseRemoved~0 := 0; {18699#false} is VALID [2022-04-28 08:12:08,816 INFO L290 TraceCheckUtils]: 56: Hoare triple {18699#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {18699#false} is VALID [2022-04-28 08:12:08,816 INFO L272 TraceCheckUtils]: 57: Hoare triple {18699#false} call IofCompleteRequest(~Irp, 0); {18699#false} is VALID [2022-04-28 08:12:08,816 INFO L290 TraceCheckUtils]: 58: Hoare triple {18699#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {18699#false} is VALID [2022-04-28 08:12:08,816 INFO L290 TraceCheckUtils]: 59: Hoare triple {18699#false} assume !(~s~0 == ~NP~0); {18699#false} is VALID [2022-04-28 08:12:08,817 INFO L272 TraceCheckUtils]: 60: Hoare triple {18699#false} call errorFn(); {18699#false} is VALID [2022-04-28 08:12:08,817 INFO L290 TraceCheckUtils]: 61: Hoare triple {18699#false} assume !false; {18699#false} is VALID [2022-04-28 08:12:08,817 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:08,817 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:08,817 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [160047024] [2022-04-28 08:12:08,817 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [160047024] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:08,817 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:08,818 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:08,818 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:08,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [598032367] [2022-04-28 08:12:08,818 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [598032367] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:08,818 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:08,818 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:08,818 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1585512635] [2022-04-28 08:12:08,818 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:08,819 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.6666666666666665) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (7), 4 states have call predecessors, (7), 2 states have call successors, (7) Word has length 62 [2022-04-28 08:12:08,819 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:08,822 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.6666666666666665) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (7), 4 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:12:08,867 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 62 edges. 62 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:08,867 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 08:12:08,867 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:08,868 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 08:12:08,868 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:12:08,868 INFO L87 Difference]: Start difference. First operand 100 states and 111 transitions. Second operand has 12 states, 12 states have (on average 3.6666666666666665) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (7), 4 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:12:09,833 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:09,833 INFO L93 Difference]: Finished difference Result 128 states and 144 transitions. [2022-04-28 08:12:09,833 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-04-28 08:12:09,834 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.6666666666666665) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (7), 4 states have call predecessors, (7), 2 states have call successors, (7) Word has length 62 [2022-04-28 08:12:09,834 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:09,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.6666666666666665) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (7), 4 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:12:09,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 125 transitions. [2022-04-28 08:12:09,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.6666666666666665) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (7), 4 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:12:09,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 125 transitions. [2022-04-28 08:12:09,836 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 11 states and 125 transitions. [2022-04-28 08:12:09,954 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 125 edges. 125 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:09,955 INFO L225 Difference]: With dead ends: 128 [2022-04-28 08:12:09,955 INFO L226 Difference]: Without dead ends: 92 [2022-04-28 08:12:09,956 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=87, Invalid=255, Unknown=0, NotChecked=0, Total=342 [2022-04-28 08:12:09,956 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 153 mSDsluCounter, 132 mSDsCounter, 0 mSdLazyCounter, 206 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 154 SdHoareTripleChecker+Valid, 202 SdHoareTripleChecker+Invalid, 278 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 206 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:09,956 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [154 Valid, 202 Invalid, 278 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 206 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-28 08:12:09,957 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2022-04-28 08:12:10,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2022-04-28 08:12:10,104 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:10,104 INFO L82 GeneralOperation]: Start isEquivalent. First operand 92 states. Second operand has 92 states, 68 states have (on average 1.1470588235294117) internal successors, (78), 69 states have internal predecessors, (78), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:10,104 INFO L74 IsIncluded]: Start isIncluded. First operand 92 states. Second operand has 92 states, 68 states have (on average 1.1470588235294117) internal successors, (78), 69 states have internal predecessors, (78), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:10,104 INFO L87 Difference]: Start difference. First operand 92 states. Second operand has 92 states, 68 states have (on average 1.1470588235294117) internal successors, (78), 69 states have internal predecessors, (78), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:10,105 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:10,105 INFO L93 Difference]: Finished difference Result 92 states and 101 transitions. [2022-04-28 08:12:10,106 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 101 transitions. [2022-04-28 08:12:10,106 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:10,106 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:10,106 INFO L74 IsIncluded]: Start isIncluded. First operand has 92 states, 68 states have (on average 1.1470588235294117) internal successors, (78), 69 states have internal predecessors, (78), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 92 states. [2022-04-28 08:12:10,106 INFO L87 Difference]: Start difference. First operand has 92 states, 68 states have (on average 1.1470588235294117) internal successors, (78), 69 states have internal predecessors, (78), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 92 states. [2022-04-28 08:12:10,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:10,108 INFO L93 Difference]: Finished difference Result 92 states and 101 transitions. [2022-04-28 08:12:10,108 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 101 transitions. [2022-04-28 08:12:10,108 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:10,108 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:10,108 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:10,108 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:10,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 68 states have (on average 1.1470588235294117) internal successors, (78), 69 states have internal predecessors, (78), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:10,109 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 101 transitions. [2022-04-28 08:12:10,110 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 101 transitions. Word has length 62 [2022-04-28 08:12:10,110 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:10,110 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 101 transitions. [2022-04-28 08:12:10,110 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.6666666666666665) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (7), 4 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:12:10,110 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 92 states and 101 transitions. [2022-04-28 08:12:10,236 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 101 edges. 101 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:10,236 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 101 transitions. [2022-04-28 08:12:10,236 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-04-28 08:12:10,236 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:10,236 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:10,236 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-04-28 08:12:10,237 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:10,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:10,237 INFO L85 PathProgramCache]: Analyzing trace with hash -119468725, now seen corresponding path program 1 times [2022-04-28 08:12:10,237 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:10,237 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1868030610] [2022-04-28 08:12:10,237 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:10,237 INFO L85 PathProgramCache]: Analyzing trace with hash -119468725, now seen corresponding path program 2 times [2022-04-28 08:12:10,237 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:10,237 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [649837672] [2022-04-28 08:12:10,237 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:10,238 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:10,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:10,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:10,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:10,307 INFO L290 TraceCheckUtils]: 0: Hoare triple {19437#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {19399#true} is VALID [2022-04-28 08:12:10,307 INFO L290 TraceCheckUtils]: 1: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,307 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19399#true} {19399#true} #780#return; {19399#true} is VALID [2022-04-28 08:12:10,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:10,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:10,331 INFO L290 TraceCheckUtils]: 0: Hoare triple {19438#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19399#true} is VALID [2022-04-28 08:12:10,331 INFO L290 TraceCheckUtils]: 1: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,331 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19399#true} {19399#true} #714#return; {19399#true} is VALID [2022-04-28 08:12:10,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:10,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:10,344 INFO L290 TraceCheckUtils]: 0: Hoare triple {19439#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19399#true} is VALID [2022-04-28 08:12:10,344 INFO L290 TraceCheckUtils]: 1: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,344 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19399#true} {19399#true} #716#return; {19399#true} is VALID [2022-04-28 08:12:10,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:12:10,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:10,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:12:10,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:10,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:10,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:10,391 INFO L290 TraceCheckUtils]: 0: Hoare triple {19453#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {19399#true} is VALID [2022-04-28 08:12:10,391 INFO L290 TraceCheckUtils]: 1: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,391 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19399#true} {19399#true} #712#return; {19399#true} is VALID [2022-04-28 08:12:10,391 INFO L290 TraceCheckUtils]: 0: Hoare triple {19453#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {19399#true} is VALID [2022-04-28 08:12:10,392 INFO L272 TraceCheckUtils]: 1: Hoare triple {19399#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {19453#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:10,392 INFO L290 TraceCheckUtils]: 2: Hoare triple {19453#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {19399#true} is VALID [2022-04-28 08:12:10,392 INFO L290 TraceCheckUtils]: 3: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,392 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {19399#true} {19399#true} #712#return; {19399#true} is VALID [2022-04-28 08:12:10,392 INFO L290 TraceCheckUtils]: 5: Hoare triple {19399#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {19399#true} is VALID [2022-04-28 08:12:10,392 INFO L290 TraceCheckUtils]: 6: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,392 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {19399#true} {19399#true} #774#return; {19399#true} is VALID [2022-04-28 08:12:10,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:12:10,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:10,400 INFO L290 TraceCheckUtils]: 0: Hoare triple {19457#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {19399#true} is VALID [2022-04-28 08:12:10,400 INFO L290 TraceCheckUtils]: 1: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,400 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19399#true} {19399#true} #776#return; {19399#true} is VALID [2022-04-28 08:12:10,401 INFO L290 TraceCheckUtils]: 0: Hoare triple {19440#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {19399#true} is VALID [2022-04-28 08:12:10,401 INFO L290 TraceCheckUtils]: 1: Hoare triple {19399#true} assume 0 != ~compRegistered~0; {19399#true} is VALID [2022-04-28 08:12:10,401 INFO L272 TraceCheckUtils]: 2: Hoare triple {19399#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {19453#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:10,401 INFO L290 TraceCheckUtils]: 3: Hoare triple {19453#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {19399#true} is VALID [2022-04-28 08:12:10,402 INFO L272 TraceCheckUtils]: 4: Hoare triple {19399#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {19453#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:10,402 INFO L290 TraceCheckUtils]: 5: Hoare triple {19453#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {19399#true} is VALID [2022-04-28 08:12:10,402 INFO L290 TraceCheckUtils]: 6: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,402 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {19399#true} {19399#true} #712#return; {19399#true} is VALID [2022-04-28 08:12:10,402 INFO L290 TraceCheckUtils]: 8: Hoare triple {19399#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {19399#true} is VALID [2022-04-28 08:12:10,402 INFO L290 TraceCheckUtils]: 9: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,403 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {19399#true} {19399#true} #774#return; {19399#true} is VALID [2022-04-28 08:12:10,403 INFO L290 TraceCheckUtils]: 11: Hoare triple {19399#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {19399#true} is VALID [2022-04-28 08:12:10,403 INFO L290 TraceCheckUtils]: 12: Hoare triple {19399#true} assume -1073741802 == ~__cil_tmp7~0; {19399#true} is VALID [2022-04-28 08:12:10,403 INFO L272 TraceCheckUtils]: 13: Hoare triple {19399#true} call stubMoreProcessingRequired(); {19457#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:10,403 INFO L290 TraceCheckUtils]: 14: Hoare triple {19457#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {19399#true} is VALID [2022-04-28 08:12:10,403 INFO L290 TraceCheckUtils]: 15: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,403 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {19399#true} {19399#true} #776#return; {19399#true} is VALID [2022-04-28 08:12:10,403 INFO L290 TraceCheckUtils]: 17: Hoare triple {19399#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {19399#true} is VALID [2022-04-28 08:12:10,404 INFO L290 TraceCheckUtils]: 18: Hoare triple {19399#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {19399#true} is VALID [2022-04-28 08:12:10,404 INFO L290 TraceCheckUtils]: 19: Hoare triple {19399#true} assume 1 == ~tmp_ndt_7~0; {19399#true} is VALID [2022-04-28 08:12:10,404 INFO L290 TraceCheckUtils]: 20: Hoare triple {19399#true} ~returnVal2~0 := -1073741823; {19452#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:12:10,404 INFO L290 TraceCheckUtils]: 21: Hoare triple {19452#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume !(~s~0 == ~NP~0); {19452#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:12:10,405 INFO L290 TraceCheckUtils]: 22: Hoare triple {19452#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume ~s~0 == ~MPR1~0; {19452#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:12:10,405 INFO L290 TraceCheckUtils]: 23: Hoare triple {19452#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {19400#false} is VALID [2022-04-28 08:12:10,405 INFO L290 TraceCheckUtils]: 24: Hoare triple {19400#false} #res := ~returnVal2~0; {19400#false} is VALID [2022-04-28 08:12:10,405 INFO L290 TraceCheckUtils]: 25: Hoare triple {19400#false} assume true; {19400#false} is VALID [2022-04-28 08:12:10,405 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {19400#false} {19399#true} #752#return; {19400#false} is VALID [2022-04-28 08:12:10,407 INFO L272 TraceCheckUtils]: 0: Hoare triple {19399#true} call ULTIMATE.init(); {19437#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:10,407 INFO L290 TraceCheckUtils]: 1: Hoare triple {19437#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {19399#true} is VALID [2022-04-28 08:12:10,407 INFO L290 TraceCheckUtils]: 2: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,407 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {19399#true} {19399#true} #780#return; {19399#true} is VALID [2022-04-28 08:12:10,407 INFO L272 TraceCheckUtils]: 4: Hoare triple {19399#true} call #t~ret83 := main(); {19399#true} is VALID [2022-04-28 08:12:10,407 INFO L290 TraceCheckUtils]: 5: Hoare triple {19399#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {19399#true} is VALID [2022-04-28 08:12:10,409 INFO L272 TraceCheckUtils]: 6: Hoare triple {19399#true} call _BLAST_init(); {19438#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:10,409 INFO L290 TraceCheckUtils]: 7: Hoare triple {19438#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19399#true} is VALID [2022-04-28 08:12:10,409 INFO L290 TraceCheckUtils]: 8: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,409 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {19399#true} {19399#true} #714#return; {19399#true} is VALID [2022-04-28 08:12:10,409 INFO L290 TraceCheckUtils]: 10: Hoare triple {19399#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {19399#true} is VALID [2022-04-28 08:12:10,409 INFO L290 TraceCheckUtils]: 11: Hoare triple {19399#true} assume !(0 == ~irp_choice~0); {19399#true} is VALID [2022-04-28 08:12:10,410 INFO L272 TraceCheckUtils]: 12: Hoare triple {19399#true} call stub_driver_init(); {19439#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:10,410 INFO L290 TraceCheckUtils]: 13: Hoare triple {19439#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19399#true} is VALID [2022-04-28 08:12:10,410 INFO L290 TraceCheckUtils]: 14: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,410 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {19399#true} {19399#true} #716#return; {19399#true} is VALID [2022-04-28 08:12:10,410 INFO L290 TraceCheckUtils]: 16: Hoare triple {19399#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {19399#true} is VALID [2022-04-28 08:12:10,410 INFO L290 TraceCheckUtils]: 17: Hoare triple {19399#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {19399#true} is VALID [2022-04-28 08:12:10,410 INFO L290 TraceCheckUtils]: 18: Hoare triple {19399#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {19399#true} is VALID [2022-04-28 08:12:10,410 INFO L290 TraceCheckUtils]: 19: Hoare triple {19399#true} assume 3 == ~tmp_ndt_3~0; {19399#true} is VALID [2022-04-28 08:12:10,410 INFO L272 TraceCheckUtils]: 20: Hoare triple {19399#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {19399#true} is VALID [2022-04-28 08:12:10,410 INFO L290 TraceCheckUtils]: 21: Hoare triple {19399#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {19399#true} is VALID [2022-04-28 08:12:10,410 INFO L290 TraceCheckUtils]: 22: Hoare triple {19399#true} assume 0 == ~irpStack__MinorFunction~0; {19399#true} is VALID [2022-04-28 08:12:10,411 INFO L290 TraceCheckUtils]: 23: Hoare triple {19399#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {19399#true} is VALID [2022-04-28 08:12:10,411 INFO L290 TraceCheckUtils]: 24: Hoare triple {19399#true} assume !(~s~0 != ~NP~0); {19399#true} is VALID [2022-04-28 08:12:10,411 INFO L290 TraceCheckUtils]: 25: Hoare triple {19399#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {19399#true} is VALID [2022-04-28 08:12:10,411 INFO L290 TraceCheckUtils]: 26: Hoare triple {19399#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {19399#true} is VALID [2022-04-28 08:12:10,411 INFO L272 TraceCheckUtils]: 27: Hoare triple {19399#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {19440#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:10,412 INFO L290 TraceCheckUtils]: 28: Hoare triple {19440#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {19399#true} is VALID [2022-04-28 08:12:10,412 INFO L290 TraceCheckUtils]: 29: Hoare triple {19399#true} assume 0 != ~compRegistered~0; {19399#true} is VALID [2022-04-28 08:12:10,412 INFO L272 TraceCheckUtils]: 30: Hoare triple {19399#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {19453#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:10,412 INFO L290 TraceCheckUtils]: 31: Hoare triple {19453#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {19399#true} is VALID [2022-04-28 08:12:10,413 INFO L272 TraceCheckUtils]: 32: Hoare triple {19399#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {19453#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:10,413 INFO L290 TraceCheckUtils]: 33: Hoare triple {19453#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {19399#true} is VALID [2022-04-28 08:12:10,413 INFO L290 TraceCheckUtils]: 34: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,413 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {19399#true} {19399#true} #712#return; {19399#true} is VALID [2022-04-28 08:12:10,413 INFO L290 TraceCheckUtils]: 36: Hoare triple {19399#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {19399#true} is VALID [2022-04-28 08:12:10,414 INFO L290 TraceCheckUtils]: 37: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,414 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {19399#true} {19399#true} #774#return; {19399#true} is VALID [2022-04-28 08:12:10,414 INFO L290 TraceCheckUtils]: 39: Hoare triple {19399#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {19399#true} is VALID [2022-04-28 08:12:10,414 INFO L290 TraceCheckUtils]: 40: Hoare triple {19399#true} assume -1073741802 == ~__cil_tmp7~0; {19399#true} is VALID [2022-04-28 08:12:10,414 INFO L272 TraceCheckUtils]: 41: Hoare triple {19399#true} call stubMoreProcessingRequired(); {19457#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:10,414 INFO L290 TraceCheckUtils]: 42: Hoare triple {19457#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {19399#true} is VALID [2022-04-28 08:12:10,414 INFO L290 TraceCheckUtils]: 43: Hoare triple {19399#true} assume true; {19399#true} is VALID [2022-04-28 08:12:10,414 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {19399#true} {19399#true} #776#return; {19399#true} is VALID [2022-04-28 08:12:10,415 INFO L290 TraceCheckUtils]: 45: Hoare triple {19399#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {19399#true} is VALID [2022-04-28 08:12:10,415 INFO L290 TraceCheckUtils]: 46: Hoare triple {19399#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {19399#true} is VALID [2022-04-28 08:12:10,415 INFO L290 TraceCheckUtils]: 47: Hoare triple {19399#true} assume 1 == ~tmp_ndt_7~0; {19399#true} is VALID [2022-04-28 08:12:10,415 INFO L290 TraceCheckUtils]: 48: Hoare triple {19399#true} ~returnVal2~0 := -1073741823; {19452#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:12:10,415 INFO L290 TraceCheckUtils]: 49: Hoare triple {19452#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume !(~s~0 == ~NP~0); {19452#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:12:10,416 INFO L290 TraceCheckUtils]: 50: Hoare triple {19452#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume ~s~0 == ~MPR1~0; {19452#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-28 08:12:10,416 INFO L290 TraceCheckUtils]: 51: Hoare triple {19452#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {19400#false} is VALID [2022-04-28 08:12:10,416 INFO L290 TraceCheckUtils]: 52: Hoare triple {19400#false} #res := ~returnVal2~0; {19400#false} is VALID [2022-04-28 08:12:10,416 INFO L290 TraceCheckUtils]: 53: Hoare triple {19400#false} assume true; {19400#false} is VALID [2022-04-28 08:12:10,416 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {19400#false} {19399#true} #752#return; {19400#false} is VALID [2022-04-28 08:12:10,417 INFO L290 TraceCheckUtils]: 55: Hoare triple {19400#false} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {19400#false} is VALID [2022-04-28 08:12:10,417 INFO L290 TraceCheckUtils]: 56: Hoare triple {19400#false} assume 259 == ~__cil_tmp23~0; {19400#false} is VALID [2022-04-28 08:12:10,417 INFO L272 TraceCheckUtils]: 57: Hoare triple {19400#false} call #t~ret13 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {19400#false} is VALID [2022-04-28 08:12:10,417 INFO L290 TraceCheckUtils]: 58: Hoare triple {19400#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {19400#false} is VALID [2022-04-28 08:12:10,417 INFO L290 TraceCheckUtils]: 59: Hoare triple {19400#false} assume !(~s~0 == ~MPR3~0); {19400#false} is VALID [2022-04-28 08:12:10,417 INFO L290 TraceCheckUtils]: 60: Hoare triple {19400#false} assume !(1 == ~customIrp~0); {19400#false} is VALID [2022-04-28 08:12:10,417 INFO L290 TraceCheckUtils]: 61: Hoare triple {19400#false} assume ~s~0 == ~MPR3~0; {19400#false} is VALID [2022-04-28 08:12:10,417 INFO L272 TraceCheckUtils]: 62: Hoare triple {19400#false} call errorFn(); {19400#false} is VALID [2022-04-28 08:12:10,417 INFO L290 TraceCheckUtils]: 63: Hoare triple {19400#false} assume !false; {19400#false} is VALID [2022-04-28 08:12:10,418 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:10,418 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:10,418 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [649837672] [2022-04-28 08:12:10,418 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [649837672] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:10,418 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:10,418 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-04-28 08:12:10,418 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:10,418 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1868030610] [2022-04-28 08:12:10,418 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1868030610] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:10,418 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:10,418 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-04-28 08:12:10,419 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2037275723] [2022-04-28 08:12:10,419 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:10,419 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 64 [2022-04-28 08:12:10,419 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:10,419 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:10,463 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:10,463 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-04-28 08:12:10,464 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:10,465 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-04-28 08:12:10,465 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-04-28 08:12:10,465 INFO L87 Difference]: Start difference. First operand 92 states and 101 transitions. Second operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:10,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:10,998 INFO L93 Difference]: Finished difference Result 126 states and 141 transitions. [2022-04-28 08:12:10,998 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-04-28 08:12:10,998 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 64 [2022-04-28 08:12:10,998 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:10,998 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:11,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 129 transitions. [2022-04-28 08:12:11,000 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:11,001 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 129 transitions. [2022-04-28 08:12:11,001 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 7 states and 129 transitions. [2022-04-28 08:12:11,115 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 129 edges. 129 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:11,116 INFO L225 Difference]: With dead ends: 126 [2022-04-28 08:12:11,116 INFO L226 Difference]: Without dead ends: 98 [2022-04-28 08:12:11,116 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-04-28 08:12:11,117 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 57 mSDsluCounter, 134 mSDsCounter, 0 mSdLazyCounter, 119 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 149 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 119 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:11,117 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 207 Invalid, 149 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-04-28 08:12:11,118 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2022-04-28 08:12:11,304 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 95. [2022-04-28 08:12:11,304 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:11,304 INFO L82 GeneralOperation]: Start isEquivalent. First operand 98 states. Second operand has 95 states, 71 states have (on average 1.1408450704225352) internal successors, (81), 72 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:11,304 INFO L74 IsIncluded]: Start isIncluded. First operand 98 states. Second operand has 95 states, 71 states have (on average 1.1408450704225352) internal successors, (81), 72 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:11,305 INFO L87 Difference]: Start difference. First operand 98 states. Second operand has 95 states, 71 states have (on average 1.1408450704225352) internal successors, (81), 72 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:11,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:11,306 INFO L93 Difference]: Finished difference Result 98 states and 107 transitions. [2022-04-28 08:12:11,306 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 107 transitions. [2022-04-28 08:12:11,306 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:11,306 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:11,306 INFO L74 IsIncluded]: Start isIncluded. First operand has 95 states, 71 states have (on average 1.1408450704225352) internal successors, (81), 72 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 98 states. [2022-04-28 08:12:11,307 INFO L87 Difference]: Start difference. First operand has 95 states, 71 states have (on average 1.1408450704225352) internal successors, (81), 72 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 98 states. [2022-04-28 08:12:11,308 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:11,308 INFO L93 Difference]: Finished difference Result 98 states and 107 transitions. [2022-04-28 08:12:11,308 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 107 transitions. [2022-04-28 08:12:11,308 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:11,309 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:11,309 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:11,309 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:11,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95 states, 71 states have (on average 1.1408450704225352) internal successors, (81), 72 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:11,310 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 104 transitions. [2022-04-28 08:12:11,310 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 104 transitions. Word has length 64 [2022-04-28 08:12:11,310 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:11,311 INFO L495 AbstractCegarLoop]: Abstraction has 95 states and 104 transitions. [2022-04-28 08:12:11,311 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:11,311 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 95 states and 104 transitions. [2022-04-28 08:12:11,447 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 104 edges. 104 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:11,448 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 104 transitions. [2022-04-28 08:12:11,448 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-04-28 08:12:11,448 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:11,448 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:11,448 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-04-28 08:12:11,448 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:11,449 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:11,449 INFO L85 PathProgramCache]: Analyzing trace with hash -706274739, now seen corresponding path program 1 times [2022-04-28 08:12:11,449 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:11,449 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1981732507] [2022-04-28 08:12:11,449 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:11,449 INFO L85 PathProgramCache]: Analyzing trace with hash -706274739, now seen corresponding path program 2 times [2022-04-28 08:12:11,450 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:11,450 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [24082778] [2022-04-28 08:12:11,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:11,450 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:11,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:11,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:11,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:11,544 INFO L290 TraceCheckUtils]: 0: Hoare triple {20137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {20098#true} is VALID [2022-04-28 08:12:11,544 INFO L290 TraceCheckUtils]: 1: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,544 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20098#true} {20098#true} #780#return; {20098#true} is VALID [2022-04-28 08:12:11,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:11,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:11,568 INFO L290 TraceCheckUtils]: 0: Hoare triple {20138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {20098#true} is VALID [2022-04-28 08:12:11,568 INFO L290 TraceCheckUtils]: 1: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,568 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20098#true} {20098#true} #714#return; {20098#true} is VALID [2022-04-28 08:12:11,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:11,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:11,582 INFO L290 TraceCheckUtils]: 0: Hoare triple {20139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {20098#true} is VALID [2022-04-28 08:12:11,582 INFO L290 TraceCheckUtils]: 1: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,582 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20098#true} {20098#true} #716#return; {20098#true} is VALID [2022-04-28 08:12:11,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:12:11,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:11,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:12:11,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:11,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:11,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:11,609 INFO L290 TraceCheckUtils]: 0: Hoare triple {20152#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {20098#true} is VALID [2022-04-28 08:12:11,609 INFO L290 TraceCheckUtils]: 1: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,609 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20098#true} {20098#true} #712#return; {20098#true} is VALID [2022-04-28 08:12:11,609 INFO L290 TraceCheckUtils]: 0: Hoare triple {20152#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {20098#true} is VALID [2022-04-28 08:12:11,610 INFO L272 TraceCheckUtils]: 1: Hoare triple {20098#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {20152#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:11,610 INFO L290 TraceCheckUtils]: 2: Hoare triple {20152#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {20098#true} is VALID [2022-04-28 08:12:11,610 INFO L290 TraceCheckUtils]: 3: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,610 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {20098#true} {20098#true} #712#return; {20098#true} is VALID [2022-04-28 08:12:11,610 INFO L290 TraceCheckUtils]: 5: Hoare triple {20098#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {20098#true} is VALID [2022-04-28 08:12:11,610 INFO L290 TraceCheckUtils]: 6: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,610 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {20098#true} {20098#true} #774#return; {20098#true} is VALID [2022-04-28 08:12:11,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:12:11,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:11,618 INFO L290 TraceCheckUtils]: 0: Hoare triple {20156#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {20098#true} is VALID [2022-04-28 08:12:11,618 INFO L290 TraceCheckUtils]: 1: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,618 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20098#true} {20098#true} #776#return; {20098#true} is VALID [2022-04-28 08:12:11,618 INFO L290 TraceCheckUtils]: 0: Hoare triple {20140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {20098#true} is VALID [2022-04-28 08:12:11,618 INFO L290 TraceCheckUtils]: 1: Hoare triple {20098#true} assume 0 != ~compRegistered~0; {20098#true} is VALID [2022-04-28 08:12:11,619 INFO L272 TraceCheckUtils]: 2: Hoare triple {20098#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {20152#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:11,619 INFO L290 TraceCheckUtils]: 3: Hoare triple {20152#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {20098#true} is VALID [2022-04-28 08:12:11,619 INFO L272 TraceCheckUtils]: 4: Hoare triple {20098#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {20152#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:11,619 INFO L290 TraceCheckUtils]: 5: Hoare triple {20152#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {20098#true} is VALID [2022-04-28 08:12:11,619 INFO L290 TraceCheckUtils]: 6: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,620 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {20098#true} {20098#true} #712#return; {20098#true} is VALID [2022-04-28 08:12:11,620 INFO L290 TraceCheckUtils]: 8: Hoare triple {20098#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {20098#true} is VALID [2022-04-28 08:12:11,620 INFO L290 TraceCheckUtils]: 9: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,620 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {20098#true} {20098#true} #774#return; {20098#true} is VALID [2022-04-28 08:12:11,620 INFO L290 TraceCheckUtils]: 11: Hoare triple {20098#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {20098#true} is VALID [2022-04-28 08:12:11,620 INFO L290 TraceCheckUtils]: 12: Hoare triple {20098#true} assume -1073741802 == ~__cil_tmp7~0; {20098#true} is VALID [2022-04-28 08:12:11,620 INFO L272 TraceCheckUtils]: 13: Hoare triple {20098#true} call stubMoreProcessingRequired(); {20156#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:11,620 INFO L290 TraceCheckUtils]: 14: Hoare triple {20156#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {20098#true} is VALID [2022-04-28 08:12:11,620 INFO L290 TraceCheckUtils]: 15: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,621 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {20098#true} {20098#true} #776#return; {20098#true} is VALID [2022-04-28 08:12:11,621 INFO L290 TraceCheckUtils]: 17: Hoare triple {20098#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {20098#true} is VALID [2022-04-28 08:12:11,621 INFO L290 TraceCheckUtils]: 18: Hoare triple {20098#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {20098#true} is VALID [2022-04-28 08:12:11,621 INFO L290 TraceCheckUtils]: 19: Hoare triple {20098#true} assume 1 == ~tmp_ndt_7~0; {20098#true} is VALID [2022-04-28 08:12:11,621 INFO L290 TraceCheckUtils]: 20: Hoare triple {20098#true} ~returnVal2~0 := -1073741823; {20098#true} is VALID [2022-04-28 08:12:11,621 INFO L290 TraceCheckUtils]: 21: Hoare triple {20098#true} assume !(~s~0 == ~NP~0); {20098#true} is VALID [2022-04-28 08:12:11,621 INFO L290 TraceCheckUtils]: 22: Hoare triple {20098#true} assume ~s~0 == ~MPR1~0; {20098#true} is VALID [2022-04-28 08:12:11,621 INFO L290 TraceCheckUtils]: 23: Hoare triple {20098#true} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {20098#true} is VALID [2022-04-28 08:12:11,621 INFO L290 TraceCheckUtils]: 24: Hoare triple {20098#true} #res := ~returnVal2~0; {20098#true} is VALID [2022-04-28 08:12:11,621 INFO L290 TraceCheckUtils]: 25: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,621 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {20098#true} {20098#true} #752#return; {20098#true} is VALID [2022-04-28 08:12:11,623 INFO L272 TraceCheckUtils]: 0: Hoare triple {20098#true} call ULTIMATE.init(); {20137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:11,623 INFO L290 TraceCheckUtils]: 1: Hoare triple {20137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {20098#true} is VALID [2022-04-28 08:12:11,623 INFO L290 TraceCheckUtils]: 2: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,623 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {20098#true} {20098#true} #780#return; {20098#true} is VALID [2022-04-28 08:12:11,623 INFO L272 TraceCheckUtils]: 4: Hoare triple {20098#true} call #t~ret83 := main(); {20098#true} is VALID [2022-04-28 08:12:11,623 INFO L290 TraceCheckUtils]: 5: Hoare triple {20098#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {20098#true} is VALID [2022-04-28 08:12:11,624 INFO L272 TraceCheckUtils]: 6: Hoare triple {20098#true} call _BLAST_init(); {20138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:11,624 INFO L290 TraceCheckUtils]: 7: Hoare triple {20138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {20098#true} is VALID [2022-04-28 08:12:11,624 INFO L290 TraceCheckUtils]: 8: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,624 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {20098#true} {20098#true} #714#return; {20098#true} is VALID [2022-04-28 08:12:11,624 INFO L290 TraceCheckUtils]: 10: Hoare triple {20098#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {20098#true} is VALID [2022-04-28 08:12:11,625 INFO L290 TraceCheckUtils]: 11: Hoare triple {20098#true} assume !(0 == ~irp_choice~0); {20098#true} is VALID [2022-04-28 08:12:11,625 INFO L272 TraceCheckUtils]: 12: Hoare triple {20098#true} call stub_driver_init(); {20139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:11,625 INFO L290 TraceCheckUtils]: 13: Hoare triple {20139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {20098#true} is VALID [2022-04-28 08:12:11,625 INFO L290 TraceCheckUtils]: 14: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,625 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {20098#true} {20098#true} #716#return; {20098#true} is VALID [2022-04-28 08:12:11,626 INFO L290 TraceCheckUtils]: 16: Hoare triple {20098#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {20098#true} is VALID [2022-04-28 08:12:11,626 INFO L290 TraceCheckUtils]: 17: Hoare triple {20098#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {20098#true} is VALID [2022-04-28 08:12:11,626 INFO L290 TraceCheckUtils]: 18: Hoare triple {20098#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {20098#true} is VALID [2022-04-28 08:12:11,626 INFO L290 TraceCheckUtils]: 19: Hoare triple {20098#true} assume 3 == ~tmp_ndt_3~0; {20098#true} is VALID [2022-04-28 08:12:11,626 INFO L272 TraceCheckUtils]: 20: Hoare triple {20098#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {20098#true} is VALID [2022-04-28 08:12:11,626 INFO L290 TraceCheckUtils]: 21: Hoare triple {20098#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {20098#true} is VALID [2022-04-28 08:12:11,626 INFO L290 TraceCheckUtils]: 22: Hoare triple {20098#true} assume 0 == ~irpStack__MinorFunction~0; {20098#true} is VALID [2022-04-28 08:12:11,626 INFO L290 TraceCheckUtils]: 23: Hoare triple {20098#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {20098#true} is VALID [2022-04-28 08:12:11,626 INFO L290 TraceCheckUtils]: 24: Hoare triple {20098#true} assume !(~s~0 != ~NP~0); {20098#true} is VALID [2022-04-28 08:12:11,626 INFO L290 TraceCheckUtils]: 25: Hoare triple {20098#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {20098#true} is VALID [2022-04-28 08:12:11,626 INFO L290 TraceCheckUtils]: 26: Hoare triple {20098#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {20098#true} is VALID [2022-04-28 08:12:11,627 INFO L272 TraceCheckUtils]: 27: Hoare triple {20098#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {20140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:11,627 INFO L290 TraceCheckUtils]: 28: Hoare triple {20140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {20098#true} is VALID [2022-04-28 08:12:11,627 INFO L290 TraceCheckUtils]: 29: Hoare triple {20098#true} assume 0 != ~compRegistered~0; {20098#true} is VALID [2022-04-28 08:12:11,628 INFO L272 TraceCheckUtils]: 30: Hoare triple {20098#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {20152#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:11,628 INFO L290 TraceCheckUtils]: 31: Hoare triple {20152#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {20098#true} is VALID [2022-04-28 08:12:11,628 INFO L272 TraceCheckUtils]: 32: Hoare triple {20098#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {20152#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:11,628 INFO L290 TraceCheckUtils]: 33: Hoare triple {20152#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {20098#true} is VALID [2022-04-28 08:12:11,629 INFO L290 TraceCheckUtils]: 34: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,629 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {20098#true} {20098#true} #712#return; {20098#true} is VALID [2022-04-28 08:12:11,629 INFO L290 TraceCheckUtils]: 36: Hoare triple {20098#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {20098#true} is VALID [2022-04-28 08:12:11,629 INFO L290 TraceCheckUtils]: 37: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,629 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {20098#true} {20098#true} #774#return; {20098#true} is VALID [2022-04-28 08:12:11,629 INFO L290 TraceCheckUtils]: 39: Hoare triple {20098#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {20098#true} is VALID [2022-04-28 08:12:11,629 INFO L290 TraceCheckUtils]: 40: Hoare triple {20098#true} assume -1073741802 == ~__cil_tmp7~0; {20098#true} is VALID [2022-04-28 08:12:11,629 INFO L272 TraceCheckUtils]: 41: Hoare triple {20098#true} call stubMoreProcessingRequired(); {20156#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:11,629 INFO L290 TraceCheckUtils]: 42: Hoare triple {20156#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {20098#true} is VALID [2022-04-28 08:12:11,630 INFO L290 TraceCheckUtils]: 43: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,630 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {20098#true} {20098#true} #776#return; {20098#true} is VALID [2022-04-28 08:12:11,630 INFO L290 TraceCheckUtils]: 45: Hoare triple {20098#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {20098#true} is VALID [2022-04-28 08:12:11,630 INFO L290 TraceCheckUtils]: 46: Hoare triple {20098#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {20098#true} is VALID [2022-04-28 08:12:11,630 INFO L290 TraceCheckUtils]: 47: Hoare triple {20098#true} assume 1 == ~tmp_ndt_7~0; {20098#true} is VALID [2022-04-28 08:12:11,630 INFO L290 TraceCheckUtils]: 48: Hoare triple {20098#true} ~returnVal2~0 := -1073741823; {20098#true} is VALID [2022-04-28 08:12:11,630 INFO L290 TraceCheckUtils]: 49: Hoare triple {20098#true} assume !(~s~0 == ~NP~0); {20098#true} is VALID [2022-04-28 08:12:11,630 INFO L290 TraceCheckUtils]: 50: Hoare triple {20098#true} assume ~s~0 == ~MPR1~0; {20098#true} is VALID [2022-04-28 08:12:11,630 INFO L290 TraceCheckUtils]: 51: Hoare triple {20098#true} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {20098#true} is VALID [2022-04-28 08:12:11,630 INFO L290 TraceCheckUtils]: 52: Hoare triple {20098#true} #res := ~returnVal2~0; {20098#true} is VALID [2022-04-28 08:12:11,630 INFO L290 TraceCheckUtils]: 53: Hoare triple {20098#true} assume true; {20098#true} is VALID [2022-04-28 08:12:11,631 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {20098#true} {20098#true} #752#return; {20098#true} is VALID [2022-04-28 08:12:11,631 INFO L290 TraceCheckUtils]: 55: Hoare triple {20098#true} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {20098#true} is VALID [2022-04-28 08:12:11,631 INFO L290 TraceCheckUtils]: 56: Hoare triple {20098#true} assume 259 == ~__cil_tmp23~0; {20098#true} is VALID [2022-04-28 08:12:11,631 INFO L272 TraceCheckUtils]: 57: Hoare triple {20098#true} call #t~ret13 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {20098#true} is VALID [2022-04-28 08:12:11,631 INFO L290 TraceCheckUtils]: 58: Hoare triple {20098#true} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {20098#true} is VALID [2022-04-28 08:12:11,631 INFO L290 TraceCheckUtils]: 59: Hoare triple {20098#true} assume !(~s~0 == ~MPR3~0); {20136#(not (= ~MPR3~0 ~s~0))} is VALID [2022-04-28 08:12:11,632 INFO L290 TraceCheckUtils]: 60: Hoare triple {20136#(not (= ~MPR3~0 ~s~0))} assume !(1 == ~customIrp~0); {20136#(not (= ~MPR3~0 ~s~0))} is VALID [2022-04-28 08:12:11,632 INFO L290 TraceCheckUtils]: 61: Hoare triple {20136#(not (= ~MPR3~0 ~s~0))} assume ~s~0 == ~MPR3~0; {20099#false} is VALID [2022-04-28 08:12:11,632 INFO L272 TraceCheckUtils]: 62: Hoare triple {20099#false} call errorFn(); {20099#false} is VALID [2022-04-28 08:12:11,632 INFO L290 TraceCheckUtils]: 63: Hoare triple {20099#false} assume !false; {20099#false} is VALID [2022-04-28 08:12:11,632 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:11,632 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:11,633 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [24082778] [2022-04-28 08:12:11,633 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [24082778] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:11,633 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:11,633 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-04-28 08:12:11,633 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:11,633 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1981732507] [2022-04-28 08:12:11,633 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1981732507] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:11,633 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:11,633 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-04-28 08:12:11,633 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [562570627] [2022-04-28 08:12:11,633 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:11,634 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) Word has length 64 [2022-04-28 08:12:11,635 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:11,636 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:11,677 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:11,677 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-04-28 08:12:11,677 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:11,678 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-04-28 08:12:11,678 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-04-28 08:12:11,678 INFO L87 Difference]: Start difference. First operand 95 states and 104 transitions. Second operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:12,303 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:12,303 INFO L93 Difference]: Finished difference Result 111 states and 121 transitions. [2022-04-28 08:12:12,303 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-28 08:12:12,303 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) Word has length 64 [2022-04-28 08:12:12,304 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:12,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:12,305 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 104 transitions. [2022-04-28 08:12:12,305 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:12,306 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 104 transitions. [2022-04-28 08:12:12,306 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 104 transitions. [2022-04-28 08:12:12,405 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 104 edges. 104 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:12,407 INFO L225 Difference]: With dead ends: 111 [2022-04-28 08:12:12,407 INFO L226 Difference]: Without dead ends: 106 [2022-04-28 08:12:12,407 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=52, Unknown=0, NotChecked=0, Total=90 [2022-04-28 08:12:12,407 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 77 mSDsluCounter, 155 mSDsCounter, 0 mSdLazyCounter, 154 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 187 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 154 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:12,408 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 239 Invalid, 187 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 154 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-04-28 08:12:12,408 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106 states. [2022-04-28 08:12:12,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106 to 97. [2022-04-28 08:12:12,562 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:12,562 INFO L82 GeneralOperation]: Start isEquivalent. First operand 106 states. Second operand has 97 states, 73 states have (on average 1.1232876712328768) internal successors, (82), 74 states have internal predecessors, (82), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:12,563 INFO L74 IsIncluded]: Start isIncluded. First operand 106 states. Second operand has 97 states, 73 states have (on average 1.1232876712328768) internal successors, (82), 74 states have internal predecessors, (82), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:12,563 INFO L87 Difference]: Start difference. First operand 106 states. Second operand has 97 states, 73 states have (on average 1.1232876712328768) internal successors, (82), 74 states have internal predecessors, (82), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:12,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:12,564 INFO L93 Difference]: Finished difference Result 106 states and 115 transitions. [2022-04-28 08:12:12,564 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 115 transitions. [2022-04-28 08:12:12,564 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:12,564 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:12,565 INFO L74 IsIncluded]: Start isIncluded. First operand has 97 states, 73 states have (on average 1.1232876712328768) internal successors, (82), 74 states have internal predecessors, (82), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 106 states. [2022-04-28 08:12:12,565 INFO L87 Difference]: Start difference. First operand has 97 states, 73 states have (on average 1.1232876712328768) internal successors, (82), 74 states have internal predecessors, (82), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 106 states. [2022-04-28 08:12:12,566 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:12,566 INFO L93 Difference]: Finished difference Result 106 states and 115 transitions. [2022-04-28 08:12:12,566 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 115 transitions. [2022-04-28 08:12:12,567 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:12,567 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:12,567 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:12,567 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:12,567 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 73 states have (on average 1.1232876712328768) internal successors, (82), 74 states have internal predecessors, (82), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:12,568 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 105 transitions. [2022-04-28 08:12:12,568 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 105 transitions. Word has length 64 [2022-04-28 08:12:12,569 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:12,569 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 105 transitions. [2022-04-28 08:12:12,569 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:12,569 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 97 states and 105 transitions. [2022-04-28 08:12:12,693 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 105 edges. 105 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:12,694 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 105 transitions. [2022-04-28 08:12:12,694 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-04-28 08:12:12,694 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:12,694 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:12,694 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-04-28 08:12:12,694 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:12,695 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:12,695 INFO L85 PathProgramCache]: Analyzing trace with hash -348732964, now seen corresponding path program 1 times [2022-04-28 08:12:12,695 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:12,695 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [933705085] [2022-04-28 08:12:12,695 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:12,695 INFO L85 PathProgramCache]: Analyzing trace with hash -348732964, now seen corresponding path program 2 times [2022-04-28 08:12:12,695 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:12,695 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1323199092] [2022-04-28 08:12:12,695 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:12,695 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:12,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:12,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:12,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:12,773 INFO L290 TraceCheckUtils]: 0: Hoare triple {20829#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {20789#true} is VALID [2022-04-28 08:12:12,773 INFO L290 TraceCheckUtils]: 1: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,773 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20789#true} {20789#true} #780#return; {20789#true} is VALID [2022-04-28 08:12:12,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:12,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:12,803 INFO L290 TraceCheckUtils]: 0: Hoare triple {20830#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {20789#true} is VALID [2022-04-28 08:12:12,803 INFO L290 TraceCheckUtils]: 1: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,804 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20789#true} {20789#true} #714#return; {20789#true} is VALID [2022-04-28 08:12:12,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:12,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:12,819 INFO L290 TraceCheckUtils]: 0: Hoare triple {20831#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {20789#true} is VALID [2022-04-28 08:12:12,819 INFO L290 TraceCheckUtils]: 1: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,819 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20789#true} {20789#true} #716#return; {20789#true} is VALID [2022-04-28 08:12:12,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:12:12,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:12,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:12:12,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:12,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:12,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:12,869 INFO L290 TraceCheckUtils]: 0: Hoare triple {20846#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {20789#true} is VALID [2022-04-28 08:12:12,869 INFO L290 TraceCheckUtils]: 1: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,869 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20789#true} {20789#true} #712#return; {20789#true} is VALID [2022-04-28 08:12:12,870 INFO L290 TraceCheckUtils]: 0: Hoare triple {20846#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {20789#true} is VALID [2022-04-28 08:12:12,870 INFO L272 TraceCheckUtils]: 1: Hoare triple {20789#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {20846#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:12,870 INFO L290 TraceCheckUtils]: 2: Hoare triple {20846#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {20789#true} is VALID [2022-04-28 08:12:12,870 INFO L290 TraceCheckUtils]: 3: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,870 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {20789#true} {20789#true} #712#return; {20789#true} is VALID [2022-04-28 08:12:12,871 INFO L290 TraceCheckUtils]: 5: Hoare triple {20789#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {20789#true} is VALID [2022-04-28 08:12:12,871 INFO L290 TraceCheckUtils]: 6: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,871 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {20789#true} {20789#true} #774#return; {20789#true} is VALID [2022-04-28 08:12:12,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:12:12,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:12,882 INFO L290 TraceCheckUtils]: 0: Hoare triple {20850#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {20789#true} is VALID [2022-04-28 08:12:12,883 INFO L290 TraceCheckUtils]: 1: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,883 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20789#true} {20789#true} #776#return; {20789#true} is VALID [2022-04-28 08:12:12,883 INFO L290 TraceCheckUtils]: 0: Hoare triple {20832#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {20789#true} is VALID [2022-04-28 08:12:12,883 INFO L290 TraceCheckUtils]: 1: Hoare triple {20789#true} assume 0 != ~compRegistered~0; {20789#true} is VALID [2022-04-28 08:12:12,884 INFO L272 TraceCheckUtils]: 2: Hoare triple {20789#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {20846#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:12,884 INFO L290 TraceCheckUtils]: 3: Hoare triple {20846#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {20789#true} is VALID [2022-04-28 08:12:12,884 INFO L272 TraceCheckUtils]: 4: Hoare triple {20789#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {20846#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:12,884 INFO L290 TraceCheckUtils]: 5: Hoare triple {20846#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {20789#true} is VALID [2022-04-28 08:12:12,885 INFO L290 TraceCheckUtils]: 6: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,885 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {20789#true} {20789#true} #712#return; {20789#true} is VALID [2022-04-28 08:12:12,885 INFO L290 TraceCheckUtils]: 8: Hoare triple {20789#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {20789#true} is VALID [2022-04-28 08:12:12,885 INFO L290 TraceCheckUtils]: 9: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,885 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {20789#true} {20789#true} #774#return; {20789#true} is VALID [2022-04-28 08:12:12,885 INFO L290 TraceCheckUtils]: 11: Hoare triple {20789#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {20789#true} is VALID [2022-04-28 08:12:12,885 INFO L290 TraceCheckUtils]: 12: Hoare triple {20789#true} assume -1073741802 == ~__cil_tmp7~0; {20789#true} is VALID [2022-04-28 08:12:12,885 INFO L272 TraceCheckUtils]: 13: Hoare triple {20789#true} call stubMoreProcessingRequired(); {20850#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:12,886 INFO L290 TraceCheckUtils]: 14: Hoare triple {20850#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {20789#true} is VALID [2022-04-28 08:12:12,886 INFO L290 TraceCheckUtils]: 15: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,886 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {20789#true} {20789#true} #776#return; {20789#true} is VALID [2022-04-28 08:12:12,886 INFO L290 TraceCheckUtils]: 17: Hoare triple {20789#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {20789#true} is VALID [2022-04-28 08:12:12,886 INFO L290 TraceCheckUtils]: 18: Hoare triple {20789#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {20789#true} is VALID [2022-04-28 08:12:12,886 INFO L290 TraceCheckUtils]: 19: Hoare triple {20789#true} assume !(1 == ~tmp_ndt_7~0); {20789#true} is VALID [2022-04-28 08:12:12,886 INFO L290 TraceCheckUtils]: 20: Hoare triple {20789#true} ~returnVal2~0 := 259; {20844#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:12,887 INFO L290 TraceCheckUtils]: 21: Hoare triple {20844#(<= 259 IofCallDriver_~returnVal2~0)} assume !(~s~0 == ~NP~0); {20844#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:12,887 INFO L290 TraceCheckUtils]: 22: Hoare triple {20844#(<= 259 IofCallDriver_~returnVal2~0)} assume ~s~0 == ~MPR1~0; {20844#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:12,887 INFO L290 TraceCheckUtils]: 23: Hoare triple {20844#(<= 259 IofCallDriver_~returnVal2~0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {20844#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:12,888 INFO L290 TraceCheckUtils]: 24: Hoare triple {20844#(<= 259 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {20845#(<= 259 |IofCallDriver_#res|)} is VALID [2022-04-28 08:12:12,888 INFO L290 TraceCheckUtils]: 25: Hoare triple {20845#(<= 259 |IofCallDriver_#res|)} assume true; {20845#(<= 259 |IofCallDriver_#res|)} is VALID [2022-04-28 08:12:12,888 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {20845#(<= 259 |IofCallDriver_#res|)} {20789#true} #752#return; {20827#(<= 259 |KbFilter_PnP_#t~ret12|)} is VALID [2022-04-28 08:12:12,890 INFO L272 TraceCheckUtils]: 0: Hoare triple {20789#true} call ULTIMATE.init(); {20829#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:12,890 INFO L290 TraceCheckUtils]: 1: Hoare triple {20829#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {20789#true} is VALID [2022-04-28 08:12:12,890 INFO L290 TraceCheckUtils]: 2: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,890 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {20789#true} {20789#true} #780#return; {20789#true} is VALID [2022-04-28 08:12:12,890 INFO L272 TraceCheckUtils]: 4: Hoare triple {20789#true} call #t~ret83 := main(); {20789#true} is VALID [2022-04-28 08:12:12,890 INFO L290 TraceCheckUtils]: 5: Hoare triple {20789#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {20789#true} is VALID [2022-04-28 08:12:12,891 INFO L272 TraceCheckUtils]: 6: Hoare triple {20789#true} call _BLAST_init(); {20830#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:12,892 INFO L290 TraceCheckUtils]: 7: Hoare triple {20830#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {20789#true} is VALID [2022-04-28 08:12:12,892 INFO L290 TraceCheckUtils]: 8: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,892 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {20789#true} {20789#true} #714#return; {20789#true} is VALID [2022-04-28 08:12:12,892 INFO L290 TraceCheckUtils]: 10: Hoare triple {20789#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {20789#true} is VALID [2022-04-28 08:12:12,892 INFO L290 TraceCheckUtils]: 11: Hoare triple {20789#true} assume !(0 == ~irp_choice~0); {20789#true} is VALID [2022-04-28 08:12:12,893 INFO L272 TraceCheckUtils]: 12: Hoare triple {20789#true} call stub_driver_init(); {20831#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:12,893 INFO L290 TraceCheckUtils]: 13: Hoare triple {20831#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {20789#true} is VALID [2022-04-28 08:12:12,893 INFO L290 TraceCheckUtils]: 14: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,893 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {20789#true} {20789#true} #716#return; {20789#true} is VALID [2022-04-28 08:12:12,893 INFO L290 TraceCheckUtils]: 16: Hoare triple {20789#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {20789#true} is VALID [2022-04-28 08:12:12,893 INFO L290 TraceCheckUtils]: 17: Hoare triple {20789#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {20789#true} is VALID [2022-04-28 08:12:12,893 INFO L290 TraceCheckUtils]: 18: Hoare triple {20789#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {20789#true} is VALID [2022-04-28 08:12:12,893 INFO L290 TraceCheckUtils]: 19: Hoare triple {20789#true} assume 3 == ~tmp_ndt_3~0; {20789#true} is VALID [2022-04-28 08:12:12,893 INFO L272 TraceCheckUtils]: 20: Hoare triple {20789#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {20789#true} is VALID [2022-04-28 08:12:12,893 INFO L290 TraceCheckUtils]: 21: Hoare triple {20789#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {20789#true} is VALID [2022-04-28 08:12:12,893 INFO L290 TraceCheckUtils]: 22: Hoare triple {20789#true} assume 0 == ~irpStack__MinorFunction~0; {20789#true} is VALID [2022-04-28 08:12:12,893 INFO L290 TraceCheckUtils]: 23: Hoare triple {20789#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {20789#true} is VALID [2022-04-28 08:12:12,894 INFO L290 TraceCheckUtils]: 24: Hoare triple {20789#true} assume !(~s~0 != ~NP~0); {20789#true} is VALID [2022-04-28 08:12:12,894 INFO L290 TraceCheckUtils]: 25: Hoare triple {20789#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {20789#true} is VALID [2022-04-28 08:12:12,894 INFO L290 TraceCheckUtils]: 26: Hoare triple {20789#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {20789#true} is VALID [2022-04-28 08:12:12,894 INFO L272 TraceCheckUtils]: 27: Hoare triple {20789#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {20832#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:12,894 INFO L290 TraceCheckUtils]: 28: Hoare triple {20832#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {20789#true} is VALID [2022-04-28 08:12:12,894 INFO L290 TraceCheckUtils]: 29: Hoare triple {20789#true} assume 0 != ~compRegistered~0; {20789#true} is VALID [2022-04-28 08:12:12,895 INFO L272 TraceCheckUtils]: 30: Hoare triple {20789#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {20846#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:12,895 INFO L290 TraceCheckUtils]: 31: Hoare triple {20846#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {20789#true} is VALID [2022-04-28 08:12:12,896 INFO L272 TraceCheckUtils]: 32: Hoare triple {20789#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {20846#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:12,896 INFO L290 TraceCheckUtils]: 33: Hoare triple {20846#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {20789#true} is VALID [2022-04-28 08:12:12,896 INFO L290 TraceCheckUtils]: 34: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,896 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {20789#true} {20789#true} #712#return; {20789#true} is VALID [2022-04-28 08:12:12,896 INFO L290 TraceCheckUtils]: 36: Hoare triple {20789#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {20789#true} is VALID [2022-04-28 08:12:12,896 INFO L290 TraceCheckUtils]: 37: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,896 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {20789#true} {20789#true} #774#return; {20789#true} is VALID [2022-04-28 08:12:12,896 INFO L290 TraceCheckUtils]: 39: Hoare triple {20789#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {20789#true} is VALID [2022-04-28 08:12:12,896 INFO L290 TraceCheckUtils]: 40: Hoare triple {20789#true} assume -1073741802 == ~__cil_tmp7~0; {20789#true} is VALID [2022-04-28 08:12:12,897 INFO L272 TraceCheckUtils]: 41: Hoare triple {20789#true} call stubMoreProcessingRequired(); {20850#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:12,897 INFO L290 TraceCheckUtils]: 42: Hoare triple {20850#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {20789#true} is VALID [2022-04-28 08:12:12,897 INFO L290 TraceCheckUtils]: 43: Hoare triple {20789#true} assume true; {20789#true} is VALID [2022-04-28 08:12:12,897 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {20789#true} {20789#true} #776#return; {20789#true} is VALID [2022-04-28 08:12:12,897 INFO L290 TraceCheckUtils]: 45: Hoare triple {20789#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {20789#true} is VALID [2022-04-28 08:12:12,897 INFO L290 TraceCheckUtils]: 46: Hoare triple {20789#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {20789#true} is VALID [2022-04-28 08:12:12,897 INFO L290 TraceCheckUtils]: 47: Hoare triple {20789#true} assume !(1 == ~tmp_ndt_7~0); {20789#true} is VALID [2022-04-28 08:12:12,897 INFO L290 TraceCheckUtils]: 48: Hoare triple {20789#true} ~returnVal2~0 := 259; {20844#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:12,898 INFO L290 TraceCheckUtils]: 49: Hoare triple {20844#(<= 259 IofCallDriver_~returnVal2~0)} assume !(~s~0 == ~NP~0); {20844#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:12,898 INFO L290 TraceCheckUtils]: 50: Hoare triple {20844#(<= 259 IofCallDriver_~returnVal2~0)} assume ~s~0 == ~MPR1~0; {20844#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:12,898 INFO L290 TraceCheckUtils]: 51: Hoare triple {20844#(<= 259 IofCallDriver_~returnVal2~0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {20844#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:12,899 INFO L290 TraceCheckUtils]: 52: Hoare triple {20844#(<= 259 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {20845#(<= 259 |IofCallDriver_#res|)} is VALID [2022-04-28 08:12:12,899 INFO L290 TraceCheckUtils]: 53: Hoare triple {20845#(<= 259 |IofCallDriver_#res|)} assume true; {20845#(<= 259 |IofCallDriver_#res|)} is VALID [2022-04-28 08:12:12,900 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {20845#(<= 259 |IofCallDriver_#res|)} {20789#true} #752#return; {20827#(<= 259 |KbFilter_PnP_#t~ret12|)} is VALID [2022-04-28 08:12:12,900 INFO L290 TraceCheckUtils]: 55: Hoare triple {20827#(<= 259 |KbFilter_PnP_#t~ret12|)} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {20828#(<= 259 KbFilter_PnP_~status~0)} is VALID [2022-04-28 08:12:12,900 INFO L290 TraceCheckUtils]: 56: Hoare triple {20828#(<= 259 KbFilter_PnP_~status~0)} assume !(259 == ~__cil_tmp23~0); {20828#(<= 259 KbFilter_PnP_~status~0)} is VALID [2022-04-28 08:12:12,901 INFO L290 TraceCheckUtils]: 57: Hoare triple {20828#(<= 259 KbFilter_PnP_~status~0)} assume !(~status~0 >= 0); {20790#false} is VALID [2022-04-28 08:12:12,901 INFO L290 TraceCheckUtils]: 58: Hoare triple {20790#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {20790#false} is VALID [2022-04-28 08:12:12,901 INFO L272 TraceCheckUtils]: 59: Hoare triple {20790#false} call IofCompleteRequest(~Irp, 0); {20790#false} is VALID [2022-04-28 08:12:12,901 INFO L290 TraceCheckUtils]: 60: Hoare triple {20790#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {20790#false} is VALID [2022-04-28 08:12:12,901 INFO L290 TraceCheckUtils]: 61: Hoare triple {20790#false} assume !(~s~0 == ~NP~0); {20790#false} is VALID [2022-04-28 08:12:12,901 INFO L272 TraceCheckUtils]: 62: Hoare triple {20790#false} call errorFn(); {20790#false} is VALID [2022-04-28 08:12:12,901 INFO L290 TraceCheckUtils]: 63: Hoare triple {20790#false} assume !false; {20790#false} is VALID [2022-04-28 08:12:12,901 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:12,902 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:12,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1323199092] [2022-04-28 08:12:12,902 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1323199092] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:12,902 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:12,902 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:12,902 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:12,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [933705085] [2022-04-28 08:12:12,902 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [933705085] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:12,902 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:12,902 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:12,902 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1638021650] [2022-04-28 08:12:12,903 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:12,903 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 64 [2022-04-28 08:12:12,903 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:12,903 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:12,946 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:12,947 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 08:12:12,947 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:12,947 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 08:12:12,947 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:12:12,947 INFO L87 Difference]: Start difference. First operand 97 states and 105 transitions. Second operand has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:13,872 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:13,872 INFO L93 Difference]: Finished difference Result 110 states and 117 transitions. [2022-04-28 08:12:13,872 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-04-28 08:12:13,873 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 64 [2022-04-28 08:12:13,873 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:13,873 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:13,874 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 104 transitions. [2022-04-28 08:12:13,874 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:13,875 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 104 transitions. [2022-04-28 08:12:13,875 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 10 states and 104 transitions. [2022-04-28 08:12:13,961 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 104 edges. 104 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:13,963 INFO L225 Difference]: With dead ends: 110 [2022-04-28 08:12:13,963 INFO L226 Difference]: Without dead ends: 103 [2022-04-28 08:12:13,963 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=117, Unknown=0, NotChecked=0, Total=156 [2022-04-28 08:12:13,964 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 42 mSDsluCounter, 247 mSDsCounter, 0 mSdLazyCounter, 310 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 324 SdHoareTripleChecker+Invalid, 332 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 310 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:13,964 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 324 Invalid, 332 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 310 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-28 08:12:13,964 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103 states. [2022-04-28 08:12:14,142 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103 to 97. [2022-04-28 08:12:14,142 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:14,143 INFO L82 GeneralOperation]: Start isEquivalent. First operand 103 states. Second operand has 97 states, 73 states have (on average 1.1095890410958904) internal successors, (81), 74 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:14,143 INFO L74 IsIncluded]: Start isIncluded. First operand 103 states. Second operand has 97 states, 73 states have (on average 1.1095890410958904) internal successors, (81), 74 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:14,143 INFO L87 Difference]: Start difference. First operand 103 states. Second operand has 97 states, 73 states have (on average 1.1095890410958904) internal successors, (81), 74 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:14,144 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:14,144 INFO L93 Difference]: Finished difference Result 103 states and 110 transitions. [2022-04-28 08:12:14,144 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 110 transitions. [2022-04-28 08:12:14,144 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:14,144 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:14,144 INFO L74 IsIncluded]: Start isIncluded. First operand has 97 states, 73 states have (on average 1.1095890410958904) internal successors, (81), 74 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 103 states. [2022-04-28 08:12:14,144 INFO L87 Difference]: Start difference. First operand has 97 states, 73 states have (on average 1.1095890410958904) internal successors, (81), 74 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 103 states. [2022-04-28 08:12:14,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:14,146 INFO L93 Difference]: Finished difference Result 103 states and 110 transitions. [2022-04-28 08:12:14,146 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 110 transitions. [2022-04-28 08:12:14,146 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:14,146 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:14,146 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:14,146 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:14,146 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 73 states have (on average 1.1095890410958904) internal successors, (81), 74 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-28 08:12:14,148 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 104 transitions. [2022-04-28 08:12:14,148 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 104 transitions. Word has length 64 [2022-04-28 08:12:14,148 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:14,148 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 104 transitions. [2022-04-28 08:12:14,148 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:14,148 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 97 states and 104 transitions. [2022-04-28 08:12:14,281 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 104 edges. 104 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:14,281 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 104 transitions. [2022-04-28 08:12:14,283 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-04-28 08:12:14,283 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:14,283 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:14,283 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-04-28 08:12:14,283 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:14,284 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:14,284 INFO L85 PathProgramCache]: Analyzing trace with hash -657469950, now seen corresponding path program 1 times [2022-04-28 08:12:14,284 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:14,284 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [387690062] [2022-04-28 08:12:14,284 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:14,284 INFO L85 PathProgramCache]: Analyzing trace with hash -657469950, now seen corresponding path program 2 times [2022-04-28 08:12:14,284 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:14,285 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [772082219] [2022-04-28 08:12:14,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:14,285 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:14,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:14,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:14,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:14,408 INFO L290 TraceCheckUtils]: 0: Hoare triple {21515#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {21475#true} is VALID [2022-04-28 08:12:14,408 INFO L290 TraceCheckUtils]: 1: Hoare triple {21475#true} assume true; {21475#true} is VALID [2022-04-28 08:12:14,408 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21475#true} {21475#true} #780#return; {21475#true} is VALID [2022-04-28 08:12:14,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:14,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:14,446 INFO L290 TraceCheckUtils]: 0: Hoare triple {21516#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21517#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-28 08:12:14,446 INFO L290 TraceCheckUtils]: 1: Hoare triple {21517#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} assume true; {21517#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-28 08:12:14,447 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21517#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} {21475#true} #714#return; {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:14,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:14,463 INFO L290 TraceCheckUtils]: 0: Hoare triple {21518#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21475#true} is VALID [2022-04-28 08:12:14,463 INFO L290 TraceCheckUtils]: 1: Hoare triple {21475#true} assume true; {21475#true} is VALID [2022-04-28 08:12:14,464 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21475#true} {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #716#return; {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:12:14,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:14,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:12:14,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:14,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:14,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:14,508 INFO L290 TraceCheckUtils]: 0: Hoare triple {21532#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {21475#true} is VALID [2022-04-28 08:12:14,508 INFO L290 TraceCheckUtils]: 1: Hoare triple {21475#true} assume true; {21475#true} is VALID [2022-04-28 08:12:14,508 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21475#true} {21475#true} #712#return; {21475#true} is VALID [2022-04-28 08:12:14,508 INFO L290 TraceCheckUtils]: 0: Hoare triple {21532#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {21475#true} is VALID [2022-04-28 08:12:14,509 INFO L272 TraceCheckUtils]: 1: Hoare triple {21475#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {21532#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:14,509 INFO L290 TraceCheckUtils]: 2: Hoare triple {21532#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {21475#true} is VALID [2022-04-28 08:12:14,509 INFO L290 TraceCheckUtils]: 3: Hoare triple {21475#true} assume true; {21475#true} is VALID [2022-04-28 08:12:14,509 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {21475#true} {21475#true} #712#return; {21475#true} is VALID [2022-04-28 08:12:14,509 INFO L290 TraceCheckUtils]: 5: Hoare triple {21475#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {21475#true} is VALID [2022-04-28 08:12:14,509 INFO L290 TraceCheckUtils]: 6: Hoare triple {21475#true} assume true; {21475#true} is VALID [2022-04-28 08:12:14,509 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {21475#true} {21475#true} #774#return; {21475#true} is VALID [2022-04-28 08:12:14,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:12:14,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:14,518 INFO L290 TraceCheckUtils]: 0: Hoare triple {21536#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {21475#true} is VALID [2022-04-28 08:12:14,519 INFO L290 TraceCheckUtils]: 1: Hoare triple {21475#true} assume true; {21475#true} is VALID [2022-04-28 08:12:14,519 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21475#true} {21475#true} #776#return; {21475#true} is VALID [2022-04-28 08:12:14,519 INFO L290 TraceCheckUtils]: 0: Hoare triple {21519#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {21475#true} is VALID [2022-04-28 08:12:14,519 INFO L290 TraceCheckUtils]: 1: Hoare triple {21475#true} assume 0 != ~compRegistered~0; {21475#true} is VALID [2022-04-28 08:12:14,520 INFO L272 TraceCheckUtils]: 2: Hoare triple {21475#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {21532#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:14,520 INFO L290 TraceCheckUtils]: 3: Hoare triple {21532#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {21475#true} is VALID [2022-04-28 08:12:14,520 INFO L272 TraceCheckUtils]: 4: Hoare triple {21475#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {21532#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:14,520 INFO L290 TraceCheckUtils]: 5: Hoare triple {21532#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {21475#true} is VALID [2022-04-28 08:12:14,521 INFO L290 TraceCheckUtils]: 6: Hoare triple {21475#true} assume true; {21475#true} is VALID [2022-04-28 08:12:14,521 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {21475#true} {21475#true} #712#return; {21475#true} is VALID [2022-04-28 08:12:14,521 INFO L290 TraceCheckUtils]: 8: Hoare triple {21475#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {21475#true} is VALID [2022-04-28 08:12:14,521 INFO L290 TraceCheckUtils]: 9: Hoare triple {21475#true} assume true; {21475#true} is VALID [2022-04-28 08:12:14,521 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {21475#true} {21475#true} #774#return; {21475#true} is VALID [2022-04-28 08:12:14,521 INFO L290 TraceCheckUtils]: 11: Hoare triple {21475#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {21475#true} is VALID [2022-04-28 08:12:14,521 INFO L290 TraceCheckUtils]: 12: Hoare triple {21475#true} assume -1073741802 == ~__cil_tmp7~0; {21475#true} is VALID [2022-04-28 08:12:14,521 INFO L272 TraceCheckUtils]: 13: Hoare triple {21475#true} call stubMoreProcessingRequired(); {21536#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,521 INFO L290 TraceCheckUtils]: 14: Hoare triple {21536#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {21475#true} is VALID [2022-04-28 08:12:14,522 INFO L290 TraceCheckUtils]: 15: Hoare triple {21475#true} assume true; {21475#true} is VALID [2022-04-28 08:12:14,522 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {21475#true} {21475#true} #776#return; {21475#true} is VALID [2022-04-28 08:12:14,522 INFO L290 TraceCheckUtils]: 17: Hoare triple {21475#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {21475#true} is VALID [2022-04-28 08:12:14,522 INFO L290 TraceCheckUtils]: 18: Hoare triple {21475#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {21475#true} is VALID [2022-04-28 08:12:14,522 INFO L290 TraceCheckUtils]: 19: Hoare triple {21475#true} assume 1 == ~tmp_ndt_7~0; {21475#true} is VALID [2022-04-28 08:12:14,522 INFO L290 TraceCheckUtils]: 20: Hoare triple {21475#true} ~returnVal2~0 := -1073741823; {21475#true} is VALID [2022-04-28 08:12:14,522 INFO L290 TraceCheckUtils]: 21: Hoare triple {21475#true} assume !(~s~0 == ~NP~0); {21475#true} is VALID [2022-04-28 08:12:14,522 INFO L290 TraceCheckUtils]: 22: Hoare triple {21475#true} assume ~s~0 == ~MPR1~0; {21475#true} is VALID [2022-04-28 08:12:14,522 INFO L290 TraceCheckUtils]: 23: Hoare triple {21475#true} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {21531#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-28 08:12:14,523 INFO L290 TraceCheckUtils]: 24: Hoare triple {21531#(or (= ~s~0 1) (= ~s~0 ~NP~0))} #res := ~returnVal2~0; {21531#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-28 08:12:14,523 INFO L290 TraceCheckUtils]: 25: Hoare triple {21531#(or (= ~s~0 1) (= ~s~0 ~NP~0))} assume true; {21531#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-28 08:12:14,524 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {21531#(or (= ~s~0 1) (= ~s~0 ~NP~0))} {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #752#return; {21514#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,526 INFO L272 TraceCheckUtils]: 0: Hoare triple {21475#true} call ULTIMATE.init(); {21515#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:14,526 INFO L290 TraceCheckUtils]: 1: Hoare triple {21515#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {21475#true} is VALID [2022-04-28 08:12:14,526 INFO L290 TraceCheckUtils]: 2: Hoare triple {21475#true} assume true; {21475#true} is VALID [2022-04-28 08:12:14,526 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {21475#true} {21475#true} #780#return; {21475#true} is VALID [2022-04-28 08:12:14,526 INFO L272 TraceCheckUtils]: 4: Hoare triple {21475#true} call #t~ret83 := main(); {21475#true} is VALID [2022-04-28 08:12:14,526 INFO L290 TraceCheckUtils]: 5: Hoare triple {21475#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {21475#true} is VALID [2022-04-28 08:12:14,527 INFO L272 TraceCheckUtils]: 6: Hoare triple {21475#true} call _BLAST_init(); {21516#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:14,528 INFO L290 TraceCheckUtils]: 7: Hoare triple {21516#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21517#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-28 08:12:14,528 INFO L290 TraceCheckUtils]: 8: Hoare triple {21517#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} assume true; {21517#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-28 08:12:14,529 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {21517#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} {21475#true} #714#return; {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,529 INFO L290 TraceCheckUtils]: 10: Hoare triple {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,530 INFO L290 TraceCheckUtils]: 11: Hoare triple {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(0 == ~irp_choice~0); {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,531 INFO L272 TraceCheckUtils]: 12: Hoare triple {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} call stub_driver_init(); {21518#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:14,531 INFO L290 TraceCheckUtils]: 13: Hoare triple {21518#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21475#true} is VALID [2022-04-28 08:12:14,531 INFO L290 TraceCheckUtils]: 14: Hoare triple {21475#true} assume true; {21475#true} is VALID [2022-04-28 08:12:14,531 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {21475#true} {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #716#return; {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,532 INFO L290 TraceCheckUtils]: 16: Hoare triple {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,532 INFO L290 TraceCheckUtils]: 17: Hoare triple {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,532 INFO L290 TraceCheckUtils]: 18: Hoare triple {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,533 INFO L290 TraceCheckUtils]: 19: Hoare triple {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume 3 == ~tmp_ndt_3~0; {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,533 INFO L272 TraceCheckUtils]: 20: Hoare triple {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,534 INFO L290 TraceCheckUtils]: 21: Hoare triple {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,534 INFO L290 TraceCheckUtils]: 22: Hoare triple {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume 0 == ~irpStack__MinorFunction~0; {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,535 INFO L290 TraceCheckUtils]: 23: Hoare triple {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,535 INFO L290 TraceCheckUtils]: 24: Hoare triple {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(~s~0 != ~NP~0); {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,536 INFO L290 TraceCheckUtils]: 25: Hoare triple {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,536 INFO L290 TraceCheckUtils]: 26: Hoare triple {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,537 INFO L272 TraceCheckUtils]: 27: Hoare triple {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {21519#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:14,537 INFO L290 TraceCheckUtils]: 28: Hoare triple {21519#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {21475#true} is VALID [2022-04-28 08:12:14,537 INFO L290 TraceCheckUtils]: 29: Hoare triple {21475#true} assume 0 != ~compRegistered~0; {21475#true} is VALID [2022-04-28 08:12:14,538 INFO L272 TraceCheckUtils]: 30: Hoare triple {21475#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {21532#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:14,538 INFO L290 TraceCheckUtils]: 31: Hoare triple {21532#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {21475#true} is VALID [2022-04-28 08:12:14,538 INFO L272 TraceCheckUtils]: 32: Hoare triple {21475#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {21532#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:14,539 INFO L290 TraceCheckUtils]: 33: Hoare triple {21532#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {21475#true} is VALID [2022-04-28 08:12:14,539 INFO L290 TraceCheckUtils]: 34: Hoare triple {21475#true} assume true; {21475#true} is VALID [2022-04-28 08:12:14,539 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {21475#true} {21475#true} #712#return; {21475#true} is VALID [2022-04-28 08:12:14,539 INFO L290 TraceCheckUtils]: 36: Hoare triple {21475#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {21475#true} is VALID [2022-04-28 08:12:14,539 INFO L290 TraceCheckUtils]: 37: Hoare triple {21475#true} assume true; {21475#true} is VALID [2022-04-28 08:12:14,539 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {21475#true} {21475#true} #774#return; {21475#true} is VALID [2022-04-28 08:12:14,539 INFO L290 TraceCheckUtils]: 39: Hoare triple {21475#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {21475#true} is VALID [2022-04-28 08:12:14,539 INFO L290 TraceCheckUtils]: 40: Hoare triple {21475#true} assume -1073741802 == ~__cil_tmp7~0; {21475#true} is VALID [2022-04-28 08:12:14,539 INFO L272 TraceCheckUtils]: 41: Hoare triple {21475#true} call stubMoreProcessingRequired(); {21536#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,540 INFO L290 TraceCheckUtils]: 42: Hoare triple {21536#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {21475#true} is VALID [2022-04-28 08:12:14,540 INFO L290 TraceCheckUtils]: 43: Hoare triple {21475#true} assume true; {21475#true} is VALID [2022-04-28 08:12:14,540 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {21475#true} {21475#true} #776#return; {21475#true} is VALID [2022-04-28 08:12:14,540 INFO L290 TraceCheckUtils]: 45: Hoare triple {21475#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {21475#true} is VALID [2022-04-28 08:12:14,540 INFO L290 TraceCheckUtils]: 46: Hoare triple {21475#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {21475#true} is VALID [2022-04-28 08:12:14,540 INFO L290 TraceCheckUtils]: 47: Hoare triple {21475#true} assume 1 == ~tmp_ndt_7~0; {21475#true} is VALID [2022-04-28 08:12:14,540 INFO L290 TraceCheckUtils]: 48: Hoare triple {21475#true} ~returnVal2~0 := -1073741823; {21475#true} is VALID [2022-04-28 08:12:14,540 INFO L290 TraceCheckUtils]: 49: Hoare triple {21475#true} assume !(~s~0 == ~NP~0); {21475#true} is VALID [2022-04-28 08:12:14,540 INFO L290 TraceCheckUtils]: 50: Hoare triple {21475#true} assume ~s~0 == ~MPR1~0; {21475#true} is VALID [2022-04-28 08:12:14,541 INFO L290 TraceCheckUtils]: 51: Hoare triple {21475#true} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {21531#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-28 08:12:14,541 INFO L290 TraceCheckUtils]: 52: Hoare triple {21531#(or (= ~s~0 1) (= ~s~0 ~NP~0))} #res := ~returnVal2~0; {21531#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-28 08:12:14,541 INFO L290 TraceCheckUtils]: 53: Hoare triple {21531#(or (= ~s~0 1) (= ~s~0 ~NP~0))} assume true; {21531#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-28 08:12:14,542 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {21531#(or (= ~s~0 1) (= ~s~0 ~NP~0))} {21483#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #752#return; {21514#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,542 INFO L290 TraceCheckUtils]: 55: Hoare triple {21514#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {21514#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,543 INFO L290 TraceCheckUtils]: 56: Hoare triple {21514#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume 259 == ~__cil_tmp23~0; {21514#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,544 INFO L272 TraceCheckUtils]: 57: Hoare triple {21514#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} call #t~ret13 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {21514#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,544 INFO L290 TraceCheckUtils]: 58: Hoare triple {21514#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {21514#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-28 08:12:14,544 INFO L290 TraceCheckUtils]: 59: Hoare triple {21514#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume ~s~0 == ~MPR3~0; {21476#false} is VALID [2022-04-28 08:12:14,545 INFO L290 TraceCheckUtils]: 60: Hoare triple {21476#false} assume !(1 == ~setEventCalled~0); {21476#false} is VALID [2022-04-28 08:12:14,545 INFO L290 TraceCheckUtils]: 61: Hoare triple {21476#false} assume !(1 == ~customIrp~0); {21476#false} is VALID [2022-04-28 08:12:14,545 INFO L290 TraceCheckUtils]: 62: Hoare triple {21476#false} assume ~s~0 == ~MPR3~0; {21476#false} is VALID [2022-04-28 08:12:14,545 INFO L272 TraceCheckUtils]: 63: Hoare triple {21476#false} call errorFn(); {21476#false} is VALID [2022-04-28 08:12:14,545 INFO L290 TraceCheckUtils]: 64: Hoare triple {21476#false} assume !false; {21476#false} is VALID [2022-04-28 08:12:14,545 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:14,545 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:14,545 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [772082219] [2022-04-28 08:12:14,546 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [772082219] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:14,546 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:14,546 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:14,546 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:14,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [387690062] [2022-04-28 08:12:14,546 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [387690062] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:14,546 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:14,546 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:14,546 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [597825197] [2022-04-28 08:12:14,546 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:14,547 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 6 states have internal predecessors, (47), 4 states have call successors, (11), 10 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 65 [2022-04-28 08:12:14,547 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:14,547 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 6 states have internal predecessors, (47), 4 states have call successors, (11), 10 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:12:14,592 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:14,592 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 08:12:14,592 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:14,592 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 08:12:14,593 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=95, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:12:14,593 INFO L87 Difference]: Start difference. First operand 97 states and 104 transitions. Second operand has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 6 states have internal predecessors, (47), 4 states have call successors, (11), 10 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:12:15,687 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:15,687 INFO L93 Difference]: Finished difference Result 100 states and 106 transitions. [2022-04-28 08:12:15,687 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 08:12:15,687 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 6 states have internal predecessors, (47), 4 states have call successors, (11), 10 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 65 [2022-04-28 08:12:15,687 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:15,687 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 6 states have internal predecessors, (47), 4 states have call successors, (11), 10 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:12:15,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 101 transitions. [2022-04-28 08:12:15,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 6 states have internal predecessors, (47), 4 states have call successors, (11), 10 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:12:15,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 101 transitions. [2022-04-28 08:12:15,690 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 101 transitions. [2022-04-28 08:12:15,781 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 101 edges. 101 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:15,782 INFO L225 Difference]: With dead ends: 100 [2022-04-28 08:12:15,782 INFO L226 Difference]: Without dead ends: 82 [2022-04-28 08:12:15,782 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-04-28 08:12:15,782 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 134 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 245 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 135 SdHoareTripleChecker+Valid, 201 SdHoareTripleChecker+Invalid, 301 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 245 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:15,783 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [135 Valid, 201 Invalid, 301 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 245 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-28 08:12:15,783 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-04-28 08:12:15,944 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2022-04-28 08:12:15,945 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:15,945 INFO L82 GeneralOperation]: Start isEquivalent. First operand 82 states. Second operand has 82 states, 60 states have (on average 1.1) internal successors, (66), 61 states have internal predecessors, (66), 13 states have call successors, (13), 12 states have call predecessors, (13), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-28 08:12:15,945 INFO L74 IsIncluded]: Start isIncluded. First operand 82 states. Second operand has 82 states, 60 states have (on average 1.1) internal successors, (66), 61 states have internal predecessors, (66), 13 states have call successors, (13), 12 states have call predecessors, (13), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-28 08:12:15,945 INFO L87 Difference]: Start difference. First operand 82 states. Second operand has 82 states, 60 states have (on average 1.1) internal successors, (66), 61 states have internal predecessors, (66), 13 states have call successors, (13), 12 states have call predecessors, (13), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-28 08:12:15,946 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:15,946 INFO L93 Difference]: Finished difference Result 82 states and 87 transitions. [2022-04-28 08:12:15,946 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 87 transitions. [2022-04-28 08:12:15,946 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:15,946 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:15,946 INFO L74 IsIncluded]: Start isIncluded. First operand has 82 states, 60 states have (on average 1.1) internal successors, (66), 61 states have internal predecessors, (66), 13 states have call successors, (13), 12 states have call predecessors, (13), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) Second operand 82 states. [2022-04-28 08:12:15,946 INFO L87 Difference]: Start difference. First operand has 82 states, 60 states have (on average 1.1) internal successors, (66), 61 states have internal predecessors, (66), 13 states have call successors, (13), 12 states have call predecessors, (13), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) Second operand 82 states. [2022-04-28 08:12:15,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:15,947 INFO L93 Difference]: Finished difference Result 82 states and 87 transitions. [2022-04-28 08:12:15,947 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 87 transitions. [2022-04-28 08:12:15,947 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:15,947 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:15,948 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:15,948 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:15,948 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 60 states have (on average 1.1) internal successors, (66), 61 states have internal predecessors, (66), 13 states have call successors, (13), 12 states have call predecessors, (13), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-28 08:12:15,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 87 transitions. [2022-04-28 08:12:15,949 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 87 transitions. Word has length 65 [2022-04-28 08:12:15,949 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:15,949 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 87 transitions. [2022-04-28 08:12:15,949 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 6 states have internal predecessors, (47), 4 states have call successors, (11), 10 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:12:15,949 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 82 states and 87 transitions. [2022-04-28 08:12:16,053 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 87 edges. 87 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:16,053 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 87 transitions. [2022-04-28 08:12:16,054 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-04-28 08:12:16,054 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:16,054 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:16,054 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-04-28 08:12:16,054 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:16,054 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:16,055 INFO L85 PathProgramCache]: Analyzing trace with hash 1066121988, now seen corresponding path program 1 times [2022-04-28 08:12:16,055 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:16,055 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [297499994] [2022-04-28 08:12:16,055 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:16,055 INFO L85 PathProgramCache]: Analyzing trace with hash 1066121988, now seen corresponding path program 2 times [2022-04-28 08:12:16,055 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:16,055 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [960586970] [2022-04-28 08:12:16,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:16,056 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:16,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:16,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:16,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:16,147 INFO L290 TraceCheckUtils]: 0: Hoare triple {22123#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22084#true} is VALID [2022-04-28 08:12:16,147 INFO L290 TraceCheckUtils]: 1: Hoare triple {22084#true} assume true; {22084#true} is VALID [2022-04-28 08:12:16,147 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22084#true} {22084#true} #780#return; {22084#true} is VALID [2022-04-28 08:12:16,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:16,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:16,176 INFO L290 TraceCheckUtils]: 0: Hoare triple {22124#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22084#true} is VALID [2022-04-28 08:12:16,176 INFO L290 TraceCheckUtils]: 1: Hoare triple {22084#true} assume true; {22084#true} is VALID [2022-04-28 08:12:16,176 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22084#true} {22084#true} #714#return; {22084#true} is VALID [2022-04-28 08:12:16,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:16,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:16,189 INFO L290 TraceCheckUtils]: 0: Hoare triple {22125#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22084#true} is VALID [2022-04-28 08:12:16,189 INFO L290 TraceCheckUtils]: 1: Hoare triple {22084#true} assume true; {22084#true} is VALID [2022-04-28 08:12:16,189 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22084#true} {22084#true} #716#return; {22084#true} is VALID [2022-04-28 08:12:16,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:12:16,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:16,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:12:16,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:16,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:16,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:16,238 INFO L290 TraceCheckUtils]: 0: Hoare triple {22138#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,239 INFO L290 TraceCheckUtils]: 1: Hoare triple {22122#(= ~setEventCalled~0 1)} assume true; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,239 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22122#(= ~setEventCalled~0 1)} {22084#true} #712#return; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,239 INFO L290 TraceCheckUtils]: 0: Hoare triple {22138#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {22084#true} is VALID [2022-04-28 08:12:16,240 INFO L272 TraceCheckUtils]: 1: Hoare triple {22084#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {22138#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:16,240 INFO L290 TraceCheckUtils]: 2: Hoare triple {22138#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,240 INFO L290 TraceCheckUtils]: 3: Hoare triple {22122#(= ~setEventCalled~0 1)} assume true; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,241 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {22122#(= ~setEventCalled~0 1)} {22084#true} #712#return; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,241 INFO L290 TraceCheckUtils]: 5: Hoare triple {22122#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,242 INFO L290 TraceCheckUtils]: 6: Hoare triple {22122#(= ~setEventCalled~0 1)} assume true; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,242 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {22122#(= ~setEventCalled~0 1)} {22084#true} #774#return; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:12:16,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:16,250 INFO L290 TraceCheckUtils]: 0: Hoare triple {22142#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {22084#true} is VALID [2022-04-28 08:12:16,251 INFO L290 TraceCheckUtils]: 1: Hoare triple {22084#true} assume true; {22084#true} is VALID [2022-04-28 08:12:16,251 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22084#true} {22122#(= ~setEventCalled~0 1)} #776#return; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,251 INFO L290 TraceCheckUtils]: 0: Hoare triple {22126#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {22084#true} is VALID [2022-04-28 08:12:16,251 INFO L290 TraceCheckUtils]: 1: Hoare triple {22084#true} assume 0 != ~compRegistered~0; {22084#true} is VALID [2022-04-28 08:12:16,252 INFO L272 TraceCheckUtils]: 2: Hoare triple {22084#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {22138#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:16,252 INFO L290 TraceCheckUtils]: 3: Hoare triple {22138#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {22084#true} is VALID [2022-04-28 08:12:16,252 INFO L272 TraceCheckUtils]: 4: Hoare triple {22084#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {22138#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:16,253 INFO L290 TraceCheckUtils]: 5: Hoare triple {22138#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,253 INFO L290 TraceCheckUtils]: 6: Hoare triple {22122#(= ~setEventCalled~0 1)} assume true; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,254 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {22122#(= ~setEventCalled~0 1)} {22084#true} #712#return; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,254 INFO L290 TraceCheckUtils]: 8: Hoare triple {22122#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,254 INFO L290 TraceCheckUtils]: 9: Hoare triple {22122#(= ~setEventCalled~0 1)} assume true; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,255 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {22122#(= ~setEventCalled~0 1)} {22084#true} #774#return; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,255 INFO L290 TraceCheckUtils]: 11: Hoare triple {22122#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,255 INFO L290 TraceCheckUtils]: 12: Hoare triple {22122#(= ~setEventCalled~0 1)} assume -1073741802 == ~__cil_tmp7~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,256 INFO L272 TraceCheckUtils]: 13: Hoare triple {22122#(= ~setEventCalled~0 1)} call stubMoreProcessingRequired(); {22142#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:16,256 INFO L290 TraceCheckUtils]: 14: Hoare triple {22142#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {22084#true} is VALID [2022-04-28 08:12:16,256 INFO L290 TraceCheckUtils]: 15: Hoare triple {22084#true} assume true; {22084#true} is VALID [2022-04-28 08:12:16,256 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {22084#true} {22122#(= ~setEventCalled~0 1)} #776#return; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,257 INFO L290 TraceCheckUtils]: 17: Hoare triple {22122#(= ~setEventCalled~0 1)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,257 INFO L290 TraceCheckUtils]: 18: Hoare triple {22122#(= ~setEventCalled~0 1)} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,257 INFO L290 TraceCheckUtils]: 19: Hoare triple {22122#(= ~setEventCalled~0 1)} assume !(1 == ~tmp_ndt_7~0); {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,257 INFO L290 TraceCheckUtils]: 20: Hoare triple {22122#(= ~setEventCalled~0 1)} ~returnVal2~0 := 259; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,258 INFO L290 TraceCheckUtils]: 21: Hoare triple {22122#(= ~setEventCalled~0 1)} assume !(~s~0 == ~NP~0); {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,258 INFO L290 TraceCheckUtils]: 22: Hoare triple {22122#(= ~setEventCalled~0 1)} assume ~s~0 == ~MPR1~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,258 INFO L290 TraceCheckUtils]: 23: Hoare triple {22122#(= ~setEventCalled~0 1)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,259 INFO L290 TraceCheckUtils]: 24: Hoare triple {22122#(= ~setEventCalled~0 1)} #res := ~returnVal2~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,259 INFO L290 TraceCheckUtils]: 25: Hoare triple {22122#(= ~setEventCalled~0 1)} assume true; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,259 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {22122#(= ~setEventCalled~0 1)} {22084#true} #752#return; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,261 INFO L272 TraceCheckUtils]: 0: Hoare triple {22084#true} call ULTIMATE.init(); {22123#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:16,261 INFO L290 TraceCheckUtils]: 1: Hoare triple {22123#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22084#true} is VALID [2022-04-28 08:12:16,261 INFO L290 TraceCheckUtils]: 2: Hoare triple {22084#true} assume true; {22084#true} is VALID [2022-04-28 08:12:16,261 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {22084#true} {22084#true} #780#return; {22084#true} is VALID [2022-04-28 08:12:16,262 INFO L272 TraceCheckUtils]: 4: Hoare triple {22084#true} call #t~ret83 := main(); {22084#true} is VALID [2022-04-28 08:12:16,262 INFO L290 TraceCheckUtils]: 5: Hoare triple {22084#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {22084#true} is VALID [2022-04-28 08:12:16,263 INFO L272 TraceCheckUtils]: 6: Hoare triple {22084#true} call _BLAST_init(); {22124#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:16,263 INFO L290 TraceCheckUtils]: 7: Hoare triple {22124#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22084#true} is VALID [2022-04-28 08:12:16,263 INFO L290 TraceCheckUtils]: 8: Hoare triple {22084#true} assume true; {22084#true} is VALID [2022-04-28 08:12:16,263 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {22084#true} {22084#true} #714#return; {22084#true} is VALID [2022-04-28 08:12:16,263 INFO L290 TraceCheckUtils]: 10: Hoare triple {22084#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {22084#true} is VALID [2022-04-28 08:12:16,263 INFO L290 TraceCheckUtils]: 11: Hoare triple {22084#true} assume !(0 == ~irp_choice~0); {22084#true} is VALID [2022-04-28 08:12:16,275 INFO L272 TraceCheckUtils]: 12: Hoare triple {22084#true} call stub_driver_init(); {22125#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:16,275 INFO L290 TraceCheckUtils]: 13: Hoare triple {22125#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22084#true} is VALID [2022-04-28 08:12:16,275 INFO L290 TraceCheckUtils]: 14: Hoare triple {22084#true} assume true; {22084#true} is VALID [2022-04-28 08:12:16,275 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {22084#true} {22084#true} #716#return; {22084#true} is VALID [2022-04-28 08:12:16,275 INFO L290 TraceCheckUtils]: 16: Hoare triple {22084#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {22084#true} is VALID [2022-04-28 08:12:16,275 INFO L290 TraceCheckUtils]: 17: Hoare triple {22084#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {22084#true} is VALID [2022-04-28 08:12:16,276 INFO L290 TraceCheckUtils]: 18: Hoare triple {22084#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {22084#true} is VALID [2022-04-28 08:12:16,276 INFO L290 TraceCheckUtils]: 19: Hoare triple {22084#true} assume 3 == ~tmp_ndt_3~0; {22084#true} is VALID [2022-04-28 08:12:16,276 INFO L272 TraceCheckUtils]: 20: Hoare triple {22084#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {22084#true} is VALID [2022-04-28 08:12:16,276 INFO L290 TraceCheckUtils]: 21: Hoare triple {22084#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {22084#true} is VALID [2022-04-28 08:12:16,276 INFO L290 TraceCheckUtils]: 22: Hoare triple {22084#true} assume 0 == ~irpStack__MinorFunction~0; {22084#true} is VALID [2022-04-28 08:12:16,276 INFO L290 TraceCheckUtils]: 23: Hoare triple {22084#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {22084#true} is VALID [2022-04-28 08:12:16,276 INFO L290 TraceCheckUtils]: 24: Hoare triple {22084#true} assume !(~s~0 != ~NP~0); {22084#true} is VALID [2022-04-28 08:12:16,276 INFO L290 TraceCheckUtils]: 25: Hoare triple {22084#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {22084#true} is VALID [2022-04-28 08:12:16,276 INFO L290 TraceCheckUtils]: 26: Hoare triple {22084#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {22084#true} is VALID [2022-04-28 08:12:16,277 INFO L272 TraceCheckUtils]: 27: Hoare triple {22084#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {22126#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:16,277 INFO L290 TraceCheckUtils]: 28: Hoare triple {22126#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {22084#true} is VALID [2022-04-28 08:12:16,277 INFO L290 TraceCheckUtils]: 29: Hoare triple {22084#true} assume 0 != ~compRegistered~0; {22084#true} is VALID [2022-04-28 08:12:16,278 INFO L272 TraceCheckUtils]: 30: Hoare triple {22084#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {22138#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:16,278 INFO L290 TraceCheckUtils]: 31: Hoare triple {22138#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {22084#true} is VALID [2022-04-28 08:12:16,279 INFO L272 TraceCheckUtils]: 32: Hoare triple {22084#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {22138#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:16,279 INFO L290 TraceCheckUtils]: 33: Hoare triple {22138#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,279 INFO L290 TraceCheckUtils]: 34: Hoare triple {22122#(= ~setEventCalled~0 1)} assume true; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,280 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {22122#(= ~setEventCalled~0 1)} {22084#true} #712#return; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,280 INFO L290 TraceCheckUtils]: 36: Hoare triple {22122#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,281 INFO L290 TraceCheckUtils]: 37: Hoare triple {22122#(= ~setEventCalled~0 1)} assume true; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,281 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {22122#(= ~setEventCalled~0 1)} {22084#true} #774#return; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,282 INFO L290 TraceCheckUtils]: 39: Hoare triple {22122#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,282 INFO L290 TraceCheckUtils]: 40: Hoare triple {22122#(= ~setEventCalled~0 1)} assume -1073741802 == ~__cil_tmp7~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,283 INFO L272 TraceCheckUtils]: 41: Hoare triple {22122#(= ~setEventCalled~0 1)} call stubMoreProcessingRequired(); {22142#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:16,283 INFO L290 TraceCheckUtils]: 42: Hoare triple {22142#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {22084#true} is VALID [2022-04-28 08:12:16,283 INFO L290 TraceCheckUtils]: 43: Hoare triple {22084#true} assume true; {22084#true} is VALID [2022-04-28 08:12:16,283 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {22084#true} {22122#(= ~setEventCalled~0 1)} #776#return; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,284 INFO L290 TraceCheckUtils]: 45: Hoare triple {22122#(= ~setEventCalled~0 1)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,284 INFO L290 TraceCheckUtils]: 46: Hoare triple {22122#(= ~setEventCalled~0 1)} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,284 INFO L290 TraceCheckUtils]: 47: Hoare triple {22122#(= ~setEventCalled~0 1)} assume !(1 == ~tmp_ndt_7~0); {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,284 INFO L290 TraceCheckUtils]: 48: Hoare triple {22122#(= ~setEventCalled~0 1)} ~returnVal2~0 := 259; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,285 INFO L290 TraceCheckUtils]: 49: Hoare triple {22122#(= ~setEventCalled~0 1)} assume !(~s~0 == ~NP~0); {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,285 INFO L290 TraceCheckUtils]: 50: Hoare triple {22122#(= ~setEventCalled~0 1)} assume ~s~0 == ~MPR1~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,285 INFO L290 TraceCheckUtils]: 51: Hoare triple {22122#(= ~setEventCalled~0 1)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,286 INFO L290 TraceCheckUtils]: 52: Hoare triple {22122#(= ~setEventCalled~0 1)} #res := ~returnVal2~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,286 INFO L290 TraceCheckUtils]: 53: Hoare triple {22122#(= ~setEventCalled~0 1)} assume true; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,286 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {22122#(= ~setEventCalled~0 1)} {22084#true} #752#return; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,287 INFO L290 TraceCheckUtils]: 55: Hoare triple {22122#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,287 INFO L290 TraceCheckUtils]: 56: Hoare triple {22122#(= ~setEventCalled~0 1)} assume 259 == ~__cil_tmp23~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,288 INFO L272 TraceCheckUtils]: 57: Hoare triple {22122#(= ~setEventCalled~0 1)} call #t~ret13 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,288 INFO L290 TraceCheckUtils]: 58: Hoare triple {22122#(= ~setEventCalled~0 1)} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,288 INFO L290 TraceCheckUtils]: 59: Hoare triple {22122#(= ~setEventCalled~0 1)} assume ~s~0 == ~MPR3~0; {22122#(= ~setEventCalled~0 1)} is VALID [2022-04-28 08:12:16,288 INFO L290 TraceCheckUtils]: 60: Hoare triple {22122#(= ~setEventCalled~0 1)} assume !(1 == ~setEventCalled~0); {22085#false} is VALID [2022-04-28 08:12:16,289 INFO L290 TraceCheckUtils]: 61: Hoare triple {22085#false} assume !(1 == ~customIrp~0); {22085#false} is VALID [2022-04-28 08:12:16,289 INFO L290 TraceCheckUtils]: 62: Hoare triple {22085#false} assume ~s~0 == ~MPR3~0; {22085#false} is VALID [2022-04-28 08:12:16,289 INFO L272 TraceCheckUtils]: 63: Hoare triple {22085#false} call errorFn(); {22085#false} is VALID [2022-04-28 08:12:16,289 INFO L290 TraceCheckUtils]: 64: Hoare triple {22085#false} assume !false; {22085#false} is VALID [2022-04-28 08:12:16,289 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:16,289 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:16,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [960586970] [2022-04-28 08:12:16,289 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [960586970] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:16,289 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:16,290 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-04-28 08:12:16,290 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:16,290 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [297499994] [2022-04-28 08:12:16,290 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [297499994] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:16,290 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:16,290 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-04-28 08:12:16,290 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [155568210] [2022-04-28 08:12:16,290 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:16,291 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 65 [2022-04-28 08:12:16,291 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:16,291 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:12:16,340 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:16,341 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-04-28 08:12:16,341 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:16,341 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-04-28 08:12:16,341 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-04-28 08:12:16,341 INFO L87 Difference]: Start difference. First operand 82 states and 87 transitions. Second operand has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:12:16,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:16,989 INFO L93 Difference]: Finished difference Result 98 states and 104 transitions. [2022-04-28 08:12:16,989 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-28 08:12:16,989 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 65 [2022-04-28 08:12:16,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:16,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:12:16,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 104 transitions. [2022-04-28 08:12:16,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:12:16,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 104 transitions. [2022-04-28 08:12:16,992 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 104 transitions. [2022-04-28 08:12:17,087 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 104 edges. 104 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:17,088 INFO L225 Difference]: With dead ends: 98 [2022-04-28 08:12:17,088 INFO L226 Difference]: Without dead ends: 78 [2022-04-28 08:12:17,088 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 10 SyntacticMatches, 3 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=84, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:12:17,088 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 72 mSDsluCounter, 98 mSDsCounter, 0 mSdLazyCounter, 132 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 166 SdHoareTripleChecker+Invalid, 165 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 132 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:17,088 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 166 Invalid, 165 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 132 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-04-28 08:12:17,089 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-04-28 08:12:17,248 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-04-28 08:12:17,248 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:17,248 INFO L82 GeneralOperation]: Start isEquivalent. First operand 78 states. Second operand has 78 states, 57 states have (on average 1.0701754385964912) internal successors, (61), 57 states have internal predecessors, (61), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-28 08:12:17,248 INFO L74 IsIncluded]: Start isIncluded. First operand 78 states. Second operand has 78 states, 57 states have (on average 1.0701754385964912) internal successors, (61), 57 states have internal predecessors, (61), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-28 08:12:17,248 INFO L87 Difference]: Start difference. First operand 78 states. Second operand has 78 states, 57 states have (on average 1.0701754385964912) internal successors, (61), 57 states have internal predecessors, (61), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-28 08:12:17,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:17,249 INFO L93 Difference]: Finished difference Result 78 states and 81 transitions. [2022-04-28 08:12:17,249 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 81 transitions. [2022-04-28 08:12:17,250 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:17,250 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:17,250 INFO L74 IsIncluded]: Start isIncluded. First operand has 78 states, 57 states have (on average 1.0701754385964912) internal successors, (61), 57 states have internal predecessors, (61), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) Second operand 78 states. [2022-04-28 08:12:17,250 INFO L87 Difference]: Start difference. First operand has 78 states, 57 states have (on average 1.0701754385964912) internal successors, (61), 57 states have internal predecessors, (61), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) Second operand 78 states. [2022-04-28 08:12:17,251 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:17,251 INFO L93 Difference]: Finished difference Result 78 states and 81 transitions. [2022-04-28 08:12:17,251 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 81 transitions. [2022-04-28 08:12:17,251 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:17,251 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:17,251 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:17,252 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:17,252 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 57 states have (on average 1.0701754385964912) internal successors, (61), 57 states have internal predecessors, (61), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-28 08:12:17,253 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 81 transitions. [2022-04-28 08:12:17,253 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 81 transitions. Word has length 65 [2022-04-28 08:12:17,253 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:17,253 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 81 transitions. [2022-04-28 08:12:17,253 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-28 08:12:17,253 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 78 states and 81 transitions. [2022-04-28 08:12:17,378 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 81 edges. 81 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:17,379 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 81 transitions. [2022-04-28 08:12:17,379 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-04-28 08:12:17,379 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:17,379 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:17,379 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-04-28 08:12:17,380 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:17,380 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:17,380 INFO L85 PathProgramCache]: Analyzing trace with hash 1874002193, now seen corresponding path program 1 times [2022-04-28 08:12:17,380 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:17,380 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1922887798] [2022-04-28 08:12:17,380 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:17,380 INFO L85 PathProgramCache]: Analyzing trace with hash 1874002193, now seen corresponding path program 2 times [2022-04-28 08:12:17,381 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:17,381 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1793492929] [2022-04-28 08:12:17,381 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:17,381 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:17,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:17,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:17,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:17,503 INFO L290 TraceCheckUtils]: 0: Hoare triple {22699#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22659#true} is VALID [2022-04-28 08:12:17,503 INFO L290 TraceCheckUtils]: 1: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,503 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22659#true} {22659#true} #780#return; {22659#true} is VALID [2022-04-28 08:12:17,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:17,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:17,529 INFO L290 TraceCheckUtils]: 0: Hoare triple {22700#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22659#true} is VALID [2022-04-28 08:12:17,529 INFO L290 TraceCheckUtils]: 1: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,529 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22659#true} {22659#true} #714#return; {22659#true} is VALID [2022-04-28 08:12:17,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:17,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:17,547 INFO L290 TraceCheckUtils]: 0: Hoare triple {22701#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22659#true} is VALID [2022-04-28 08:12:17,547 INFO L290 TraceCheckUtils]: 1: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,547 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22659#true} {22659#true} #716#return; {22659#true} is VALID [2022-04-28 08:12:17,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:12:17,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:17,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:12:17,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:17,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:17,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:17,614 INFO L290 TraceCheckUtils]: 0: Hoare triple {22716#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {22659#true} is VALID [2022-04-28 08:12:17,615 INFO L290 TraceCheckUtils]: 1: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,615 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22659#true} {22659#true} #712#return; {22659#true} is VALID [2022-04-28 08:12:17,615 INFO L290 TraceCheckUtils]: 0: Hoare triple {22716#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {22659#true} is VALID [2022-04-28 08:12:17,616 INFO L272 TraceCheckUtils]: 1: Hoare triple {22659#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {22716#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:17,616 INFO L290 TraceCheckUtils]: 2: Hoare triple {22716#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {22659#true} is VALID [2022-04-28 08:12:17,616 INFO L290 TraceCheckUtils]: 3: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,616 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {22659#true} {22659#true} #712#return; {22659#true} is VALID [2022-04-28 08:12:17,616 INFO L290 TraceCheckUtils]: 5: Hoare triple {22659#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {22659#true} is VALID [2022-04-28 08:12:17,616 INFO L290 TraceCheckUtils]: 6: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,616 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {22659#true} {22659#true} #774#return; {22659#true} is VALID [2022-04-28 08:12:17,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:12:17,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:17,631 INFO L290 TraceCheckUtils]: 0: Hoare triple {22720#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {22659#true} is VALID [2022-04-28 08:12:17,631 INFO L290 TraceCheckUtils]: 1: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,632 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22659#true} {22659#true} #776#return; {22659#true} is VALID [2022-04-28 08:12:17,632 INFO L290 TraceCheckUtils]: 0: Hoare triple {22702#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {22659#true} is VALID [2022-04-28 08:12:17,632 INFO L290 TraceCheckUtils]: 1: Hoare triple {22659#true} assume 0 != ~compRegistered~0; {22659#true} is VALID [2022-04-28 08:12:17,633 INFO L272 TraceCheckUtils]: 2: Hoare triple {22659#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {22716#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:17,633 INFO L290 TraceCheckUtils]: 3: Hoare triple {22716#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {22659#true} is VALID [2022-04-28 08:12:17,634 INFO L272 TraceCheckUtils]: 4: Hoare triple {22659#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {22716#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:17,634 INFO L290 TraceCheckUtils]: 5: Hoare triple {22716#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {22659#true} is VALID [2022-04-28 08:12:17,634 INFO L290 TraceCheckUtils]: 6: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,634 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {22659#true} {22659#true} #712#return; {22659#true} is VALID [2022-04-28 08:12:17,634 INFO L290 TraceCheckUtils]: 8: Hoare triple {22659#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {22659#true} is VALID [2022-04-28 08:12:17,634 INFO L290 TraceCheckUtils]: 9: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,634 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {22659#true} {22659#true} #774#return; {22659#true} is VALID [2022-04-28 08:12:17,634 INFO L290 TraceCheckUtils]: 11: Hoare triple {22659#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {22659#true} is VALID [2022-04-28 08:12:17,634 INFO L290 TraceCheckUtils]: 12: Hoare triple {22659#true} assume -1073741802 == ~__cil_tmp7~0; {22659#true} is VALID [2022-04-28 08:12:17,635 INFO L272 TraceCheckUtils]: 13: Hoare triple {22659#true} call stubMoreProcessingRequired(); {22720#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:17,635 INFO L290 TraceCheckUtils]: 14: Hoare triple {22720#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {22659#true} is VALID [2022-04-28 08:12:17,635 INFO L290 TraceCheckUtils]: 15: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,635 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {22659#true} {22659#true} #776#return; {22659#true} is VALID [2022-04-28 08:12:17,635 INFO L290 TraceCheckUtils]: 17: Hoare triple {22659#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {22659#true} is VALID [2022-04-28 08:12:17,635 INFO L290 TraceCheckUtils]: 18: Hoare triple {22659#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {22659#true} is VALID [2022-04-28 08:12:17,635 INFO L290 TraceCheckUtils]: 19: Hoare triple {22659#true} assume !(1 == ~tmp_ndt_7~0); {22659#true} is VALID [2022-04-28 08:12:17,636 INFO L290 TraceCheckUtils]: 20: Hoare triple {22659#true} ~returnVal2~0 := 259; {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:17,636 INFO L290 TraceCheckUtils]: 21: Hoare triple {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:17,637 INFO L290 TraceCheckUtils]: 22: Hoare triple {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~MPR1~0; {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:17,637 INFO L290 TraceCheckUtils]: 23: Hoare triple {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:17,638 INFO L290 TraceCheckUtils]: 24: Hoare triple {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {22715#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2022-04-28 08:12:17,638 INFO L290 TraceCheckUtils]: 25: Hoare triple {22715#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} assume true; {22715#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2022-04-28 08:12:17,639 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {22715#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} {22659#true} #752#return; {22697#(and (<= |KbFilter_PnP_#t~ret12| 259) (< 258 |KbFilter_PnP_#t~ret12|))} is VALID [2022-04-28 08:12:17,641 INFO L272 TraceCheckUtils]: 0: Hoare triple {22659#true} call ULTIMATE.init(); {22699#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:17,641 INFO L290 TraceCheckUtils]: 1: Hoare triple {22699#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22659#true} is VALID [2022-04-28 08:12:17,641 INFO L290 TraceCheckUtils]: 2: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,641 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {22659#true} {22659#true} #780#return; {22659#true} is VALID [2022-04-28 08:12:17,642 INFO L272 TraceCheckUtils]: 4: Hoare triple {22659#true} call #t~ret83 := main(); {22659#true} is VALID [2022-04-28 08:12:17,642 INFO L290 TraceCheckUtils]: 5: Hoare triple {22659#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {22659#true} is VALID [2022-04-28 08:12:17,643 INFO L272 TraceCheckUtils]: 6: Hoare triple {22659#true} call _BLAST_init(); {22700#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:17,643 INFO L290 TraceCheckUtils]: 7: Hoare triple {22700#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22659#true} is VALID [2022-04-28 08:12:17,643 INFO L290 TraceCheckUtils]: 8: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,643 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {22659#true} {22659#true} #714#return; {22659#true} is VALID [2022-04-28 08:12:17,643 INFO L290 TraceCheckUtils]: 10: Hoare triple {22659#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {22659#true} is VALID [2022-04-28 08:12:17,644 INFO L290 TraceCheckUtils]: 11: Hoare triple {22659#true} assume !(0 == ~irp_choice~0); {22659#true} is VALID [2022-04-28 08:12:17,644 INFO L272 TraceCheckUtils]: 12: Hoare triple {22659#true} call stub_driver_init(); {22701#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:17,644 INFO L290 TraceCheckUtils]: 13: Hoare triple {22701#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22659#true} is VALID [2022-04-28 08:12:17,644 INFO L290 TraceCheckUtils]: 14: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,644 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {22659#true} {22659#true} #716#return; {22659#true} is VALID [2022-04-28 08:12:17,644 INFO L290 TraceCheckUtils]: 16: Hoare triple {22659#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {22659#true} is VALID [2022-04-28 08:12:17,644 INFO L290 TraceCheckUtils]: 17: Hoare triple {22659#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {22659#true} is VALID [2022-04-28 08:12:17,645 INFO L290 TraceCheckUtils]: 18: Hoare triple {22659#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {22659#true} is VALID [2022-04-28 08:12:17,645 INFO L290 TraceCheckUtils]: 19: Hoare triple {22659#true} assume 3 == ~tmp_ndt_3~0; {22659#true} is VALID [2022-04-28 08:12:17,645 INFO L272 TraceCheckUtils]: 20: Hoare triple {22659#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {22659#true} is VALID [2022-04-28 08:12:17,645 INFO L290 TraceCheckUtils]: 21: Hoare triple {22659#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {22659#true} is VALID [2022-04-28 08:12:17,645 INFO L290 TraceCheckUtils]: 22: Hoare triple {22659#true} assume 0 == ~irpStack__MinorFunction~0; {22659#true} is VALID [2022-04-28 08:12:17,645 INFO L290 TraceCheckUtils]: 23: Hoare triple {22659#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {22659#true} is VALID [2022-04-28 08:12:17,645 INFO L290 TraceCheckUtils]: 24: Hoare triple {22659#true} assume !(~s~0 != ~NP~0); {22659#true} is VALID [2022-04-28 08:12:17,645 INFO L290 TraceCheckUtils]: 25: Hoare triple {22659#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {22659#true} is VALID [2022-04-28 08:12:17,645 INFO L290 TraceCheckUtils]: 26: Hoare triple {22659#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {22659#true} is VALID [2022-04-28 08:12:17,646 INFO L272 TraceCheckUtils]: 27: Hoare triple {22659#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {22702#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:17,646 INFO L290 TraceCheckUtils]: 28: Hoare triple {22702#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {22659#true} is VALID [2022-04-28 08:12:17,646 INFO L290 TraceCheckUtils]: 29: Hoare triple {22659#true} assume 0 != ~compRegistered~0; {22659#true} is VALID [2022-04-28 08:12:17,646 INFO L272 TraceCheckUtils]: 30: Hoare triple {22659#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {22716#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:17,646 INFO L290 TraceCheckUtils]: 31: Hoare triple {22716#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {22659#true} is VALID [2022-04-28 08:12:17,647 INFO L272 TraceCheckUtils]: 32: Hoare triple {22659#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {22716#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:17,647 INFO L290 TraceCheckUtils]: 33: Hoare triple {22716#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {22659#true} is VALID [2022-04-28 08:12:17,647 INFO L290 TraceCheckUtils]: 34: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,647 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {22659#true} {22659#true} #712#return; {22659#true} is VALID [2022-04-28 08:12:17,647 INFO L290 TraceCheckUtils]: 36: Hoare triple {22659#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {22659#true} is VALID [2022-04-28 08:12:17,648 INFO L290 TraceCheckUtils]: 37: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,648 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {22659#true} {22659#true} #774#return; {22659#true} is VALID [2022-04-28 08:12:17,648 INFO L290 TraceCheckUtils]: 39: Hoare triple {22659#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {22659#true} is VALID [2022-04-28 08:12:17,648 INFO L290 TraceCheckUtils]: 40: Hoare triple {22659#true} assume -1073741802 == ~__cil_tmp7~0; {22659#true} is VALID [2022-04-28 08:12:17,648 INFO L272 TraceCheckUtils]: 41: Hoare triple {22659#true} call stubMoreProcessingRequired(); {22720#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:17,648 INFO L290 TraceCheckUtils]: 42: Hoare triple {22720#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {22659#true} is VALID [2022-04-28 08:12:17,648 INFO L290 TraceCheckUtils]: 43: Hoare triple {22659#true} assume true; {22659#true} is VALID [2022-04-28 08:12:17,648 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {22659#true} {22659#true} #776#return; {22659#true} is VALID [2022-04-28 08:12:17,648 INFO L290 TraceCheckUtils]: 45: Hoare triple {22659#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {22659#true} is VALID [2022-04-28 08:12:17,649 INFO L290 TraceCheckUtils]: 46: Hoare triple {22659#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {22659#true} is VALID [2022-04-28 08:12:17,649 INFO L290 TraceCheckUtils]: 47: Hoare triple {22659#true} assume !(1 == ~tmp_ndt_7~0); {22659#true} is VALID [2022-04-28 08:12:17,649 INFO L290 TraceCheckUtils]: 48: Hoare triple {22659#true} ~returnVal2~0 := 259; {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:17,649 INFO L290 TraceCheckUtils]: 49: Hoare triple {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:17,650 INFO L290 TraceCheckUtils]: 50: Hoare triple {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~MPR1~0; {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:17,650 INFO L290 TraceCheckUtils]: 51: Hoare triple {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:17,651 INFO L290 TraceCheckUtils]: 52: Hoare triple {22714#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {22715#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2022-04-28 08:12:17,651 INFO L290 TraceCheckUtils]: 53: Hoare triple {22715#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} assume true; {22715#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2022-04-28 08:12:17,652 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {22715#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} {22659#true} #752#return; {22697#(and (<= |KbFilter_PnP_#t~ret12| 259) (< 258 |KbFilter_PnP_#t~ret12|))} is VALID [2022-04-28 08:12:17,652 INFO L290 TraceCheckUtils]: 55: Hoare triple {22697#(and (<= |KbFilter_PnP_#t~ret12| 259) (< 258 |KbFilter_PnP_#t~ret12|))} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {22698#(= KbFilter_PnP_~__cil_tmp23~0 259)} is VALID [2022-04-28 08:12:17,652 INFO L290 TraceCheckUtils]: 56: Hoare triple {22698#(= KbFilter_PnP_~__cil_tmp23~0 259)} assume !(259 == ~__cil_tmp23~0); {22660#false} is VALID [2022-04-28 08:12:17,652 INFO L290 TraceCheckUtils]: 57: Hoare triple {22660#false} assume ~status~0 >= 0; {22660#false} is VALID [2022-04-28 08:12:17,652 INFO L290 TraceCheckUtils]: 58: Hoare triple {22660#false} assume ~myStatus~0 >= 0;~devExt__Started~0 := 1;~devExt__Removed~0 := 0;~devExt__SurpriseRemoved~0 := 0; {22660#false} is VALID [2022-04-28 08:12:17,652 INFO L290 TraceCheckUtils]: 59: Hoare triple {22660#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {22660#false} is VALID [2022-04-28 08:12:17,653 INFO L272 TraceCheckUtils]: 60: Hoare triple {22660#false} call IofCompleteRequest(~Irp, 0); {22660#false} is VALID [2022-04-28 08:12:17,653 INFO L290 TraceCheckUtils]: 61: Hoare triple {22660#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {22660#false} is VALID [2022-04-28 08:12:17,653 INFO L290 TraceCheckUtils]: 62: Hoare triple {22660#false} assume !(~s~0 == ~NP~0); {22660#false} is VALID [2022-04-28 08:12:17,653 INFO L272 TraceCheckUtils]: 63: Hoare triple {22660#false} call errorFn(); {22660#false} is VALID [2022-04-28 08:12:17,653 INFO L290 TraceCheckUtils]: 64: Hoare triple {22660#false} assume !false; {22660#false} is VALID [2022-04-28 08:12:17,653 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:17,653 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:17,653 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1793492929] [2022-04-28 08:12:17,653 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1793492929] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:17,653 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:17,653 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:17,653 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:17,653 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1922887798] [2022-04-28 08:12:17,653 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1922887798] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:17,654 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:17,654 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:17,654 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [137533448] [2022-04-28 08:12:17,654 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:17,654 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 65 [2022-04-28 08:12:17,654 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:17,654 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:17,696 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:17,696 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 08:12:17,696 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:17,696 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 08:12:17,696 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:12:17,697 INFO L87 Difference]: Start difference. First operand 78 states and 81 transitions. Second operand has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:18,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:18,556 INFO L93 Difference]: Finished difference Result 87 states and 90 transitions. [2022-04-28 08:12:18,556 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-04-28 08:12:18,556 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 65 [2022-04-28 08:12:18,556 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:18,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:18,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 90 transitions. [2022-04-28 08:12:18,557 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:18,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 90 transitions. [2022-04-28 08:12:18,558 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 10 states and 90 transitions. [2022-04-28 08:12:18,644 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 90 edges. 90 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:18,644 INFO L225 Difference]: With dead ends: 87 [2022-04-28 08:12:18,644 INFO L226 Difference]: Without dead ends: 78 [2022-04-28 08:12:18,645 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=117, Unknown=0, NotChecked=0, Total=156 [2022-04-28 08:12:18,645 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 58 mSDsluCounter, 203 mSDsCounter, 0 mSdLazyCounter, 249 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 268 SdHoareTripleChecker+Invalid, 279 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 249 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:18,645 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 268 Invalid, 279 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 249 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-28 08:12:18,646 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-04-28 08:12:18,810 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-04-28 08:12:18,810 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:18,810 INFO L82 GeneralOperation]: Start isEquivalent. First operand 78 states. Second operand has 78 states, 57 states have (on average 1.0526315789473684) internal successors, (60), 57 states have internal predecessors, (60), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-28 08:12:18,810 INFO L74 IsIncluded]: Start isIncluded. First operand 78 states. Second operand has 78 states, 57 states have (on average 1.0526315789473684) internal successors, (60), 57 states have internal predecessors, (60), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-28 08:12:18,810 INFO L87 Difference]: Start difference. First operand 78 states. Second operand has 78 states, 57 states have (on average 1.0526315789473684) internal successors, (60), 57 states have internal predecessors, (60), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-28 08:12:18,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:18,811 INFO L93 Difference]: Finished difference Result 78 states and 80 transitions. [2022-04-28 08:12:18,811 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 80 transitions. [2022-04-28 08:12:18,812 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:18,812 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:18,812 INFO L74 IsIncluded]: Start isIncluded. First operand has 78 states, 57 states have (on average 1.0526315789473684) internal successors, (60), 57 states have internal predecessors, (60), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) Second operand 78 states. [2022-04-28 08:12:18,812 INFO L87 Difference]: Start difference. First operand has 78 states, 57 states have (on average 1.0526315789473684) internal successors, (60), 57 states have internal predecessors, (60), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) Second operand 78 states. [2022-04-28 08:12:18,813 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:18,813 INFO L93 Difference]: Finished difference Result 78 states and 80 transitions. [2022-04-28 08:12:18,813 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 80 transitions. [2022-04-28 08:12:18,813 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:18,813 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:18,813 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:18,814 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:18,814 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 57 states have (on average 1.0526315789473684) internal successors, (60), 57 states have internal predecessors, (60), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-28 08:12:18,815 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 80 transitions. [2022-04-28 08:12:18,815 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 80 transitions. Word has length 65 [2022-04-28 08:12:18,815 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:18,815 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 80 transitions. [2022-04-28 08:12:18,815 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-28 08:12:18,815 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 78 states and 80 transitions. [2022-04-28 08:12:18,912 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:18,912 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 80 transitions. [2022-04-28 08:12:18,913 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2022-04-28 08:12:18,913 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:18,913 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:18,913 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-04-28 08:12:18,913 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:18,913 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:18,913 INFO L85 PathProgramCache]: Analyzing trace with hash 2045810187, now seen corresponding path program 1 times [2022-04-28 08:12:18,914 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:18,914 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [286779597] [2022-04-28 08:12:18,914 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:18,914 INFO L85 PathProgramCache]: Analyzing trace with hash 2045810187, now seen corresponding path program 2 times [2022-04-28 08:12:18,914 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:18,914 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1027286359] [2022-04-28 08:12:18,914 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:18,914 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:18,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:19,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:19,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:19,023 INFO L290 TraceCheckUtils]: 0: Hoare triple {23259#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {23211#true} is VALID [2022-04-28 08:12:19,023 INFO L290 TraceCheckUtils]: 1: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,023 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {23211#true} {23211#true} #780#return; {23211#true} is VALID [2022-04-28 08:12:19,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:19,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:19,057 INFO L290 TraceCheckUtils]: 0: Hoare triple {23260#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {23211#true} is VALID [2022-04-28 08:12:19,057 INFO L290 TraceCheckUtils]: 1: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,058 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {23211#true} {23211#true} #714#return; {23211#true} is VALID [2022-04-28 08:12:19,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:19,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:19,075 INFO L290 TraceCheckUtils]: 0: Hoare triple {23261#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {23211#true} is VALID [2022-04-28 08:12:19,075 INFO L290 TraceCheckUtils]: 1: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,075 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {23211#true} {23211#true} #716#return; {23211#true} is VALID [2022-04-28 08:12:19,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:12:19,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:19,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:12:19,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:19,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:19,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:19,118 INFO L290 TraceCheckUtils]: 0: Hoare triple {23274#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {23211#true} is VALID [2022-04-28 08:12:19,118 INFO L290 TraceCheckUtils]: 1: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,119 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {23211#true} {23211#true} #712#return; {23211#true} is VALID [2022-04-28 08:12:19,119 INFO L290 TraceCheckUtils]: 0: Hoare triple {23274#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {23211#true} is VALID [2022-04-28 08:12:19,119 INFO L272 TraceCheckUtils]: 1: Hoare triple {23211#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {23274#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:19,119 INFO L290 TraceCheckUtils]: 2: Hoare triple {23274#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {23211#true} is VALID [2022-04-28 08:12:19,120 INFO L290 TraceCheckUtils]: 3: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,120 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {23211#true} {23211#true} #712#return; {23211#true} is VALID [2022-04-28 08:12:19,120 INFO L290 TraceCheckUtils]: 5: Hoare triple {23211#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {23211#true} is VALID [2022-04-28 08:12:19,120 INFO L290 TraceCheckUtils]: 6: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,120 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {23211#true} {23211#true} #774#return; {23211#true} is VALID [2022-04-28 08:12:19,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-28 08:12:19,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:19,137 INFO L290 TraceCheckUtils]: 0: Hoare triple {23278#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {23211#true} is VALID [2022-04-28 08:12:19,138 INFO L290 TraceCheckUtils]: 1: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,138 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {23211#true} {23211#true} #776#return; {23211#true} is VALID [2022-04-28 08:12:19,138 INFO L290 TraceCheckUtils]: 0: Hoare triple {23262#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {23211#true} is VALID [2022-04-28 08:12:19,138 INFO L290 TraceCheckUtils]: 1: Hoare triple {23211#true} assume 0 != ~compRegistered~0; {23211#true} is VALID [2022-04-28 08:12:19,139 INFO L272 TraceCheckUtils]: 2: Hoare triple {23211#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {23274#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:19,139 INFO L290 TraceCheckUtils]: 3: Hoare triple {23274#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {23211#true} is VALID [2022-04-28 08:12:19,140 INFO L272 TraceCheckUtils]: 4: Hoare triple {23211#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {23274#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:19,140 INFO L290 TraceCheckUtils]: 5: Hoare triple {23274#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {23211#true} is VALID [2022-04-28 08:12:19,140 INFO L290 TraceCheckUtils]: 6: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,140 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {23211#true} {23211#true} #712#return; {23211#true} is VALID [2022-04-28 08:12:19,140 INFO L290 TraceCheckUtils]: 8: Hoare triple {23211#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {23211#true} is VALID [2022-04-28 08:12:19,140 INFO L290 TraceCheckUtils]: 9: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,141 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {23211#true} {23211#true} #774#return; {23211#true} is VALID [2022-04-28 08:12:19,141 INFO L290 TraceCheckUtils]: 11: Hoare triple {23211#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {23211#true} is VALID [2022-04-28 08:12:19,141 INFO L290 TraceCheckUtils]: 12: Hoare triple {23211#true} assume -1073741802 == ~__cil_tmp7~0; {23211#true} is VALID [2022-04-28 08:12:19,141 INFO L272 TraceCheckUtils]: 13: Hoare triple {23211#true} call stubMoreProcessingRequired(); {23278#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:19,142 INFO L290 TraceCheckUtils]: 14: Hoare triple {23278#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {23211#true} is VALID [2022-04-28 08:12:19,142 INFO L290 TraceCheckUtils]: 15: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,142 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {23211#true} {23211#true} #776#return; {23211#true} is VALID [2022-04-28 08:12:19,142 INFO L290 TraceCheckUtils]: 17: Hoare triple {23211#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {23211#true} is VALID [2022-04-28 08:12:19,142 INFO L290 TraceCheckUtils]: 18: Hoare triple {23211#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {23211#true} is VALID [2022-04-28 08:12:19,142 INFO L290 TraceCheckUtils]: 19: Hoare triple {23211#true} assume !(1 == ~tmp_ndt_7~0); {23211#true} is VALID [2022-04-28 08:12:19,142 INFO L290 TraceCheckUtils]: 20: Hoare triple {23211#true} ~returnVal2~0 := 259; {23211#true} is VALID [2022-04-28 08:12:19,142 INFO L290 TraceCheckUtils]: 21: Hoare triple {23211#true} assume !(~s~0 == ~NP~0); {23211#true} is VALID [2022-04-28 08:12:19,142 INFO L290 TraceCheckUtils]: 22: Hoare triple {23211#true} assume ~s~0 == ~MPR1~0; {23211#true} is VALID [2022-04-28 08:12:19,143 INFO L290 TraceCheckUtils]: 23: Hoare triple {23211#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {23249#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:12:19,143 INFO L290 TraceCheckUtils]: 24: Hoare triple {23249#(= ~MPR3~0 ~s~0)} #res := ~returnVal2~0; {23249#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:12:19,143 INFO L290 TraceCheckUtils]: 25: Hoare triple {23249#(= ~MPR3~0 ~s~0)} assume true; {23249#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:12:19,144 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {23249#(= ~MPR3~0 ~s~0)} {23211#true} #752#return; {23249#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:12:19,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2022-04-28 08:12:19,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:19,168 INFO L290 TraceCheckUtils]: 0: Hoare triple {23279#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {23278#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:19,169 INFO L290 TraceCheckUtils]: 1: Hoare triple {23278#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~MPR3~0); {23280#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,169 INFO L290 TraceCheckUtils]: 2: Hoare triple {23280#(not (= ~MPR3~0 |old(~s~0)|))} assume !(1 == ~customIrp~0); {23280#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,170 INFO L290 TraceCheckUtils]: 3: Hoare triple {23280#(not (= ~MPR3~0 |old(~s~0)|))} assume !(~s~0 == ~MPR3~0); {23280#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,170 INFO L290 TraceCheckUtils]: 4: Hoare triple {23280#(not (= ~MPR3~0 |old(~s~0)|))} havoc ~tmp_ndt_8~0;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~tmp_ndt_8~0 := #t~nondet41;havoc #t~nondet41; {23280#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,170 INFO L290 TraceCheckUtils]: 5: Hoare triple {23280#(not (= ~MPR3~0 |old(~s~0)|))} assume 0 == ~tmp_ndt_8~0; {23280#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,170 INFO L290 TraceCheckUtils]: 6: Hoare triple {23280#(not (= ~MPR3~0 |old(~s~0)|))} #res := 0; {23280#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,171 INFO L290 TraceCheckUtils]: 7: Hoare triple {23280#(not (= ~MPR3~0 |old(~s~0)|))} assume true; {23280#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,172 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {23280#(not (= ~MPR3~0 |old(~s~0)|))} {23249#(= ~MPR3~0 ~s~0)} #754#return; {23212#false} is VALID [2022-04-28 08:12:19,173 INFO L272 TraceCheckUtils]: 0: Hoare triple {23211#true} call ULTIMATE.init(); {23259#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:19,174 INFO L290 TraceCheckUtils]: 1: Hoare triple {23259#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {23211#true} is VALID [2022-04-28 08:12:19,174 INFO L290 TraceCheckUtils]: 2: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,174 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {23211#true} {23211#true} #780#return; {23211#true} is VALID [2022-04-28 08:12:19,174 INFO L272 TraceCheckUtils]: 4: Hoare triple {23211#true} call #t~ret83 := main(); {23211#true} is VALID [2022-04-28 08:12:19,174 INFO L290 TraceCheckUtils]: 5: Hoare triple {23211#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {23211#true} is VALID [2022-04-28 08:12:19,175 INFO L272 TraceCheckUtils]: 6: Hoare triple {23211#true} call _BLAST_init(); {23260#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,175 INFO L290 TraceCheckUtils]: 7: Hoare triple {23260#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {23211#true} is VALID [2022-04-28 08:12:19,175 INFO L290 TraceCheckUtils]: 8: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,175 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {23211#true} {23211#true} #714#return; {23211#true} is VALID [2022-04-28 08:12:19,175 INFO L290 TraceCheckUtils]: 10: Hoare triple {23211#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {23211#true} is VALID [2022-04-28 08:12:19,175 INFO L290 TraceCheckUtils]: 11: Hoare triple {23211#true} assume !(0 == ~irp_choice~0); {23211#true} is VALID [2022-04-28 08:12:19,176 INFO L272 TraceCheckUtils]: 12: Hoare triple {23211#true} call stub_driver_init(); {23261#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,176 INFO L290 TraceCheckUtils]: 13: Hoare triple {23261#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {23211#true} is VALID [2022-04-28 08:12:19,176 INFO L290 TraceCheckUtils]: 14: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,176 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {23211#true} {23211#true} #716#return; {23211#true} is VALID [2022-04-28 08:12:19,177 INFO L290 TraceCheckUtils]: 16: Hoare triple {23211#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {23211#true} is VALID [2022-04-28 08:12:19,177 INFO L290 TraceCheckUtils]: 17: Hoare triple {23211#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {23211#true} is VALID [2022-04-28 08:12:19,177 INFO L290 TraceCheckUtils]: 18: Hoare triple {23211#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {23211#true} is VALID [2022-04-28 08:12:19,177 INFO L290 TraceCheckUtils]: 19: Hoare triple {23211#true} assume 3 == ~tmp_ndt_3~0; {23211#true} is VALID [2022-04-28 08:12:19,177 INFO L272 TraceCheckUtils]: 20: Hoare triple {23211#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {23211#true} is VALID [2022-04-28 08:12:19,177 INFO L290 TraceCheckUtils]: 21: Hoare triple {23211#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {23211#true} is VALID [2022-04-28 08:12:19,177 INFO L290 TraceCheckUtils]: 22: Hoare triple {23211#true} assume 0 == ~irpStack__MinorFunction~0; {23211#true} is VALID [2022-04-28 08:12:19,177 INFO L290 TraceCheckUtils]: 23: Hoare triple {23211#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {23211#true} is VALID [2022-04-28 08:12:19,177 INFO L290 TraceCheckUtils]: 24: Hoare triple {23211#true} assume !(~s~0 != ~NP~0); {23211#true} is VALID [2022-04-28 08:12:19,177 INFO L290 TraceCheckUtils]: 25: Hoare triple {23211#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {23211#true} is VALID [2022-04-28 08:12:19,177 INFO L290 TraceCheckUtils]: 26: Hoare triple {23211#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {23211#true} is VALID [2022-04-28 08:12:19,178 INFO L272 TraceCheckUtils]: 27: Hoare triple {23211#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {23262#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,178 INFO L290 TraceCheckUtils]: 28: Hoare triple {23262#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {23211#true} is VALID [2022-04-28 08:12:19,178 INFO L290 TraceCheckUtils]: 29: Hoare triple {23211#true} assume 0 != ~compRegistered~0; {23211#true} is VALID [2022-04-28 08:12:19,179 INFO L272 TraceCheckUtils]: 30: Hoare triple {23211#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {23274#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:19,179 INFO L290 TraceCheckUtils]: 31: Hoare triple {23274#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {23211#true} is VALID [2022-04-28 08:12:19,180 INFO L272 TraceCheckUtils]: 32: Hoare triple {23211#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {23274#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:19,180 INFO L290 TraceCheckUtils]: 33: Hoare triple {23274#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {23211#true} is VALID [2022-04-28 08:12:19,180 INFO L290 TraceCheckUtils]: 34: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,180 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {23211#true} {23211#true} #712#return; {23211#true} is VALID [2022-04-28 08:12:19,180 INFO L290 TraceCheckUtils]: 36: Hoare triple {23211#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {23211#true} is VALID [2022-04-28 08:12:19,180 INFO L290 TraceCheckUtils]: 37: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,180 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {23211#true} {23211#true} #774#return; {23211#true} is VALID [2022-04-28 08:12:19,180 INFO L290 TraceCheckUtils]: 39: Hoare triple {23211#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {23211#true} is VALID [2022-04-28 08:12:19,180 INFO L290 TraceCheckUtils]: 40: Hoare triple {23211#true} assume -1073741802 == ~__cil_tmp7~0; {23211#true} is VALID [2022-04-28 08:12:19,181 INFO L272 TraceCheckUtils]: 41: Hoare triple {23211#true} call stubMoreProcessingRequired(); {23278#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:19,181 INFO L290 TraceCheckUtils]: 42: Hoare triple {23278#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {23211#true} is VALID [2022-04-28 08:12:19,181 INFO L290 TraceCheckUtils]: 43: Hoare triple {23211#true} assume true; {23211#true} is VALID [2022-04-28 08:12:19,181 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {23211#true} {23211#true} #776#return; {23211#true} is VALID [2022-04-28 08:12:19,181 INFO L290 TraceCheckUtils]: 45: Hoare triple {23211#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {23211#true} is VALID [2022-04-28 08:12:19,181 INFO L290 TraceCheckUtils]: 46: Hoare triple {23211#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {23211#true} is VALID [2022-04-28 08:12:19,181 INFO L290 TraceCheckUtils]: 47: Hoare triple {23211#true} assume !(1 == ~tmp_ndt_7~0); {23211#true} is VALID [2022-04-28 08:12:19,181 INFO L290 TraceCheckUtils]: 48: Hoare triple {23211#true} ~returnVal2~0 := 259; {23211#true} is VALID [2022-04-28 08:12:19,181 INFO L290 TraceCheckUtils]: 49: Hoare triple {23211#true} assume !(~s~0 == ~NP~0); {23211#true} is VALID [2022-04-28 08:12:19,181 INFO L290 TraceCheckUtils]: 50: Hoare triple {23211#true} assume ~s~0 == ~MPR1~0; {23211#true} is VALID [2022-04-28 08:12:19,182 INFO L290 TraceCheckUtils]: 51: Hoare triple {23211#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {23249#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:12:19,182 INFO L290 TraceCheckUtils]: 52: Hoare triple {23249#(= ~MPR3~0 ~s~0)} #res := ~returnVal2~0; {23249#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:12:19,182 INFO L290 TraceCheckUtils]: 53: Hoare triple {23249#(= ~MPR3~0 ~s~0)} assume true; {23249#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:12:19,183 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {23249#(= ~MPR3~0 ~s~0)} {23211#true} #752#return; {23249#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:12:19,184 INFO L290 TraceCheckUtils]: 55: Hoare triple {23249#(= ~MPR3~0 ~s~0)} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {23249#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:12:19,184 INFO L290 TraceCheckUtils]: 56: Hoare triple {23249#(= ~MPR3~0 ~s~0)} assume 259 == ~__cil_tmp23~0; {23249#(= ~MPR3~0 ~s~0)} is VALID [2022-04-28 08:12:19,185 INFO L272 TraceCheckUtils]: 57: Hoare triple {23249#(= ~MPR3~0 ~s~0)} call #t~ret13 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {23279#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,185 INFO L290 TraceCheckUtils]: 58: Hoare triple {23279#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {23278#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:19,185 INFO L290 TraceCheckUtils]: 59: Hoare triple {23278#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~MPR3~0); {23280#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,186 INFO L290 TraceCheckUtils]: 60: Hoare triple {23280#(not (= ~MPR3~0 |old(~s~0)|))} assume !(1 == ~customIrp~0); {23280#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,186 INFO L290 TraceCheckUtils]: 61: Hoare triple {23280#(not (= ~MPR3~0 |old(~s~0)|))} assume !(~s~0 == ~MPR3~0); {23280#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,186 INFO L290 TraceCheckUtils]: 62: Hoare triple {23280#(not (= ~MPR3~0 |old(~s~0)|))} havoc ~tmp_ndt_8~0;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~tmp_ndt_8~0 := #t~nondet41;havoc #t~nondet41; {23280#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,187 INFO L290 TraceCheckUtils]: 63: Hoare triple {23280#(not (= ~MPR3~0 |old(~s~0)|))} assume 0 == ~tmp_ndt_8~0; {23280#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,187 INFO L290 TraceCheckUtils]: 64: Hoare triple {23280#(not (= ~MPR3~0 |old(~s~0)|))} #res := 0; {23280#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,187 INFO L290 TraceCheckUtils]: 65: Hoare triple {23280#(not (= ~MPR3~0 |old(~s~0)|))} assume true; {23280#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:19,188 INFO L284 TraceCheckUtils]: 66: Hoare quadruple {23280#(not (= ~MPR3~0 |old(~s~0)|))} {23249#(= ~MPR3~0 ~s~0)} #754#return; {23212#false} is VALID [2022-04-28 08:12:19,188 INFO L290 TraceCheckUtils]: 67: Hoare triple {23212#false} assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647;havoc #t~ret13; {23212#false} is VALID [2022-04-28 08:12:19,188 INFO L290 TraceCheckUtils]: 68: Hoare triple {23212#false} assume ~status~0 >= 0; {23212#false} is VALID [2022-04-28 08:12:19,189 INFO L290 TraceCheckUtils]: 69: Hoare triple {23212#false} assume ~myStatus~0 >= 0;~devExt__Started~0 := 1;~devExt__Removed~0 := 0;~devExt__SurpriseRemoved~0 := 0; {23212#false} is VALID [2022-04-28 08:12:19,189 INFO L290 TraceCheckUtils]: 70: Hoare triple {23212#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {23212#false} is VALID [2022-04-28 08:12:19,189 INFO L272 TraceCheckUtils]: 71: Hoare triple {23212#false} call IofCompleteRequest(~Irp, 0); {23212#false} is VALID [2022-04-28 08:12:19,189 INFO L290 TraceCheckUtils]: 72: Hoare triple {23212#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {23212#false} is VALID [2022-04-28 08:12:19,189 INFO L290 TraceCheckUtils]: 73: Hoare triple {23212#false} assume !(~s~0 == ~NP~0); {23212#false} is VALID [2022-04-28 08:12:19,189 INFO L272 TraceCheckUtils]: 74: Hoare triple {23212#false} call errorFn(); {23212#false} is VALID [2022-04-28 08:12:19,189 INFO L290 TraceCheckUtils]: 75: Hoare triple {23212#false} assume !false; {23212#false} is VALID [2022-04-28 08:12:19,189 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:19,190 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:19,190 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1027286359] [2022-04-28 08:12:19,190 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1027286359] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:19,190 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:19,190 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:12:19,190 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:19,190 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [286779597] [2022-04-28 08:12:19,190 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [286779597] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:19,190 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:19,190 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:12:19,190 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2092408809] [2022-04-28 08:12:19,190 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:19,191 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 5.090909090909091) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (12), 9 states have call predecessors, (12), 3 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) Word has length 76 [2022-04-28 08:12:19,191 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:19,192 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 5.090909090909091) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (12), 9 states have call predecessors, (12), 3 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-04-28 08:12:19,248 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:19,248 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 08:12:19,248 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:19,249 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 08:12:19,249 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=72, Unknown=0, NotChecked=0, Total=110 [2022-04-28 08:12:19,249 INFO L87 Difference]: Start difference. First operand 78 states and 80 transitions. Second operand has 11 states, 11 states have (on average 5.090909090909091) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (12), 9 states have call predecessors, (12), 3 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-04-28 08:12:19,923 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:19,923 INFO L93 Difference]: Finished difference Result 78 states and 80 transitions. [2022-04-28 08:12:19,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-28 08:12:19,924 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 5.090909090909091) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (12), 9 states have call predecessors, (12), 3 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) Word has length 76 [2022-04-28 08:12:19,924 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:19,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 5.090909090909091) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (12), 9 states have call predecessors, (12), 3 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-04-28 08:12:19,924 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 80 transitions. [2022-04-28 08:12:19,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 5.090909090909091) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (12), 9 states have call predecessors, (12), 3 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-04-28 08:12:19,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 80 transitions. [2022-04-28 08:12:19,925 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 80 transitions. [2022-04-28 08:12:19,988 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:19,988 INFO L225 Difference]: With dead ends: 78 [2022-04-28 08:12:19,988 INFO L226 Difference]: Without dead ends: 0 [2022-04-28 08:12:19,988 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=58, Invalid=98, Unknown=0, NotChecked=0, Total=156 [2022-04-28 08:12:19,989 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 31 mSDsluCounter, 144 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 31 SdHoareTripleChecker+Valid, 197 SdHoareTripleChecker+Invalid, 230 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:19,989 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [31 Valid, 197 Invalid, 230 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-04-28 08:12:19,989 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-04-28 08:12:19,989 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-04-28 08:12:19,989 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:19,989 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-04-28 08:12:19,989 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-04-28 08:12:19,989 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-04-28 08:12:19,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:19,990 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-04-28 08:12:19,990 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-04-28 08:12:19,990 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:19,990 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:19,990 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-04-28 08:12:19,990 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-04-28 08:12:19,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:19,990 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-04-28 08:12:19,990 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-04-28 08:12:19,990 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:19,990 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:19,990 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:19,990 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:19,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-04-28 08:12:19,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-04-28 08:12:19,990 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 76 [2022-04-28 08:12:19,990 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:19,990 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-04-28 08:12:19,991 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 5.090909090909091) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (12), 9 states have call predecessors, (12), 3 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-04-28 08:12:19,991 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 0 states and 0 transitions. [2022-04-28 08:12:19,991 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:19,991 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-04-28 08:12:19,991 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:19,993 INFO L805 garLoopResultBuilder]: Registering result SAFE for location errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-04-28 08:12:19,999 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-04-28 08:12:20,001 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-04-28 08:12:34,367 INFO L899 garLoopResultBuilder]: For program point reach_errorEXIT(line 3) no Hoare annotation was computed. [2022-04-28 08:12:34,367 INFO L899 garLoopResultBuilder]: For program point reach_errorENTRY(line 3) no Hoare annotation was computed. [2022-04-28 08:12:34,367 INFO L899 garLoopResultBuilder]: For program point reach_errorFINAL(line 3) no Hoare annotation was computed. [2022-04-28 08:12:34,367 INFO L895 garLoopResultBuilder]: At program point L624(line 624) the Hoare annotation is: (or (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 1) (not (= ~s~0 ~NP~0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1)) (not (= ~s~0 1))) [2022-04-28 08:12:34,367 INFO L895 garLoopResultBuilder]: At program point KbFilter_CompleteENTRY(lines 618 628) the Hoare annotation is: (or (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 1) (not (= ~s~0 ~NP~0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1)) (not (= ~s~0 1))) [2022-04-28 08:12:34,367 INFO L895 garLoopResultBuilder]: At program point L624-1(line 624) the Hoare annotation is: (or (= ~setEventCalled~0 1) (= ~pended~0 1) (not (= ~s~0 ~NP~0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1)) (not (= ~s~0 1))) [2022-04-28 08:12:34,367 INFO L895 garLoopResultBuilder]: At program point KbFilter_CompleteFINAL(lines 618 628) the Hoare annotation is: (or (= ~pended~0 1) (not (= ~s~0 ~NP~0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (let ((.cse0 (+ 1073741802 |KbFilter_Complete_#res|))) (and (<= .cse0 0) (= ~setEventCalled~0 1) (<= 0 .cse0))) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1)) (not (= ~s~0 1))) [2022-04-28 08:12:34,368 INFO L895 garLoopResultBuilder]: At program point KbFilter_CompleteEXIT(lines 618 628) the Hoare annotation is: (or (= ~pended~0 1) (not (= ~s~0 ~NP~0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (let ((.cse0 (+ 1073741802 |KbFilter_Complete_#res|))) (and (<= .cse0 0) (= ~setEventCalled~0 1) (<= 0 .cse0))) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1)) (not (= ~s~0 1))) [2022-04-28 08:12:34,368 INFO L895 garLoopResultBuilder]: At program point _BLAST_initFINAL(lines 57 78) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (and (<= 6 ~MPR3~0) (<= 7 ~IPC~0) (<= 5 ~MPR1~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~NP~0 1) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0) (not (= ~MPR3~0 ~s~0))) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,368 INFO L895 garLoopResultBuilder]: At program point _BLAST_initENTRY(lines 57 78) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (<= ~s~0 ~DC~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~s~0 ~NP~0) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (<= ~DC~0 ~s~0) (= ~SKIP1~0 ~s~0) (= ~MPR1~0 ~s~0) (= ~compRegistered~0 0) (= ~MPR3~0 ~s~0) (= ~s~0 |old(~s~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,368 INFO L895 garLoopResultBuilder]: At program point _BLAST_initEXIT(lines 57 78) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (and (<= 6 ~MPR3~0) (<= 7 ~IPC~0) (<= 5 ~MPR1~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~NP~0 1) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0) (not (= ~MPR3~0 ~s~0))) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,368 INFO L895 garLoopResultBuilder]: At program point L415(lines 415 419) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (= ~s~0 ~NP~0) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,368 INFO L902 garLoopResultBuilder]: At program point mainEXIT(lines 295 466) the Hoare annotation is: true [2022-04-28 08:12:34,368 INFO L895 garLoopResultBuilder]: At program point L374(lines 373 408) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (and (= main_~status~1 0) (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,369 INFO L895 garLoopResultBuilder]: At program point L432(lines 432 459) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (or (= ~compRegistered~0 1) (<= ~compRegistered~0 0)) (<= 4 ~SKIP2~0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,369 INFO L895 garLoopResultBuilder]: At program point L358(lines 358 411) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (and (<= 6 ~MPR3~0) (= main_~status~1 0) (<= 7 ~IPC~0) (<= 5 ~MPR1~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (= ~NP~0 1) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,369 INFO L902 garLoopResultBuilder]: At program point L449(lines 449 457) the Hoare annotation is: true [2022-04-28 08:12:34,369 INFO L895 garLoopResultBuilder]: At program point L441(lines 432 459) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (or (= ~compRegistered~0 1) (<= ~compRegistered~0 0)) (<= 4 ~SKIP2~0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,369 INFO L895 garLoopResultBuilder]: At program point L433(lines 433 439) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (or (= ~compRegistered~0 1) (<= ~compRegistered~0 0)) (<= 4 ~SKIP2~0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,369 INFO L895 garLoopResultBuilder]: At program point L400(line 400) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (= main_~status~1 0) (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,369 INFO L895 garLoopResultBuilder]: At program point L359(lines 358 411) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (and (= main_~status~1 0) (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,369 INFO L902 garLoopResultBuilder]: At program point L450(lines 450 452) the Hoare annotation is: true [2022-04-28 08:12:34,369 INFO L895 garLoopResultBuilder]: At program point L376(lines 375 408) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (= main_~status~1 0) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,370 INFO L895 garLoopResultBuilder]: At program point L434(lines 434 436) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (or (= ~compRegistered~0 1) (<= ~compRegistered~0 0)) (<= 4 ~SKIP2~0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,370 INFO L895 garLoopResultBuilder]: At program point L368(lines 368 409) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (and (= main_~status~1 0) (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,370 INFO L902 garLoopResultBuilder]: At program point mainFINAL(lines 295 466) the Hoare annotation is: true [2022-04-28 08:12:34,370 INFO L895 garLoopResultBuilder]: At program point L385(line 385) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (= main_~status~1 0) (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,370 INFO L895 garLoopResultBuilder]: At program point mainENTRY(lines 295 466) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (and (= |old(~Executive~0)| ~Executive~0) (<= ~s~0 ~DC~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~s~0 ~NP~0) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (<= ~DC~0 ~s~0) (= ~SKIP1~0 ~s~0) (= ~MPR1~0 ~s~0) (= ~compRegistered~0 0) (= ~MPR3~0 ~s~0) (= ~s~0 |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,370 INFO L895 garLoopResultBuilder]: At program point L443(lines 443 447) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,370 INFO L895 garLoopResultBuilder]: At program point L344(lines 330 413) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (and (<= 6 ~MPR3~0) (= main_~status~1 0) (<= 7 ~IPC~0) (<= 5 ~MPR1~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (= ~NP~0 1) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,370 INFO L895 garLoopResultBuilder]: At program point L369(lines 368 409) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (and (= main_~status~1 0) (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,370 INFO L895 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (and (<= ~s~0 ~DC~0) (= main_~status~1 0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= ~DC~0 ~s~0) (= ~SKIP1~0 ~s~0) (= ~MPR1~0 ~s~0) (= ~compRegistered~0 0) (= ~MPR3~0 ~s~0)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,371 INFO L895 garLoopResultBuilder]: At program point L328-1(lines 324 465) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (<= 6 ~MPR3~0) (= main_~status~1 0) (<= 7 ~IPC~0) (<= 5 ~MPR1~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~NP~0 1) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0) (not (= ~MPR3~0 ~s~0))) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,371 INFO L895 garLoopResultBuilder]: At program point L353(lines 353 412) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (and (<= 6 ~MPR3~0) (= main_~status~1 0) (<= 7 ~IPC~0) (<= 5 ~MPR1~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (= ~NP~0 1) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,371 INFO L895 garLoopResultBuilder]: At program point L395(line 395) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (= main_~status~1 0) (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,371 INFO L895 garLoopResultBuilder]: At program point L354(lines 353 412) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (and (= main_~status~1 0) (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,371 INFO L895 garLoopResultBuilder]: At program point L445(line 445) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,371 INFO L895 garLoopResultBuilder]: At program point L429(lines 422 462) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (or (= ~compRegistered~0 1) (<= ~compRegistered~0 0)) (<= 4 ~SKIP2~0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,371 INFO L895 garLoopResultBuilder]: At program point L363(lines 363 410) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (and (<= 6 ~MPR3~0) (= main_~status~1 0) (<= 7 ~IPC~0) (<= 5 ~MPR1~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (= ~NP~0 1) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,371 INFO L895 garLoopResultBuilder]: At program point L330(lines 324 465) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (or (= ~compRegistered~0 1) (<= ~compRegistered~0 0)) (<= 4 ~SKIP2~0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,371 INFO L902 garLoopResultBuilder]: At program point L454(lines 454 456) the Hoare annotation is: true [2022-04-28 08:12:34,372 INFO L895 garLoopResultBuilder]: At program point L421(lines 414 463) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (or (= ~compRegistered~0 1) (<= ~compRegistered~0 0)) (<= 4 ~SKIP2~0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,372 INFO L895 garLoopResultBuilder]: At program point L380(line 380) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (= main_~status~1 0) (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,372 INFO L895 garLoopResultBuilder]: At program point L339(lines 339 342) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (and (<= 6 ~MPR3~0) (= main_~status~1 0) (<= 7 ~IPC~0) (<= 5 ~MPR1~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (= ~NP~0 1) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,372 INFO L895 garLoopResultBuilder]: At program point L339-2(lines 339 342) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (and (<= 6 ~MPR3~0) (= main_~status~1 0) (<= 7 ~IPC~0) (<= 5 ~MPR1~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (= ~NP~0 1) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,372 INFO L902 garLoopResultBuilder]: At program point L430(lines 414 463) the Hoare annotation is: true [2022-04-28 08:12:34,372 INFO L895 garLoopResultBuilder]: At program point L364(lines 363 410) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (and (<= 6 ~MPR3~0) (= main_~status~1 0) (<= 7 ~IPC~0) (<= 5 ~MPR1~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (= ~NP~0 1) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,372 INFO L895 garLoopResultBuilder]: At program point L373(lines 373 408) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (and (= main_~status~1 0) (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,372 INFO L895 garLoopResultBuilder]: At program point L431(lines 431 460) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (or (= ~compRegistered~0 1) (<= ~compRegistered~0 0)) (<= 4 ~SKIP2~0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,372 INFO L895 garLoopResultBuilder]: At program point L423(lines 423 427) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,373 INFO L895 garLoopResultBuilder]: At program point L390(line 390) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (and (<= 7 ~IPC~0) (= 2 ~DC~0) (let ((.cse0 (= main_~status~1 0))) (or (and (= ~compRegistered~0 1) .cse0) (and .cse0 (<= ~compRegistered~0 0)))) (not (= ~pended~0 1)) (<= 4 ~SKIP2~0)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-28 08:12:34,373 INFO L895 garLoopResultBuilder]: At program point L475(line 475) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= ~setEventCalled~0 1)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1))) [2022-04-28 08:12:34,373 INFO L895 garLoopResultBuilder]: At program point L475-1(lines 467 480) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= ~setEventCalled~0 1)) (not (= 2 ~DC~0)) (= ~MPR1~0 ~s~0) (not (= ~compRegistered~0 1))) [2022-04-28 08:12:34,373 INFO L895 garLoopResultBuilder]: At program point stubMoreProcessingRequiredENTRY(lines 467 480) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= ~setEventCalled~0 1)) (not (= 2 ~DC~0)) (= ~s~0 |old(~s~0)|) (not (= ~compRegistered~0 1))) [2022-04-28 08:12:34,373 INFO L895 garLoopResultBuilder]: At program point stubMoreProcessingRequiredEXIT(lines 467 480) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= ~setEventCalled~0 1)) (not (= 2 ~DC~0)) (= ~MPR1~0 ~s~0) (not (= ~compRegistered~0 1))) [2022-04-28 08:12:34,373 INFO L895 garLoopResultBuilder]: At program point L762(line 762) the Hoare annotation is: (or (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,373 INFO L902 garLoopResultBuilder]: At program point PoCallDriverEXIT(lines 745 821) the Hoare annotation is: true [2022-04-28 08:12:34,373 INFO L895 garLoopResultBuilder]: At program point L754(lines 754 766) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,373 INFO L895 garLoopResultBuilder]: At program point L754-1(lines 754 766) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,374 INFO L895 garLoopResultBuilder]: At program point L775(lines 774 791) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,374 INFO L895 garLoopResultBuilder]: At program point L800(lines 800 806) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,374 INFO L902 garLoopResultBuilder]: At program point PoCallDriverFINAL(lines 745 821) the Hoare annotation is: true [2022-04-28 08:12:34,374 INFO L895 garLoopResultBuilder]: At program point PoCallDriverENTRY(lines 745 821) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,374 INFO L895 garLoopResultBuilder]: At program point L809(lines 809 816) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,374 INFO L895 garLoopResultBuilder]: At program point L797(lines 797 817) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,374 INFO L895 garLoopResultBuilder]: At program point L760(lines 760 764) the Hoare annotation is: (or (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,374 INFO L895 garLoopResultBuilder]: At program point L789(lines 753 820) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,374 INFO L895 garLoopResultBuilder]: At program point L756(line 756) the Hoare annotation is: (or (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,374 INFO L895 garLoopResultBuilder]: At program point L756-1(line 756) the Hoare annotation is: (or (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,374 INFO L895 garLoopResultBuilder]: At program point L814(line 814) the Hoare annotation is: (or (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,374 INFO L902 garLoopResultBuilder]: At program point L814-1(lines 793 818) the Hoare annotation is: true [2022-04-28 08:12:34,374 INFO L895 garLoopResultBuilder]: At program point L777(lines 776 791) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,374 INFO L895 garLoopResultBuilder]: At program point L769(lines 769 792) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,374 INFO L895 garLoopResultBuilder]: At program point L774(lines 774 791) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,375 INFO L895 garLoopResultBuilder]: At program point L770(lines 769 792) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,375 INFO L895 garLoopResultBuilder]: At program point L638(lines 638 656) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,375 INFO L902 garLoopResultBuilder]: At program point KbFilter_CreateCloseEXIT(lines 629 664) the Hoare annotation is: true [2022-04-28 08:12:34,375 INFO L895 garLoopResultBuilder]: At program point L653(lines 641 655) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,375 INFO L895 garLoopResultBuilder]: At program point L645(lines 638 656) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,375 INFO L895 garLoopResultBuilder]: At program point L641(lines 641 655) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,375 INFO L895 garLoopResultBuilder]: At program point KbFilter_CreateCloseENTRY(lines 629 664) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,375 INFO L895 garLoopResultBuilder]: At program point L660(line 660) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,375 INFO L902 garLoopResultBuilder]: At program point L660-1(line 660) the Hoare annotation is: true [2022-04-28 08:12:34,375 INFO L902 garLoopResultBuilder]: At program point KbFilter_CreateCloseFINAL(lines 629 664) the Hoare annotation is: true [2022-04-28 08:12:34,375 INFO L895 garLoopResultBuilder]: At program point L644(lines 644 654) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,376 INFO L895 garLoopResultBuilder]: At program point L956(lines 956 958) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,376 INFO L895 garLoopResultBuilder]: At program point L956-2(lines 934 971) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,376 INFO L902 garLoopResultBuilder]: At program point KbFilter_InternIoCtlEXIT(lines 822 1007) the Hoare annotation is: true [2022-04-28 08:12:34,376 INFO L895 garLoopResultBuilder]: At program point L940(lines 940 943) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,376 INFO L895 garLoopResultBuilder]: At program point L903(lines 903 982) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,376 INFO L895 garLoopResultBuilder]: At program point L924(lines 924 976) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,376 INFO L895 garLoopResultBuilder]: At program point L891(lines 891 986) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,376 INFO L895 garLoopResultBuilder]: At program point L883(lines 883 988) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,376 INFO L895 garLoopResultBuilder]: At program point L875(lines 875 990) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,376 INFO L895 garLoopResultBuilder]: At program point L1003(line 1003) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,377 INFO L902 garLoopResultBuilder]: At program point L1003-1(line 1003) the Hoare annotation is: true [2022-04-28 08:12:34,377 INFO L895 garLoopResultBuilder]: At program point L896(lines 896 984) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,377 INFO L895 garLoopResultBuilder]: At program point L892(lines 891 986) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,377 INFO L895 garLoopResultBuilder]: At program point L917(lines 917 978) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,377 INFO L895 garLoopResultBuilder]: At program point L884(lines 883 988) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,377 INFO L895 garLoopResultBuilder]: At program point L934(lines 934 973) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,377 INFO L895 garLoopResultBuilder]: At program point L959-1(lines 959 961) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,377 INFO L895 garLoopResultBuilder]: At program point KbFilter_InternIoCtlENTRY(lines 822 1007) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,377 INFO L895 garLoopResultBuilder]: At program point L910(lines 910 980) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,377 INFO L895 garLoopResultBuilder]: At program point L972(lines 867 1006) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,377 INFO L895 garLoopResultBuilder]: At program point L935(lines 875 990) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,378 INFO L895 garLoopResultBuilder]: At program point L997(line 997) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,378 INFO L895 garLoopResultBuilder]: At program point L997-1(line 997) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (= 2 ~s~0) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,378 INFO L902 garLoopResultBuilder]: At program point KbFilter_InternIoCtlFINAL(lines 822 1007) the Hoare annotation is: true [2022-04-28 08:12:34,378 INFO L895 garLoopResultBuilder]: At program point L931(lines 931 974) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,378 INFO L895 garLoopResultBuilder]: At program point L603(lines 603 615) the Hoare annotation is: (let ((.cse9 (= 2 ~DC~0)) (.cse1 (= ~pended~0 1)) (.cse10 (<= 4 ~SKIP2~0)) (.cse11 (<= 7 ~IPC~0))) (let ((.cse0 (not (= ~NP~0 1))) (.cse2 (not (<= 5 ~MPR1~0))) (.cse3 (not .cse11)) (.cse4 (and .cse11 .cse9 (not .cse1) (= ~s~0 ~NP~0) .cse10)) (.cse5 (not .cse10)) (.cse6 (not (<= 6 ~MPR3~0))) (.cse7 (not .cse9)) (.cse8 (not (= ~compRegistered~0 1)))) (and (or .cse0 (not (= ~NP~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (= |old(~setEventCalled~0)| 1)) .cse7 .cse8 (not (= ~MPR3~0 |old(~s~0)|)))))) [2022-04-28 08:12:34,378 INFO L895 garLoopResultBuilder]: At program point KeWaitForSingleObjectEXIT(lines 576 617) the Hoare annotation is: (let ((.cse9 (= 2 ~DC~0)) (.cse1 (= ~pended~0 1)) (.cse10 (<= 4 ~SKIP2~0)) (.cse11 (<= 7 ~IPC~0))) (let ((.cse0 (not (= ~NP~0 1))) (.cse2 (not (<= 5 ~MPR1~0))) (.cse3 (not .cse11)) (.cse4 (and .cse11 .cse9 (not .cse1) (= ~s~0 ~NP~0) .cse10)) (.cse5 (not .cse10)) (.cse6 (not (<= 6 ~MPR3~0))) (.cse7 (not .cse9)) (.cse8 (not (= ~compRegistered~0 1)))) (and (or .cse0 (not (= ~NP~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (= |old(~setEventCalled~0)| 1)) .cse7 .cse8 (not (= ~MPR3~0 |old(~s~0)|)))))) [2022-04-28 08:12:34,378 INFO L895 garLoopResultBuilder]: At program point L589(lines 581 600) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 1))) (.cse1 (= ~pended~0 1)) (.cse2 (not (<= 5 ~MPR1~0))) (.cse3 (not (<= 7 ~IPC~0))) (.cse4 (not (<= 4 ~SKIP2~0))) (.cse5 (not (<= 6 ~MPR3~0))) (.cse6 (not (= 2 ~DC~0))) (.cse7 (not (= ~compRegistered~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= |old(~setEventCalled~0)| 1)) .cse6 .cse7 (not (= ~MPR3~0 |old(~s~0)|))) (or .cse0 (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7))) [2022-04-28 08:12:34,378 INFO L895 garLoopResultBuilder]: At program point L581(lines 581 600) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 1))) (.cse1 (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))) (.cse2 (= ~pended~0 1)) (.cse3 (not (<= 5 ~MPR1~0))) (.cse4 (not (<= 7 ~IPC~0))) (.cse5 (not (<= 4 ~SKIP2~0))) (.cse6 (not (<= 6 ~MPR3~0))) (.cse7 (not (= 2 ~DC~0))) (.cse8 (not (= ~compRegistered~0 1)))) (and (or .cse0 .cse1 (not (= ~NP~0 |old(~s~0)|)) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (= |old(~setEventCalled~0)| 1)) .cse7 .cse8 (not (= ~MPR3~0 |old(~s~0)|))))) [2022-04-28 08:12:34,379 INFO L895 garLoopResultBuilder]: At program point L606(lines 605 615) the Hoare annotation is: (let ((.cse9 (= 2 ~DC~0)) (.cse1 (= ~pended~0 1)) (.cse10 (<= 4 ~SKIP2~0)) (.cse11 (<= 7 ~IPC~0))) (let ((.cse0 (not (= ~NP~0 1))) (.cse2 (not (<= 5 ~MPR1~0))) (.cse3 (not .cse11)) (.cse4 (and .cse11 .cse9 (not .cse1) (= ~s~0 ~NP~0) .cse10)) (.cse5 (not .cse10)) (.cse6 (not (<= 6 ~MPR3~0))) (.cse7 (not .cse9)) (.cse8 (not (= ~compRegistered~0 1)))) (and (or .cse0 (not (= ~NP~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (= |old(~setEventCalled~0)| 1)) .cse7 .cse8 (not (= ~MPR3~0 |old(~s~0)|)))))) [2022-04-28 08:12:34,379 INFO L895 garLoopResultBuilder]: At program point KeWaitForSingleObjectFINAL(lines 576 617) the Hoare annotation is: (let ((.cse9 (= 2 ~DC~0)) (.cse1 (= ~pended~0 1)) (.cse10 (<= 4 ~SKIP2~0)) (.cse11 (<= 7 ~IPC~0))) (let ((.cse0 (not (= ~NP~0 1))) (.cse2 (not (<= 5 ~MPR1~0))) (.cse3 (not .cse11)) (.cse4 (and .cse11 .cse9 (not .cse1) (= ~s~0 ~NP~0) .cse10)) (.cse5 (not .cse10)) (.cse6 (not (<= 6 ~MPR3~0))) (.cse7 (not .cse9)) (.cse8 (not (= ~compRegistered~0 1)))) (and (or .cse0 (not (= ~NP~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (= |old(~setEventCalled~0)| 1)) .cse7 .cse8 (not (= ~MPR3~0 |old(~s~0)|)))))) [2022-04-28 08:12:34,379 INFO L895 garLoopResultBuilder]: At program point L604(lines 603 615) the Hoare annotation is: (let ((.cse9 (= 2 ~DC~0)) (.cse1 (= ~pended~0 1)) (.cse10 (<= 4 ~SKIP2~0)) (.cse11 (<= 7 ~IPC~0))) (let ((.cse0 (not (= ~NP~0 1))) (.cse2 (not (<= 5 ~MPR1~0))) (.cse3 (not .cse11)) (.cse4 (and .cse11 .cse9 (not .cse1) (= ~s~0 ~NP~0) .cse10)) (.cse5 (not .cse10)) (.cse6 (not (<= 6 ~MPR3~0))) (.cse7 (not .cse9)) (.cse8 (not (= ~compRegistered~0 1)))) (and (or .cse0 (not (= ~NP~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (= |old(~setEventCalled~0)| 1)) .cse7 .cse8 (not (= ~MPR3~0 |old(~s~0)|)))))) [2022-04-28 08:12:34,379 INFO L895 garLoopResultBuilder]: At program point L596(line 596) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 1))) (.cse1 (= ~pended~0 1)) (.cse2 (not (<= 5 ~MPR1~0))) (.cse3 (not (<= 7 ~IPC~0))) (.cse4 (not (<= 4 ~SKIP2~0))) (.cse5 (not (<= 6 ~MPR3~0))) (.cse6 (not (= 2 ~DC~0))) (.cse7 (not (= ~compRegistered~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= |old(~setEventCalled~0)| 1)) .cse6 .cse7 (not (= ~MPR3~0 |old(~s~0)|))) (or .cse0 (not (= ~NP~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7))) [2022-04-28 08:12:34,379 INFO L895 garLoopResultBuilder]: At program point L594(lines 594 598) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 1))) (.cse1 (= ~pended~0 1)) (.cse2 (not (<= 5 ~MPR1~0))) (.cse3 (not (<= 7 ~IPC~0))) (.cse4 (not (<= 4 ~SKIP2~0))) (.cse5 (not (<= 6 ~MPR3~0))) (.cse6 (not (= 2 ~DC~0))) (.cse7 (not (= ~compRegistered~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= |old(~setEventCalled~0)| 1)) .cse6 .cse7 (not (= ~MPR3~0 |old(~s~0)|))) (or .cse0 (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7))) [2022-04-28 08:12:34,379 INFO L895 garLoopResultBuilder]: At program point L594-1(lines 581 600) the Hoare annotation is: (let ((.cse9 (= 2 ~DC~0)) (.cse1 (= ~pended~0 1)) (.cse10 (<= 4 ~SKIP2~0)) (.cse11 (<= 7 ~IPC~0))) (let ((.cse0 (not (= ~NP~0 1))) (.cse2 (not (<= 5 ~MPR1~0))) (.cse3 (not .cse11)) (.cse4 (and .cse11 .cse9 (not .cse1) (= ~s~0 ~NP~0) .cse10)) (.cse5 (not .cse10)) (.cse6 (not (<= 6 ~MPR3~0))) (.cse7 (not .cse9)) (.cse8 (not (= ~compRegistered~0 1)))) (and (or .cse0 (not (= ~NP~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (= |old(~setEventCalled~0)| 1)) .cse7 .cse8 (not (= ~MPR3~0 |old(~s~0)|)))))) [2022-04-28 08:12:34,379 INFO L895 garLoopResultBuilder]: At program point KeWaitForSingleObjectENTRY(lines 576 617) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 1))) (.cse1 (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))) (.cse2 (= ~pended~0 1)) (.cse3 (not (<= 5 ~MPR1~0))) (.cse4 (not (<= 7 ~IPC~0))) (.cse5 (not (<= 4 ~SKIP2~0))) (.cse6 (not (<= 6 ~MPR3~0))) (.cse7 (not (= 2 ~DC~0))) (.cse8 (not (= ~compRegistered~0 1)))) (and (or .cse0 .cse1 (not (= ~NP~0 |old(~s~0)|)) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (= |old(~setEventCalled~0)| 1)) .cse7 .cse8 (not (= ~MPR3~0 |old(~s~0)|))))) [2022-04-28 08:12:34,380 INFO L895 garLoopResultBuilder]: At program point L582(lines 582 587) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 1))) (.cse1 (= ~pended~0 1)) (.cse2 (not (<= 5 ~MPR1~0))) (.cse3 (not (<= 7 ~IPC~0))) (.cse4 (not (<= 4 ~SKIP2~0))) (.cse5 (not (<= 6 ~MPR3~0))) (.cse6 (not (= 2 ~DC~0))) (.cse7 (not (= ~compRegistered~0 1)))) (and (or .cse0 (not (= ~NP~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (or .cse0 (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 (not (= |old(~setEventCalled~0)| 1)) .cse6 .cse7 (not (= ~MPR3~0 |old(~s~0)|))))) [2022-04-28 08:12:34,380 INFO L895 garLoopResultBuilder]: At program point L562-1(lines 554 567) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 |old(~s~0)|))) (.cse1 (= ~pended~0 1)) (.cse2 (= 2 ~s~0)) (.cse3 (not (<= 7 ~IPC~0))) (.cse4 (not (<= 4 ~SKIP2~0))) (.cse5 (not (= 2 ~DC~0)))) (and (or .cse0 (not (= ~compRegistered~0 0)) .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= ~compRegistered~0 1))))) [2022-04-28 08:12:34,380 INFO L895 garLoopResultBuilder]: At program point L558(lines 558 564) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 |old(~s~0)|))) (.cse1 (= ~pended~0 1)) (.cse2 (not (<= 7 ~IPC~0))) (.cse3 (not (<= 4 ~SKIP2~0))) (.cse4 (not (= 2 ~DC~0))) (.cse5 (= ~s~0 |old(~s~0)|))) (and (or .cse0 (not (= ~compRegistered~0 0)) .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= ~compRegistered~0 1))))) [2022-04-28 08:12:34,380 INFO L895 garLoopResultBuilder]: At program point IofCompleteRequestENTRY(lines 554 567) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 |old(~s~0)|))) (.cse1 (= ~pended~0 1)) (.cse2 (not (<= 7 ~IPC~0))) (.cse3 (not (<= 4 ~SKIP2~0))) (.cse4 (not (= 2 ~DC~0))) (.cse5 (= ~s~0 |old(~s~0)|))) (and (or .cse0 (not (= ~compRegistered~0 0)) .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= ~compRegistered~0 1))))) [2022-04-28 08:12:34,380 INFO L895 garLoopResultBuilder]: At program point IofCompleteRequestEXIT(lines 554 567) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 |old(~s~0)|))) (.cse1 (= ~pended~0 1)) (.cse2 (= 2 ~s~0)) (.cse3 (not (<= 7 ~IPC~0))) (.cse4 (not (<= 4 ~SKIP2~0))) (.cse5 (not (= 2 ~DC~0)))) (and (or .cse0 (not (= ~compRegistered~0 0)) .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= ~compRegistered~0 1))))) [2022-04-28 08:12:34,380 INFO L895 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 |old(~s~0)|))) (.cse1 (= ~pended~0 1)) (.cse2 (not (<= 7 ~IPC~0))) (.cse3 (not (<= 4 ~SKIP2~0))) (.cse4 (not (= 2 ~DC~0)))) (and (or .cse0 (not (= ~compRegistered~0 0)) .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~compRegistered~0 1))))) [2022-04-28 08:12:34,380 INFO L895 garLoopResultBuilder]: At program point L258-1(lines 254 260) the Hoare annotation is: (or (and (= ~SKIP1~0 ~s~0) (= ~compRegistered~0 0)) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,380 INFO L895 garLoopResultBuilder]: At program point L159(lines 159 274) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,380 INFO L895 garLoopResultBuilder]: At program point L126(lines 126 285) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,381 INFO L895 garLoopResultBuilder]: At program point L184(line 184) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,381 INFO L895 garLoopResultBuilder]: At program point L201(lines 201 203) the Hoare annotation is: (let ((.cse0 (= ~compRegistered~0 1))) (or (not (= ~NP~0 1)) (and .cse0 (= ~setEventCalled~0 1) (= KbFilter_PnP_~__cil_tmp23~0 259) (<= 259 KbFilter_PnP_~status~0) (= ~MPR3~0 ~s~0)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (and .cse0 (= ~s~0 |old(~s~0)|)))) [2022-04-28 08:12:34,381 INFO L895 garLoopResultBuilder]: At program point L168(lines 168 271) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,381 INFO L895 garLoopResultBuilder]: At program point L201-1(lines 201 203) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (and (= ~compRegistered~0 1) (= ~s~0 ~NP~0)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,381 INFO L895 garLoopResultBuilder]: At program point L135(lines 135 282) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,381 INFO L895 garLoopResultBuilder]: At program point L218(line 218) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (and (= ~compRegistered~0 1) (= ~s~0 ~NP~0)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,381 INFO L895 garLoopResultBuilder]: At program point L243(line 243) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,381 INFO L895 garLoopResultBuilder]: At program point L243-1(lines 239 245) the Hoare annotation is: (or (and (= ~SKIP1~0 ~s~0) (= ~compRegistered~0 0)) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,381 INFO L895 garLoopResultBuilder]: At program point L177(lines 177 189) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= KbFilter_PnP_~status~0 0) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,382 INFO L895 garLoopResultBuilder]: At program point L144(lines 144 279) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,382 INFO L895 garLoopResultBuilder]: At program point L111(lines 111 290) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,382 INFO L895 garLoopResultBuilder]: At program point L227(line 227) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,382 INFO L895 garLoopResultBuilder]: At program point L194(lines 194 195) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (and (= ~compRegistered~0 1) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= KbFilter_PnP_~status~0 0) (= ~s~0 |old(~s~0)|))) [2022-04-28 08:12:34,382 INFO L895 garLoopResultBuilder]: At program point L227-1(lines 223 229) the Hoare annotation is: (or (and (= ~SKIP1~0 ~s~0) (= ~compRegistered~0 0)) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,382 INFO L895 garLoopResultBuilder]: At program point L194-1(lines 194 195) the Hoare annotation is: (let ((.cse1 (= KbFilter_PnP_~status~0 0)) (.cse0 (= ~compRegistered~0 1))) (or (and .cse0 (= ~setEventCalled~0 1) (<= |KbFilter_PnP_#t~ret12| 259) (<= 259 |KbFilter_PnP_#t~ret12|) .cse1 (= ~MPR3~0 ~s~0)) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (and .cse0 .cse1 (= ~s~0 |old(~s~0)|)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (and .cse0 (= |KbFilter_PnP_#t~ret12| 0) (= ~s~0 ~NP~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)))) [2022-04-28 08:12:34,382 INFO L895 garLoopResultBuilder]: At program point L153(lines 153 276) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,382 INFO L895 garLoopResultBuilder]: At program point L120(lines 120 287) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,382 INFO L895 garLoopResultBuilder]: At program point KbFilter_PnPEXIT(lines 81 294) the Hoare annotation is: (or (= ~compRegistered~0 1) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (<= ~compRegistered~0 0) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,383 INFO L895 garLoopResultBuilder]: At program point L112(lines 111 290) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,383 INFO L895 garLoopResultBuilder]: At program point L269(lines 172 270) the Hoare annotation is: (or (= ~compRegistered~0 1) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (<= ~compRegistered~0 0) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,383 INFO L895 garLoopResultBuilder]: At program point L162(lines 162 273) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,383 INFO L895 garLoopResultBuilder]: At program point L129(lines 129 284) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,383 INFO L895 garLoopResultBuilder]: At program point L179(line 179) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,383 INFO L895 garLoopResultBuilder]: At program point KbFilter_PnPENTRY(lines 81 294) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,383 INFO L895 garLoopResultBuilder]: At program point L171(lines 117 288) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,383 INFO L895 garLoopResultBuilder]: At program point L138(lines 138 281) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,383 INFO L895 garLoopResultBuilder]: At program point KbFilter_PnPFINAL(lines 81 294) the Hoare annotation is: (or (= ~compRegistered~0 1) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (<= ~compRegistered~0 0) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,383 INFO L895 garLoopResultBuilder]: At program point L147(lines 147 278) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,384 INFO L895 garLoopResultBuilder]: At program point L114(lines 114 289) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,384 INFO L895 garLoopResultBuilder]: At program point L156(lines 156 275) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,384 INFO L895 garLoopResultBuilder]: At program point L123(lines 123 286) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,384 INFO L895 garLoopResultBuilder]: At program point L115(lines 114 289) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,384 INFO L895 garLoopResultBuilder]: At program point L239(lines 239 245) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,384 INFO L895 garLoopResultBuilder]: At program point L264(lines 264 265) the Hoare annotation is: (or (and (= ~SKIP1~0 ~s~0) (= ~compRegistered~0 0)) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,384 INFO L895 garLoopResultBuilder]: At program point L264-1(lines 264 265) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (= ~compRegistered~0 0)) [2022-04-28 08:12:34,384 INFO L895 garLoopResultBuilder]: At program point L165(lines 165 272) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,384 INFO L895 garLoopResultBuilder]: At program point L132(lines 132 283) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,385 INFO L895 garLoopResultBuilder]: At program point L223(lines 223 229) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,385 INFO L895 garLoopResultBuilder]: At program point L182(lines 182 188) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= KbFilter_PnP_~status~0 0) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,385 INFO L895 garLoopResultBuilder]: At program point L182-1(lines 177 189) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (and (= ~compRegistered~0 1) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= KbFilter_PnP_~status~0 0) (= ~s~0 |old(~s~0)|))) [2022-04-28 08:12:34,385 INFO L895 garLoopResultBuilder]: At program point L207(lines 207 213) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (and (= ~compRegistered~0 1) (= ~s~0 ~NP~0)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,385 INFO L895 garLoopResultBuilder]: At program point L141(lines 141 280) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,385 INFO L895 garLoopResultBuilder]: At program point L108(lines 108 291) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= KbFilter_PnP_~status~0 0) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,385 INFO L895 garLoopResultBuilder]: At program point L199(lines 199 205) the Hoare annotation is: (let ((.cse0 (= ~compRegistered~0 1))) (or (not (= ~NP~0 1)) (and .cse0 (= ~setEventCalled~0 1) (= KbFilter_PnP_~__cil_tmp23~0 259) (<= 259 KbFilter_PnP_~status~0) (= ~MPR3~0 ~s~0)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (and .cse0 (= ~s~0 |old(~s~0)|)))) [2022-04-28 08:12:34,385 INFO L895 garLoopResultBuilder]: At program point L199-2(lines 172 268) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (and (= ~compRegistered~0 1) (= ~s~0 ~NP~0)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,386 INFO L895 garLoopResultBuilder]: At program point L249(line 249) the Hoare annotation is: (or (and (= ~SKIP1~0 ~s~0) (= ~compRegistered~0 0)) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,386 INFO L895 garLoopResultBuilder]: At program point L249-1(line 249) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (= ~compRegistered~0 0)) [2022-04-28 08:12:34,386 INFO L895 garLoopResultBuilder]: At program point L150(lines 150 277) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,386 INFO L895 garLoopResultBuilder]: At program point L117(lines 117 288) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,386 INFO L895 garLoopResultBuilder]: At program point L208(lines 208 212) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (and (= ~compRegistered~0 1) (= ~s~0 ~NP~0)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,386 INFO L895 garLoopResultBuilder]: At program point L109(lines 108 291) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= KbFilter_PnP_~status~0 0) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,386 INFO L895 garLoopResultBuilder]: At program point L233(lines 233 234) the Hoare annotation is: (or (and (= ~SKIP1~0 ~s~0) (= ~compRegistered~0 0)) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,386 INFO L895 garLoopResultBuilder]: At program point L233-1(lines 233 234) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (= ~compRegistered~0 0)) [2022-04-28 08:12:34,386 INFO L895 garLoopResultBuilder]: At program point L258(line 258) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,386 INFO L895 garLoopResultBuilder]: At program point KeSetEventENTRY(lines 568 575) the Hoare annotation is: (or (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 1) (not (= ~s~0 ~NP~0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1)) (not (= ~s~0 1))) [2022-04-28 08:12:34,387 INFO L895 garLoopResultBuilder]: At program point KeSetEventFINAL(lines 568 575) the Hoare annotation is: (or (= ~setEventCalled~0 1) (= ~pended~0 1) (not (= ~s~0 ~NP~0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1)) (not (= ~s~0 1))) [2022-04-28 08:12:34,387 INFO L895 garLoopResultBuilder]: At program point KeSetEventEXIT(lines 568 575) the Hoare annotation is: (or (= ~setEventCalled~0 1) (= ~pended~0 1) (not (= ~s~0 ~NP~0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1)) (not (= ~s~0 1))) [2022-04-28 08:12:34,387 INFO L895 garLoopResultBuilder]: At program point L700(lines 700 729) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,387 INFO L902 garLoopResultBuilder]: At program point KbFilter_PowerEXIT(lines 689 744) the Hoare annotation is: true [2022-04-28 08:12:34,387 INFO L895 garLoopResultBuilder]: At program point L709(lines 709 726) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,387 INFO L895 garLoopResultBuilder]: At program point L740(line 740) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (= ~SKIP1~0 ~s~0) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,387 INFO L895 garLoopResultBuilder]: At program point KbFilter_PowerENTRY(lines 689 744) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,387 INFO L902 garLoopResultBuilder]: At program point L740-1(line 740) the Hoare annotation is: true [2022-04-28 08:12:34,387 INFO L895 garLoopResultBuilder]: At program point L703(lines 703 728) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,387 INFO L895 garLoopResultBuilder]: At program point L734(line 734) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,387 INFO L895 garLoopResultBuilder]: At program point L701(lines 700 729) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,388 INFO L895 garLoopResultBuilder]: At program point L734-1(lines 730 736) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (= ~SKIP1~0 ~s~0) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,388 INFO L895 garLoopResultBuilder]: At program point L724(lines 699 743) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,388 INFO L902 garLoopResultBuilder]: At program point KbFilter_PowerFINAL(lines 689 744) the Hoare annotation is: true [2022-04-28 08:12:34,388 INFO L895 garLoopResultBuilder]: At program point L706(lines 706 727) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,388 INFO L895 garLoopResultBuilder]: At program point stub_driver_initEXIT(lines 43 56) the Hoare annotation is: (or (and (not (= ~pended~0 1)) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,388 INFO L895 garLoopResultBuilder]: At program point stub_driver_initENTRY(lines 43 56) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,388 INFO L895 garLoopResultBuilder]: At program point stub_driver_initFINAL(lines 43 56) the Hoare annotation is: (or (and (not (= ~pended~0 1)) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,388 INFO L902 garLoopResultBuilder]: At program point errorFnENTRY(lines 1009 1016) the Hoare annotation is: true [2022-04-28 08:12:34,388 INFO L902 garLoopResultBuilder]: At program point errorFnFINAL(lines 1009 1016) the Hoare annotation is: true [2022-04-28 08:12:34,388 INFO L902 garLoopResultBuilder]: At program point errorFnEXIT(lines 1009 1016) the Hoare annotation is: true [2022-04-28 08:12:34,388 INFO L902 garLoopResultBuilder]: At program point errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1013) the Hoare annotation is: true [2022-04-28 08:12:34,389 INFO L895 garLoopResultBuilder]: At program point L510(lines 509 526) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 (and (= ~MPR1~0 ~s~0) (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0)) .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))) (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3))) [2022-04-28 08:12:34,389 INFO L895 garLoopResultBuilder]: At program point L532(lines 532 549) the Hoare annotation is: (let ((.cse2 (= ~pended~0 1)) (.cse3 (not (<= 7 ~IPC~0))) (.cse4 (not (<= 4 ~SKIP2~0))) (.cse5 (not (= 2 ~DC~0)))) (and (let ((.cse0 (= ~MPR1~0 ~s~0)) (.cse1 (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0))) (or (and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0) .cse0) (not (= ~NP~0 1)) (and (<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0) .cse0 .cse1) (not (= ~NP~0 |old(~s~0)|)) .cse2 (not (<= 5 ~MPR1~0)) .cse3 .cse4 (and (= ~setEventCalled~0 1) (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0) .cse0 .cse1) (not (<= 6 ~MPR3~0)) .cse5 (not (= ~compRegistered~0 1)))) (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) .cse2 .cse3 .cse4 (not (= ~SKIP1~0 |old(~s~0)|)) .cse5))) [2022-04-28 08:12:34,389 INFO L895 garLoopResultBuilder]: At program point IofCallDriverENTRY(lines 481 553) the Hoare annotation is: (let ((.cse0 (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))) (.cse1 (= ~pended~0 1)) (.cse2 (not (<= 7 ~IPC~0))) (.cse3 (not (<= 4 ~SKIP2~0))) (.cse4 (not (= 2 ~DC~0)))) (and (or (not (= ~NP~0 1)) .cse0 (not (= ~NP~0 |old(~s~0)|)) .cse1 (not (<= 5 ~MPR1~0)) .cse2 .cse3 (not (<= 6 ~MPR3~0)) .cse4 (not (= ~compRegistered~0 1))) (or .cse0 (not (= ~compRegistered~0 0)) .cse1 .cse2 .cse3 (not (= ~SKIP1~0 |old(~s~0)|)) .cse4))) [2022-04-28 08:12:34,389 INFO L895 garLoopResultBuilder]: At program point L495(lines 495 499) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3) (or (not (= ~NP~0 1)) (and (= ~setEventCalled~0 1) (= ~s~0 |old(~s~0)|) (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))))) [2022-04-28 08:12:34,389 INFO L895 garLoopResultBuilder]: At program point L524(lines 488 552) the Hoare annotation is: (let ((.cse2 (= ~pended~0 1)) (.cse3 (not (<= 7 ~IPC~0))) (.cse4 (not (<= 4 ~SKIP2~0))) (.cse5 (not (= 2 ~DC~0)))) (and (let ((.cse0 (= ~MPR1~0 ~s~0)) (.cse1 (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0))) (or (not (= ~NP~0 1)) (and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0) .cse0 .cse1) (and (<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0) .cse0 .cse1) (not (= ~NP~0 |old(~s~0)|)) .cse2 (not (<= 5 ~MPR1~0)) .cse3 .cse4 (and (= ~setEventCalled~0 1) (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0) .cse0 .cse1) (not (<= 6 ~MPR3~0)) .cse5 (not (= ~compRegistered~0 1)))) (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) .cse2 .cse3 .cse4 (not (= ~SKIP1~0 |old(~s~0)|)) .cse5))) [2022-04-28 08:12:34,389 INFO L895 garLoopResultBuilder]: At program point L491(line 491) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3) (or (not (= ~NP~0 1)) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))))) [2022-04-28 08:12:34,389 INFO L895 garLoopResultBuilder]: At program point L491-1(line 491) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3) (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 (and (= ~setEventCalled~0 1) (= (+ |IofCallDriver_#t~ret37| 1073741802) 0) (= ~s~0 |old(~s~0)|)) .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))))) [2022-04-28 08:12:34,390 INFO L895 garLoopResultBuilder]: At program point IofCallDriverFINAL(lines 481 553) the Hoare annotation is: (let ((.cse0 (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0)) (.cse1 (= ~s~0 ~NP~0))) (or (not (= ~NP~0 1)) (and (= ~setEventCalled~0 1) (<= IofCallDriver_~returnVal2~0 259) (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259) (<= 259 IofCallDriver_~returnVal2~0) (= ~MPR3~0 ~s~0) .cse0) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and .cse1 .cse0) (and .cse1 (<= IofCallDriver_~returnVal2~0 0) (<= 0 |IofCallDriver_#res|) (<= 0 IofCallDriver_~returnVal2~0) (<= |IofCallDriver_#res| 0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1)))) [2022-04-28 08:12:34,390 INFO L895 garLoopResultBuilder]: At program point L512(lines 511 526) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3) (or (not (= ~NP~0 1)) (and (= ~setEventCalled~0 1) (= ~MPR1~0 ~s~0) (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))))) [2022-04-28 08:12:34,390 INFO L895 garLoopResultBuilder]: At program point L541(lines 541 548) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))) (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3))) [2022-04-28 08:12:34,390 INFO L895 garLoopResultBuilder]: At program point L504(lines 504 527) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3) (or (not (= ~NP~0 1)) (and (= ~setEventCalled~0 1) (= ~MPR1~0 ~s~0) (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))))) [2022-04-28 08:12:34,390 INFO L895 garLoopResultBuilder]: At program point IofCallDriverEXIT(lines 481 553) the Hoare annotation is: (let ((.cse0 (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0)) (.cse1 (= ~s~0 ~NP~0))) (or (not (= ~NP~0 1)) (and (= ~setEventCalled~0 1) (<= IofCallDriver_~returnVal2~0 259) (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259) (<= 259 IofCallDriver_~returnVal2~0) (= ~MPR3~0 ~s~0) .cse0) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and .cse1 .cse0) (and .cse1 (<= IofCallDriver_~returnVal2~0 0) (<= 0 |IofCallDriver_#res|) (<= 0 IofCallDriver_~returnVal2~0) (<= |IofCallDriver_#res| 0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1)))) [2022-04-28 08:12:34,390 INFO L895 garLoopResultBuilder]: At program point L533(lines 533 539) the Hoare annotation is: (let ((.cse2 (= ~pended~0 1)) (.cse3 (not (<= 7 ~IPC~0))) (.cse4 (not (<= 4 ~SKIP2~0))) (.cse5 (not (= 2 ~DC~0)))) (and (let ((.cse0 (= ~MPR1~0 ~s~0)) (.cse1 (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0))) (or (and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0) .cse0) (not (= ~NP~0 1)) (and (<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0) .cse0 .cse1) (not (= ~NP~0 |old(~s~0)|)) .cse2 (not (<= 5 ~MPR1~0)) .cse3 .cse4 (and (= ~setEventCalled~0 1) (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0) .cse0 .cse1) (not (<= 6 ~MPR3~0)) .cse5 (not (= ~compRegistered~0 1)))) (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) .cse2 .cse3 .cse4 (not (= ~SKIP1~0 |old(~s~0)|)) .cse5))) [2022-04-28 08:12:34,390 INFO L895 garLoopResultBuilder]: At program point L546(line 546) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3) (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))))) [2022-04-28 08:12:34,391 INFO L895 garLoopResultBuilder]: At program point L546-1(lines 528 550) the Hoare annotation is: (let ((.cse0 (= ~s~0 ~NP~0)) (.cse1 (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0))) (or (not (= ~NP~0 1)) (and .cse0 (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (and (= ~setEventCalled~0 1) (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0) (= ~MPR3~0 ~s~0) .cse1) (not (<= 4 ~SKIP2~0)) (and .cse0 .cse1) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1)))) [2022-04-28 08:12:34,391 INFO L895 garLoopResultBuilder]: At program point L509(lines 509 526) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3) (or (not (= ~NP~0 1)) (and (= ~setEventCalled~0 1) (= ~MPR1~0 ~s~0) (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))))) [2022-04-28 08:12:34,391 INFO L895 garLoopResultBuilder]: At program point L505(lines 504 527) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 (and (= ~MPR1~0 ~s~0) (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0)) .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))) (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3))) [2022-04-28 08:12:34,391 INFO L895 garLoopResultBuilder]: At program point L497(line 497) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3) (or (not (= ~NP~0 1)) (and (= ~setEventCalled~0 1) (= ~s~0 |old(~s~0)|) (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))))) [2022-04-28 08:12:34,391 INFO L895 garLoopResultBuilder]: At program point L489(lines 489 501) the Hoare annotation is: (let ((.cse0 (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))) (.cse1 (= ~pended~0 1)) (.cse2 (not (<= 7 ~IPC~0))) (.cse3 (not (<= 4 ~SKIP2~0))) (.cse4 (not (= 2 ~DC~0)))) (and (or (not (= ~NP~0 1)) .cse0 (not (= ~NP~0 |old(~s~0)|)) .cse1 (not (<= 5 ~MPR1~0)) .cse2 .cse3 (not (<= 6 ~MPR3~0)) .cse4 (not (= ~compRegistered~0 1))) (or .cse0 (not (= ~compRegistered~0 0)) .cse1 .cse2 .cse3 (not (= ~SKIP1~0 |old(~s~0)|)) .cse4))) [2022-04-28 08:12:34,391 INFO L895 garLoopResultBuilder]: At program point L489-1(lines 489 501) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3) (or (not (= ~NP~0 1)) (and (= ~setEventCalled~0 1) (= ~MPR1~0 ~s~0) (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))))) [2022-04-28 08:12:34,391 INFO L895 garLoopResultBuilder]: At program point ULTIMATE.initFINAL(line -1) the Hoare annotation is: (and (<= ~s~0 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= ~DC~0 ~s~0) (= ~SKIP1~0 ~s~0) (= ~MPR1~0 ~s~0) (= ~compRegistered~0 0) (= ~MPR3~0 ~s~0)) [2022-04-28 08:12:34,391 INFO L895 garLoopResultBuilder]: At program point ULTIMATE.initENTRY(line -1) the Hoare annotation is: (and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|)) [2022-04-28 08:12:34,392 INFO L895 garLoopResultBuilder]: At program point ULTIMATE.initEXIT(line -1) the Hoare annotation is: (and (<= ~s~0 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= ~DC~0 ~s~0) (= ~SKIP1~0 ~s~0) (= ~MPR1~0 ~s~0) (= ~compRegistered~0 0) (= ~MPR3~0 ~s~0)) [2022-04-28 08:12:34,392 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startEXIT(line -1) the Hoare annotation is: true [2022-04-28 08:12:34,392 INFO L895 garLoopResultBuilder]: At program point L-1(line -1) the Hoare annotation is: (and (<= ~s~0 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= ~DC~0 ~s~0) (= ~SKIP1~0 ~s~0) (= ~MPR1~0 ~s~0) (= ~compRegistered~0 0) (= ~MPR3~0 ~s~0)) [2022-04-28 08:12:34,392 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-04-28 08:12:34,392 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startFINAL(line -1) the Hoare annotation is: true [2022-04-28 08:12:34,392 INFO L895 garLoopResultBuilder]: At program point KbFilter_DispatchPassThroughENTRY(lines 665 688) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,392 INFO L895 garLoopResultBuilder]: At program point L684(line 684) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (= ~SKIP1~0 ~s~0) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,392 INFO L902 garLoopResultBuilder]: At program point L684-1(line 684) the Hoare annotation is: true [2022-04-28 08:12:34,392 INFO L902 garLoopResultBuilder]: At program point KbFilter_DispatchPassThroughFINAL(lines 665 688) the Hoare annotation is: true [2022-04-28 08:12:34,392 INFO L895 garLoopResultBuilder]: At program point L678(line 678) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,392 INFO L895 garLoopResultBuilder]: At program point L678-1(lines 674 680) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (= ~SKIP1~0 ~s~0) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,392 INFO L902 garLoopResultBuilder]: At program point KbFilter_DispatchPassThroughEXIT(lines 665 688) the Hoare annotation is: true [2022-04-28 08:12:34,392 INFO L895 garLoopResultBuilder]: At program point L674(lines 674 680) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-28 08:12:34,395 INFO L356 BasicCegarLoop]: Path program histogram: [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2] [2022-04-28 08:12:34,397 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-04-28 08:12:34,400 WARN L170 areAnnotationChecker]: reach_errorENTRY has no Hoare annotation [2022-04-28 08:12:34,426 WARN L170 areAnnotationChecker]: reach_errorFINAL has no Hoare annotation [2022-04-28 08:12:34,893 INFO L163 areAnnotationChecker]: CFG has 360 edges. 360 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-04-28 08:12:34,948 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.04 08:12:34 BoogieIcfgContainer [2022-04-28 08:12:34,948 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-04-28 08:12:34,949 INFO L158 Benchmark]: Toolchain (without parser) took 60821.68ms. Allocated memory was 175.1MB in the beginning and 412.1MB in the end (delta: 237.0MB). Free memory was 123.0MB in the beginning and 342.5MB in the end (delta: -219.5MB). Peak memory consumption was 224.6MB. Max. memory is 8.0GB. [2022-04-28 08:12:34,949 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 175.1MB. Free memory is still 139.8MB. There was no memory consumed. Max. memory is 8.0GB. [2022-04-28 08:12:34,949 INFO L158 Benchmark]: CACSL2BoogieTranslator took 367.90ms. Allocated memory was 175.1MB in the beginning and 237.0MB in the end (delta: 61.9MB). Free memory was 122.7MB in the beginning and 203.1MB in the end (delta: -80.4MB). Peak memory consumption was 15.3MB. Max. memory is 8.0GB. [2022-04-28 08:12:34,949 INFO L158 Benchmark]: Boogie Preprocessor took 86.55ms. Allocated memory is still 237.0MB. Free memory was 203.1MB in the beginning and 199.9MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-04-28 08:12:34,949 INFO L158 Benchmark]: RCFGBuilder took 915.05ms. Allocated memory is still 237.0MB. Free memory was 199.9MB in the beginning and 156.4MB in the end (delta: 43.5MB). Peak memory consumption was 44.0MB. Max. memory is 8.0GB. [2022-04-28 08:12:34,950 INFO L158 Benchmark]: TraceAbstraction took 59446.43ms. Allocated memory was 237.0MB in the beginning and 412.1MB in the end (delta: 175.1MB). Free memory was 155.9MB in the beginning and 342.5MB in the end (delta: -186.6MB). Peak memory consumption was 195.6MB. Max. memory is 8.0GB. [2022-04-28 08:12:34,950 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 175.1MB. Free memory is still 139.8MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 367.90ms. Allocated memory was 175.1MB in the beginning and 237.0MB in the end (delta: 61.9MB). Free memory was 122.7MB in the beginning and 203.1MB in the end (delta: -80.4MB). Peak memory consumption was 15.3MB. Max. memory is 8.0GB. * Boogie Preprocessor took 86.55ms. Allocated memory is still 237.0MB. Free memory was 203.1MB in the beginning and 199.9MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 915.05ms. Allocated memory is still 237.0MB. Free memory was 199.9MB in the beginning and 156.4MB in the end (delta: 43.5MB). Peak memory consumption was 44.0MB. Max. memory is 8.0GB. * TraceAbstraction took 59446.43ms. Allocated memory was 237.0MB in the beginning and 412.1MB in the end (delta: 175.1MB). Free memory was 155.9MB in the beginning and 342.5MB in the end (delta: -186.6MB). Peak memory consumption was 195.6MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1013]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 19 procedures, 242 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 58.8s, OverallIterations: 20, TraceHistogramMax: 1, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 30.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 14.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 5432 SdHoareTripleChecker+Valid, 8.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 5417 mSDsluCounter, 6666 SdHoareTripleChecker+Invalid, 8.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3573 mSDsCounter, 1236 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 6808 IncrementalHoareTripleChecker+Invalid, 8044 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1236 mSolverCounterUnsat, 3093 mSDtfsCounter, 6808 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 399 GetRequests, 189 SyntacticMatches, 4 SemanticMatches, 206 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 216 ImplicationChecksByTransitivity, 3.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=341occurred in iteration=3, InterpolantAutomatonStates: 173, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 3.2s AutomataMinimizationTime, 20 MinimizatonAttempts, 149 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 239 LocationsWithAnnotation, 911 PreInvPairs, 1233 NumberOfFragments, 10930 HoareAnnotationTreeSize, 911 FomulaSimplifications, 1861 FormulaSimplificationTreeSizeReduction, 3.7s HoareSimplificationTime, 239 FomulaSimplificationsInter, 9411 FormulaSimplificationTreeSizeReductionInter, 9.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: No data available, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && (compRegistered == 1 || compRegistered <= 0)) && 4 <= SKIP2)) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && (compRegistered == 1 || compRegistered <= 0)) && 4 <= SKIP2)) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 114]: Loop Invariant Derived loop invariant: ((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(\old(compRegistered) == 0)) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || (((((\old(customIrp) == customIrp && setEventCalled == \old(setEventCalled)) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && compRegistered == 0) && s == \old(s))) || !(6 <= MPR3)) || !(2 == DC) - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: (((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) && ((((((((((!(NP == 1) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(\old(setEventCalled) == 1)) || !(2 == DC)) || !(compRegistered == 1)) || !(MPR3 == \old(s))) - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: (((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(NP == \old(s))) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 641]: Loop Invariant Derived loop invariant: (((((!(NP == \old(s)) || !(compRegistered == 0)) || pended == 1) || (((setEventCalled == \old(setEventCalled) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s))) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 414]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && (compRegistered == 1 || compRegistered <= 0)) && 4 <= SKIP2)) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 108]: Loop Invariant Derived loop invariant: ((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(\old(compRegistered) == 0)) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || ((((((\old(customIrp) == customIrp && setEventCalled == \old(setEventCalled)) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && status == 0) && compRegistered == 0) && s == \old(s))) || !(2 == DC) - InvariantResult [Line: 509]: Loop Invariant Derived loop invariant: (((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || (MPR1 == s && __cil_tmp7 + 1073741802 == 0)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) && ((((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC)) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: (((((!(NP == \old(s)) || !(compRegistered == 0)) || pended == 1) || (((setEventCalled == \old(setEventCalled) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s))) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 769]: Loop Invariant Derived loop invariant: (((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC) - InvariantResult [Line: 581]: Loop Invariant Derived loop invariant: (((((((((!(NP == 1) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(\old(setEventCalled) == 1)) || !(2 == DC)) || !(compRegistered == 1)) || !(MPR3 == \old(s))) && (((((((((!(NP == 1) || ((\old(customIrp) == customIrp && setEventCalled == \old(setEventCalled)) && s == \old(s))) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: (((((((((((!(NP == 1) || (((returnVal2 <= 0 && 0 <= returnVal2) && MPR1 == s) && __cil_tmp7 + 1073741802 == 0)) || ((1073741823 + returnVal2 <= 0 && MPR1 == s) && __cil_tmp7 + 1073741802 == 0)) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || ((((setEventCalled == 1 && returnVal2 <= 259) && 259 <= returnVal2) && MPR1 == s) && __cil_tmp7 + 1073741802 == 0)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) && ((((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC)) - InvariantResult [Line: 358]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || ((((((status == 0 && 7 <= IPC) && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2) && compRegistered == 0)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: (((((((((compRegistered == 1 || !(NP == 1)) || !(NP == \old(s))) || pended == 1) || !(\old(compRegistered) == 0)) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || compRegistered <= 0) || !(6 <= MPR3)) || !(2 == DC) - InvariantResult [Line: 753]: Loop Invariant Derived loop invariant: (((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC) - InvariantResult [Line: 111]: Loop Invariant Derived loop invariant: ((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(\old(compRegistered) == 0)) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || (((((\old(customIrp) == customIrp && setEventCalled == \old(setEventCalled)) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && compRegistered == 0) && s == \old(s))) || !(6 <= MPR3)) || !(2 == DC) - InvariantResult [Line: 867]: Loop Invariant Derived loop invariant: (((((!(NP == \old(s)) || !(compRegistered == 0)) || pended == 1) || (((setEventCalled == \old(setEventCalled) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s))) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && (compRegistered == 1 || compRegistered <= 0)) && 4 <= SKIP2)) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 699]: Loop Invariant Derived loop invariant: (((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(NP == \old(s))) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 776]: Loop Invariant Derived loop invariant: (((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC) - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: (((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: ((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(\old(compRegistered) == 0)) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || (((((\old(customIrp) == customIrp && setEventCalled == \old(setEventCalled)) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && compRegistered == 0) && s == \old(s))) || !(6 <= MPR3)) || !(2 == DC) - InvariantResult [Line: 603]: Loop Invariant Derived loop invariant: (((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) && ((((((((((!(NP == 1) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(\old(setEventCalled) == 1)) || !(2 == DC)) || !(compRegistered == 1)) || !(MPR3 == \old(s))) - InvariantResult [Line: 891]: Loop Invariant Derived loop invariant: (((((!(NP == \old(s)) || !(compRegistered == 0)) || pended == 1) || (((setEventCalled == \old(setEventCalled) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s))) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 638]: Loop Invariant Derived loop invariant: (((((!(NP == \old(s)) || !(compRegistered == 0)) || pended == 1) || (((setEventCalled == \old(setEventCalled) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s))) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 511]: Loop Invariant Derived loop invariant: ((((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC)) && (((((((((!(NP == 1) || ((setEventCalled == 1 && MPR1 == s) && __cil_tmp7 + 1073741802 == 0)) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) - InvariantResult [Line: 353]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || ((((((status == 0 && 7 <= IPC) && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2) && compRegistered == 0)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 875]: Loop Invariant Derived loop invariant: (((((!(NP == \old(s)) || !(compRegistered == 0)) || pended == 1) || (((setEventCalled == \old(setEventCalled) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s))) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 375]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || status == 0) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 368]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || ((((((status == 0 && 7 <= IPC) && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2) && compRegistered == 0)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 504]: Loop Invariant Derived loop invariant: (((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || (MPR1 == s && __cil_tmp7 + 1073741802 == 0)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) && ((((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC)) - InvariantResult [Line: 373]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || ((((((status == 0 && 7 <= IPC) && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2) && compRegistered == 0)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 363]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || !(\old(s) == \old(MPR1))) || (((((((((6 <= MPR3 && status == 0) && 7 <= IPC) && 5 <= MPR1) && 2 == DC) && !(pended == 1)) && s == NP) && NP == 1) && 4 <= SKIP2) && compRegistered == 0)) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - ProcedureContractResult [Line: 568]: Procedure Contract for KeSetEvent Derived contract for procedure KeSetEvent: ((((((((setEventCalled == 1 || pended == 1) || !(s == NP)) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) || !(s == 1) - ProcedureContractResult [Line: 618]: Procedure Contract for KbFilter_Complete Derived contract for procedure KbFilter_Complete: ((((((((pended == 1 || !(s == NP)) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || ((1073741802 + \result <= 0 && setEventCalled == 1) && 0 <= 1073741802 + \result)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) || !(s == 1) - ProcedureContractResult [Line: 43]: Procedure Contract for stub_driver_init Derived contract for procedure stub_driver_init: ((((((((((!(pended == 1) && compRegistered == 0) && s == \old(s)) || !(NP == 1)) || !(NP == \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(2 == DC) - ProcedureContractResult [Line: 689]: Procedure Contract for KbFilter_Power Derived contract for procedure KbFilter_Power: 1 - ProcedureContractResult [Line: 57]: Procedure Contract for _BLAST_init Derived contract for procedure _BLAST_init: (((((((!(\old(SKIP1) == \old(s)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || ((((((((6 <= MPR3 && 7 <= IPC) && 5 <= MPR1) && 2 == DC) && !(pended == 1)) && NP == 1) && 4 <= SKIP2) && compRegistered == 0) && !(MPR3 == s))) || !(\old(s) == \old(MPR3)) - ProcedureContractResult [Line: 1009]: Procedure Contract for errorFn Derived contract for procedure errorFn: 1 - ProcedureContractResult [Line: 295]: Procedure Contract for main Derived contract for procedure main: 1 - ProcedureContractResult [Line: 481]: Procedure Contract for IofCallDriver Derived contract for procedure IofCallDriver: ((((((((((!(NP == 1) || ((((((setEventCalled == 1 && returnVal2 <= 259) && 259 <= \result) && \result <= 259) && 259 <= returnVal2) && MPR3 == s) && __cil_tmp7 + 1073741802 == 0)) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || (s == NP && __cil_tmp7 + 1073741802 == 0)) || ((((s == NP && returnVal2 <= 0) && 0 <= \result) && 0 <= returnVal2) && \result <= 0)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1) - ProcedureContractResult [Line: 467]: Procedure Contract for stubMoreProcessingRequired Derived contract for procedure stubMoreProcessingRequired: (((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(setEventCalled == 1)) || !(2 == DC)) || MPR1 == s) || !(compRegistered == 1) - ProcedureContractResult [Line: 745]: Procedure Contract for PoCallDriver Derived contract for procedure PoCallDriver: 1 - ProcedureContractResult [Line: 629]: Procedure Contract for KbFilter_CreateClose Derived contract for procedure KbFilter_CreateClose: 1 - ProcedureContractResult [Line: 822]: Procedure Contract for KbFilter_InternIoCtl Derived contract for procedure KbFilter_InternIoCtl: 1 - ProcedureContractResult [Line: 576]: Procedure Contract for KeWaitForSingleObject Derived contract for procedure KeWaitForSingleObject: (((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) && ((((((((((!(NP == 1) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(\old(setEventCalled) == 1)) || !(2 == DC)) || !(compRegistered == 1)) || !(MPR3 == \old(s))) - ProcedureContractResult [Line: 554]: Procedure Contract for IofCompleteRequest Derived contract for procedure IofCompleteRequest: ((((((!(NP == \old(s)) || !(compRegistered == 0)) || pended == 1) || 2 == s) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC)) && ((((((!(NP == \old(s)) || pended == 1) || 2 == s) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC)) || !(compRegistered == 1)) - ProcedureContractResult [Line: 665]: Procedure Contract for KbFilter_DispatchPassThrough Derived contract for procedure KbFilter_DispatchPassThrough: 1 - ProcedureContractResult [Line: 81]: Procedure Contract for KbFilter_PnP Derived contract for procedure KbFilter_PnP: (((((((((compRegistered == 1 || !(NP == 1)) || !(NP == \old(s))) || pended == 1) || !(\old(compRegistered) == 0)) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || compRegistered <= 0) || !(6 <= MPR3)) || !(2 == DC) RESULT: Ultimate proved your program to be correct! [2022-04-28 08:12:35,016 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...