/usr/bin/java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationJordan_32.epf -i ../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-fb4f59a-m [2022-04-28 08:11:45,130 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-04-28 08:11:45,131 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-04-28 08:11:45,197 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-04-28 08:11:45,197 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-04-28 08:11:45,198 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-04-28 08:11:45,200 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-04-28 08:11:45,202 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-04-28 08:11:45,203 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-04-28 08:11:45,207 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-04-28 08:11:45,207 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-04-28 08:11:45,208 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-04-28 08:11:45,208 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-04-28 08:11:45,210 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-04-28 08:11:45,211 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-04-28 08:11:45,213 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-04-28 08:11:45,214 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-04-28 08:11:45,214 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-04-28 08:11:45,216 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-04-28 08:11:45,219 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-04-28 08:11:45,221 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-04-28 08:11:45,222 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-04-28 08:11:45,222 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-04-28 08:11:45,223 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-04-28 08:11:45,224 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-04-28 08:11:45,228 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-04-28 08:11:45,228 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-04-28 08:11:45,229 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-04-28 08:11:45,229 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-04-28 08:11:45,229 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-04-28 08:11:45,230 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-04-28 08:11:45,230 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-04-28 08:11:45,230 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-04-28 08:11:45,231 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-04-28 08:11:45,231 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-04-28 08:11:45,232 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-04-28 08:11:45,232 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-04-28 08:11:45,232 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-04-28 08:11:45,232 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-04-28 08:11:45,232 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-04-28 08:11:45,233 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-04-28 08:11:45,234 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-04-28 08:11:45,234 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationJordan_32.epf [2022-04-28 08:11:45,243 INFO L113 SettingsManager]: Loading preferences was successful [2022-04-28 08:11:45,244 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-04-28 08:11:45,245 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-04-28 08:11:45,245 INFO L138 SettingsManager]: * sizeof long=4 [2022-04-28 08:11:45,245 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-04-28 08:11:45,245 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-04-28 08:11:45,245 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-04-28 08:11:45,245 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-04-28 08:11:45,245 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-04-28 08:11:45,246 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-04-28 08:11:45,246 INFO L138 SettingsManager]: * sizeof long double=12 [2022-04-28 08:11:45,246 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-04-28 08:11:45,246 INFO L138 SettingsManager]: * Use constant arrays=true [2022-04-28 08:11:45,246 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-04-28 08:11:45,246 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-04-28 08:11:45,246 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-04-28 08:11:45,246 INFO L138 SettingsManager]: * To the following directory=./dump/ [2022-04-28 08:11:45,246 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-04-28 08:11:45,247 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-28 08:11:45,247 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-04-28 08:11:45,247 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=Craig_NestedInterpolation [2022-04-28 08:11:45,247 INFO L138 SettingsManager]: * Trace refinement strategy=ACCELERATED_INTERPOLATION [2022-04-28 08:11:45,247 INFO L138 SettingsManager]: * Trace refinement strategy used in Accelerated Interpolation=CAMEL [2022-04-28 08:11:45,247 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-04-28 08:11:45,247 INFO L138 SettingsManager]: * Loop acceleration method that is used by accelerated interpolation=JORDAN [2022-04-28 08:11:45,248 INFO L138 SettingsManager]: * Use separate solver for trace checks=false WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-04-28 08:11:45,418 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-04-28 08:11:45,433 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-04-28 08:11:45,435 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-04-28 08:11:45,436 INFO L271 PluginConnector]: Initializing CDTParser... [2022-04-28 08:11:45,438 INFO L275 PluginConnector]: CDTParser initialized [2022-04-28 08:11:45,440 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c [2022-04-28 08:11:45,503 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6b2b224e6/c50da680172c48939754b7bbd74e6bfe/FLAG4f4cbfe7e [2022-04-28 08:11:45,864 INFO L306 CDTParser]: Found 1 translation units. [2022-04-28 08:11:45,864 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c [2022-04-28 08:11:45,872 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6b2b224e6/c50da680172c48939754b7bbd74e6bfe/FLAG4f4cbfe7e [2022-04-28 08:11:45,883 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6b2b224e6/c50da680172c48939754b7bbd74e6bfe [2022-04-28 08:11:45,884 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-04-28 08:11:45,885 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2022-04-28 08:11:45,886 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-04-28 08:11:45,886 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-04-28 08:11:45,888 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-04-28 08:11:45,889 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.04 08:11:45" (1/1) ... [2022-04-28 08:11:45,890 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@417dc749 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:45, skipping insertion in model container [2022-04-28 08:11:45,890 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.04 08:11:45" (1/1) ... [2022-04-28 08:11:45,894 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-04-28 08:11:45,931 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-04-28 08:11:46,118 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c[29656,29669] [2022-04-28 08:11:46,120 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-28 08:11:46,126 INFO L203 MainTranslator]: Completed pre-run [2022-04-28 08:11:46,189 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c[29656,29669] [2022-04-28 08:11:46,190 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-28 08:11:46,205 INFO L208 MainTranslator]: Completed translation [2022-04-28 08:11:46,206 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:46 WrapperNode [2022-04-28 08:11:46,206 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-04-28 08:11:46,207 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-04-28 08:11:46,207 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-04-28 08:11:46,207 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-04-28 08:11:46,215 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:46" (1/1) ... [2022-04-28 08:11:46,215 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:46" (1/1) ... [2022-04-28 08:11:46,241 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:46" (1/1) ... [2022-04-28 08:11:46,241 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:46" (1/1) ... [2022-04-28 08:11:46,262 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:46" (1/1) ... [2022-04-28 08:11:46,278 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:46" (1/1) ... [2022-04-28 08:11:46,280 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:46" (1/1) ... [2022-04-28 08:11:46,284 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-04-28 08:11:46,284 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-04-28 08:11:46,284 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-04-28 08:11:46,284 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-04-28 08:11:46,296 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:46" (1/1) ... [2022-04-28 08:11:46,301 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-28 08:11:46,308 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 08:11:46,317 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-04-28 08:11:46,322 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-04-28 08:11:46,350 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2022-04-28 08:11:46,350 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-04-28 08:11:46,350 INFO L138 BoogieDeclarations]: Found implementation of procedure reach_error [2022-04-28 08:11:46,350 INFO L138 BoogieDeclarations]: Found implementation of procedure stub_driver_init [2022-04-28 08:11:46,350 INFO L138 BoogieDeclarations]: Found implementation of procedure _BLAST_init [2022-04-28 08:11:46,350 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_PnP [2022-04-28 08:11:46,350 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2022-04-28 08:11:46,350 INFO L138 BoogieDeclarations]: Found implementation of procedure stubMoreProcessingRequired [2022-04-28 08:11:46,350 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCallDriver [2022-04-28 08:11:46,350 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCompleteRequest [2022-04-28 08:11:46,350 INFO L138 BoogieDeclarations]: Found implementation of procedure KeSetEvent [2022-04-28 08:11:46,350 INFO L138 BoogieDeclarations]: Found implementation of procedure KeWaitForSingleObject [2022-04-28 08:11:46,351 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Complete [2022-04-28 08:11:46,351 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_CreateClose [2022-04-28 08:11:46,351 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_DispatchPassThrough [2022-04-28 08:11:46,351 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Power [2022-04-28 08:11:46,351 INFO L138 BoogieDeclarations]: Found implementation of procedure PoCallDriver [2022-04-28 08:11:46,351 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_InternIoCtl [2022-04-28 08:11:46,351 INFO L138 BoogieDeclarations]: Found implementation of procedure errorFn [2022-04-28 08:11:46,351 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2022-04-28 08:11:46,351 INFO L130 BoogieDeclarations]: Found specification of procedure __assert_fail [2022-04-28 08:11:46,351 INFO L130 BoogieDeclarations]: Found specification of procedure reach_error [2022-04-28 08:11:46,351 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-04-28 08:11:46,351 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_char [2022-04-28 08:11:46,351 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2022-04-28 08:11:46,351 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_long [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_PnP [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure IofCallDriver [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure KeSetEvent [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure KeWaitForSingleObject [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Complete [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_CreateClose [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_DispatchPassThrough [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Power [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure PoCallDriver [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_InternIoCtl [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure errorFn [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure IofCompleteRequest [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure stub_driver_init [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure _BLAST_init [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure main [2022-04-28 08:11:46,352 INFO L130 BoogieDeclarations]: Found specification of procedure stubMoreProcessingRequired [2022-04-28 08:11:46,353 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2022-04-28 08:11:46,353 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-04-28 08:11:46,353 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-04-28 08:11:46,353 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-04-28 08:11:46,353 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-04-28 08:11:46,353 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-04-28 08:11:46,443 INFO L234 CfgBuilder]: Building ICFG [2022-04-28 08:11:46,444 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-04-28 08:11:46,531 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:11:46,629 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##18: assume false; [2022-04-28 08:11:46,629 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##19: assume !false; [2022-04-28 08:11:46,632 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:11:46,658 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-28 08:11:46,658 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-28 08:11:46,739 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:11:46,751 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##16: assume !false; [2022-04-28 08:11:46,751 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##15: assume false; [2022-04-28 08:11:46,760 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:11:46,846 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##43: assume false; [2022-04-28 08:11:46,846 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##44: assume !false; [2022-04-28 08:11:46,850 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:11:46,875 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##10: assume !false; [2022-04-28 08:11:46,875 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##9: assume false; [2022-04-28 08:11:46,879 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 08:11:46,915 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-28 08:11:46,916 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-28 08:11:46,958 INFO L275 CfgBuilder]: Performing block encoding [2022-04-28 08:11:46,965 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-04-28 08:11:46,965 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-04-28 08:11:46,966 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.04 08:11:46 BoogieIcfgContainer [2022-04-28 08:11:46,966 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-04-28 08:11:46,972 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-04-28 08:11:46,972 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-04-28 08:11:46,975 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-04-28 08:11:46,975 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.04 08:11:45" (1/3) ... [2022-04-28 08:11:46,976 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7b14777c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.04 08:11:46, skipping insertion in model container [2022-04-28 08:11:46,976 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 08:11:46" (2/3) ... [2022-04-28 08:11:46,976 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7b14777c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.04 08:11:46, skipping insertion in model container [2022-04-28 08:11:46,976 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.04 08:11:46" (3/3) ... [2022-04-28 08:11:46,977 INFO L111 eAbstractionObserver]: Analyzing ICFG kbfiltr_simpl2.cil-2.c [2022-04-28 08:11:46,987 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:Craig_NestedInterpolation Determinization: PREDICATE_ABSTRACTION [2022-04-28 08:11:46,987 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-04-28 08:11:47,033 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-04-28 08:11:47,038 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=Craig_NestedInterpolation, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@5fad1a55, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@665dbcc3 [2022-04-28 08:11:47,038 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-04-28 08:11:47,046 INFO L276 IsEmpty]: Start isEmpty. Operand has 240 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 200 states have internal predecessors, (284), 39 states have call successors, (39), 17 states have call predecessors, (39), 17 states have return successors, (39), 37 states have call predecessors, (39), 39 states have call successors, (39) [2022-04-28 08:11:47,051 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-04-28 08:11:47,051 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:11:47,052 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:11:47,052 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:11:47,055 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:11:47,055 INFO L85 PathProgramCache]: Analyzing trace with hash -1235546278, now seen corresponding path program 1 times [2022-04-28 08:11:47,061 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:47,061 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1879279179] [2022-04-28 08:11:47,068 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:11:47,068 INFO L85 PathProgramCache]: Analyzing trace with hash -1235546278, now seen corresponding path program 2 times [2022-04-28 08:11:47,070 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:11:47,070 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1087928280] [2022-04-28 08:11:47,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:11:47,071 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:11:47,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:47,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:11:47,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:47,366 INFO L290 TraceCheckUtils]: 0: Hoare triple {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {243#true} is VALID [2022-04-28 08:11:47,366 INFO L290 TraceCheckUtils]: 1: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-28 08:11:47,367 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {243#true} {243#true} #783#return; {243#true} is VALID [2022-04-28 08:11:47,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:11:47,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:47,413 INFO L290 TraceCheckUtils]: 0: Hoare triple {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {243#true} is VALID [2022-04-28 08:11:47,414 INFO L290 TraceCheckUtils]: 1: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-28 08:11:47,415 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {243#true} {248#(= main_~status~1 0)} #715#return; {248#(= main_~status~1 0)} is VALID [2022-04-28 08:11:47,416 INFO L272 TraceCheckUtils]: 0: Hoare triple {243#true} call ULTIMATE.init(); {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:11:47,417 INFO L290 TraceCheckUtils]: 1: Hoare triple {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {243#true} is VALID [2022-04-28 08:11:47,417 INFO L290 TraceCheckUtils]: 2: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-28 08:11:47,417 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {243#true} {243#true} #783#return; {243#true} is VALID [2022-04-28 08:11:47,417 INFO L272 TraceCheckUtils]: 4: Hoare triple {243#true} call #t~ret81 := main(); {243#true} is VALID [2022-04-28 08:11:47,418 INFO L290 TraceCheckUtils]: 5: Hoare triple {243#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {248#(= main_~status~1 0)} is VALID [2022-04-28 08:11:47,419 INFO L272 TraceCheckUtils]: 6: Hoare triple {248#(= main_~status~1 0)} call _BLAST_init(); {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:47,419 INFO L290 TraceCheckUtils]: 7: Hoare triple {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {243#true} is VALID [2022-04-28 08:11:47,420 INFO L290 TraceCheckUtils]: 8: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-28 08:11:47,420 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {243#true} {248#(= main_~status~1 0)} #715#return; {248#(= main_~status~1 0)} is VALID [2022-04-28 08:11:47,421 INFO L290 TraceCheckUtils]: 10: Hoare triple {248#(= main_~status~1 0)} assume !(~status~1 >= 0); {244#false} is VALID [2022-04-28 08:11:47,421 INFO L290 TraceCheckUtils]: 11: Hoare triple {244#false} assume !(1 == ~pended~0); {244#false} is VALID [2022-04-28 08:11:47,422 INFO L290 TraceCheckUtils]: 12: Hoare triple {244#false} assume !(1 == ~pended~0); {244#false} is VALID [2022-04-28 08:11:47,422 INFO L290 TraceCheckUtils]: 13: Hoare triple {244#false} assume ~s~0 != ~UNLOADED~0; {244#false} is VALID [2022-04-28 08:11:47,422 INFO L290 TraceCheckUtils]: 14: Hoare triple {244#false} assume -1 != ~status~1; {244#false} is VALID [2022-04-28 08:11:47,423 INFO L290 TraceCheckUtils]: 15: Hoare triple {244#false} assume !(~s~0 != ~SKIP2~0); {244#false} is VALID [2022-04-28 08:11:47,423 INFO L290 TraceCheckUtils]: 16: Hoare triple {244#false} assume 1 == ~pended~0; {244#false} is VALID [2022-04-28 08:11:47,423 INFO L290 TraceCheckUtils]: 17: Hoare triple {244#false} assume 259 != ~status~1; {244#false} is VALID [2022-04-28 08:11:47,423 INFO L272 TraceCheckUtils]: 18: Hoare triple {244#false} call errorFn(); {244#false} is VALID [2022-04-28 08:11:47,424 INFO L290 TraceCheckUtils]: 19: Hoare triple {244#false} assume !false; {244#false} is VALID [2022-04-28 08:11:47,424 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:11:47,425 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:11:47,425 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1087928280] [2022-04-28 08:11:47,426 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1087928280] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:47,426 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:47,428 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-28 08:11:47,431 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:11:47,435 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1879279179] [2022-04-28 08:11:47,435 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1879279179] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:47,435 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:47,435 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-28 08:11:47,436 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [766337100] [2022-04-28 08:11:47,436 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:11:47,440 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-28 08:11:47,442 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:11:47,444 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-28 08:11:47,469 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:47,470 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-04-28 08:11:47,470 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:47,494 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-04-28 08:11:47,495 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-28 08:11:47,503 INFO L87 Difference]: Start difference. First operand has 240 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 200 states have internal predecessors, (284), 39 states have call successors, (39), 17 states have call predecessors, (39), 17 states have return successors, (39), 37 states have call predecessors, (39), 39 states have call successors, (39) Second operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-28 08:11:49,033 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:49,035 INFO L93 Difference]: Finished difference Result 417 states and 628 transitions. [2022-04-28 08:11:49,035 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-04-28 08:11:49,036 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-28 08:11:49,036 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:11:49,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-28 08:11:49,071 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 628 transitions. [2022-04-28 08:11:49,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-28 08:11:49,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 628 transitions. [2022-04-28 08:11:49,085 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 5 states and 628 transitions. [2022-04-28 08:11:49,645 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 628 edges. 628 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:49,659 INFO L225 Difference]: With dead ends: 417 [2022-04-28 08:11:49,659 INFO L226 Difference]: Without dead ends: 259 [2022-04-28 08:11:49,663 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-28 08:11:49,665 INFO L413 NwaCegarLoop]: 297 mSDtfsCounter, 328 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 410 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 334 SdHoareTripleChecker+Valid, 444 SdHoareTripleChecker+Invalid, 491 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 410 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-28 08:11:49,665 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [334 Valid, 444 Invalid, 491 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 410 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-28 08:11:49,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-04-28 08:11:49,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 231. [2022-04-28 08:11:49,729 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:11:49,734 INFO L82 GeneralOperation]: Start isEquivalent. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-28 08:11:49,736 INFO L74 IsIncluded]: Start isIncluded. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-28 08:11:49,736 INFO L87 Difference]: Start difference. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-28 08:11:49,751 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:49,751 INFO L93 Difference]: Finished difference Result 259 states and 367 transitions. [2022-04-28 08:11:49,751 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 367 transitions. [2022-04-28 08:11:49,759 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:49,759 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:49,760 INFO L74 IsIncluded]: Start isIncluded. First operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 259 states. [2022-04-28 08:11:49,761 INFO L87 Difference]: Start difference. First operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 259 states. [2022-04-28 08:11:49,770 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:49,770 INFO L93 Difference]: Finished difference Result 259 states and 367 transitions. [2022-04-28 08:11:49,770 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 367 transitions. [2022-04-28 08:11:49,771 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:49,771 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:49,771 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:11:49,771 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:11:49,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-28 08:11:49,781 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 326 transitions. [2022-04-28 08:11:49,783 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 326 transitions. Word has length 20 [2022-04-28 08:11:49,783 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:11:49,783 INFO L495 AbstractCegarLoop]: Abstraction has 231 states and 326 transitions. [2022-04-28 08:11:49,784 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-28 08:11:49,784 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 231 states and 326 transitions. [2022-04-28 08:11:50,070 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 326 edges. 326 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:50,070 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 326 transitions. [2022-04-28 08:11:50,071 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-28 08:11:50,071 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:11:50,071 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:11:50,071 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-04-28 08:11:50,071 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:11:50,072 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:11:50,072 INFO L85 PathProgramCache]: Analyzing trace with hash -225403307, now seen corresponding path program 1 times [2022-04-28 08:11:50,072 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:50,072 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [718394682] [2022-04-28 08:11:50,072 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:11:50,072 INFO L85 PathProgramCache]: Analyzing trace with hash -225403307, now seen corresponding path program 2 times [2022-04-28 08:11:50,072 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:11:50,073 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1322584715] [2022-04-28 08:11:50,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:11:50,073 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:11:50,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:50,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:11:50,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:50,179 INFO L290 TraceCheckUtils]: 0: Hoare triple {2082#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {2070#true} is VALID [2022-04-28 08:11:50,179 INFO L290 TraceCheckUtils]: 1: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-28 08:11:50,179 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2070#true} {2070#true} #783#return; {2070#true} is VALID [2022-04-28 08:11:50,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:11:50,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:50,203 INFO L290 TraceCheckUtils]: 0: Hoare triple {2083#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2070#true} is VALID [2022-04-28 08:11:50,203 INFO L290 TraceCheckUtils]: 1: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-28 08:11:50,204 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2070#true} {2070#true} #715#return; {2070#true} is VALID [2022-04-28 08:11:50,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:11:50,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:50,219 INFO L290 TraceCheckUtils]: 0: Hoare triple {2084#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:50,220 INFO L290 TraceCheckUtils]: 1: Hoare triple {2081#(= ~s~0 ~NP~0)} assume true; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:50,220 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2081#(= ~s~0 ~NP~0)} {2070#true} #717#return; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:50,221 INFO L272 TraceCheckUtils]: 0: Hoare triple {2070#true} call ULTIMATE.init(); {2082#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:11:50,221 INFO L290 TraceCheckUtils]: 1: Hoare triple {2082#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {2070#true} is VALID [2022-04-28 08:11:50,222 INFO L290 TraceCheckUtils]: 2: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-28 08:11:50,222 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {2070#true} {2070#true} #783#return; {2070#true} is VALID [2022-04-28 08:11:50,222 INFO L272 TraceCheckUtils]: 4: Hoare triple {2070#true} call #t~ret81 := main(); {2070#true} is VALID [2022-04-28 08:11:50,222 INFO L290 TraceCheckUtils]: 5: Hoare triple {2070#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {2070#true} is VALID [2022-04-28 08:11:50,223 INFO L272 TraceCheckUtils]: 6: Hoare triple {2070#true} call _BLAST_init(); {2083#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:50,223 INFO L290 TraceCheckUtils]: 7: Hoare triple {2083#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2070#true} is VALID [2022-04-28 08:11:50,223 INFO L290 TraceCheckUtils]: 8: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-28 08:11:50,223 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {2070#true} {2070#true} #715#return; {2070#true} is VALID [2022-04-28 08:11:50,224 INFO L290 TraceCheckUtils]: 10: Hoare triple {2070#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {2070#true} is VALID [2022-04-28 08:11:50,224 INFO L290 TraceCheckUtils]: 11: Hoare triple {2070#true} assume !(0 == ~irp_choice~0); {2070#true} is VALID [2022-04-28 08:11:50,225 INFO L272 TraceCheckUtils]: 12: Hoare triple {2070#true} call stub_driver_init(); {2084#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:50,225 INFO L290 TraceCheckUtils]: 13: Hoare triple {2084#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:50,227 INFO L290 TraceCheckUtils]: 14: Hoare triple {2081#(= ~s~0 ~NP~0)} assume true; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:50,228 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {2081#(= ~s~0 ~NP~0)} {2070#true} #717#return; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:50,228 INFO L290 TraceCheckUtils]: 16: Hoare triple {2081#(= ~s~0 ~NP~0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:50,229 INFO L290 TraceCheckUtils]: 17: Hoare triple {2081#(= ~s~0 ~NP~0)} assume 0 == ~tmp_ndt_1~0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:50,229 INFO L272 TraceCheckUtils]: 18: Hoare triple {2081#(= ~s~0 ~NP~0)} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:50,229 INFO L290 TraceCheckUtils]: 19: Hoare triple {2081#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:50,230 INFO L290 TraceCheckUtils]: 20: Hoare triple {2081#(= ~s~0 ~NP~0)} assume 0 == ~irpStack__MajorFunction~0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:50,231 INFO L290 TraceCheckUtils]: 21: Hoare triple {2081#(= ~s~0 ~NP~0)} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:50,231 INFO L290 TraceCheckUtils]: 22: Hoare triple {2081#(= ~s~0 ~NP~0)} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:50,232 INFO L272 TraceCheckUtils]: 23: Hoare triple {2081#(= ~s~0 ~NP~0)} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:50,232 INFO L290 TraceCheckUtils]: 24: Hoare triple {2081#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 08:11:50,232 INFO L290 TraceCheckUtils]: 25: Hoare triple {2081#(= ~s~0 ~NP~0)} assume !(~s~0 == ~NP~0); {2071#false} is VALID [2022-04-28 08:11:50,233 INFO L272 TraceCheckUtils]: 26: Hoare triple {2071#false} call errorFn(); {2071#false} is VALID [2022-04-28 08:11:50,233 INFO L290 TraceCheckUtils]: 27: Hoare triple {2071#false} assume !false; {2071#false} is VALID [2022-04-28 08:11:50,233 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:11:50,233 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:11:50,233 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1322584715] [2022-04-28 08:11:50,233 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1322584715] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:50,234 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:50,234 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 08:11:50,234 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:11:50,234 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [718394682] [2022-04-28 08:11:50,234 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [718394682] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:50,234 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:50,234 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 08:11:50,234 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1965680042] [2022-04-28 08:11:50,234 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:11:50,235 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-28 08:11:50,236 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:11:50,236 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:50,254 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:50,254 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-28 08:11:50,254 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:50,255 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-28 08:11:50,255 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-28 08:11:50,255 INFO L87 Difference]: Start difference. First operand 231 states and 326 transitions. Second operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:51,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:51,721 INFO L93 Difference]: Finished difference Result 410 states and 565 transitions. [2022-04-28 08:11:51,721 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-28 08:11:51,721 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-28 08:11:51,722 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:11:51,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:51,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 565 transitions. [2022-04-28 08:11:51,728 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:51,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 565 transitions. [2022-04-28 08:11:51,734 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 565 transitions. [2022-04-28 08:11:52,215 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 565 edges. 565 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:52,223 INFO L225 Difference]: With dead ends: 410 [2022-04-28 08:11:52,223 INFO L226 Difference]: Without dead ends: 349 [2022-04-28 08:11:52,223 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-28 08:11:52,224 INFO L413 NwaCegarLoop]: 361 mSDtfsCounter, 537 mSDsluCounter, 114 mSDsCounter, 0 mSdLazyCounter, 378 mSolverCounterSat, 96 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 537 SdHoareTripleChecker+Valid, 475 SdHoareTripleChecker+Invalid, 474 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 378 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-28 08:11:52,224 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [537 Valid, 475 Invalid, 474 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 378 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-28 08:11:52,226 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 349 states. [2022-04-28 08:11:52,250 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 349 to 304. [2022-04-28 08:11:52,250 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:11:52,251 INFO L82 GeneralOperation]: Start isEquivalent. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-28 08:11:52,252 INFO L74 IsIncluded]: Start isIncluded. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-28 08:11:52,252 INFO L87 Difference]: Start difference. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-28 08:11:52,262 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:52,262 INFO L93 Difference]: Finished difference Result 349 states and 477 transitions. [2022-04-28 08:11:52,262 INFO L276 IsEmpty]: Start isEmpty. Operand 349 states and 477 transitions. [2022-04-28 08:11:52,263 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:52,263 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:52,264 INFO L74 IsIncluded]: Start isIncluded. First operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 349 states. [2022-04-28 08:11:52,264 INFO L87 Difference]: Start difference. First operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 349 states. [2022-04-28 08:11:52,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:52,274 INFO L93 Difference]: Finished difference Result 349 states and 477 transitions. [2022-04-28 08:11:52,274 INFO L276 IsEmpty]: Start isEmpty. Operand 349 states and 477 transitions. [2022-04-28 08:11:52,274 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:52,275 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:52,275 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:11:52,275 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:11:52,276 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-28 08:11:52,284 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 415 transitions. [2022-04-28 08:11:52,284 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 415 transitions. Word has length 28 [2022-04-28 08:11:52,285 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:11:52,285 INFO L495 AbstractCegarLoop]: Abstraction has 304 states and 415 transitions. [2022-04-28 08:11:52,285 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:52,285 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 304 states and 415 transitions. [2022-04-28 08:11:52,651 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 415 edges. 415 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:52,651 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 415 transitions. [2022-04-28 08:11:52,652 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-28 08:11:52,652 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:11:52,652 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:11:52,652 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-04-28 08:11:52,652 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:11:52,653 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:11:52,653 INFO L85 PathProgramCache]: Analyzing trace with hash -809602478, now seen corresponding path program 1 times [2022-04-28 08:11:52,653 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:52,653 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1673953776] [2022-04-28 08:11:52,653 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:11:52,653 INFO L85 PathProgramCache]: Analyzing trace with hash -809602478, now seen corresponding path program 2 times [2022-04-28 08:11:52,653 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:11:52,653 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [399224527] [2022-04-28 08:11:52,654 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:11:52,654 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:11:52,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:52,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:11:52,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:52,731 INFO L290 TraceCheckUtils]: 0: Hoare triple {4230#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {4218#true} is VALID [2022-04-28 08:11:52,731 INFO L290 TraceCheckUtils]: 1: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-28 08:11:52,732 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4218#true} {4218#true} #783#return; {4218#true} is VALID [2022-04-28 08:11:52,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:11:52,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:52,758 INFO L290 TraceCheckUtils]: 0: Hoare triple {4231#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4218#true} is VALID [2022-04-28 08:11:52,759 INFO L290 TraceCheckUtils]: 1: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-28 08:11:52,759 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4218#true} {4218#true} #715#return; {4218#true} is VALID [2022-04-28 08:11:52,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:11:52,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:52,775 INFO L290 TraceCheckUtils]: 0: Hoare triple {4232#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:52,775 INFO L290 TraceCheckUtils]: 1: Hoare triple {4229#(= ~compRegistered~0 0)} assume true; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:52,776 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4229#(= ~compRegistered~0 0)} {4218#true} #717#return; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:52,777 INFO L272 TraceCheckUtils]: 0: Hoare triple {4218#true} call ULTIMATE.init(); {4230#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:11:52,777 INFO L290 TraceCheckUtils]: 1: Hoare triple {4230#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {4218#true} is VALID [2022-04-28 08:11:52,777 INFO L290 TraceCheckUtils]: 2: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-28 08:11:52,777 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {4218#true} {4218#true} #783#return; {4218#true} is VALID [2022-04-28 08:11:52,777 INFO L272 TraceCheckUtils]: 4: Hoare triple {4218#true} call #t~ret81 := main(); {4218#true} is VALID [2022-04-28 08:11:52,777 INFO L290 TraceCheckUtils]: 5: Hoare triple {4218#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {4218#true} is VALID [2022-04-28 08:11:52,778 INFO L272 TraceCheckUtils]: 6: Hoare triple {4218#true} call _BLAST_init(); {4231#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:52,778 INFO L290 TraceCheckUtils]: 7: Hoare triple {4231#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4218#true} is VALID [2022-04-28 08:11:52,778 INFO L290 TraceCheckUtils]: 8: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-28 08:11:52,778 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {4218#true} {4218#true} #715#return; {4218#true} is VALID [2022-04-28 08:11:52,779 INFO L290 TraceCheckUtils]: 10: Hoare triple {4218#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {4218#true} is VALID [2022-04-28 08:11:52,779 INFO L290 TraceCheckUtils]: 11: Hoare triple {4218#true} assume !(0 == ~irp_choice~0); {4218#true} is VALID [2022-04-28 08:11:52,779 INFO L272 TraceCheckUtils]: 12: Hoare triple {4218#true} call stub_driver_init(); {4232#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:52,780 INFO L290 TraceCheckUtils]: 13: Hoare triple {4232#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:52,780 INFO L290 TraceCheckUtils]: 14: Hoare triple {4229#(= ~compRegistered~0 0)} assume true; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:52,780 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {4229#(= ~compRegistered~0 0)} {4218#true} #717#return; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:52,781 INFO L290 TraceCheckUtils]: 16: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:52,781 INFO L290 TraceCheckUtils]: 17: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:52,785 INFO L290 TraceCheckUtils]: 18: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:52,785 INFO L290 TraceCheckUtils]: 19: Hoare triple {4229#(= ~compRegistered~0 0)} assume 3 == ~tmp_ndt_3~0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:52,786 INFO L272 TraceCheckUtils]: 20: Hoare triple {4229#(= ~compRegistered~0 0)} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:52,786 INFO L290 TraceCheckUtils]: 21: Hoare triple {4229#(= ~compRegistered~0 0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:52,786 INFO L290 TraceCheckUtils]: 22: Hoare triple {4229#(= ~compRegistered~0 0)} assume 0 == ~irpStack__MinorFunction~0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:52,787 INFO L290 TraceCheckUtils]: 23: Hoare triple {4229#(= ~compRegistered~0 0)} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:52,787 INFO L290 TraceCheckUtils]: 24: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(~s~0 != ~NP~0); {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:52,787 INFO L290 TraceCheckUtils]: 25: Hoare triple {4229#(= ~compRegistered~0 0)} assume 0 != ~compRegistered~0; {4219#false} is VALID [2022-04-28 08:11:52,787 INFO L272 TraceCheckUtils]: 26: Hoare triple {4219#false} call errorFn(); {4219#false} is VALID [2022-04-28 08:11:52,788 INFO L290 TraceCheckUtils]: 27: Hoare triple {4219#false} assume !false; {4219#false} is VALID [2022-04-28 08:11:52,788 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:11:52,788 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:11:52,788 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [399224527] [2022-04-28 08:11:52,788 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [399224527] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:52,788 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:52,788 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 08:11:52,789 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:11:52,789 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1673953776] [2022-04-28 08:11:52,789 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1673953776] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:52,789 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:52,789 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 08:11:52,789 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [867203607] [2022-04-28 08:11:52,789 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:11:52,789 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-28 08:11:52,790 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:11:52,790 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:52,809 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:52,809 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-28 08:11:52,809 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:52,810 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-28 08:11:52,810 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-28 08:11:52,810 INFO L87 Difference]: Start difference. First operand 304 states and 415 transitions. Second operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:54,223 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:54,223 INFO L93 Difference]: Finished difference Result 487 states and 647 transitions. [2022-04-28 08:11:54,223 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-28 08:11:54,224 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-28 08:11:54,224 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:11:54,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:54,230 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 515 transitions. [2022-04-28 08:11:54,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:54,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 515 transitions. [2022-04-28 08:11:54,235 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 515 transitions. [2022-04-28 08:11:54,626 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 515 edges. 515 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:54,633 INFO L225 Difference]: With dead ends: 487 [2022-04-28 08:11:54,634 INFO L226 Difference]: Without dead ends: 368 [2022-04-28 08:11:54,634 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-28 08:11:54,635 INFO L413 NwaCegarLoop]: 267 mSDtfsCounter, 572 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 330 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 572 SdHoareTripleChecker+Valid, 386 SdHoareTripleChecker+Invalid, 431 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 330 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-28 08:11:54,635 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [572 Valid, 386 Invalid, 431 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 330 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-28 08:11:54,636 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 368 states. [2022-04-28 08:11:54,656 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 368 to 344. [2022-04-28 08:11:54,656 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:11:54,657 INFO L82 GeneralOperation]: Start isEquivalent. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:54,657 INFO L74 IsIncluded]: Start isIncluded. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:54,658 INFO L87 Difference]: Start difference. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:54,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:54,667 INFO L93 Difference]: Finished difference Result 368 states and 494 transitions. [2022-04-28 08:11:54,667 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 494 transitions. [2022-04-28 08:11:54,668 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:54,668 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:54,669 INFO L74 IsIncluded]: Start isIncluded. First operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 368 states. [2022-04-28 08:11:54,670 INFO L87 Difference]: Start difference. First operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 368 states. [2022-04-28 08:11:54,677 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:54,678 INFO L93 Difference]: Finished difference Result 368 states and 494 transitions. [2022-04-28 08:11:54,678 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 494 transitions. [2022-04-28 08:11:54,678 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:54,678 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:54,679 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:11:54,679 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:11:54,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:54,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 344 states to 344 states and 466 transitions. [2022-04-28 08:11:54,688 INFO L78 Accepts]: Start accepts. Automaton has 344 states and 466 transitions. Word has length 28 [2022-04-28 08:11:54,689 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:11:54,689 INFO L495 AbstractCegarLoop]: Abstraction has 344 states and 466 transitions. [2022-04-28 08:11:54,689 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:54,689 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 344 states and 466 transitions. [2022-04-28 08:11:55,133 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 466 edges. 466 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:55,134 INFO L276 IsEmpty]: Start isEmpty. Operand 344 states and 466 transitions. [2022-04-28 08:11:55,134 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-04-28 08:11:55,135 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:11:55,135 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:11:55,135 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-04-28 08:11:55,135 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:11:55,135 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:11:55,135 INFO L85 PathProgramCache]: Analyzing trace with hash -1415760533, now seen corresponding path program 1 times [2022-04-28 08:11:55,135 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:55,136 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1670868205] [2022-04-28 08:11:55,136 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:11:55,136 INFO L85 PathProgramCache]: Analyzing trace with hash -1415760533, now seen corresponding path program 2 times [2022-04-28 08:11:55,136 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:11:55,136 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [93095146] [2022-04-28 08:11:55,136 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:11:55,136 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:11:55,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:55,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:11:55,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:55,226 INFO L290 TraceCheckUtils]: 0: Hoare triple {6650#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6638#true} is VALID [2022-04-28 08:11:55,227 INFO L290 TraceCheckUtils]: 1: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-28 08:11:55,228 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6638#true} {6638#true} #783#return; {6638#true} is VALID [2022-04-28 08:11:55,245 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:11:55,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:55,253 INFO L290 TraceCheckUtils]: 0: Hoare triple {6651#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-28 08:11:55,253 INFO L290 TraceCheckUtils]: 1: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-28 08:11:55,253 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6638#true} {6638#true} #715#return; {6638#true} is VALID [2022-04-28 08:11:55,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:11:55,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:55,274 INFO L290 TraceCheckUtils]: 0: Hoare triple {6652#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-28 08:11:55,274 INFO L290 TraceCheckUtils]: 1: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-28 08:11:55,274 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6638#true} {6638#true} #717#return; {6638#true} is VALID [2022-04-28 08:11:55,275 INFO L272 TraceCheckUtils]: 0: Hoare triple {6638#true} call ULTIMATE.init(); {6650#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:11:55,276 INFO L290 TraceCheckUtils]: 1: Hoare triple {6650#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6638#true} is VALID [2022-04-28 08:11:55,276 INFO L290 TraceCheckUtils]: 2: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-28 08:11:55,276 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {6638#true} {6638#true} #783#return; {6638#true} is VALID [2022-04-28 08:11:55,276 INFO L272 TraceCheckUtils]: 4: Hoare triple {6638#true} call #t~ret81 := main(); {6638#true} is VALID [2022-04-28 08:11:55,277 INFO L290 TraceCheckUtils]: 5: Hoare triple {6638#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {6638#true} is VALID [2022-04-28 08:11:55,278 INFO L272 TraceCheckUtils]: 6: Hoare triple {6638#true} call _BLAST_init(); {6651#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:55,278 INFO L290 TraceCheckUtils]: 7: Hoare triple {6651#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-28 08:11:55,279 INFO L290 TraceCheckUtils]: 8: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-28 08:11:55,280 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {6638#true} {6638#true} #715#return; {6638#true} is VALID [2022-04-28 08:11:55,280 INFO L290 TraceCheckUtils]: 10: Hoare triple {6638#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {6638#true} is VALID [2022-04-28 08:11:55,280 INFO L290 TraceCheckUtils]: 11: Hoare triple {6638#true} assume !(0 == ~irp_choice~0); {6638#true} is VALID [2022-04-28 08:11:55,281 INFO L272 TraceCheckUtils]: 12: Hoare triple {6638#true} call stub_driver_init(); {6652#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:55,281 INFO L290 TraceCheckUtils]: 13: Hoare triple {6652#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-28 08:11:55,281 INFO L290 TraceCheckUtils]: 14: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-28 08:11:55,281 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {6638#true} {6638#true} #717#return; {6638#true} is VALID [2022-04-28 08:11:55,281 INFO L290 TraceCheckUtils]: 16: Hoare triple {6638#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {6638#true} is VALID [2022-04-28 08:11:55,282 INFO L290 TraceCheckUtils]: 17: Hoare triple {6638#true} assume 0 == ~tmp_ndt_1~0; {6638#true} is VALID [2022-04-28 08:11:55,282 INFO L272 TraceCheckUtils]: 18: Hoare triple {6638#true} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {6638#true} is VALID [2022-04-28 08:11:55,282 INFO L290 TraceCheckUtils]: 19: Hoare triple {6638#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {6638#true} is VALID [2022-04-28 08:11:55,282 INFO L290 TraceCheckUtils]: 20: Hoare triple {6638#true} assume 0 == ~irpStack__MajorFunction~0; {6638#true} is VALID [2022-04-28 08:11:55,282 INFO L290 TraceCheckUtils]: 21: Hoare triple {6638#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {6638#true} is VALID [2022-04-28 08:11:55,282 INFO L290 TraceCheckUtils]: 22: Hoare triple {6638#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {6638#true} is VALID [2022-04-28 08:11:55,282 INFO L272 TraceCheckUtils]: 23: Hoare triple {6638#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {6638#true} is VALID [2022-04-28 08:11:55,282 INFO L290 TraceCheckUtils]: 24: Hoare triple {6638#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {6638#true} is VALID [2022-04-28 08:11:55,283 INFO L290 TraceCheckUtils]: 25: Hoare triple {6638#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:55,283 INFO L290 TraceCheckUtils]: 26: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:55,284 INFO L272 TraceCheckUtils]: 27: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:55,284 INFO L290 TraceCheckUtils]: 28: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:55,284 INFO L290 TraceCheckUtils]: 29: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(0 != ~compRegistered~0); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:55,285 INFO L290 TraceCheckUtils]: 30: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:55,285 INFO L290 TraceCheckUtils]: 31: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume 0 == ~tmp_ndt_6~0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:55,286 INFO L290 TraceCheckUtils]: 32: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} ~returnVal2~0 := 0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:55,286 INFO L290 TraceCheckUtils]: 33: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~NP~0); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:55,286 INFO L290 TraceCheckUtils]: 34: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~MPR1~0); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:11:55,286 INFO L290 TraceCheckUtils]: 35: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~SKIP1~0); {6639#false} is VALID [2022-04-28 08:11:55,287 INFO L272 TraceCheckUtils]: 36: Hoare triple {6639#false} call errorFn(); {6639#false} is VALID [2022-04-28 08:11:55,287 INFO L290 TraceCheckUtils]: 37: Hoare triple {6639#false} assume !false; {6639#false} is VALID [2022-04-28 08:11:55,287 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:11:55,287 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:11:55,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [93095146] [2022-04-28 08:11:55,287 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [93095146] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:55,288 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:55,288 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 08:11:55,288 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:11:55,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1670868205] [2022-04-28 08:11:55,288 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1670868205] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:55,288 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:55,288 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 08:11:55,288 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [529487683] [2022-04-28 08:11:55,288 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:11:55,289 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-28 08:11:55,289 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:11:55,289 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:55,311 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 38 edges. 38 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:55,311 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-28 08:11:55,312 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:55,312 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-28 08:11:55,312 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-28 08:11:55,312 INFO L87 Difference]: Start difference. First operand 344 states and 466 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:56,704 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:56,704 INFO L93 Difference]: Finished difference Result 347 states and 468 transitions. [2022-04-28 08:11:56,704 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-28 08:11:56,704 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-28 08:11:56,705 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:11:56,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:56,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 338 transitions. [2022-04-28 08:11:56,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:56,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 338 transitions. [2022-04-28 08:11:56,712 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 338 transitions. [2022-04-28 08:11:56,995 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 338 edges. 338 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:57,001 INFO L225 Difference]: With dead ends: 347 [2022-04-28 08:11:57,002 INFO L226 Difference]: Without dead ends: 343 [2022-04-28 08:11:57,002 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-04-28 08:11:57,003 INFO L413 NwaCegarLoop]: 268 mSDtfsCounter, 187 mSDsluCounter, 153 mSDsCounter, 0 mSdLazyCounter, 593 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 421 SdHoareTripleChecker+Invalid, 628 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 593 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-28 08:11:57,003 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [187 Valid, 421 Invalid, 628 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 593 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-28 08:11:57,003 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-04-28 08:11:57,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2022-04-28 08:11:57,021 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:11:57,022 INFO L82 GeneralOperation]: Start isEquivalent. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:57,022 INFO L74 IsIncluded]: Start isIncluded. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:57,023 INFO L87 Difference]: Start difference. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:57,031 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:57,031 INFO L93 Difference]: Finished difference Result 343 states and 463 transitions. [2022-04-28 08:11:57,031 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-28 08:11:57,032 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:57,032 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:57,032 INFO L74 IsIncluded]: Start isIncluded. First operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 343 states. [2022-04-28 08:11:57,033 INFO L87 Difference]: Start difference. First operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 343 states. [2022-04-28 08:11:57,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:57,041 INFO L93 Difference]: Finished difference Result 343 states and 463 transitions. [2022-04-28 08:11:57,041 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-28 08:11:57,041 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:57,041 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:57,042 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:11:57,042 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:11:57,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 08:11:57,051 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 463 transitions. [2022-04-28 08:11:57,051 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 463 transitions. Word has length 38 [2022-04-28 08:11:57,051 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:11:57,051 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 463 transitions. [2022-04-28 08:11:57,051 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 08:11:57,052 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 343 states and 463 transitions. [2022-04-28 08:11:57,465 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 463 edges. 463 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:57,465 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-28 08:11:57,466 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-28 08:11:57,467 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:11:57,467 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:11:57,467 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-04-28 08:11:57,467 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:11:57,467 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:11:57,467 INFO L85 PathProgramCache]: Analyzing trace with hash 605107567, now seen corresponding path program 1 times [2022-04-28 08:11:57,467 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:57,467 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [338406444] [2022-04-28 08:11:57,468 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:11:57,468 INFO L85 PathProgramCache]: Analyzing trace with hash 605107567, now seen corresponding path program 2 times [2022-04-28 08:11:57,468 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:11:57,468 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [51578539] [2022-04-28 08:11:57,468 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:11:57,468 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:11:57,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:57,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:11:57,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:57,538 INFO L290 TraceCheckUtils]: 0: Hoare triple {8745#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8724#true} is VALID [2022-04-28 08:11:57,539 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-28 08:11:57,539 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8724#true} {8724#true} #783#return; {8724#true} is VALID [2022-04-28 08:11:57,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:11:57,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:57,559 INFO L290 TraceCheckUtils]: 0: Hoare triple {8746#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-28 08:11:57,559 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-28 08:11:57,559 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8724#true} {8724#true} #715#return; {8724#true} is VALID [2022-04-28 08:11:57,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:11:57,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:57,571 INFO L290 TraceCheckUtils]: 0: Hoare triple {8747#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-28 08:11:57,571 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-28 08:11:57,571 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8724#true} {8724#true} #717#return; {8724#true} is VALID [2022-04-28 08:11:57,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:11:57,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:11:57,590 INFO L290 TraceCheckUtils]: 0: Hoare triple {8748#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {8724#true} is VALID [2022-04-28 08:11:57,591 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume !(0 != ~compRegistered~0); {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:57,591 INFO L290 TraceCheckUtils]: 2: Hoare triple {8749#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:57,591 INFO L290 TraceCheckUtils]: 3: Hoare triple {8749#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:57,591 INFO L290 TraceCheckUtils]: 4: Hoare triple {8749#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:57,592 INFO L290 TraceCheckUtils]: 5: Hoare triple {8749#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:57,592 INFO L290 TraceCheckUtils]: 6: Hoare triple {8749#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:57,592 INFO L290 TraceCheckUtils]: 7: Hoare triple {8749#(<= ~compRegistered~0 0)} assume true; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:57,593 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {8749#(<= ~compRegistered~0 0)} {8735#(= ~compRegistered~0 1)} #755#return; {8725#false} is VALID [2022-04-28 08:11:57,594 INFO L272 TraceCheckUtils]: 0: Hoare triple {8724#true} call ULTIMATE.init(); {8745#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:11:57,594 INFO L290 TraceCheckUtils]: 1: Hoare triple {8745#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8724#true} is VALID [2022-04-28 08:11:57,594 INFO L290 TraceCheckUtils]: 2: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-28 08:11:57,594 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {8724#true} {8724#true} #783#return; {8724#true} is VALID [2022-04-28 08:11:57,594 INFO L272 TraceCheckUtils]: 4: Hoare triple {8724#true} call #t~ret81 := main(); {8724#true} is VALID [2022-04-28 08:11:57,594 INFO L290 TraceCheckUtils]: 5: Hoare triple {8724#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {8724#true} is VALID [2022-04-28 08:11:57,595 INFO L272 TraceCheckUtils]: 6: Hoare triple {8724#true} call _BLAST_init(); {8746#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:57,595 INFO L290 TraceCheckUtils]: 7: Hoare triple {8746#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-28 08:11:57,595 INFO L290 TraceCheckUtils]: 8: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-28 08:11:57,596 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {8724#true} {8724#true} #715#return; {8724#true} is VALID [2022-04-28 08:11:57,596 INFO L290 TraceCheckUtils]: 10: Hoare triple {8724#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {8724#true} is VALID [2022-04-28 08:11:57,596 INFO L290 TraceCheckUtils]: 11: Hoare triple {8724#true} assume !(0 == ~irp_choice~0); {8724#true} is VALID [2022-04-28 08:11:57,596 INFO L272 TraceCheckUtils]: 12: Hoare triple {8724#true} call stub_driver_init(); {8747#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:57,597 INFO L290 TraceCheckUtils]: 13: Hoare triple {8747#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-28 08:11:57,597 INFO L290 TraceCheckUtils]: 14: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-28 08:11:57,597 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {8724#true} {8724#true} #717#return; {8724#true} is VALID [2022-04-28 08:11:57,597 INFO L290 TraceCheckUtils]: 16: Hoare triple {8724#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {8724#true} is VALID [2022-04-28 08:11:57,597 INFO L290 TraceCheckUtils]: 17: Hoare triple {8724#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {8724#true} is VALID [2022-04-28 08:11:57,597 INFO L290 TraceCheckUtils]: 18: Hoare triple {8724#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {8724#true} is VALID [2022-04-28 08:11:57,597 INFO L290 TraceCheckUtils]: 19: Hoare triple {8724#true} assume 3 == ~tmp_ndt_3~0; {8724#true} is VALID [2022-04-28 08:11:57,597 INFO L272 TraceCheckUtils]: 20: Hoare triple {8724#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {8724#true} is VALID [2022-04-28 08:11:57,597 INFO L290 TraceCheckUtils]: 21: Hoare triple {8724#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {8724#true} is VALID [2022-04-28 08:11:57,597 INFO L290 TraceCheckUtils]: 22: Hoare triple {8724#true} assume 0 == ~irpStack__MinorFunction~0; {8724#true} is VALID [2022-04-28 08:11:57,598 INFO L290 TraceCheckUtils]: 23: Hoare triple {8724#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {8724#true} is VALID [2022-04-28 08:11:57,598 INFO L290 TraceCheckUtils]: 24: Hoare triple {8724#true} assume !(~s~0 != ~NP~0); {8724#true} is VALID [2022-04-28 08:11:57,598 INFO L290 TraceCheckUtils]: 25: Hoare triple {8724#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {8735#(= ~compRegistered~0 1)} is VALID [2022-04-28 08:11:57,599 INFO L290 TraceCheckUtils]: 26: Hoare triple {8735#(= ~compRegistered~0 1)} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {8735#(= ~compRegistered~0 1)} is VALID [2022-04-28 08:11:57,600 INFO L272 TraceCheckUtils]: 27: Hoare triple {8735#(= ~compRegistered~0 1)} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {8748#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:11:57,600 INFO L290 TraceCheckUtils]: 28: Hoare triple {8748#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {8724#true} is VALID [2022-04-28 08:11:57,600 INFO L290 TraceCheckUtils]: 29: Hoare triple {8724#true} assume !(0 != ~compRegistered~0); {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:57,600 INFO L290 TraceCheckUtils]: 30: Hoare triple {8749#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:57,601 INFO L290 TraceCheckUtils]: 31: Hoare triple {8749#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:57,601 INFO L290 TraceCheckUtils]: 32: Hoare triple {8749#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:57,601 INFO L290 TraceCheckUtils]: 33: Hoare triple {8749#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:57,604 INFO L290 TraceCheckUtils]: 34: Hoare triple {8749#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:57,604 INFO L290 TraceCheckUtils]: 35: Hoare triple {8749#(<= ~compRegistered~0 0)} assume true; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 08:11:57,605 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {8749#(<= ~compRegistered~0 0)} {8735#(= ~compRegistered~0 1)} #755#return; {8725#false} is VALID [2022-04-28 08:11:57,605 INFO L290 TraceCheckUtils]: 37: Hoare triple {8725#false} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {8725#false} is VALID [2022-04-28 08:11:57,605 INFO L290 TraceCheckUtils]: 38: Hoare triple {8725#false} assume 259 == ~__cil_tmp23~0; {8725#false} is VALID [2022-04-28 08:11:57,605 INFO L272 TraceCheckUtils]: 39: Hoare triple {8725#false} call #t~ret11 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {8725#false} is VALID [2022-04-28 08:11:57,605 INFO L290 TraceCheckUtils]: 40: Hoare triple {8725#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {8725#false} is VALID [2022-04-28 08:11:57,605 INFO L290 TraceCheckUtils]: 41: Hoare triple {8725#false} assume !(~s~0 == ~MPR3~0); {8725#false} is VALID [2022-04-28 08:11:57,605 INFO L290 TraceCheckUtils]: 42: Hoare triple {8725#false} assume !(1 == ~customIrp~0); {8725#false} is VALID [2022-04-28 08:11:57,606 INFO L290 TraceCheckUtils]: 43: Hoare triple {8725#false} assume ~s~0 == ~MPR3~0; {8725#false} is VALID [2022-04-28 08:11:57,606 INFO L272 TraceCheckUtils]: 44: Hoare triple {8725#false} call errorFn(); {8725#false} is VALID [2022-04-28 08:11:57,606 INFO L290 TraceCheckUtils]: 45: Hoare triple {8725#false} assume !false; {8725#false} is VALID [2022-04-28 08:11:57,606 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:11:57,606 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:11:57,606 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [51578539] [2022-04-28 08:11:57,606 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [51578539] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:57,606 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:57,606 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:11:57,607 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:11:57,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [338406444] [2022-04-28 08:11:57,607 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [338406444] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:11:57,607 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:11:57,607 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:11:57,607 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1232827863] [2022-04-28 08:11:57,607 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:11:57,607 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-28 08:11:57,607 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:11:57,607 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-28 08:11:57,633 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:57,633 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 08:11:57,633 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:57,633 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 08:11:57,633 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-04-28 08:11:57,634 INFO L87 Difference]: Start difference. First operand 343 states and 463 transitions. Second operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-28 08:11:59,053 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:59,053 INFO L93 Difference]: Finished difference Result 394 states and 520 transitions. [2022-04-28 08:11:59,053 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-28 08:11:59,053 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-28 08:11:59,053 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:11:59,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-28 08:11:59,058 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 425 transitions. [2022-04-28 08:11:59,058 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-28 08:11:59,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 425 transitions. [2022-04-28 08:11:59,061 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 425 transitions. [2022-04-28 08:11:59,403 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 425 edges. 425 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:59,409 INFO L225 Difference]: With dead ends: 394 [2022-04-28 08:11:59,409 INFO L226 Difference]: Without dead ends: 325 [2022-04-28 08:11:59,410 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:11:59,410 INFO L413 NwaCegarLoop]: 306 mSDtfsCounter, 607 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 351 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 607 SdHoareTripleChecker+Valid, 534 SdHoareTripleChecker+Invalid, 443 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 351 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-28 08:11:59,411 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [607 Valid, 534 Invalid, 443 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 351 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-28 08:11:59,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-28 08:11:59,505 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 304. [2022-04-28 08:11:59,505 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:11:59,506 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-28 08:11:59,506 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-28 08:11:59,507 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-28 08:11:59,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:59,513 INFO L93 Difference]: Finished difference Result 325 states and 431 transitions. [2022-04-28 08:11:59,513 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 431 transitions. [2022-04-28 08:11:59,514 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:59,514 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:59,514 INFO L74 IsIncluded]: Start isIncluded. First operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 325 states. [2022-04-28 08:11:59,515 INFO L87 Difference]: Start difference. First operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 325 states. [2022-04-28 08:11:59,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:11:59,521 INFO L93 Difference]: Finished difference Result 325 states and 431 transitions. [2022-04-28 08:11:59,521 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 431 transitions. [2022-04-28 08:11:59,521 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:11:59,521 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:11:59,521 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:11:59,521 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:11:59,522 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-28 08:11:59,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 406 transitions. [2022-04-28 08:11:59,528 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 406 transitions. Word has length 46 [2022-04-28 08:11:59,528 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:11:59,529 INFO L495 AbstractCegarLoop]: Abstraction has 304 states and 406 transitions. [2022-04-28 08:11:59,529 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-28 08:11:59,529 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 304 states and 406 transitions. [2022-04-28 08:11:59,940 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 406 edges. 406 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:11:59,940 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 406 transitions. [2022-04-28 08:11:59,941 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-04-28 08:11:59,941 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:11:59,941 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:11:59,941 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-04-28 08:11:59,941 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:11:59,942 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:11:59,942 INFO L85 PathProgramCache]: Analyzing trace with hash -447308474, now seen corresponding path program 1 times [2022-04-28 08:11:59,942 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:11:59,942 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1374369886] [2022-04-28 08:11:59,942 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:11:59,942 INFO L85 PathProgramCache]: Analyzing trace with hash -447308474, now seen corresponding path program 2 times [2022-04-28 08:11:59,942 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:11:59,942 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [277472420] [2022-04-28 08:11:59,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:11:59,943 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:11:59,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:00,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:00,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:00,053 INFO L290 TraceCheckUtils]: 0: Hoare triple {10833#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {10808#true} is VALID [2022-04-28 08:12:00,053 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-28 08:12:00,053 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10808#true} {10808#true} #783#return; {10808#true} is VALID [2022-04-28 08:12:00,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:00,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:00,090 INFO L290 TraceCheckUtils]: 0: Hoare triple {10834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:12:00,090 INFO L290 TraceCheckUtils]: 1: Hoare triple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:12:00,091 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {10808#true} #715#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:12:00,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:00,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:00,104 INFO L290 TraceCheckUtils]: 0: Hoare triple {10836#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10808#true} is VALID [2022-04-28 08:12:00,104 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-28 08:12:00,105 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10808#true} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #717#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:12:00,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-28 08:12:00,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:00,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-28 08:12:00,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:00,197 INFO L290 TraceCheckUtils]: 0: Hoare triple {10843#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10808#true} is VALID [2022-04-28 08:12:00,198 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:12:00,198 INFO L290 TraceCheckUtils]: 2: Hoare triple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:12:00,199 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10808#true} #743#return; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:12:00,199 INFO L290 TraceCheckUtils]: 0: Hoare triple {10837#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {10808#true} is VALID [2022-04-28 08:12:00,199 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {10808#true} is VALID [2022-04-28 08:12:00,199 INFO L290 TraceCheckUtils]: 2: Hoare triple {10808#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {10808#true} is VALID [2022-04-28 08:12:00,199 INFO L290 TraceCheckUtils]: 3: Hoare triple {10808#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {10808#true} is VALID [2022-04-28 08:12:00,200 INFO L272 TraceCheckUtils]: 4: Hoare triple {10808#true} call IofCompleteRequest(~Irp, 0); {10843#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:00,200 INFO L290 TraceCheckUtils]: 5: Hoare triple {10843#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10808#true} is VALID [2022-04-28 08:12:00,200 INFO L290 TraceCheckUtils]: 6: Hoare triple {10808#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:12:00,200 INFO L290 TraceCheckUtils]: 7: Hoare triple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:12:00,201 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10808#true} #743#return; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:12:00,202 INFO L290 TraceCheckUtils]: 9: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:12:00,202 INFO L290 TraceCheckUtils]: 10: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:12:00,203 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #727#return; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:12:00,204 INFO L272 TraceCheckUtils]: 0: Hoare triple {10808#true} call ULTIMATE.init(); {10833#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:00,204 INFO L290 TraceCheckUtils]: 1: Hoare triple {10833#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {10808#true} is VALID [2022-04-28 08:12:00,204 INFO L290 TraceCheckUtils]: 2: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-28 08:12:00,204 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10808#true} {10808#true} #783#return; {10808#true} is VALID [2022-04-28 08:12:00,204 INFO L272 TraceCheckUtils]: 4: Hoare triple {10808#true} call #t~ret81 := main(); {10808#true} is VALID [2022-04-28 08:12:00,205 INFO L290 TraceCheckUtils]: 5: Hoare triple {10808#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {10808#true} is VALID [2022-04-28 08:12:00,209 INFO L272 TraceCheckUtils]: 6: Hoare triple {10808#true} call _BLAST_init(); {10834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:00,210 INFO L290 TraceCheckUtils]: 7: Hoare triple {10834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:12:00,211 INFO L290 TraceCheckUtils]: 8: Hoare triple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 08:12:00,212 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {10808#true} #715#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:12:00,214 INFO L290 TraceCheckUtils]: 10: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:12:00,215 INFO L290 TraceCheckUtils]: 11: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~irp_choice~0); {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:12:00,216 INFO L272 TraceCheckUtils]: 12: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call stub_driver_init(); {10836#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:00,216 INFO L290 TraceCheckUtils]: 13: Hoare triple {10836#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10808#true} is VALID [2022-04-28 08:12:00,216 INFO L290 TraceCheckUtils]: 14: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-28 08:12:00,216 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {10808#true} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #717#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:12:00,218 INFO L290 TraceCheckUtils]: 16: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:12:00,218 INFO L290 TraceCheckUtils]: 17: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:12:00,219 INFO L290 TraceCheckUtils]: 18: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:12:00,222 INFO L290 TraceCheckUtils]: 19: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:12:00,224 INFO L290 TraceCheckUtils]: 20: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:12:00,224 INFO L290 TraceCheckUtils]: 21: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume 8 == ~tmp_ndt_5~0; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 08:12:00,225 INFO L272 TraceCheckUtils]: 22: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {10837#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:00,225 INFO L290 TraceCheckUtils]: 23: Hoare triple {10837#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {10808#true} is VALID [2022-04-28 08:12:00,225 INFO L290 TraceCheckUtils]: 24: Hoare triple {10808#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {10808#true} is VALID [2022-04-28 08:12:00,225 INFO L290 TraceCheckUtils]: 25: Hoare triple {10808#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {10808#true} is VALID [2022-04-28 08:12:00,225 INFO L290 TraceCheckUtils]: 26: Hoare triple {10808#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {10808#true} is VALID [2022-04-28 08:12:00,226 INFO L272 TraceCheckUtils]: 27: Hoare triple {10808#true} call IofCompleteRequest(~Irp, 0); {10843#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:00,226 INFO L290 TraceCheckUtils]: 28: Hoare triple {10843#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10808#true} is VALID [2022-04-28 08:12:00,226 INFO L290 TraceCheckUtils]: 29: Hoare triple {10808#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:12:00,226 INFO L290 TraceCheckUtils]: 30: Hoare triple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:12:00,227 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10808#true} #743#return; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:12:00,227 INFO L290 TraceCheckUtils]: 32: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:12:00,228 INFO L290 TraceCheckUtils]: 33: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:12:00,229 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #727#return; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:12:00,229 INFO L290 TraceCheckUtils]: 35: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:12:00,229 INFO L290 TraceCheckUtils]: 36: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:12:00,230 INFO L290 TraceCheckUtils]: 37: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:12:00,230 INFO L290 TraceCheckUtils]: 38: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume ~s~0 != ~UNLOADED~0; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:12:00,230 INFO L290 TraceCheckUtils]: 39: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -1 != ~status~1; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 08:12:00,230 INFO L290 TraceCheckUtils]: 40: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(~s~0 != ~SKIP2~0); {10809#false} is VALID [2022-04-28 08:12:00,231 INFO L290 TraceCheckUtils]: 41: Hoare triple {10809#false} assume 1 == ~pended~0; {10809#false} is VALID [2022-04-28 08:12:00,231 INFO L290 TraceCheckUtils]: 42: Hoare triple {10809#false} assume 259 != ~status~1; {10809#false} is VALID [2022-04-28 08:12:00,231 INFO L272 TraceCheckUtils]: 43: Hoare triple {10809#false} call errorFn(); {10809#false} is VALID [2022-04-28 08:12:00,231 INFO L290 TraceCheckUtils]: 44: Hoare triple {10809#false} assume !false; {10809#false} is VALID [2022-04-28 08:12:00,232 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:00,233 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:00,233 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [277472420] [2022-04-28 08:12:00,233 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [277472420] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:00,233 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:00,233 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:00,233 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:00,233 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1374369886] [2022-04-28 08:12:00,233 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1374369886] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:00,233 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:00,233 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:00,233 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [87115561] [2022-04-28 08:12:00,233 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:00,234 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-28 08:12:00,234 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:00,234 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:12:00,263 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:00,264 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 08:12:00,264 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:00,264 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 08:12:00,264 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:12:00,264 INFO L87 Difference]: Start difference. First operand 304 states and 406 transitions. Second operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:12:03,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:03,220 INFO L93 Difference]: Finished difference Result 334 states and 440 transitions. [2022-04-28 08:12:03,220 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 08:12:03,220 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-28 08:12:03,220 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:03,221 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:12:03,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 365 transitions. [2022-04-28 08:12:03,223 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:12:03,225 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 365 transitions. [2022-04-28 08:12:03,225 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 365 transitions. [2022-04-28 08:12:03,553 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:03,559 INFO L225 Difference]: With dead ends: 334 [2022-04-28 08:12:03,559 INFO L226 Difference]: Without dead ends: 325 [2022-04-28 08:12:03,559 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-28 08:12:03,560 INFO L413 NwaCegarLoop]: 255 mSDtfsCounter, 770 mSDsluCounter, 324 mSDsCounter, 0 mSdLazyCounter, 918 mSolverCounterSat, 150 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 772 SdHoareTripleChecker+Valid, 579 SdHoareTripleChecker+Invalid, 1068 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 150 IncrementalHoareTripleChecker+Valid, 918 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:03,560 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [772 Valid, 579 Invalid, 1068 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [150 Valid, 918 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-04-28 08:12:03,560 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-28 08:12:03,819 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 320. [2022-04-28 08:12:03,819 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:03,820 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:12:03,821 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:12:03,821 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:12:03,826 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:03,827 INFO L93 Difference]: Finished difference Result 325 states and 429 transitions. [2022-04-28 08:12:03,827 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 429 transitions. [2022-04-28 08:12:03,827 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:03,827 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:03,828 INFO L74 IsIncluded]: Start isIncluded. First operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-28 08:12:03,828 INFO L87 Difference]: Start difference. First operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-28 08:12:03,834 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:03,834 INFO L93 Difference]: Finished difference Result 325 states and 429 transitions. [2022-04-28 08:12:03,834 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 429 transitions. [2022-04-28 08:12:03,835 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:03,835 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:03,835 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:03,835 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:03,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:12:03,855 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 425 transitions. [2022-04-28 08:12:03,855 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 425 transitions. Word has length 45 [2022-04-28 08:12:03,855 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:03,855 INFO L495 AbstractCegarLoop]: Abstraction has 320 states and 425 transitions. [2022-04-28 08:12:03,855 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:12:03,855 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 320 states and 425 transitions. [2022-04-28 08:12:04,279 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 425 edges. 425 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:04,279 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 425 transitions. [2022-04-28 08:12:04,280 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-28 08:12:04,280 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:04,280 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:04,280 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-04-28 08:12:04,280 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:04,280 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:04,281 INFO L85 PathProgramCache]: Analyzing trace with hash -1360970565, now seen corresponding path program 1 times [2022-04-28 08:12:04,281 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:04,281 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1643372524] [2022-04-28 08:12:04,281 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:04,281 INFO L85 PathProgramCache]: Analyzing trace with hash -1360970565, now seen corresponding path program 2 times [2022-04-28 08:12:04,281 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:04,281 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [53616182] [2022-04-28 08:12:04,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:04,281 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:04,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:04,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:04,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:04,439 INFO L290 TraceCheckUtils]: 0: Hoare triple {12847#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12822#true} is VALID [2022-04-28 08:12:04,440 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-28 08:12:04,440 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12822#true} {12822#true} #783#return; {12822#true} is VALID [2022-04-28 08:12:04,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:04,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:04,472 INFO L290 TraceCheckUtils]: 0: Hoare triple {12848#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 08:12:04,472 INFO L290 TraceCheckUtils]: 1: Hoare triple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 08:12:04,472 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {12822#true} #715#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:04,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:04,496 INFO L290 TraceCheckUtils]: 0: Hoare triple {12850#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12822#true} is VALID [2022-04-28 08:12:04,496 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-28 08:12:04,496 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12822#true} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #717#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-28 08:12:04,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:04,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-28 08:12:04,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:04,566 INFO L290 TraceCheckUtils]: 0: Hoare triple {12857#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12822#true} is VALID [2022-04-28 08:12:04,567 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:12:04,567 INFO L290 TraceCheckUtils]: 2: Hoare triple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:12:04,568 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12822#true} #743#return; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:12:04,568 INFO L290 TraceCheckUtils]: 0: Hoare triple {12851#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {12822#true} is VALID [2022-04-28 08:12:04,568 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {12822#true} is VALID [2022-04-28 08:12:04,568 INFO L290 TraceCheckUtils]: 2: Hoare triple {12822#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {12822#true} is VALID [2022-04-28 08:12:04,568 INFO L290 TraceCheckUtils]: 3: Hoare triple {12822#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {12822#true} is VALID [2022-04-28 08:12:04,568 INFO L272 TraceCheckUtils]: 4: Hoare triple {12822#true} call IofCompleteRequest(~Irp, 0); {12857#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:04,569 INFO L290 TraceCheckUtils]: 5: Hoare triple {12857#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12822#true} is VALID [2022-04-28 08:12:04,569 INFO L290 TraceCheckUtils]: 6: Hoare triple {12822#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:12:04,569 INFO L290 TraceCheckUtils]: 7: Hoare triple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:12:04,570 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12822#true} #743#return; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:12:04,570 INFO L290 TraceCheckUtils]: 9: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:12:04,571 INFO L290 TraceCheckUtils]: 10: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:12:04,571 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #727#return; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,573 INFO L272 TraceCheckUtils]: 0: Hoare triple {12822#true} call ULTIMATE.init(); {12847#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:04,573 INFO L290 TraceCheckUtils]: 1: Hoare triple {12847#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12822#true} is VALID [2022-04-28 08:12:04,573 INFO L290 TraceCheckUtils]: 2: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-28 08:12:04,573 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12822#true} {12822#true} #783#return; {12822#true} is VALID [2022-04-28 08:12:04,573 INFO L272 TraceCheckUtils]: 4: Hoare triple {12822#true} call #t~ret81 := main(); {12822#true} is VALID [2022-04-28 08:12:04,573 INFO L290 TraceCheckUtils]: 5: Hoare triple {12822#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {12822#true} is VALID [2022-04-28 08:12:04,574 INFO L272 TraceCheckUtils]: 6: Hoare triple {12822#true} call _BLAST_init(); {12848#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:04,574 INFO L290 TraceCheckUtils]: 7: Hoare triple {12848#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 08:12:04,575 INFO L290 TraceCheckUtils]: 8: Hoare triple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 08:12:04,575 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {12822#true} #715#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,576 INFO L290 TraceCheckUtils]: 10: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,576 INFO L290 TraceCheckUtils]: 11: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~irp_choice~0); {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,577 INFO L272 TraceCheckUtils]: 12: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call stub_driver_init(); {12850#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:04,577 INFO L290 TraceCheckUtils]: 13: Hoare triple {12850#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12822#true} is VALID [2022-04-28 08:12:04,577 INFO L290 TraceCheckUtils]: 14: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-28 08:12:04,577 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {12822#true} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #717#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,577 INFO L290 TraceCheckUtils]: 16: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,578 INFO L290 TraceCheckUtils]: 17: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,578 INFO L290 TraceCheckUtils]: 18: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,579 INFO L290 TraceCheckUtils]: 19: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,579 INFO L290 TraceCheckUtils]: 20: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,579 INFO L290 TraceCheckUtils]: 21: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume 8 == ~tmp_ndt_5~0; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,582 INFO L272 TraceCheckUtils]: 22: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {12851#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:04,582 INFO L290 TraceCheckUtils]: 23: Hoare triple {12851#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {12822#true} is VALID [2022-04-28 08:12:04,582 INFO L290 TraceCheckUtils]: 24: Hoare triple {12822#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {12822#true} is VALID [2022-04-28 08:12:04,582 INFO L290 TraceCheckUtils]: 25: Hoare triple {12822#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {12822#true} is VALID [2022-04-28 08:12:04,583 INFO L290 TraceCheckUtils]: 26: Hoare triple {12822#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {12822#true} is VALID [2022-04-28 08:12:04,591 INFO L272 TraceCheckUtils]: 27: Hoare triple {12822#true} call IofCompleteRequest(~Irp, 0); {12857#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:04,591 INFO L290 TraceCheckUtils]: 28: Hoare triple {12857#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12822#true} is VALID [2022-04-28 08:12:04,591 INFO L290 TraceCheckUtils]: 29: Hoare triple {12822#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:12:04,592 INFO L290 TraceCheckUtils]: 30: Hoare triple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 08:12:04,592 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12822#true} #743#return; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:12:04,593 INFO L290 TraceCheckUtils]: 32: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:12:04,593 INFO L290 TraceCheckUtils]: 33: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 08:12:04,594 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #727#return; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,594 INFO L290 TraceCheckUtils]: 35: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,594 INFO L290 TraceCheckUtils]: 36: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,595 INFO L290 TraceCheckUtils]: 37: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,596 INFO L290 TraceCheckUtils]: 38: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~UNLOADED~0; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,596 INFO L290 TraceCheckUtils]: 39: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -1 != ~status~1; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,597 INFO L290 TraceCheckUtils]: 40: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~SKIP2~0; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 08:12:04,597 INFO L290 TraceCheckUtils]: 41: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(~s~0 != ~IPC~0); {12823#false} is VALID [2022-04-28 08:12:04,597 INFO L290 TraceCheckUtils]: 42: Hoare triple {12823#false} assume 1 == ~pended~0; {12823#false} is VALID [2022-04-28 08:12:04,597 INFO L290 TraceCheckUtils]: 43: Hoare triple {12823#false} assume 259 != ~status~1; {12823#false} is VALID [2022-04-28 08:12:04,597 INFO L272 TraceCheckUtils]: 44: Hoare triple {12823#false} call errorFn(); {12823#false} is VALID [2022-04-28 08:12:04,597 INFO L290 TraceCheckUtils]: 45: Hoare triple {12823#false} assume !false; {12823#false} is VALID [2022-04-28 08:12:04,598 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:04,598 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:04,598 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [53616182] [2022-04-28 08:12:04,598 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [53616182] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:04,598 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:04,598 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:04,598 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:04,598 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1643372524] [2022-04-28 08:12:04,598 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1643372524] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:04,598 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:04,598 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:04,598 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [524617605] [2022-04-28 08:12:04,599 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:04,599 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-28 08:12:04,599 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:04,599 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:12:04,630 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:04,630 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 08:12:04,630 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:04,630 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 08:12:04,630 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:12:04,631 INFO L87 Difference]: Start difference. First operand 320 states and 425 transitions. Second operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:12:07,404 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:07,404 INFO L93 Difference]: Finished difference Result 330 states and 433 transitions. [2022-04-28 08:12:07,404 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 08:12:07,405 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-28 08:12:07,405 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:07,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:12:07,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 358 transitions. [2022-04-28 08:12:07,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:12:07,409 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 358 transitions. [2022-04-28 08:12:07,409 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 358 transitions. [2022-04-28 08:12:07,746 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 358 edges. 358 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:07,752 INFO L225 Difference]: With dead ends: 330 [2022-04-28 08:12:07,752 INFO L226 Difference]: Without dead ends: 325 [2022-04-28 08:12:07,752 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-28 08:12:07,753 INFO L413 NwaCegarLoop]: 256 mSDtfsCounter, 521 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 824 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 523 SdHoareTripleChecker+Valid, 533 SdHoareTripleChecker+Invalid, 916 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 824 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:07,753 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [523 Valid, 533 Invalid, 916 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 824 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-04-28 08:12:07,754 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-28 08:12:08,164 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 320. [2022-04-28 08:12:08,164 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:08,165 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:12:08,165 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:12:08,166 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:12:08,171 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:08,171 INFO L93 Difference]: Finished difference Result 325 states and 428 transitions. [2022-04-28 08:12:08,171 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 428 transitions. [2022-04-28 08:12:08,172 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:08,172 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:08,172 INFO L74 IsIncluded]: Start isIncluded. First operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-28 08:12:08,173 INFO L87 Difference]: Start difference. First operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-28 08:12:08,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:08,178 INFO L93 Difference]: Finished difference Result 325 states and 428 transitions. [2022-04-28 08:12:08,178 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 428 transitions. [2022-04-28 08:12:08,179 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:08,179 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:08,179 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:08,179 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:08,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 08:12:08,186 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 424 transitions. [2022-04-28 08:12:08,186 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 424 transitions. Word has length 46 [2022-04-28 08:12:08,186 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:08,186 INFO L495 AbstractCegarLoop]: Abstraction has 320 states and 424 transitions. [2022-04-28 08:12:08,187 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:12:08,187 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 320 states and 424 transitions. [2022-04-28 08:12:08,624 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 424 edges. 424 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:08,624 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 424 transitions. [2022-04-28 08:12:08,625 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-04-28 08:12:08,625 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:08,625 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:08,625 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-04-28 08:12:08,625 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:08,625 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:08,625 INFO L85 PathProgramCache]: Analyzing trace with hash 548356508, now seen corresponding path program 1 times [2022-04-28 08:12:08,625 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:08,625 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1785347128] [2022-04-28 08:12:08,626 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:08,626 INFO L85 PathProgramCache]: Analyzing trace with hash 548356508, now seen corresponding path program 2 times [2022-04-28 08:12:08,626 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:08,626 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1071526726] [2022-04-28 08:12:08,626 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:08,626 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:08,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:08,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:08,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:08,730 INFO L290 TraceCheckUtils]: 0: Hoare triple {14852#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14828#true} is VALID [2022-04-28 08:12:08,731 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 08:12:08,731 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14828#true} {14828#true} #783#return; {14828#true} is VALID [2022-04-28 08:12:08,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:08,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:08,758 INFO L290 TraceCheckUtils]: 0: Hoare triple {14853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-28 08:12:08,758 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 08:12:08,758 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14828#true} {14828#true} #715#return; {14828#true} is VALID [2022-04-28 08:12:08,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:08,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:08,773 INFO L290 TraceCheckUtils]: 0: Hoare triple {14854#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-28 08:12:08,773 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 08:12:08,773 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14828#true} {14828#true} #717#return; {14828#true} is VALID [2022-04-28 08:12:08,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-28 08:12:08,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:08,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-28 08:12:08,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:08,806 INFO L290 TraceCheckUtils]: 0: Hoare triple {14860#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14828#true} is VALID [2022-04-28 08:12:08,806 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14828#true} is VALID [2022-04-28 08:12:08,806 INFO L290 TraceCheckUtils]: 2: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 08:12:08,806 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14828#true} {14828#true} #743#return; {14828#true} is VALID [2022-04-28 08:12:08,807 INFO L290 TraceCheckUtils]: 0: Hoare triple {14855#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {14828#true} is VALID [2022-04-28 08:12:08,807 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {14828#true} is VALID [2022-04-28 08:12:08,807 INFO L290 TraceCheckUtils]: 2: Hoare triple {14828#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {14828#true} is VALID [2022-04-28 08:12:08,807 INFO L290 TraceCheckUtils]: 3: Hoare triple {14828#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {14828#true} is VALID [2022-04-28 08:12:08,808 INFO L272 TraceCheckUtils]: 4: Hoare triple {14828#true} call IofCompleteRequest(~Irp, 0); {14860#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:08,808 INFO L290 TraceCheckUtils]: 5: Hoare triple {14860#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14828#true} is VALID [2022-04-28 08:12:08,809 INFO L290 TraceCheckUtils]: 6: Hoare triple {14828#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14828#true} is VALID [2022-04-28 08:12:08,809 INFO L290 TraceCheckUtils]: 7: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 08:12:08,811 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {14828#true} {14828#true} #743#return; {14828#true} is VALID [2022-04-28 08:12:08,812 INFO L290 TraceCheckUtils]: 9: Hoare triple {14828#true} #res := ~status~3; {14828#true} is VALID [2022-04-28 08:12:08,812 INFO L290 TraceCheckUtils]: 10: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 08:12:08,812 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {14828#true} {14828#true} #727#return; {14828#true} is VALID [2022-04-28 08:12:08,814 INFO L272 TraceCheckUtils]: 0: Hoare triple {14828#true} call ULTIMATE.init(); {14852#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:08,814 INFO L290 TraceCheckUtils]: 1: Hoare triple {14852#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14828#true} is VALID [2022-04-28 08:12:08,814 INFO L290 TraceCheckUtils]: 2: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 08:12:08,814 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14828#true} {14828#true} #783#return; {14828#true} is VALID [2022-04-28 08:12:08,814 INFO L272 TraceCheckUtils]: 4: Hoare triple {14828#true} call #t~ret81 := main(); {14828#true} is VALID [2022-04-28 08:12:08,814 INFO L290 TraceCheckUtils]: 5: Hoare triple {14828#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {14828#true} is VALID [2022-04-28 08:12:08,815 INFO L272 TraceCheckUtils]: 6: Hoare triple {14828#true} call _BLAST_init(); {14853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:08,815 INFO L290 TraceCheckUtils]: 7: Hoare triple {14853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-28 08:12:08,815 INFO L290 TraceCheckUtils]: 8: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 08:12:08,815 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {14828#true} {14828#true} #715#return; {14828#true} is VALID [2022-04-28 08:12:08,815 INFO L290 TraceCheckUtils]: 10: Hoare triple {14828#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {14828#true} is VALID [2022-04-28 08:12:08,815 INFO L290 TraceCheckUtils]: 11: Hoare triple {14828#true} assume !(0 == ~irp_choice~0); {14828#true} is VALID [2022-04-28 08:12:08,816 INFO L272 TraceCheckUtils]: 12: Hoare triple {14828#true} call stub_driver_init(); {14854#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:08,816 INFO L290 TraceCheckUtils]: 13: Hoare triple {14854#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-28 08:12:08,816 INFO L290 TraceCheckUtils]: 14: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 08:12:08,816 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {14828#true} {14828#true} #717#return; {14828#true} is VALID [2022-04-28 08:12:08,816 INFO L290 TraceCheckUtils]: 16: Hoare triple {14828#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {14828#true} is VALID [2022-04-28 08:12:08,816 INFO L290 TraceCheckUtils]: 17: Hoare triple {14828#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {14828#true} is VALID [2022-04-28 08:12:08,816 INFO L290 TraceCheckUtils]: 18: Hoare triple {14828#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {14828#true} is VALID [2022-04-28 08:12:08,816 INFO L290 TraceCheckUtils]: 19: Hoare triple {14828#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {14828#true} is VALID [2022-04-28 08:12:08,817 INFO L290 TraceCheckUtils]: 20: Hoare triple {14828#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {14828#true} is VALID [2022-04-28 08:12:08,817 INFO L290 TraceCheckUtils]: 21: Hoare triple {14828#true} assume 8 == ~tmp_ndt_5~0; {14828#true} is VALID [2022-04-28 08:12:08,817 INFO L272 TraceCheckUtils]: 22: Hoare triple {14828#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {14855#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:08,817 INFO L290 TraceCheckUtils]: 23: Hoare triple {14855#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {14828#true} is VALID [2022-04-28 08:12:08,817 INFO L290 TraceCheckUtils]: 24: Hoare triple {14828#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {14828#true} is VALID [2022-04-28 08:12:08,817 INFO L290 TraceCheckUtils]: 25: Hoare triple {14828#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {14828#true} is VALID [2022-04-28 08:12:08,818 INFO L290 TraceCheckUtils]: 26: Hoare triple {14828#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {14828#true} is VALID [2022-04-28 08:12:08,818 INFO L272 TraceCheckUtils]: 27: Hoare triple {14828#true} call IofCompleteRequest(~Irp, 0); {14860#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:08,818 INFO L290 TraceCheckUtils]: 28: Hoare triple {14860#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14828#true} is VALID [2022-04-28 08:12:08,818 INFO L290 TraceCheckUtils]: 29: Hoare triple {14828#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14828#true} is VALID [2022-04-28 08:12:08,818 INFO L290 TraceCheckUtils]: 30: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 08:12:08,818 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {14828#true} {14828#true} #743#return; {14828#true} is VALID [2022-04-28 08:12:08,818 INFO L290 TraceCheckUtils]: 32: Hoare triple {14828#true} #res := ~status~3; {14828#true} is VALID [2022-04-28 08:12:08,818 INFO L290 TraceCheckUtils]: 33: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 08:12:08,818 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {14828#true} {14828#true} #727#return; {14828#true} is VALID [2022-04-28 08:12:08,819 INFO L290 TraceCheckUtils]: 35: Hoare triple {14828#true} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {14828#true} is VALID [2022-04-28 08:12:08,819 INFO L290 TraceCheckUtils]: 36: Hoare triple {14828#true} assume !(1 == ~pended~0); {14851#(not (= ~pended~0 1))} is VALID [2022-04-28 08:12:08,819 INFO L290 TraceCheckUtils]: 37: Hoare triple {14851#(not (= ~pended~0 1))} assume !(1 == ~pended~0); {14851#(not (= ~pended~0 1))} is VALID [2022-04-28 08:12:08,819 INFO L290 TraceCheckUtils]: 38: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 != ~UNLOADED~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-28 08:12:08,820 INFO L290 TraceCheckUtils]: 39: Hoare triple {14851#(not (= ~pended~0 1))} assume -1 != ~status~1; {14851#(not (= ~pended~0 1))} is VALID [2022-04-28 08:12:08,820 INFO L290 TraceCheckUtils]: 40: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 != ~SKIP2~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-28 08:12:08,820 INFO L290 TraceCheckUtils]: 41: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 != ~IPC~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-28 08:12:08,820 INFO L290 TraceCheckUtils]: 42: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 == ~DC~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-28 08:12:08,821 INFO L290 TraceCheckUtils]: 43: Hoare triple {14851#(not (= ~pended~0 1))} assume 1 == ~pended~0; {14829#false} is VALID [2022-04-28 08:12:08,821 INFO L290 TraceCheckUtils]: 44: Hoare triple {14829#false} assume 259 != ~status~1; {14829#false} is VALID [2022-04-28 08:12:08,821 INFO L272 TraceCheckUtils]: 45: Hoare triple {14829#false} call errorFn(); {14829#false} is VALID [2022-04-28 08:12:08,821 INFO L290 TraceCheckUtils]: 46: Hoare triple {14829#false} assume !false; {14829#false} is VALID [2022-04-28 08:12:08,821 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:08,822 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:08,822 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1071526726] [2022-04-28 08:12:08,822 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1071526726] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:08,822 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:08,822 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:12:08,822 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:08,822 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1785347128] [2022-04-28 08:12:08,822 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1785347128] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:08,822 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:08,822 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:12:08,822 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [13292222] [2022-04-28 08:12:08,822 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:08,823 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-28 08:12:08,824 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:08,824 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:08,854 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 47 edges. 47 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:08,854 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 08:12:08,854 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:08,855 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 08:12:08,855 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-04-28 08:12:08,856 INFO L87 Difference]: Start difference. First operand 320 states and 424 transitions. Second operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:10,568 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:10,568 INFO L93 Difference]: Finished difference Result 338 states and 446 transitions. [2022-04-28 08:12:10,568 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-28 08:12:10,569 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-28 08:12:10,569 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:10,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:10,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 346 transitions. [2022-04-28 08:12:10,575 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:10,578 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 346 transitions. [2022-04-28 08:12:10,578 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 346 transitions. [2022-04-28 08:12:10,866 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 346 edges. 346 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:10,870 INFO L225 Difference]: With dead ends: 338 [2022-04-28 08:12:10,871 INFO L226 Difference]: Without dead ends: 272 [2022-04-28 08:12:10,871 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=49, Invalid=83, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:12:10,871 INFO L413 NwaCegarLoop]: 250 mSDtfsCounter, 724 mSDsluCounter, 177 mSDsCounter, 0 mSdLazyCounter, 415 mSolverCounterSat, 119 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 724 SdHoareTripleChecker+Valid, 427 SdHoareTripleChecker+Invalid, 534 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 119 IncrementalHoareTripleChecker+Valid, 415 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:10,872 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [724 Valid, 427 Invalid, 534 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [119 Valid, 415 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-28 08:12:10,872 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2022-04-28 08:12:11,150 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 242. [2022-04-28 08:12:11,150 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:11,151 INFO L82 GeneralOperation]: Start isEquivalent. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:11,151 INFO L74 IsIncluded]: Start isIncluded. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:11,151 INFO L87 Difference]: Start difference. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:11,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:11,158 INFO L93 Difference]: Finished difference Result 272 states and 356 transitions. [2022-04-28 08:12:11,158 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 356 transitions. [2022-04-28 08:12:11,159 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:11,159 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:11,160 INFO L74 IsIncluded]: Start isIncluded. First operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 272 states. [2022-04-28 08:12:11,160 INFO L87 Difference]: Start difference. First operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 272 states. [2022-04-28 08:12:11,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:11,164 INFO L93 Difference]: Finished difference Result 272 states and 356 transitions. [2022-04-28 08:12:11,165 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 356 transitions. [2022-04-28 08:12:11,165 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:11,165 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:11,165 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:11,165 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:11,166 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:11,170 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 321 transitions. [2022-04-28 08:12:11,170 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 321 transitions. Word has length 47 [2022-04-28 08:12:11,170 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:11,170 INFO L495 AbstractCegarLoop]: Abstraction has 242 states and 321 transitions. [2022-04-28 08:12:11,170 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:11,170 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 242 states and 321 transitions. [2022-04-28 08:12:11,531 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 321 edges. 321 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:11,531 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 321 transitions. [2022-04-28 08:12:11,532 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-28 08:12:11,532 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:11,532 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:11,532 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-04-28 08:12:11,532 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:11,532 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:11,532 INFO L85 PathProgramCache]: Analyzing trace with hash 916659597, now seen corresponding path program 1 times [2022-04-28 08:12:11,533 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:11,533 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1942610945] [2022-04-28 08:12:11,533 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:11,533 INFO L85 PathProgramCache]: Analyzing trace with hash 916659597, now seen corresponding path program 2 times [2022-04-28 08:12:11,533 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:11,533 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [485810362] [2022-04-28 08:12:11,533 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:11,533 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:11,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:11,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:11,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:11,594 INFO L290 TraceCheckUtils]: 0: Hoare triple {16600#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16577#true} is VALID [2022-04-28 08:12:11,594 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 08:12:11,594 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #783#return; {16577#true} is VALID [2022-04-28 08:12:11,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:11,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:11,614 INFO L290 TraceCheckUtils]: 0: Hoare triple {16601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-28 08:12:11,615 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 08:12:11,615 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #715#return; {16577#true} is VALID [2022-04-28 08:12:11,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:11,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:11,626 INFO L290 TraceCheckUtils]: 0: Hoare triple {16602#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-28 08:12:11,627 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 08:12:11,627 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #717#return; {16577#true} is VALID [2022-04-28 08:12:11,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-04-28 08:12:11,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:11,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:11,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:11,642 INFO L290 TraceCheckUtils]: 0: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {16577#true} is VALID [2022-04-28 08:12:11,642 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 08:12:11,643 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #713#return; {16577#true} is VALID [2022-04-28 08:12:11,643 INFO L290 TraceCheckUtils]: 0: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16577#true} is VALID [2022-04-28 08:12:11,643 INFO L272 TraceCheckUtils]: 1: Hoare triple {16577#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:11,643 INFO L290 TraceCheckUtils]: 2: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {16577#true} is VALID [2022-04-28 08:12:11,643 INFO L290 TraceCheckUtils]: 3: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 08:12:11,643 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {16577#true} {16577#true} #713#return; {16577#true} is VALID [2022-04-28 08:12:11,643 INFO L290 TraceCheckUtils]: 5: Hoare triple {16577#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {16577#true} is VALID [2022-04-28 08:12:11,644 INFO L290 TraceCheckUtils]: 6: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 08:12:11,644 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {16577#true} {16577#true} #777#return; {16577#true} is VALID [2022-04-28 08:12:11,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-04-28 08:12:11,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:11,654 INFO L290 TraceCheckUtils]: 0: Hoare triple {16607#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:11,655 INFO L290 TraceCheckUtils]: 1: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:11,655 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {16577#true} #779#return; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:11,656 INFO L272 TraceCheckUtils]: 0: Hoare triple {16577#true} call ULTIMATE.init(); {16600#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:11,658 INFO L290 TraceCheckUtils]: 1: Hoare triple {16600#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16577#true} is VALID [2022-04-28 08:12:11,658 INFO L290 TraceCheckUtils]: 2: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 08:12:11,658 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {16577#true} {16577#true} #783#return; {16577#true} is VALID [2022-04-28 08:12:11,658 INFO L272 TraceCheckUtils]: 4: Hoare triple {16577#true} call #t~ret81 := main(); {16577#true} is VALID [2022-04-28 08:12:11,658 INFO L290 TraceCheckUtils]: 5: Hoare triple {16577#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {16577#true} is VALID [2022-04-28 08:12:11,659 INFO L272 TraceCheckUtils]: 6: Hoare triple {16577#true} call _BLAST_init(); {16601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:11,659 INFO L290 TraceCheckUtils]: 7: Hoare triple {16601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-28 08:12:11,659 INFO L290 TraceCheckUtils]: 8: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 08:12:11,659 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {16577#true} {16577#true} #715#return; {16577#true} is VALID [2022-04-28 08:12:11,659 INFO L290 TraceCheckUtils]: 10: Hoare triple {16577#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {16577#true} is VALID [2022-04-28 08:12:11,659 INFO L290 TraceCheckUtils]: 11: Hoare triple {16577#true} assume !(0 == ~irp_choice~0); {16577#true} is VALID [2022-04-28 08:12:11,660 INFO L272 TraceCheckUtils]: 12: Hoare triple {16577#true} call stub_driver_init(); {16602#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:11,660 INFO L290 TraceCheckUtils]: 13: Hoare triple {16602#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-28 08:12:11,660 INFO L290 TraceCheckUtils]: 14: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 08:12:11,660 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {16577#true} {16577#true} #717#return; {16577#true} is VALID [2022-04-28 08:12:11,660 INFO L290 TraceCheckUtils]: 16: Hoare triple {16577#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {16577#true} is VALID [2022-04-28 08:12:11,660 INFO L290 TraceCheckUtils]: 17: Hoare triple {16577#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {16577#true} is VALID [2022-04-28 08:12:11,660 INFO L290 TraceCheckUtils]: 18: Hoare triple {16577#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {16577#true} is VALID [2022-04-28 08:12:11,660 INFO L290 TraceCheckUtils]: 19: Hoare triple {16577#true} assume 3 == ~tmp_ndt_3~0; {16577#true} is VALID [2022-04-28 08:12:11,660 INFO L272 TraceCheckUtils]: 20: Hoare triple {16577#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {16577#true} is VALID [2022-04-28 08:12:11,661 INFO L290 TraceCheckUtils]: 21: Hoare triple {16577#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {16577#true} is VALID [2022-04-28 08:12:11,661 INFO L290 TraceCheckUtils]: 22: Hoare triple {16577#true} assume 0 == ~irpStack__MinorFunction~0; {16577#true} is VALID [2022-04-28 08:12:11,661 INFO L290 TraceCheckUtils]: 23: Hoare triple {16577#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {16577#true} is VALID [2022-04-28 08:12:11,661 INFO L290 TraceCheckUtils]: 24: Hoare triple {16577#true} assume !(~s~0 != ~NP~0); {16577#true} is VALID [2022-04-28 08:12:11,661 INFO L290 TraceCheckUtils]: 25: Hoare triple {16577#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {16577#true} is VALID [2022-04-28 08:12:11,661 INFO L290 TraceCheckUtils]: 26: Hoare triple {16577#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {16577#true} is VALID [2022-04-28 08:12:11,661 INFO L272 TraceCheckUtils]: 27: Hoare triple {16577#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {16577#true} is VALID [2022-04-28 08:12:11,661 INFO L290 TraceCheckUtils]: 28: Hoare triple {16577#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {16577#true} is VALID [2022-04-28 08:12:11,661 INFO L290 TraceCheckUtils]: 29: Hoare triple {16577#true} assume 0 != ~compRegistered~0; {16577#true} is VALID [2022-04-28 08:12:11,662 INFO L272 TraceCheckUtils]: 30: Hoare triple {16577#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:11,662 INFO L290 TraceCheckUtils]: 31: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16577#true} is VALID [2022-04-28 08:12:11,662 INFO L272 TraceCheckUtils]: 32: Hoare triple {16577#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:11,662 INFO L290 TraceCheckUtils]: 33: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {16577#true} is VALID [2022-04-28 08:12:11,662 INFO L290 TraceCheckUtils]: 34: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 08:12:11,662 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {16577#true} {16577#true} #713#return; {16577#true} is VALID [2022-04-28 08:12:11,662 INFO L290 TraceCheckUtils]: 36: Hoare triple {16577#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {16577#true} is VALID [2022-04-28 08:12:11,663 INFO L290 TraceCheckUtils]: 37: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 08:12:11,663 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {16577#true} {16577#true} #777#return; {16577#true} is VALID [2022-04-28 08:12:11,663 INFO L290 TraceCheckUtils]: 39: Hoare triple {16577#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {16577#true} is VALID [2022-04-28 08:12:11,663 INFO L290 TraceCheckUtils]: 40: Hoare triple {16577#true} assume -1073741802 == ~__cil_tmp7~0; {16577#true} is VALID [2022-04-28 08:12:11,663 INFO L272 TraceCheckUtils]: 41: Hoare triple {16577#true} call stubMoreProcessingRequired(); {16607#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:11,663 INFO L290 TraceCheckUtils]: 42: Hoare triple {16607#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:11,664 INFO L290 TraceCheckUtils]: 43: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:11,664 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {16577#true} #779#return; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:11,664 INFO L290 TraceCheckUtils]: 45: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:11,664 INFO L290 TraceCheckUtils]: 46: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume 0 == ~tmp_ndt_6~0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:11,665 INFO L290 TraceCheckUtils]: 47: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} ~returnVal2~0 := 0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:11,665 INFO L290 TraceCheckUtils]: 48: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~NP~0); {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 08:12:11,665 INFO L290 TraceCheckUtils]: 49: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~MPR1~0); {16578#false} is VALID [2022-04-28 08:12:11,665 INFO L290 TraceCheckUtils]: 50: Hoare triple {16578#false} assume !(~s~0 == ~SKIP1~0); {16578#false} is VALID [2022-04-28 08:12:11,666 INFO L272 TraceCheckUtils]: 51: Hoare triple {16578#false} call errorFn(); {16578#false} is VALID [2022-04-28 08:12:11,666 INFO L290 TraceCheckUtils]: 52: Hoare triple {16578#false} assume !false; {16578#false} is VALID [2022-04-28 08:12:11,666 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:11,666 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:11,666 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [485810362] [2022-04-28 08:12:11,666 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [485810362] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:11,666 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:11,666 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:12:11,667 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:11,667 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1942610945] [2022-04-28 08:12:11,667 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1942610945] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:11,667 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:11,667 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:12:11,667 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1646829475] [2022-04-28 08:12:11,667 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:11,667 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-28 08:12:11,667 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:11,667 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:11,695 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:11,695 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 08:12:11,695 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:11,696 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 08:12:11,696 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-04-28 08:12:11,696 INFO L87 Difference]: Start difference. First operand 242 states and 321 transitions. Second operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:13,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:13,131 INFO L93 Difference]: Finished difference Result 270 states and 354 transitions. [2022-04-28 08:12:13,131 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-04-28 08:12:13,131 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-28 08:12:13,131 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:13,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:13,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 341 transitions. [2022-04-28 08:12:13,142 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:13,144 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 341 transitions. [2022-04-28 08:12:13,144 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 10 states and 341 transitions. [2022-04-28 08:12:13,420 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 341 edges. 341 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:13,423 INFO L225 Difference]: With dead ends: 270 [2022-04-28 08:12:13,423 INFO L226 Difference]: Without dead ends: 240 [2022-04-28 08:12:13,424 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=67, Unknown=0, NotChecked=0, Total=110 [2022-04-28 08:12:13,430 INFO L413 NwaCegarLoop]: 243 mSDtfsCounter, 484 mSDsluCounter, 218 mSDsCounter, 0 mSdLazyCounter, 347 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 484 SdHoareTripleChecker+Valid, 461 SdHoareTripleChecker+Invalid, 448 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 347 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:13,430 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [484 Valid, 461 Invalid, 448 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 347 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-28 08:12:13,439 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2022-04-28 08:12:13,692 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 240. [2022-04-28 08:12:13,692 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:13,693 INFO L82 GeneralOperation]: Start isEquivalent. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:13,693 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:13,693 INFO L87 Difference]: Start difference. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:13,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:13,697 INFO L93 Difference]: Finished difference Result 240 states and 317 transitions. [2022-04-28 08:12:13,697 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-28 08:12:13,697 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:13,697 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:13,698 INFO L74 IsIncluded]: Start isIncluded. First operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-28 08:12:13,698 INFO L87 Difference]: Start difference. First operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-28 08:12:13,701 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:13,701 INFO L93 Difference]: Finished difference Result 240 states and 317 transitions. [2022-04-28 08:12:13,701 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-28 08:12:13,702 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:13,702 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:13,702 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:13,702 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:13,702 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:13,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 317 transitions. [2022-04-28 08:12:13,706 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 317 transitions. Word has length 53 [2022-04-28 08:12:13,706 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:13,706 INFO L495 AbstractCegarLoop]: Abstraction has 240 states and 317 transitions. [2022-04-28 08:12:13,706 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:13,707 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 240 states and 317 transitions. [2022-04-28 08:12:14,068 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 317 edges. 317 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:14,068 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-28 08:12:14,069 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-04-28 08:12:14,069 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:14,069 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:14,069 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-04-28 08:12:14,069 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:14,069 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:14,069 INFO L85 PathProgramCache]: Analyzing trace with hash -1556296422, now seen corresponding path program 1 times [2022-04-28 08:12:14,069 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:14,069 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [877123637] [2022-04-28 08:12:14,070 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:14,070 INFO L85 PathProgramCache]: Analyzing trace with hash -1556296422, now seen corresponding path program 2 times [2022-04-28 08:12:14,070 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:14,070 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1292043487] [2022-04-28 08:12:14,070 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:14,070 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:14,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:14,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:14,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:14,154 INFO L290 TraceCheckUtils]: 0: Hoare triple {18147#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18117#true} is VALID [2022-04-28 08:12:14,154 INFO L290 TraceCheckUtils]: 1: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-28 08:12:14,154 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18117#true} {18117#true} #783#return; {18117#true} is VALID [2022-04-28 08:12:14,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:14,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:14,176 INFO L290 TraceCheckUtils]: 0: Hoare triple {18148#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:12:14,177 INFO L290 TraceCheckUtils]: 1: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume true; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:12:14,178 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18125#(not (= ~SKIP1~0 ~NP~0))} {18117#true} #715#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:12:14,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:14,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:14,190 INFO L290 TraceCheckUtils]: 0: Hoare triple {18149#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18117#true} is VALID [2022-04-28 08:12:14,191 INFO L290 TraceCheckUtils]: 1: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-28 08:12:14,191 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18117#true} {18125#(not (= ~SKIP1~0 ~NP~0))} #717#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:12:14,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-28 08:12:14,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:14,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 08:12:14,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:14,248 INFO L290 TraceCheckUtils]: 0: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,249 INFO L290 TraceCheckUtils]: 1: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,249 INFO L290 TraceCheckUtils]: 2: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,249 INFO L290 TraceCheckUtils]: 3: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,250 INFO L290 TraceCheckUtils]: 4: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,250 INFO L290 TraceCheckUtils]: 5: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,250 INFO L290 TraceCheckUtils]: 6: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,250 INFO L290 TraceCheckUtils]: 7: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} assume true; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,251 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {18163#(= ~NP~0 |old(~s~0)|)} {18151#(= ~SKIP1~0 ~s~0)} #775#return; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 08:12:14,251 INFO L290 TraceCheckUtils]: 0: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {18117#true} is VALID [2022-04-28 08:12:14,251 INFO L290 TraceCheckUtils]: 1: Hoare triple {18117#true} assume 2 == ~irpStack__MinorFunction~1; {18117#true} is VALID [2022-04-28 08:12:14,251 INFO L290 TraceCheckUtils]: 2: Hoare triple {18117#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {18117#true} is VALID [2022-04-28 08:12:14,252 INFO L290 TraceCheckUtils]: 3: Hoare triple {18117#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:12:14,252 INFO L290 TraceCheckUtils]: 4: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:12:14,252 INFO L272 TraceCheckUtils]: 5: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:14,253 INFO L290 TraceCheckUtils]: 6: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,253 INFO L290 TraceCheckUtils]: 7: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,253 INFO L290 TraceCheckUtils]: 8: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,254 INFO L290 TraceCheckUtils]: 9: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,254 INFO L290 TraceCheckUtils]: 10: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,254 INFO L290 TraceCheckUtils]: 11: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,254 INFO L290 TraceCheckUtils]: 12: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,255 INFO L290 TraceCheckUtils]: 13: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} assume true; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,255 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {18163#(= ~NP~0 |old(~s~0)|)} {18151#(= ~SKIP1~0 ~s~0)} #775#return; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 08:12:14,255 INFO L290 TraceCheckUtils]: 15: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 08:12:14,256 INFO L290 TraceCheckUtils]: 16: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume true; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 08:12:14,256 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {18161#(= ~SKIP1~0 ~NP~0)} {18125#(not (= ~SKIP1~0 ~NP~0))} #725#return; {18118#false} is VALID [2022-04-28 08:12:14,258 INFO L272 TraceCheckUtils]: 0: Hoare triple {18117#true} call ULTIMATE.init(); {18147#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:14,258 INFO L290 TraceCheckUtils]: 1: Hoare triple {18147#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18117#true} is VALID [2022-04-28 08:12:14,258 INFO L290 TraceCheckUtils]: 2: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-28 08:12:14,258 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {18117#true} {18117#true} #783#return; {18117#true} is VALID [2022-04-28 08:12:14,258 INFO L272 TraceCheckUtils]: 4: Hoare triple {18117#true} call #t~ret81 := main(); {18117#true} is VALID [2022-04-28 08:12:14,258 INFO L290 TraceCheckUtils]: 5: Hoare triple {18117#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {18117#true} is VALID [2022-04-28 08:12:14,259 INFO L272 TraceCheckUtils]: 6: Hoare triple {18117#true} call _BLAST_init(); {18148#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:14,260 INFO L290 TraceCheckUtils]: 7: Hoare triple {18148#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:12:14,260 INFO L290 TraceCheckUtils]: 8: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume true; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:12:14,260 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {18125#(not (= ~SKIP1~0 ~NP~0))} {18117#true} #715#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:12:14,260 INFO L290 TraceCheckUtils]: 10: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:12:14,261 INFO L290 TraceCheckUtils]: 11: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(0 == ~irp_choice~0); {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:12:14,261 INFO L272 TraceCheckUtils]: 12: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} call stub_driver_init(); {18149#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:14,261 INFO L290 TraceCheckUtils]: 13: Hoare triple {18149#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18117#true} is VALID [2022-04-28 08:12:14,261 INFO L290 TraceCheckUtils]: 14: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-28 08:12:14,262 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {18117#true} {18125#(not (= ~SKIP1~0 ~NP~0))} #717#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:12:14,262 INFO L290 TraceCheckUtils]: 16: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:12:14,262 INFO L290 TraceCheckUtils]: 17: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:12:14,262 INFO L290 TraceCheckUtils]: 18: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:12:14,262 INFO L290 TraceCheckUtils]: 19: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:12:14,263 INFO L290 TraceCheckUtils]: 20: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume 4 == ~tmp_ndt_4~0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 08:12:14,263 INFO L272 TraceCheckUtils]: 21: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:14,263 INFO L290 TraceCheckUtils]: 22: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {18117#true} is VALID [2022-04-28 08:12:14,263 INFO L290 TraceCheckUtils]: 23: Hoare triple {18117#true} assume 2 == ~irpStack__MinorFunction~1; {18117#true} is VALID [2022-04-28 08:12:14,264 INFO L290 TraceCheckUtils]: 24: Hoare triple {18117#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {18117#true} is VALID [2022-04-28 08:12:14,264 INFO L290 TraceCheckUtils]: 25: Hoare triple {18117#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:12:14,264 INFO L290 TraceCheckUtils]: 26: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:12:14,265 INFO L272 TraceCheckUtils]: 27: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:14,265 INFO L290 TraceCheckUtils]: 28: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,265 INFO L290 TraceCheckUtils]: 29: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,265 INFO L290 TraceCheckUtils]: 30: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,266 INFO L290 TraceCheckUtils]: 31: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,266 INFO L290 TraceCheckUtils]: 32: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,266 INFO L290 TraceCheckUtils]: 33: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,266 INFO L290 TraceCheckUtils]: 34: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,267 INFO L290 TraceCheckUtils]: 35: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} assume true; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:14,267 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {18163#(= ~NP~0 |old(~s~0)|)} {18151#(= ~SKIP1~0 ~s~0)} #775#return; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 08:12:14,267 INFO L290 TraceCheckUtils]: 37: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 08:12:14,268 INFO L290 TraceCheckUtils]: 38: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume true; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 08:12:14,268 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {18161#(= ~SKIP1~0 ~NP~0)} {18125#(not (= ~SKIP1~0 ~NP~0))} #725#return; {18118#false} is VALID [2022-04-28 08:12:14,268 INFO L290 TraceCheckUtils]: 40: Hoare triple {18118#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {18118#false} is VALID [2022-04-28 08:12:14,268 INFO L290 TraceCheckUtils]: 41: Hoare triple {18118#false} assume !(1 == ~pended~0); {18118#false} is VALID [2022-04-28 08:12:14,268 INFO L290 TraceCheckUtils]: 42: Hoare triple {18118#false} assume !(1 == ~pended~0); {18118#false} is VALID [2022-04-28 08:12:14,268 INFO L290 TraceCheckUtils]: 43: Hoare triple {18118#false} assume ~s~0 != ~UNLOADED~0; {18118#false} is VALID [2022-04-28 08:12:14,269 INFO L290 TraceCheckUtils]: 44: Hoare triple {18118#false} assume -1 != ~status~1; {18118#false} is VALID [2022-04-28 08:12:14,269 INFO L290 TraceCheckUtils]: 45: Hoare triple {18118#false} assume !(~s~0 != ~SKIP2~0); {18118#false} is VALID [2022-04-28 08:12:14,269 INFO L290 TraceCheckUtils]: 46: Hoare triple {18118#false} assume !(1 == ~pended~0); {18118#false} is VALID [2022-04-28 08:12:14,269 INFO L290 TraceCheckUtils]: 47: Hoare triple {18118#false} assume !(~s~0 == ~DC~0); {18118#false} is VALID [2022-04-28 08:12:14,269 INFO L290 TraceCheckUtils]: 48: Hoare triple {18118#false} assume ~status~1 != ~lowerDriverReturn~0; {18118#false} is VALID [2022-04-28 08:12:14,269 INFO L272 TraceCheckUtils]: 49: Hoare triple {18118#false} call errorFn(); {18118#false} is VALID [2022-04-28 08:12:14,269 INFO L290 TraceCheckUtils]: 50: Hoare triple {18118#false} assume !false; {18118#false} is VALID [2022-04-28 08:12:14,269 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:14,269 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:14,269 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1292043487] [2022-04-28 08:12:14,279 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1292043487] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:14,279 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:14,279 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:12:14,279 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:14,279 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [877123637] [2022-04-28 08:12:14,279 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [877123637] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:14,279 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:14,279 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:12:14,280 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1411228898] [2022-04-28 08:12:14,280 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:14,280 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 51 [2022-04-28 08:12:14,280 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:14,280 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 08:12:14,311 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:14,312 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 08:12:14,312 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:14,312 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 08:12:14,312 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-28 08:12:14,312 INFO L87 Difference]: Start difference. First operand 240 states and 317 transitions. Second operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 08:12:16,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:16,624 INFO L93 Difference]: Finished difference Result 284 states and 365 transitions. [2022-04-28 08:12:16,624 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-28 08:12:16,625 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 51 [2022-04-28 08:12:16,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:16,625 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 08:12:16,627 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 365 transitions. [2022-04-28 08:12:16,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 08:12:16,629 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 365 transitions. [2022-04-28 08:12:16,629 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 365 transitions. [2022-04-28 08:12:16,951 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:16,955 INFO L225 Difference]: With dead ends: 284 [2022-04-28 08:12:16,955 INFO L226 Difference]: Without dead ends: 243 [2022-04-28 08:12:16,955 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=109, Invalid=311, Unknown=0, NotChecked=0, Total=420 [2022-04-28 08:12:16,956 INFO L413 NwaCegarLoop]: 252 mSDtfsCounter, 655 mSDsluCounter, 341 mSDsCounter, 0 mSdLazyCounter, 741 mSolverCounterSat, 143 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 660 SdHoareTripleChecker+Valid, 593 SdHoareTripleChecker+Invalid, 884 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 143 IncrementalHoareTripleChecker+Valid, 741 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:16,956 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [660 Valid, 593 Invalid, 884 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [143 Valid, 741 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-28 08:12:16,957 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243 states. [2022-04-28 08:12:17,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 243 to 240. [2022-04-28 08:12:17,220 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:17,221 INFO L82 GeneralOperation]: Start isEquivalent. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:17,221 INFO L74 IsIncluded]: Start isIncluded. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:17,221 INFO L87 Difference]: Start difference. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:17,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:17,224 INFO L93 Difference]: Finished difference Result 243 states and 317 transitions. [2022-04-28 08:12:17,224 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 317 transitions. [2022-04-28 08:12:17,225 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:17,225 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:17,225 INFO L74 IsIncluded]: Start isIncluded. First operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 243 states. [2022-04-28 08:12:17,226 INFO L87 Difference]: Start difference. First operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 243 states. [2022-04-28 08:12:17,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:17,229 INFO L93 Difference]: Finished difference Result 243 states and 317 transitions. [2022-04-28 08:12:17,229 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 317 transitions. [2022-04-28 08:12:17,229 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:17,229 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:17,229 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:17,230 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:17,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:17,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 315 transitions. [2022-04-28 08:12:17,234 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 315 transitions. Word has length 51 [2022-04-28 08:12:17,234 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:17,234 INFO L495 AbstractCegarLoop]: Abstraction has 240 states and 315 transitions. [2022-04-28 08:12:17,234 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 08:12:17,234 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 240 states and 315 transitions. [2022-04-28 08:12:17,570 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 315 edges. 315 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:17,570 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 315 transitions. [2022-04-28 08:12:17,571 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-28 08:12:17,571 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:17,571 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:17,571 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-04-28 08:12:17,571 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:17,572 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:17,572 INFO L85 PathProgramCache]: Analyzing trace with hash 460482069, now seen corresponding path program 1 times [2022-04-28 08:12:17,572 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:17,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [83052624] [2022-04-28 08:12:17,572 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:17,572 INFO L85 PathProgramCache]: Analyzing trace with hash 460482069, now seen corresponding path program 2 times [2022-04-28 08:12:17,572 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:17,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1468919582] [2022-04-28 08:12:17,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:17,572 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:17,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:17,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:17,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:17,649 INFO L290 TraceCheckUtils]: 0: Hoare triple {19754#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {19722#true} is VALID [2022-04-28 08:12:17,649 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-28 08:12:17,649 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19722#true} {19722#true} #783#return; {19722#true} is VALID [2022-04-28 08:12:17,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:17,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:17,692 INFO L290 TraceCheckUtils]: 0: Hoare triple {19755#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:12:17,692 INFO L290 TraceCheckUtils]: 1: Hoare triple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:12:17,693 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {19722#true} #715#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:17,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:17,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:17,706 INFO L290 TraceCheckUtils]: 0: Hoare triple {19757#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19722#true} is VALID [2022-04-28 08:12:17,706 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-28 08:12:17,706 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19722#true} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:17,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-28 08:12:17,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:17,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 08:12:17,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:17,754 INFO L290 TraceCheckUtils]: 0: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {19722#true} is VALID [2022-04-28 08:12:17,754 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume !(0 != ~compRegistered~0); {19722#true} is VALID [2022-04-28 08:12:17,754 INFO L290 TraceCheckUtils]: 2: Hoare triple {19722#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {19722#true} is VALID [2022-04-28 08:12:17,754 INFO L290 TraceCheckUtils]: 3: Hoare triple {19722#true} assume 0 == ~tmp_ndt_9~0; {19722#true} is VALID [2022-04-28 08:12:17,754 INFO L290 TraceCheckUtils]: 4: Hoare triple {19722#true} ~returnVal~0 := 0; {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-28 08:12:17,755 INFO L290 TraceCheckUtils]: 5: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-28 08:12:17,755 INFO L290 TraceCheckUtils]: 6: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-28 08:12:17,755 INFO L290 TraceCheckUtils]: 7: Hoare triple {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {19723#false} is VALID [2022-04-28 08:12:17,755 INFO L290 TraceCheckUtils]: 8: Hoare triple {19723#false} #res := ~returnVal~0; {19723#false} is VALID [2022-04-28 08:12:17,755 INFO L290 TraceCheckUtils]: 9: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-28 08:12:17,755 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {19723#false} {19722#true} #775#return; {19723#false} is VALID [2022-04-28 08:12:17,756 INFO L290 TraceCheckUtils]: 0: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {19722#true} is VALID [2022-04-28 08:12:17,756 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume 2 == ~irpStack__MinorFunction~1; {19722#true} is VALID [2022-04-28 08:12:17,756 INFO L290 TraceCheckUtils]: 2: Hoare triple {19722#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {19722#true} is VALID [2022-04-28 08:12:17,756 INFO L290 TraceCheckUtils]: 3: Hoare triple {19722#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {19722#true} is VALID [2022-04-28 08:12:17,756 INFO L290 TraceCheckUtils]: 4: Hoare triple {19722#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {19722#true} is VALID [2022-04-28 08:12:17,756 INFO L272 TraceCheckUtils]: 5: Hoare triple {19722#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:17,757 INFO L290 TraceCheckUtils]: 6: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {19722#true} is VALID [2022-04-28 08:12:17,757 INFO L290 TraceCheckUtils]: 7: Hoare triple {19722#true} assume !(0 != ~compRegistered~0); {19722#true} is VALID [2022-04-28 08:12:17,757 INFO L290 TraceCheckUtils]: 8: Hoare triple {19722#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {19722#true} is VALID [2022-04-28 08:12:17,757 INFO L290 TraceCheckUtils]: 9: Hoare triple {19722#true} assume 0 == ~tmp_ndt_9~0; {19722#true} is VALID [2022-04-28 08:12:17,757 INFO L290 TraceCheckUtils]: 10: Hoare triple {19722#true} ~returnVal~0 := 0; {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-28 08:12:17,757 INFO L290 TraceCheckUtils]: 11: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-28 08:12:17,758 INFO L290 TraceCheckUtils]: 12: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-28 08:12:17,758 INFO L290 TraceCheckUtils]: 13: Hoare triple {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {19723#false} is VALID [2022-04-28 08:12:17,758 INFO L290 TraceCheckUtils]: 14: Hoare triple {19723#false} #res := ~returnVal~0; {19723#false} is VALID [2022-04-28 08:12:17,758 INFO L290 TraceCheckUtils]: 15: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-28 08:12:17,758 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {19723#false} {19722#true} #775#return; {19723#false} is VALID [2022-04-28 08:12:17,758 INFO L290 TraceCheckUtils]: 17: Hoare triple {19723#false} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {19723#false} is VALID [2022-04-28 08:12:17,758 INFO L290 TraceCheckUtils]: 18: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-28 08:12:17,758 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {19723#false} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {19723#false} is VALID [2022-04-28 08:12:17,759 INFO L272 TraceCheckUtils]: 0: Hoare triple {19722#true} call ULTIMATE.init(); {19754#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:17,760 INFO L290 TraceCheckUtils]: 1: Hoare triple {19754#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {19722#true} is VALID [2022-04-28 08:12:17,760 INFO L290 TraceCheckUtils]: 2: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-28 08:12:17,760 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {19722#true} {19722#true} #783#return; {19722#true} is VALID [2022-04-28 08:12:17,760 INFO L272 TraceCheckUtils]: 4: Hoare triple {19722#true} call #t~ret81 := main(); {19722#true} is VALID [2022-04-28 08:12:17,760 INFO L290 TraceCheckUtils]: 5: Hoare triple {19722#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {19722#true} is VALID [2022-04-28 08:12:17,761 INFO L272 TraceCheckUtils]: 6: Hoare triple {19722#true} call _BLAST_init(); {19755#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:17,761 INFO L290 TraceCheckUtils]: 7: Hoare triple {19755#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:12:17,761 INFO L290 TraceCheckUtils]: 8: Hoare triple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:12:17,762 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {19722#true} #715#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:17,762 INFO L290 TraceCheckUtils]: 10: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:17,763 INFO L290 TraceCheckUtils]: 11: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~irp_choice~0); {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:17,763 INFO L272 TraceCheckUtils]: 12: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call stub_driver_init(); {19757#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:17,763 INFO L290 TraceCheckUtils]: 13: Hoare triple {19757#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19722#true} is VALID [2022-04-28 08:12:17,763 INFO L290 TraceCheckUtils]: 14: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-28 08:12:17,764 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {19722#true} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:17,764 INFO L290 TraceCheckUtils]: 16: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:17,765 INFO L290 TraceCheckUtils]: 17: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:17,765 INFO L290 TraceCheckUtils]: 18: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:17,766 INFO L290 TraceCheckUtils]: 19: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:17,766 INFO L290 TraceCheckUtils]: 20: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 4 == ~tmp_ndt_4~0; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:17,767 INFO L272 TraceCheckUtils]: 21: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:17,767 INFO L290 TraceCheckUtils]: 22: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {19722#true} is VALID [2022-04-28 08:12:17,767 INFO L290 TraceCheckUtils]: 23: Hoare triple {19722#true} assume 2 == ~irpStack__MinorFunction~1; {19722#true} is VALID [2022-04-28 08:12:17,767 INFO L290 TraceCheckUtils]: 24: Hoare triple {19722#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {19722#true} is VALID [2022-04-28 08:12:17,767 INFO L290 TraceCheckUtils]: 25: Hoare triple {19722#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {19722#true} is VALID [2022-04-28 08:12:17,767 INFO L290 TraceCheckUtils]: 26: Hoare triple {19722#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {19722#true} is VALID [2022-04-28 08:12:17,768 INFO L272 TraceCheckUtils]: 27: Hoare triple {19722#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:17,768 INFO L290 TraceCheckUtils]: 28: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {19722#true} is VALID [2022-04-28 08:12:17,768 INFO L290 TraceCheckUtils]: 29: Hoare triple {19722#true} assume !(0 != ~compRegistered~0); {19722#true} is VALID [2022-04-28 08:12:17,768 INFO L290 TraceCheckUtils]: 30: Hoare triple {19722#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {19722#true} is VALID [2022-04-28 08:12:17,768 INFO L290 TraceCheckUtils]: 31: Hoare triple {19722#true} assume 0 == ~tmp_ndt_9~0; {19722#true} is VALID [2022-04-28 08:12:17,770 INFO L290 TraceCheckUtils]: 32: Hoare triple {19722#true} ~returnVal~0 := 0; {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-28 08:12:17,770 INFO L290 TraceCheckUtils]: 33: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-28 08:12:17,771 INFO L290 TraceCheckUtils]: 34: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-28 08:12:17,771 INFO L290 TraceCheckUtils]: 35: Hoare triple {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {19723#false} is VALID [2022-04-28 08:12:17,771 INFO L290 TraceCheckUtils]: 36: Hoare triple {19723#false} #res := ~returnVal~0; {19723#false} is VALID [2022-04-28 08:12:17,771 INFO L290 TraceCheckUtils]: 37: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-28 08:12:17,771 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {19723#false} {19722#true} #775#return; {19723#false} is VALID [2022-04-28 08:12:17,771 INFO L290 TraceCheckUtils]: 39: Hoare triple {19723#false} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {19723#false} is VALID [2022-04-28 08:12:17,771 INFO L290 TraceCheckUtils]: 40: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-28 08:12:17,771 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {19723#false} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {19723#false} is VALID [2022-04-28 08:12:17,771 INFO L290 TraceCheckUtils]: 42: Hoare triple {19723#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {19723#false} is VALID [2022-04-28 08:12:17,772 INFO L290 TraceCheckUtils]: 43: Hoare triple {19723#false} assume !(1 == ~pended~0); {19723#false} is VALID [2022-04-28 08:12:17,772 INFO L290 TraceCheckUtils]: 44: Hoare triple {19723#false} assume !(1 == ~pended~0); {19723#false} is VALID [2022-04-28 08:12:17,772 INFO L290 TraceCheckUtils]: 45: Hoare triple {19723#false} assume ~s~0 != ~UNLOADED~0; {19723#false} is VALID [2022-04-28 08:12:17,772 INFO L290 TraceCheckUtils]: 46: Hoare triple {19723#false} assume -1 != ~status~1; {19723#false} is VALID [2022-04-28 08:12:17,772 INFO L290 TraceCheckUtils]: 47: Hoare triple {19723#false} assume !(~s~0 != ~SKIP2~0); {19723#false} is VALID [2022-04-28 08:12:17,772 INFO L290 TraceCheckUtils]: 48: Hoare triple {19723#false} assume !(1 == ~pended~0); {19723#false} is VALID [2022-04-28 08:12:17,772 INFO L290 TraceCheckUtils]: 49: Hoare triple {19723#false} assume !(~s~0 == ~DC~0); {19723#false} is VALID [2022-04-28 08:12:17,772 INFO L290 TraceCheckUtils]: 50: Hoare triple {19723#false} assume ~status~1 != ~lowerDriverReturn~0; {19723#false} is VALID [2022-04-28 08:12:17,772 INFO L272 TraceCheckUtils]: 51: Hoare triple {19723#false} call errorFn(); {19723#false} is VALID [2022-04-28 08:12:17,772 INFO L290 TraceCheckUtils]: 52: Hoare triple {19723#false} assume !false; {19723#false} is VALID [2022-04-28 08:12:17,772 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:17,773 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:17,773 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1468919582] [2022-04-28 08:12:17,773 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1468919582] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:17,773 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:17,773 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:12:17,773 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:17,773 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [83052624] [2022-04-28 08:12:17,773 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [83052624] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:17,773 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:17,773 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:12:17,773 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1377385314] [2022-04-28 08:12:17,773 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:17,774 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 53 [2022-04-28 08:12:17,774 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:17,774 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:12:17,803 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:17,803 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-28 08:12:17,803 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:17,803 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-28 08:12:17,803 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=66, Unknown=0, NotChecked=0, Total=90 [2022-04-28 08:12:17,804 INFO L87 Difference]: Start difference. First operand 240 states and 315 transitions. Second operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:12:19,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:19,852 INFO L93 Difference]: Finished difference Result 272 states and 349 transitions. [2022-04-28 08:12:19,852 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 08:12:19,852 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 53 [2022-04-28 08:12:19,853 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:19,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:12:19,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 325 transitions. [2022-04-28 08:12:19,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:12:19,860 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 325 transitions. [2022-04-28 08:12:19,860 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 325 transitions. [2022-04-28 08:12:20,153 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 325 edges. 325 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:20,158 INFO L225 Difference]: With dead ends: 272 [2022-04-28 08:12:20,158 INFO L226 Difference]: Without dead ends: 253 [2022-04-28 08:12:20,158 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 37 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=95, Invalid=211, Unknown=0, NotChecked=0, Total=306 [2022-04-28 08:12:20,159 INFO L413 NwaCegarLoop]: 238 mSDtfsCounter, 723 mSDsluCounter, 298 mSDsCounter, 0 mSdLazyCounter, 434 mSolverCounterSat, 102 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 726 SdHoareTripleChecker+Valid, 536 SdHoareTripleChecker+Invalid, 536 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 102 IncrementalHoareTripleChecker+Valid, 434 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:20,159 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [726 Valid, 536 Invalid, 536 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [102 Valid, 434 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-28 08:12:20,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 253 states. [2022-04-28 08:12:20,518 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 253 to 243. [2022-04-28 08:12:20,518 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:20,519 INFO L82 GeneralOperation]: Start isEquivalent. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:20,519 INFO L74 IsIncluded]: Start isIncluded. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:20,519 INFO L87 Difference]: Start difference. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:20,524 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:20,524 INFO L93 Difference]: Finished difference Result 253 states and 329 transitions. [2022-04-28 08:12:20,524 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 329 transitions. [2022-04-28 08:12:20,525 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:20,525 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:20,525 INFO L74 IsIncluded]: Start isIncluded. First operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 253 states. [2022-04-28 08:12:20,526 INFO L87 Difference]: Start difference. First operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 253 states. [2022-04-28 08:12:20,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:20,530 INFO L93 Difference]: Finished difference Result 253 states and 329 transitions. [2022-04-28 08:12:20,530 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 329 transitions. [2022-04-28 08:12:20,530 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:20,531 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:20,531 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:20,531 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:20,531 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:20,536 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 319 transitions. [2022-04-28 08:12:20,536 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 319 transitions. Word has length 53 [2022-04-28 08:12:20,536 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:20,536 INFO L495 AbstractCegarLoop]: Abstraction has 243 states and 319 transitions. [2022-04-28 08:12:20,536 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 08:12:20,536 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 243 states and 319 transitions. [2022-04-28 08:12:20,904 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 319 edges. 319 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:20,904 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 319 transitions. [2022-04-28 08:12:20,905 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-28 08:12:20,905 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:20,905 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:20,905 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-04-28 08:12:20,905 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:20,905 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:20,905 INFO L85 PathProgramCache]: Analyzing trace with hash -1533662637, now seen corresponding path program 1 times [2022-04-28 08:12:20,905 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:20,905 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [605744673] [2022-04-28 08:12:20,906 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:20,906 INFO L85 PathProgramCache]: Analyzing trace with hash -1533662637, now seen corresponding path program 2 times [2022-04-28 08:12:20,906 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:20,906 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [700508953] [2022-04-28 08:12:20,906 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:20,906 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:20,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:20,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:20,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:20,972 INFO L290 TraceCheckUtils]: 0: Hoare triple {21359#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {21327#true} is VALID [2022-04-28 08:12:20,972 INFO L290 TraceCheckUtils]: 1: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-28 08:12:20,972 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21327#true} {21327#true} #783#return; {21327#true} is VALID [2022-04-28 08:12:20,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:20,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:21,001 INFO L290 TraceCheckUtils]: 0: Hoare triple {21360#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:12:21,002 INFO L290 TraceCheckUtils]: 1: Hoare triple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:12:21,002 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {21327#true} #715#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:21,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:21,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:21,015 INFO L290 TraceCheckUtils]: 0: Hoare triple {21362#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21327#true} is VALID [2022-04-28 08:12:21,015 INFO L290 TraceCheckUtils]: 1: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-28 08:12:21,015 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21327#true} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:21,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-28 08:12:21,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:21,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 08:12:21,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:21,067 INFO L290 TraceCheckUtils]: 0: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,068 INFO L290 TraceCheckUtils]: 1: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,068 INFO L290 TraceCheckUtils]: 2: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,068 INFO L290 TraceCheckUtils]: 3: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,068 INFO L290 TraceCheckUtils]: 4: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,068 INFO L290 TraceCheckUtils]: 5: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,069 INFO L290 TraceCheckUtils]: 6: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,069 INFO L290 TraceCheckUtils]: 7: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,069 INFO L290 TraceCheckUtils]: 8: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,070 INFO L290 TraceCheckUtils]: 9: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume true; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,070 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {21378#(= ~MPR1~0 |old(~s~0)|)} {21364#(= ~SKIP1~0 ~s~0)} #775#return; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 08:12:21,070 INFO L290 TraceCheckUtils]: 0: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {21327#true} is VALID [2022-04-28 08:12:21,070 INFO L290 TraceCheckUtils]: 1: Hoare triple {21327#true} assume 2 == ~irpStack__MinorFunction~1; {21327#true} is VALID [2022-04-28 08:12:21,070 INFO L290 TraceCheckUtils]: 2: Hoare triple {21327#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {21327#true} is VALID [2022-04-28 08:12:21,071 INFO L290 TraceCheckUtils]: 3: Hoare triple {21327#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:12:21,071 INFO L290 TraceCheckUtils]: 4: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:12:21,072 INFO L272 TraceCheckUtils]: 5: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:21,072 INFO L290 TraceCheckUtils]: 6: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,072 INFO L290 TraceCheckUtils]: 7: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,072 INFO L290 TraceCheckUtils]: 8: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,073 INFO L290 TraceCheckUtils]: 9: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,073 INFO L290 TraceCheckUtils]: 10: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,073 INFO L290 TraceCheckUtils]: 11: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,073 INFO L290 TraceCheckUtils]: 12: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,073 INFO L290 TraceCheckUtils]: 13: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,074 INFO L290 TraceCheckUtils]: 14: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,074 INFO L290 TraceCheckUtils]: 15: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume true; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,075 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {21378#(= ~MPR1~0 |old(~s~0)|)} {21364#(= ~SKIP1~0 ~s~0)} #775#return; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 08:12:21,075 INFO L290 TraceCheckUtils]: 17: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 08:12:21,075 INFO L290 TraceCheckUtils]: 18: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume true; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 08:12:21,076 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {21376#(= ~MPR1~0 ~SKIP1~0)} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {21328#false} is VALID [2022-04-28 08:12:21,077 INFO L272 TraceCheckUtils]: 0: Hoare triple {21327#true} call ULTIMATE.init(); {21359#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:21,077 INFO L290 TraceCheckUtils]: 1: Hoare triple {21359#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {21327#true} is VALID [2022-04-28 08:12:21,077 INFO L290 TraceCheckUtils]: 2: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-28 08:12:21,077 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {21327#true} {21327#true} #783#return; {21327#true} is VALID [2022-04-28 08:12:21,077 INFO L272 TraceCheckUtils]: 4: Hoare triple {21327#true} call #t~ret81 := main(); {21327#true} is VALID [2022-04-28 08:12:21,077 INFO L290 TraceCheckUtils]: 5: Hoare triple {21327#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {21327#true} is VALID [2022-04-28 08:12:21,078 INFO L272 TraceCheckUtils]: 6: Hoare triple {21327#true} call _BLAST_init(); {21360#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:21,079 INFO L290 TraceCheckUtils]: 7: Hoare triple {21360#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:12:21,079 INFO L290 TraceCheckUtils]: 8: Hoare triple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 08:12:21,079 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {21327#true} #715#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:21,080 INFO L290 TraceCheckUtils]: 10: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:21,080 INFO L290 TraceCheckUtils]: 11: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~irp_choice~0); {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:21,080 INFO L272 TraceCheckUtils]: 12: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call stub_driver_init(); {21362#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:21,080 INFO L290 TraceCheckUtils]: 13: Hoare triple {21362#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21327#true} is VALID [2022-04-28 08:12:21,081 INFO L290 TraceCheckUtils]: 14: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-28 08:12:21,081 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {21327#true} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:21,082 INFO L290 TraceCheckUtils]: 16: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:21,082 INFO L290 TraceCheckUtils]: 17: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:21,083 INFO L290 TraceCheckUtils]: 18: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:21,083 INFO L290 TraceCheckUtils]: 19: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:21,083 INFO L290 TraceCheckUtils]: 20: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 4 == ~tmp_ndt_4~0; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 08:12:21,084 INFO L272 TraceCheckUtils]: 21: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:21,084 INFO L290 TraceCheckUtils]: 22: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {21327#true} is VALID [2022-04-28 08:12:21,084 INFO L290 TraceCheckUtils]: 23: Hoare triple {21327#true} assume 2 == ~irpStack__MinorFunction~1; {21327#true} is VALID [2022-04-28 08:12:21,084 INFO L290 TraceCheckUtils]: 24: Hoare triple {21327#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {21327#true} is VALID [2022-04-28 08:12:21,084 INFO L290 TraceCheckUtils]: 25: Hoare triple {21327#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:12:21,084 INFO L290 TraceCheckUtils]: 26: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 08:12:21,085 INFO L272 TraceCheckUtils]: 27: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:21,085 INFO L290 TraceCheckUtils]: 28: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,085 INFO L290 TraceCheckUtils]: 29: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,086 INFO L290 TraceCheckUtils]: 30: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,086 INFO L290 TraceCheckUtils]: 31: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,086 INFO L290 TraceCheckUtils]: 32: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,086 INFO L290 TraceCheckUtils]: 33: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,087 INFO L290 TraceCheckUtils]: 34: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,087 INFO L290 TraceCheckUtils]: 35: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,087 INFO L290 TraceCheckUtils]: 36: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,087 INFO L290 TraceCheckUtils]: 37: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume true; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 08:12:21,088 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {21378#(= ~MPR1~0 |old(~s~0)|)} {21364#(= ~SKIP1~0 ~s~0)} #775#return; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 08:12:21,088 INFO L290 TraceCheckUtils]: 39: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 08:12:21,089 INFO L290 TraceCheckUtils]: 40: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume true; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 08:12:21,089 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {21376#(= ~MPR1~0 ~SKIP1~0)} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {21328#false} is VALID [2022-04-28 08:12:21,089 INFO L290 TraceCheckUtils]: 42: Hoare triple {21328#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {21328#false} is VALID [2022-04-28 08:12:21,089 INFO L290 TraceCheckUtils]: 43: Hoare triple {21328#false} assume !(1 == ~pended~0); {21328#false} is VALID [2022-04-28 08:12:21,089 INFO L290 TraceCheckUtils]: 44: Hoare triple {21328#false} assume !(1 == ~pended~0); {21328#false} is VALID [2022-04-28 08:12:21,089 INFO L290 TraceCheckUtils]: 45: Hoare triple {21328#false} assume ~s~0 != ~UNLOADED~0; {21328#false} is VALID [2022-04-28 08:12:21,089 INFO L290 TraceCheckUtils]: 46: Hoare triple {21328#false} assume -1 != ~status~1; {21328#false} is VALID [2022-04-28 08:12:21,090 INFO L290 TraceCheckUtils]: 47: Hoare triple {21328#false} assume !(~s~0 != ~SKIP2~0); {21328#false} is VALID [2022-04-28 08:12:21,090 INFO L290 TraceCheckUtils]: 48: Hoare triple {21328#false} assume !(1 == ~pended~0); {21328#false} is VALID [2022-04-28 08:12:21,090 INFO L290 TraceCheckUtils]: 49: Hoare triple {21328#false} assume !(~s~0 == ~DC~0); {21328#false} is VALID [2022-04-28 08:12:21,090 INFO L290 TraceCheckUtils]: 50: Hoare triple {21328#false} assume ~status~1 != ~lowerDriverReturn~0; {21328#false} is VALID [2022-04-28 08:12:21,090 INFO L272 TraceCheckUtils]: 51: Hoare triple {21328#false} call errorFn(); {21328#false} is VALID [2022-04-28 08:12:21,090 INFO L290 TraceCheckUtils]: 52: Hoare triple {21328#false} assume !false; {21328#false} is VALID [2022-04-28 08:12:21,090 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:21,090 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:21,090 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [700508953] [2022-04-28 08:12:21,090 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [700508953] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:21,090 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:21,091 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:21,091 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:21,091 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [605744673] [2022-04-28 08:12:21,091 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [605744673] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:21,091 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:21,091 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:21,091 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [951497943] [2022-04-28 08:12:21,091 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:21,092 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 53 [2022-04-28 08:12:21,092 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:21,092 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 08:12:21,126 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:21,126 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 08:12:21,126 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:21,126 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 08:12:21,127 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:12:21,127 INFO L87 Difference]: Start difference. First operand 243 states and 319 transitions. Second operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 08:12:23,762 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:23,762 INFO L93 Difference]: Finished difference Result 284 states and 365 transitions. [2022-04-28 08:12:23,763 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 08:12:23,763 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 53 [2022-04-28 08:12:23,763 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:23,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 08:12:23,765 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 347 transitions. [2022-04-28 08:12:23,765 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 08:12:23,767 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 347 transitions. [2022-04-28 08:12:23,768 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 347 transitions. [2022-04-28 08:12:24,073 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 347 edges. 347 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:24,077 INFO L225 Difference]: With dead ends: 284 [2022-04-28 08:12:24,077 INFO L226 Difference]: Without dead ends: 240 [2022-04-28 08:12:24,078 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=101, Invalid=279, Unknown=0, NotChecked=0, Total=380 [2022-04-28 08:12:24,078 INFO L413 NwaCegarLoop]: 234 mSDtfsCounter, 964 mSDsluCounter, 349 mSDsCounter, 0 mSdLazyCounter, 711 mSolverCounterSat, 177 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 965 SdHoareTripleChecker+Valid, 583 SdHoareTripleChecker+Invalid, 888 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 177 IncrementalHoareTripleChecker+Valid, 711 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:24,078 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [965 Valid, 583 Invalid, 888 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [177 Valid, 711 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-28 08:12:24,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2022-04-28 08:12:24,472 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 238. [2022-04-28 08:12:24,473 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:24,473 INFO L82 GeneralOperation]: Start isEquivalent. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:24,474 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:24,474 INFO L87 Difference]: Start difference. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:24,478 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:24,478 INFO L93 Difference]: Finished difference Result 240 states and 311 transitions. [2022-04-28 08:12:24,478 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 311 transitions. [2022-04-28 08:12:24,478 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:24,478 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:24,479 INFO L74 IsIncluded]: Start isIncluded. First operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-28 08:12:24,479 INFO L87 Difference]: Start difference. First operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-28 08:12:24,482 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:24,483 INFO L93 Difference]: Finished difference Result 240 states and 311 transitions. [2022-04-28 08:12:24,483 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 311 transitions. [2022-04-28 08:12:24,483 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:24,483 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:24,483 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:24,483 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:24,484 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 08:12:24,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 238 states to 238 states and 309 transitions. [2022-04-28 08:12:24,488 INFO L78 Accepts]: Start accepts. Automaton has 238 states and 309 transitions. Word has length 53 [2022-04-28 08:12:24,488 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:24,488 INFO L495 AbstractCegarLoop]: Abstraction has 238 states and 309 transitions. [2022-04-28 08:12:24,488 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 08:12:24,488 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 238 states and 309 transitions. [2022-04-28 08:12:25,067 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 309 edges. 309 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:25,067 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 309 transitions. [2022-04-28 08:12:25,068 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-28 08:12:25,068 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:25,068 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:25,068 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-04-28 08:12:25,069 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:25,069 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:25,069 INFO L85 PathProgramCache]: Analyzing trace with hash -1386969835, now seen corresponding path program 1 times [2022-04-28 08:12:25,069 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:25,069 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [882740804] [2022-04-28 08:12:25,069 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:25,069 INFO L85 PathProgramCache]: Analyzing trace with hash -1386969835, now seen corresponding path program 2 times [2022-04-28 08:12:25,069 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:25,069 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [23372464] [2022-04-28 08:12:25,070 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:25,070 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:25,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:25,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:25,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:25,131 INFO L290 TraceCheckUtils]: 0: Hoare triple {22956#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22923#true} is VALID [2022-04-28 08:12:25,131 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-28 08:12:25,132 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22923#true} {22923#true} #783#return; {22923#true} is VALID [2022-04-28 08:12:25,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:25,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:25,151 INFO L290 TraceCheckUtils]: 0: Hoare triple {22957#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-28 08:12:25,151 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-28 08:12:25,152 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22923#true} {22923#true} #715#return; {22923#true} is VALID [2022-04-28 08:12:25,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:25,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:25,164 INFO L290 TraceCheckUtils]: 0: Hoare triple {22958#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-28 08:12:25,164 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-28 08:12:25,164 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22923#true} {22923#true} #717#return; {22923#true} is VALID [2022-04-28 08:12:25,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-28 08:12:25,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:25,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 08:12:25,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:25,220 INFO L290 TraceCheckUtils]: 0: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {22923#true} is VALID [2022-04-28 08:12:25,220 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume !(0 != ~compRegistered~0); {22923#true} is VALID [2022-04-28 08:12:25,220 INFO L290 TraceCheckUtils]: 2: Hoare triple {22923#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {22923#true} is VALID [2022-04-28 08:12:25,221 INFO L290 TraceCheckUtils]: 3: Hoare triple {22923#true} assume 0 == ~tmp_ndt_9~0; {22923#true} is VALID [2022-04-28 08:12:25,221 INFO L290 TraceCheckUtils]: 4: Hoare triple {22923#true} ~returnVal~0 := 0; {22923#true} is VALID [2022-04-28 08:12:25,221 INFO L290 TraceCheckUtils]: 5: Hoare triple {22923#true} assume !(~s~0 == ~NP~0); {22923#true} is VALID [2022-04-28 08:12:25,221 INFO L290 TraceCheckUtils]: 6: Hoare triple {22923#true} assume !(~s~0 == ~MPR1~0); {22923#true} is VALID [2022-04-28 08:12:25,221 INFO L290 TraceCheckUtils]: 7: Hoare triple {22923#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-28 08:12:25,221 INFO L290 TraceCheckUtils]: 8: Hoare triple {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,222 INFO L290 TraceCheckUtils]: 9: Hoare triple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,222 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {22923#true} #775#return; {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-28 08:12:25,222 INFO L290 TraceCheckUtils]: 0: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {22923#true} is VALID [2022-04-28 08:12:25,222 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume 2 == ~irpStack__MinorFunction~1; {22923#true} is VALID [2022-04-28 08:12:25,228 INFO L290 TraceCheckUtils]: 2: Hoare triple {22923#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {22923#true} is VALID [2022-04-28 08:12:25,228 INFO L290 TraceCheckUtils]: 3: Hoare triple {22923#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {22923#true} is VALID [2022-04-28 08:12:25,229 INFO L290 TraceCheckUtils]: 4: Hoare triple {22923#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {22923#true} is VALID [2022-04-28 08:12:25,229 INFO L272 TraceCheckUtils]: 5: Hoare triple {22923#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:25,229 INFO L290 TraceCheckUtils]: 6: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {22923#true} is VALID [2022-04-28 08:12:25,229 INFO L290 TraceCheckUtils]: 7: Hoare triple {22923#true} assume !(0 != ~compRegistered~0); {22923#true} is VALID [2022-04-28 08:12:25,229 INFO L290 TraceCheckUtils]: 8: Hoare triple {22923#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {22923#true} is VALID [2022-04-28 08:12:25,230 INFO L290 TraceCheckUtils]: 9: Hoare triple {22923#true} assume 0 == ~tmp_ndt_9~0; {22923#true} is VALID [2022-04-28 08:12:25,230 INFO L290 TraceCheckUtils]: 10: Hoare triple {22923#true} ~returnVal~0 := 0; {22923#true} is VALID [2022-04-28 08:12:25,230 INFO L290 TraceCheckUtils]: 11: Hoare triple {22923#true} assume !(~s~0 == ~NP~0); {22923#true} is VALID [2022-04-28 08:12:25,230 INFO L290 TraceCheckUtils]: 12: Hoare triple {22923#true} assume !(~s~0 == ~MPR1~0); {22923#true} is VALID [2022-04-28 08:12:25,230 INFO L290 TraceCheckUtils]: 13: Hoare triple {22923#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-28 08:12:25,230 INFO L290 TraceCheckUtils]: 14: Hoare triple {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,231 INFO L290 TraceCheckUtils]: 15: Hoare triple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,231 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {22923#true} #775#return; {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-28 08:12:25,231 INFO L290 TraceCheckUtils]: 17: Hoare triple {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,232 INFO L290 TraceCheckUtils]: 18: Hoare triple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} assume true; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,232 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} {22923#true} #725#return; {22954#(= |main_#t~ret32| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,233 INFO L272 TraceCheckUtils]: 0: Hoare triple {22923#true} call ULTIMATE.init(); {22956#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:25,233 INFO L290 TraceCheckUtils]: 1: Hoare triple {22956#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22923#true} is VALID [2022-04-28 08:12:25,233 INFO L290 TraceCheckUtils]: 2: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-28 08:12:25,233 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {22923#true} {22923#true} #783#return; {22923#true} is VALID [2022-04-28 08:12:25,234 INFO L272 TraceCheckUtils]: 4: Hoare triple {22923#true} call #t~ret81 := main(); {22923#true} is VALID [2022-04-28 08:12:25,234 INFO L290 TraceCheckUtils]: 5: Hoare triple {22923#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {22923#true} is VALID [2022-04-28 08:12:25,234 INFO L272 TraceCheckUtils]: 6: Hoare triple {22923#true} call _BLAST_init(); {22957#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:25,234 INFO L290 TraceCheckUtils]: 7: Hoare triple {22957#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-28 08:12:25,234 INFO L290 TraceCheckUtils]: 8: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-28 08:12:25,235 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {22923#true} {22923#true} #715#return; {22923#true} is VALID [2022-04-28 08:12:25,235 INFO L290 TraceCheckUtils]: 10: Hoare triple {22923#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {22923#true} is VALID [2022-04-28 08:12:25,235 INFO L290 TraceCheckUtils]: 11: Hoare triple {22923#true} assume !(0 == ~irp_choice~0); {22923#true} is VALID [2022-04-28 08:12:25,235 INFO L272 TraceCheckUtils]: 12: Hoare triple {22923#true} call stub_driver_init(); {22958#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:25,235 INFO L290 TraceCheckUtils]: 13: Hoare triple {22958#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-28 08:12:25,235 INFO L290 TraceCheckUtils]: 14: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-28 08:12:25,235 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {22923#true} {22923#true} #717#return; {22923#true} is VALID [2022-04-28 08:12:25,235 INFO L290 TraceCheckUtils]: 16: Hoare triple {22923#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {22923#true} is VALID [2022-04-28 08:12:25,236 INFO L290 TraceCheckUtils]: 17: Hoare triple {22923#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {22923#true} is VALID [2022-04-28 08:12:25,236 INFO L290 TraceCheckUtils]: 18: Hoare triple {22923#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {22923#true} is VALID [2022-04-28 08:12:25,236 INFO L290 TraceCheckUtils]: 19: Hoare triple {22923#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {22923#true} is VALID [2022-04-28 08:12:25,236 INFO L290 TraceCheckUtils]: 20: Hoare triple {22923#true} assume 4 == ~tmp_ndt_4~0; {22923#true} is VALID [2022-04-28 08:12:25,236 INFO L272 TraceCheckUtils]: 21: Hoare triple {22923#true} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:25,236 INFO L290 TraceCheckUtils]: 22: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {22923#true} is VALID [2022-04-28 08:12:25,236 INFO L290 TraceCheckUtils]: 23: Hoare triple {22923#true} assume 2 == ~irpStack__MinorFunction~1; {22923#true} is VALID [2022-04-28 08:12:25,236 INFO L290 TraceCheckUtils]: 24: Hoare triple {22923#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {22923#true} is VALID [2022-04-28 08:12:25,237 INFO L290 TraceCheckUtils]: 25: Hoare triple {22923#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {22923#true} is VALID [2022-04-28 08:12:25,237 INFO L290 TraceCheckUtils]: 26: Hoare triple {22923#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {22923#true} is VALID [2022-04-28 08:12:25,237 INFO L272 TraceCheckUtils]: 27: Hoare triple {22923#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:25,237 INFO L290 TraceCheckUtils]: 28: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {22923#true} is VALID [2022-04-28 08:12:25,237 INFO L290 TraceCheckUtils]: 29: Hoare triple {22923#true} assume !(0 != ~compRegistered~0); {22923#true} is VALID [2022-04-28 08:12:25,237 INFO L290 TraceCheckUtils]: 30: Hoare triple {22923#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {22923#true} is VALID [2022-04-28 08:12:25,237 INFO L290 TraceCheckUtils]: 31: Hoare triple {22923#true} assume 0 == ~tmp_ndt_9~0; {22923#true} is VALID [2022-04-28 08:12:25,237 INFO L290 TraceCheckUtils]: 32: Hoare triple {22923#true} ~returnVal~0 := 0; {22923#true} is VALID [2022-04-28 08:12:25,237 INFO L290 TraceCheckUtils]: 33: Hoare triple {22923#true} assume !(~s~0 == ~NP~0); {22923#true} is VALID [2022-04-28 08:12:25,238 INFO L290 TraceCheckUtils]: 34: Hoare triple {22923#true} assume !(~s~0 == ~MPR1~0); {22923#true} is VALID [2022-04-28 08:12:25,238 INFO L290 TraceCheckUtils]: 35: Hoare triple {22923#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-28 08:12:25,238 INFO L290 TraceCheckUtils]: 36: Hoare triple {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,238 INFO L290 TraceCheckUtils]: 37: Hoare triple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,239 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {22923#true} #775#return; {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-28 08:12:25,239 INFO L290 TraceCheckUtils]: 39: Hoare triple {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,239 INFO L290 TraceCheckUtils]: 40: Hoare triple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} assume true; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,240 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} {22923#true} #725#return; {22954#(= |main_#t~ret32| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,240 INFO L290 TraceCheckUtils]: 42: Hoare triple {22954#(= |main_#t~ret32| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,240 INFO L290 TraceCheckUtils]: 43: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,241 INFO L290 TraceCheckUtils]: 44: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,241 INFO L290 TraceCheckUtils]: 45: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,241 INFO L290 TraceCheckUtils]: 46: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,241 INFO L290 TraceCheckUtils]: 47: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,242 INFO L290 TraceCheckUtils]: 48: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,242 INFO L290 TraceCheckUtils]: 49: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:25,242 INFO L290 TraceCheckUtils]: 50: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {22924#false} is VALID [2022-04-28 08:12:25,242 INFO L272 TraceCheckUtils]: 51: Hoare triple {22924#false} call errorFn(); {22924#false} is VALID [2022-04-28 08:12:25,242 INFO L290 TraceCheckUtils]: 52: Hoare triple {22924#false} assume !false; {22924#false} is VALID [2022-04-28 08:12:25,243 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:25,243 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:25,243 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [23372464] [2022-04-28 08:12:25,243 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [23372464] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:25,243 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:25,243 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:25,243 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:25,243 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [882740804] [2022-04-28 08:12:25,243 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [882740804] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:25,243 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:25,243 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 08:12:25,243 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [894269588] [2022-04-28 08:12:25,244 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:25,244 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 53 [2022-04-28 08:12:25,244 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:25,244 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:25,272 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:25,272 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 08:12:25,272 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:25,272 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 08:12:25,273 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=105, Unknown=0, NotChecked=0, Total=132 [2022-04-28 08:12:25,273 INFO L87 Difference]: Start difference. First operand 238 states and 309 transitions. Second operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:28,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:28,132 INFO L93 Difference]: Finished difference Result 250 states and 321 transitions. [2022-04-28 08:12:28,132 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-04-28 08:12:28,132 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 53 [2022-04-28 08:12:28,132 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:28,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:28,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 297 transitions. [2022-04-28 08:12:28,135 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:28,136 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 297 transitions. [2022-04-28 08:12:28,137 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 11 states and 297 transitions. [2022-04-28 08:12:28,394 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 297 edges. 297 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:28,397 INFO L225 Difference]: With dead ends: 250 [2022-04-28 08:12:28,397 INFO L226 Difference]: Without dead ends: 210 [2022-04-28 08:12:28,398 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2022-04-28 08:12:28,398 INFO L413 NwaCegarLoop]: 244 mSDtfsCounter, 433 mSDsluCounter, 661 mSDsCounter, 0 mSdLazyCounter, 1249 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 433 SdHoareTripleChecker+Valid, 905 SdHoareTripleChecker+Invalid, 1323 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 1249 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:28,398 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [433 Valid, 905 Invalid, 1323 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 1249 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-04-28 08:12:28,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-04-28 08:12:28,702 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 210. [2022-04-28 08:12:28,703 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:28,703 INFO L82 GeneralOperation]: Start isEquivalent. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-28 08:12:28,703 INFO L74 IsIncluded]: Start isIncluded. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-28 08:12:28,704 INFO L87 Difference]: Start difference. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-28 08:12:28,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:28,707 INFO L93 Difference]: Finished difference Result 210 states and 273 transitions. [2022-04-28 08:12:28,707 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-28 08:12:28,707 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:28,707 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:28,707 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) Second operand 210 states. [2022-04-28 08:12:28,708 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) Second operand 210 states. [2022-04-28 08:12:28,711 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:28,711 INFO L93 Difference]: Finished difference Result 210 states and 273 transitions. [2022-04-28 08:12:28,711 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-28 08:12:28,711 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:28,711 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:28,711 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:28,711 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:28,712 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-28 08:12:28,715 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 273 transitions. [2022-04-28 08:12:28,715 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 273 transitions. Word has length 53 [2022-04-28 08:12:28,715 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:28,715 INFO L495 AbstractCegarLoop]: Abstraction has 210 states and 273 transitions. [2022-04-28 08:12:28,715 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:28,715 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 210 states and 273 transitions. [2022-04-28 08:12:29,040 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 273 edges. 273 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:29,040 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-28 08:12:29,041 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-04-28 08:12:29,041 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:29,041 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:29,041 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-04-28 08:12:29,041 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:29,041 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:29,041 INFO L85 PathProgramCache]: Analyzing trace with hash -438914869, now seen corresponding path program 1 times [2022-04-28 08:12:29,041 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:29,041 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1198027776] [2022-04-28 08:12:29,042 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:29,042 INFO L85 PathProgramCache]: Analyzing trace with hash -438914869, now seen corresponding path program 2 times [2022-04-28 08:12:29,042 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:29,042 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1501173610] [2022-04-28 08:12:29,042 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:29,042 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:29,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:29,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:29,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:29,110 INFO L290 TraceCheckUtils]: 0: Hoare triple {24354#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {24319#true} is VALID [2022-04-28 08:12:29,111 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-28 08:12:29,111 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24319#true} {24319#true} #783#return; {24319#true} is VALID [2022-04-28 08:12:29,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:29,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:29,137 INFO L290 TraceCheckUtils]: 0: Hoare triple {24355#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-28 08:12:29,137 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-28 08:12:29,138 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24319#true} {24319#true} #715#return; {24319#true} is VALID [2022-04-28 08:12:29,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:29,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:29,152 INFO L290 TraceCheckUtils]: 0: Hoare triple {24356#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-28 08:12:29,152 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-28 08:12:29,152 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24319#true} {24319#true} #717#return; {24319#true} is VALID [2022-04-28 08:12:29,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-28 08:12:29,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:29,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:29,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:29,228 INFO L290 TraceCheckUtils]: 0: Hoare triple {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24319#true} is VALID [2022-04-28 08:12:29,228 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume !(0 != ~compRegistered~0); {24319#true} is VALID [2022-04-28 08:12:29,229 INFO L290 TraceCheckUtils]: 2: Hoare triple {24319#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24319#true} is VALID [2022-04-28 08:12:29,229 INFO L290 TraceCheckUtils]: 3: Hoare triple {24319#true} assume 0 == ~tmp_ndt_6~0; {24319#true} is VALID [2022-04-28 08:12:29,229 INFO L290 TraceCheckUtils]: 4: Hoare triple {24319#true} ~returnVal2~0 := 0; {24319#true} is VALID [2022-04-28 08:12:29,229 INFO L290 TraceCheckUtils]: 5: Hoare triple {24319#true} assume !(~s~0 == ~NP~0); {24319#true} is VALID [2022-04-28 08:12:29,229 INFO L290 TraceCheckUtils]: 6: Hoare triple {24319#true} assume !(~s~0 == ~MPR1~0); {24319#true} is VALID [2022-04-28 08:12:29,229 INFO L290 TraceCheckUtils]: 7: Hoare triple {24319#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:29,230 INFO L290 TraceCheckUtils]: 8: Hoare triple {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,230 INFO L290 TraceCheckUtils]: 9: Hoare triple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,231 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24319#true} #763#return; {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,231 INFO L290 TraceCheckUtils]: 0: Hoare triple {24357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {24319#true} is VALID [2022-04-28 08:12:29,231 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume !(0 == ~irpStack__MinorFunction~0); {24319#true} is VALID [2022-04-28 08:12:29,231 INFO L290 TraceCheckUtils]: 2: Hoare triple {24319#true} assume 23 == ~irpStack__MinorFunction~0; {24319#true} is VALID [2022-04-28 08:12:29,231 INFO L290 TraceCheckUtils]: 3: Hoare triple {24319#true} ~devExt__SurpriseRemoved~0 := 1; {24319#true} is VALID [2022-04-28 08:12:29,231 INFO L290 TraceCheckUtils]: 4: Hoare triple {24319#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {24319#true} is VALID [2022-04-28 08:12:29,231 INFO L290 TraceCheckUtils]: 5: Hoare triple {24319#true} #t~post12 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post12;havoc #t~post12;#t~post13 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post13;havoc #t~post13; {24319#true} is VALID [2022-04-28 08:12:29,232 INFO L272 TraceCheckUtils]: 6: Hoare triple {24319#true} call #t~ret14 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:29,232 INFO L290 TraceCheckUtils]: 7: Hoare triple {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24319#true} is VALID [2022-04-28 08:12:29,232 INFO L290 TraceCheckUtils]: 8: Hoare triple {24319#true} assume !(0 != ~compRegistered~0); {24319#true} is VALID [2022-04-28 08:12:29,232 INFO L290 TraceCheckUtils]: 9: Hoare triple {24319#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24319#true} is VALID [2022-04-28 08:12:29,232 INFO L290 TraceCheckUtils]: 10: Hoare triple {24319#true} assume 0 == ~tmp_ndt_6~0; {24319#true} is VALID [2022-04-28 08:12:29,232 INFO L290 TraceCheckUtils]: 11: Hoare triple {24319#true} ~returnVal2~0 := 0; {24319#true} is VALID [2022-04-28 08:12:29,232 INFO L290 TraceCheckUtils]: 12: Hoare triple {24319#true} assume !(~s~0 == ~NP~0); {24319#true} is VALID [2022-04-28 08:12:29,233 INFO L290 TraceCheckUtils]: 13: Hoare triple {24319#true} assume !(~s~0 == ~MPR1~0); {24319#true} is VALID [2022-04-28 08:12:29,233 INFO L290 TraceCheckUtils]: 14: Hoare triple {24319#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:29,233 INFO L290 TraceCheckUtils]: 15: Hoare triple {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,233 INFO L290 TraceCheckUtils]: 16: Hoare triple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,234 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24319#true} #763#return; {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,234 INFO L290 TraceCheckUtils]: 18: Hoare triple {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;~status~0 := #t~ret14;havoc #t~ret14; {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,235 INFO L290 TraceCheckUtils]: 19: Hoare triple {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,235 INFO L290 TraceCheckUtils]: 20: Hoare triple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,236 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {24319#true} #723#return; {24352#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,237 INFO L272 TraceCheckUtils]: 0: Hoare triple {24319#true} call ULTIMATE.init(); {24354#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:29,237 INFO L290 TraceCheckUtils]: 1: Hoare triple {24354#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {24319#true} is VALID [2022-04-28 08:12:29,237 INFO L290 TraceCheckUtils]: 2: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-28 08:12:29,237 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {24319#true} {24319#true} #783#return; {24319#true} is VALID [2022-04-28 08:12:29,237 INFO L272 TraceCheckUtils]: 4: Hoare triple {24319#true} call #t~ret81 := main(); {24319#true} is VALID [2022-04-28 08:12:29,238 INFO L290 TraceCheckUtils]: 5: Hoare triple {24319#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {24319#true} is VALID [2022-04-28 08:12:29,238 INFO L272 TraceCheckUtils]: 6: Hoare triple {24319#true} call _BLAST_init(); {24355#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:29,239 INFO L290 TraceCheckUtils]: 7: Hoare triple {24355#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-28 08:12:29,239 INFO L290 TraceCheckUtils]: 8: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-28 08:12:29,239 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {24319#true} {24319#true} #715#return; {24319#true} is VALID [2022-04-28 08:12:29,239 INFO L290 TraceCheckUtils]: 10: Hoare triple {24319#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {24319#true} is VALID [2022-04-28 08:12:29,239 INFO L290 TraceCheckUtils]: 11: Hoare triple {24319#true} assume !(0 == ~irp_choice~0); {24319#true} is VALID [2022-04-28 08:12:29,239 INFO L272 TraceCheckUtils]: 12: Hoare triple {24319#true} call stub_driver_init(); {24356#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:29,240 INFO L290 TraceCheckUtils]: 13: Hoare triple {24356#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-28 08:12:29,240 INFO L290 TraceCheckUtils]: 14: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-28 08:12:29,240 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {24319#true} {24319#true} #717#return; {24319#true} is VALID [2022-04-28 08:12:29,240 INFO L290 TraceCheckUtils]: 16: Hoare triple {24319#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {24319#true} is VALID [2022-04-28 08:12:29,240 INFO L290 TraceCheckUtils]: 17: Hoare triple {24319#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {24319#true} is VALID [2022-04-28 08:12:29,240 INFO L290 TraceCheckUtils]: 18: Hoare triple {24319#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {24319#true} is VALID [2022-04-28 08:12:29,240 INFO L290 TraceCheckUtils]: 19: Hoare triple {24319#true} assume 3 == ~tmp_ndt_3~0; {24319#true} is VALID [2022-04-28 08:12:29,241 INFO L272 TraceCheckUtils]: 20: Hoare triple {24319#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {24357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:29,241 INFO L290 TraceCheckUtils]: 21: Hoare triple {24357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {24319#true} is VALID [2022-04-28 08:12:29,241 INFO L290 TraceCheckUtils]: 22: Hoare triple {24319#true} assume !(0 == ~irpStack__MinorFunction~0); {24319#true} is VALID [2022-04-28 08:12:29,241 INFO L290 TraceCheckUtils]: 23: Hoare triple {24319#true} assume 23 == ~irpStack__MinorFunction~0; {24319#true} is VALID [2022-04-28 08:12:29,241 INFO L290 TraceCheckUtils]: 24: Hoare triple {24319#true} ~devExt__SurpriseRemoved~0 := 1; {24319#true} is VALID [2022-04-28 08:12:29,241 INFO L290 TraceCheckUtils]: 25: Hoare triple {24319#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {24319#true} is VALID [2022-04-28 08:12:29,241 INFO L290 TraceCheckUtils]: 26: Hoare triple {24319#true} #t~post12 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post12;havoc #t~post12;#t~post13 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post13;havoc #t~post13; {24319#true} is VALID [2022-04-28 08:12:29,242 INFO L272 TraceCheckUtils]: 27: Hoare triple {24319#true} call #t~ret14 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:29,242 INFO L290 TraceCheckUtils]: 28: Hoare triple {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24319#true} is VALID [2022-04-28 08:12:29,242 INFO L290 TraceCheckUtils]: 29: Hoare triple {24319#true} assume !(0 != ~compRegistered~0); {24319#true} is VALID [2022-04-28 08:12:29,242 INFO L290 TraceCheckUtils]: 30: Hoare triple {24319#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24319#true} is VALID [2022-04-28 08:12:29,242 INFO L290 TraceCheckUtils]: 31: Hoare triple {24319#true} assume 0 == ~tmp_ndt_6~0; {24319#true} is VALID [2022-04-28 08:12:29,242 INFO L290 TraceCheckUtils]: 32: Hoare triple {24319#true} ~returnVal2~0 := 0; {24319#true} is VALID [2022-04-28 08:12:29,242 INFO L290 TraceCheckUtils]: 33: Hoare triple {24319#true} assume !(~s~0 == ~NP~0); {24319#true} is VALID [2022-04-28 08:12:29,242 INFO L290 TraceCheckUtils]: 34: Hoare triple {24319#true} assume !(~s~0 == ~MPR1~0); {24319#true} is VALID [2022-04-28 08:12:29,243 INFO L290 TraceCheckUtils]: 35: Hoare triple {24319#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:29,243 INFO L290 TraceCheckUtils]: 36: Hoare triple {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,243 INFO L290 TraceCheckUtils]: 37: Hoare triple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,244 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24319#true} #763#return; {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,244 INFO L290 TraceCheckUtils]: 39: Hoare triple {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;~status~0 := #t~ret14;havoc #t~ret14; {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,244 INFO L290 TraceCheckUtils]: 40: Hoare triple {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,245 INFO L290 TraceCheckUtils]: 41: Hoare triple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,245 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {24319#true} #723#return; {24352#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,245 INFO L290 TraceCheckUtils]: 43: Hoare triple {24352#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,246 INFO L290 TraceCheckUtils]: 44: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,246 INFO L290 TraceCheckUtils]: 45: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,246 INFO L290 TraceCheckUtils]: 46: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,246 INFO L290 TraceCheckUtils]: 47: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,247 INFO L290 TraceCheckUtils]: 48: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,247 INFO L290 TraceCheckUtils]: 49: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,247 INFO L290 TraceCheckUtils]: 50: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:29,248 INFO L290 TraceCheckUtils]: 51: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {24320#false} is VALID [2022-04-28 08:12:29,248 INFO L272 TraceCheckUtils]: 52: Hoare triple {24320#false} call errorFn(); {24320#false} is VALID [2022-04-28 08:12:29,248 INFO L290 TraceCheckUtils]: 53: Hoare triple {24320#false} assume !false; {24320#false} is VALID [2022-04-28 08:12:29,248 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:29,248 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:29,248 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1501173610] [2022-04-28 08:12:29,248 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1501173610] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:29,248 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:29,248 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:12:29,249 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:29,249 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1198027776] [2022-04-28 08:12:29,249 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1198027776] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:29,249 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:29,249 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:12:29,249 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [355933100] [2022-04-28 08:12:29,249 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:29,249 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 54 [2022-04-28 08:12:29,249 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:29,249 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:29,283 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 54 edges. 54 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:29,283 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-28 08:12:29,283 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:29,284 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-28 08:12:29,284 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-04-28 08:12:29,284 INFO L87 Difference]: Start difference. First operand 210 states and 273 transitions. Second operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:32,053 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:32,053 INFO L93 Difference]: Finished difference Result 226 states and 289 transitions. [2022-04-28 08:12:32,053 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 08:12:32,053 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 54 [2022-04-28 08:12:32,054 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:32,054 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:32,055 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 265 transitions. [2022-04-28 08:12:32,055 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:32,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 265 transitions. [2022-04-28 08:12:32,057 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 265 transitions. [2022-04-28 08:12:32,268 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 265 edges. 265 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:32,272 INFO L225 Difference]: With dead ends: 226 [2022-04-28 08:12:32,272 INFO L226 Difference]: Without dead ends: 205 [2022-04-28 08:12:32,272 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-04-28 08:12:32,272 INFO L413 NwaCegarLoop]: 214 mSDtfsCounter, 246 mSDsluCounter, 625 mSDsCounter, 0 mSdLazyCounter, 1286 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 246 SdHoareTripleChecker+Valid, 839 SdHoareTripleChecker+Invalid, 1337 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 1286 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:32,273 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [246 Valid, 839 Invalid, 1337 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 1286 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-28 08:12:32,273 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2022-04-28 08:12:32,572 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 205. [2022-04-28 08:12:32,572 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:32,573 INFO L82 GeneralOperation]: Start isEquivalent. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-28 08:12:32,573 INFO L74 IsIncluded]: Start isIncluded. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-28 08:12:32,573 INFO L87 Difference]: Start difference. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-28 08:12:32,576 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:32,576 INFO L93 Difference]: Finished difference Result 205 states and 266 transitions. [2022-04-28 08:12:32,576 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-28 08:12:32,576 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:32,576 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:32,577 INFO L74 IsIncluded]: Start isIncluded. First operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) Second operand 205 states. [2022-04-28 08:12:32,577 INFO L87 Difference]: Start difference. First operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) Second operand 205 states. [2022-04-28 08:12:32,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:32,580 INFO L93 Difference]: Finished difference Result 205 states and 266 transitions. [2022-04-28 08:12:32,580 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-28 08:12:32,580 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:32,580 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:32,580 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:32,580 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:32,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-28 08:12:32,583 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 205 states to 205 states and 266 transitions. [2022-04-28 08:12:32,584 INFO L78 Accepts]: Start accepts. Automaton has 205 states and 266 transitions. Word has length 54 [2022-04-28 08:12:32,584 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:32,584 INFO L495 AbstractCegarLoop]: Abstraction has 205 states and 266 transitions. [2022-04-28 08:12:32,584 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:32,584 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 205 states and 266 transitions. [2022-04-28 08:12:32,894 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 266 edges. 266 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:32,894 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-28 08:12:32,895 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-28 08:12:32,895 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:32,895 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:32,895 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-04-28 08:12:32,895 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:32,896 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:32,896 INFO L85 PathProgramCache]: Analyzing trace with hash 432963036, now seen corresponding path program 1 times [2022-04-28 08:12:32,896 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:32,896 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [357612558] [2022-04-28 08:12:32,896 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:32,896 INFO L85 PathProgramCache]: Analyzing trace with hash 432963036, now seen corresponding path program 2 times [2022-04-28 08:12:32,896 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:32,896 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [667999620] [2022-04-28 08:12:32,896 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:32,896 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:32,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:32,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:32,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:32,970 INFO L290 TraceCheckUtils]: 0: Hoare triple {25686#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {25653#true} is VALID [2022-04-28 08:12:32,970 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 08:12:32,970 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #783#return; {25653#true} is VALID [2022-04-28 08:12:32,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:32,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:32,991 INFO L290 TraceCheckUtils]: 0: Hoare triple {25687#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-28 08:12:32,991 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 08:12:32,991 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #715#return; {25653#true} is VALID [2022-04-28 08:12:33,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:33,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:33,003 INFO L290 TraceCheckUtils]: 0: Hoare triple {25688#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-28 08:12:33,003 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 08:12:33,003 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #717#return; {25653#true} is VALID [2022-04-28 08:12:33,010 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:12:33,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:33,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:12:33,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:33,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:33,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:33,063 INFO L290 TraceCheckUtils]: 0: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-28 08:12:33,063 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 08:12:33,063 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-28 08:12:33,064 INFO L290 TraceCheckUtils]: 0: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25653#true} is VALID [2022-04-28 08:12:33,064 INFO L272 TraceCheckUtils]: 1: Hoare triple {25653#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:33,064 INFO L290 TraceCheckUtils]: 2: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-28 08:12:33,064 INFO L290 TraceCheckUtils]: 3: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 08:12:33,064 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-28 08:12:33,064 INFO L290 TraceCheckUtils]: 5: Hoare triple {25653#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25653#true} is VALID [2022-04-28 08:12:33,064 INFO L290 TraceCheckUtils]: 6: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 08:12:33,065 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {25653#true} {25653#true} #777#return; {25653#true} is VALID [2022-04-28 08:12:33,065 INFO L290 TraceCheckUtils]: 0: Hoare triple {25689#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {25653#true} is VALID [2022-04-28 08:12:33,065 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume 0 != ~compRegistered~0; {25653#true} is VALID [2022-04-28 08:12:33,065 INFO L272 TraceCheckUtils]: 2: Hoare triple {25653#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:33,065 INFO L290 TraceCheckUtils]: 3: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25653#true} is VALID [2022-04-28 08:12:33,066 INFO L272 TraceCheckUtils]: 4: Hoare triple {25653#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:33,066 INFO L290 TraceCheckUtils]: 5: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-28 08:12:33,066 INFO L290 TraceCheckUtils]: 6: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 08:12:33,066 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-28 08:12:33,066 INFO L290 TraceCheckUtils]: 8: Hoare triple {25653#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25653#true} is VALID [2022-04-28 08:12:33,066 INFO L290 TraceCheckUtils]: 9: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 08:12:33,066 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {25653#true} {25653#true} #777#return; {25653#true} is VALID [2022-04-28 08:12:33,066 INFO L290 TraceCheckUtils]: 11: Hoare triple {25653#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {25653#true} is VALID [2022-04-28 08:12:33,067 INFO L290 TraceCheckUtils]: 12: Hoare triple {25653#true} assume !(-1073741802 == ~__cil_tmp7~0); {25653#true} is VALID [2022-04-28 08:12:33,067 INFO L290 TraceCheckUtils]: 13: Hoare triple {25653#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {25653#true} is VALID [2022-04-28 08:12:33,067 INFO L290 TraceCheckUtils]: 14: Hoare triple {25653#true} assume 0 == ~tmp_ndt_6~0; {25653#true} is VALID [2022-04-28 08:12:33,067 INFO L290 TraceCheckUtils]: 15: Hoare triple {25653#true} ~returnVal2~0 := 0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:33,067 INFO L290 TraceCheckUtils]: 16: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:33,068 INFO L290 TraceCheckUtils]: 17: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:33,068 INFO L290 TraceCheckUtils]: 18: Hoare triple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:33,068 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {25653#true} #755#return; {25684#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-28 08:12:33,070 INFO L272 TraceCheckUtils]: 0: Hoare triple {25653#true} call ULTIMATE.init(); {25686#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:33,070 INFO L290 TraceCheckUtils]: 1: Hoare triple {25686#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {25653#true} is VALID [2022-04-28 08:12:33,070 INFO L290 TraceCheckUtils]: 2: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 08:12:33,070 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {25653#true} {25653#true} #783#return; {25653#true} is VALID [2022-04-28 08:12:33,070 INFO L272 TraceCheckUtils]: 4: Hoare triple {25653#true} call #t~ret81 := main(); {25653#true} is VALID [2022-04-28 08:12:33,070 INFO L290 TraceCheckUtils]: 5: Hoare triple {25653#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {25653#true} is VALID [2022-04-28 08:12:33,071 INFO L272 TraceCheckUtils]: 6: Hoare triple {25653#true} call _BLAST_init(); {25687#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:33,071 INFO L290 TraceCheckUtils]: 7: Hoare triple {25687#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-28 08:12:33,071 INFO L290 TraceCheckUtils]: 8: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 08:12:33,071 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {25653#true} {25653#true} #715#return; {25653#true} is VALID [2022-04-28 08:12:33,071 INFO L290 TraceCheckUtils]: 10: Hoare triple {25653#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {25653#true} is VALID [2022-04-28 08:12:33,071 INFO L290 TraceCheckUtils]: 11: Hoare triple {25653#true} assume !(0 == ~irp_choice~0); {25653#true} is VALID [2022-04-28 08:12:33,072 INFO L272 TraceCheckUtils]: 12: Hoare triple {25653#true} call stub_driver_init(); {25688#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:33,072 INFO L290 TraceCheckUtils]: 13: Hoare triple {25688#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-28 08:12:33,072 INFO L290 TraceCheckUtils]: 14: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 08:12:33,072 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {25653#true} {25653#true} #717#return; {25653#true} is VALID [2022-04-28 08:12:33,072 INFO L290 TraceCheckUtils]: 16: Hoare triple {25653#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {25653#true} is VALID [2022-04-28 08:12:33,072 INFO L290 TraceCheckUtils]: 17: Hoare triple {25653#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {25653#true} is VALID [2022-04-28 08:12:33,072 INFO L290 TraceCheckUtils]: 18: Hoare triple {25653#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {25653#true} is VALID [2022-04-28 08:12:33,072 INFO L290 TraceCheckUtils]: 19: Hoare triple {25653#true} assume 3 == ~tmp_ndt_3~0; {25653#true} is VALID [2022-04-28 08:12:33,072 INFO L272 TraceCheckUtils]: 20: Hoare triple {25653#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {25653#true} is VALID [2022-04-28 08:12:33,072 INFO L290 TraceCheckUtils]: 21: Hoare triple {25653#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {25653#true} is VALID [2022-04-28 08:12:33,072 INFO L290 TraceCheckUtils]: 22: Hoare triple {25653#true} assume 0 == ~irpStack__MinorFunction~0; {25653#true} is VALID [2022-04-28 08:12:33,072 INFO L290 TraceCheckUtils]: 23: Hoare triple {25653#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {25653#true} is VALID [2022-04-28 08:12:33,072 INFO L290 TraceCheckUtils]: 24: Hoare triple {25653#true} assume !(~s~0 != ~NP~0); {25653#true} is VALID [2022-04-28 08:12:33,073 INFO L290 TraceCheckUtils]: 25: Hoare triple {25653#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {25653#true} is VALID [2022-04-28 08:12:33,073 INFO L290 TraceCheckUtils]: 26: Hoare triple {25653#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {25653#true} is VALID [2022-04-28 08:12:33,073 INFO L272 TraceCheckUtils]: 27: Hoare triple {25653#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {25689#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:33,073 INFO L290 TraceCheckUtils]: 28: Hoare triple {25689#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {25653#true} is VALID [2022-04-28 08:12:33,073 INFO L290 TraceCheckUtils]: 29: Hoare triple {25653#true} assume 0 != ~compRegistered~0; {25653#true} is VALID [2022-04-28 08:12:33,074 INFO L272 TraceCheckUtils]: 30: Hoare triple {25653#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:33,074 INFO L290 TraceCheckUtils]: 31: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25653#true} is VALID [2022-04-28 08:12:33,074 INFO L272 TraceCheckUtils]: 32: Hoare triple {25653#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:33,074 INFO L290 TraceCheckUtils]: 33: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-28 08:12:33,074 INFO L290 TraceCheckUtils]: 34: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 08:12:33,075 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-28 08:12:33,075 INFO L290 TraceCheckUtils]: 36: Hoare triple {25653#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25653#true} is VALID [2022-04-28 08:12:33,075 INFO L290 TraceCheckUtils]: 37: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 08:12:33,075 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {25653#true} {25653#true} #777#return; {25653#true} is VALID [2022-04-28 08:12:33,075 INFO L290 TraceCheckUtils]: 39: Hoare triple {25653#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {25653#true} is VALID [2022-04-28 08:12:33,075 INFO L290 TraceCheckUtils]: 40: Hoare triple {25653#true} assume !(-1073741802 == ~__cil_tmp7~0); {25653#true} is VALID [2022-04-28 08:12:33,075 INFO L290 TraceCheckUtils]: 41: Hoare triple {25653#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {25653#true} is VALID [2022-04-28 08:12:33,075 INFO L290 TraceCheckUtils]: 42: Hoare triple {25653#true} assume 0 == ~tmp_ndt_6~0; {25653#true} is VALID [2022-04-28 08:12:33,075 INFO L290 TraceCheckUtils]: 43: Hoare triple {25653#true} ~returnVal2~0 := 0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:33,076 INFO L290 TraceCheckUtils]: 44: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:33,076 INFO L290 TraceCheckUtils]: 45: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:33,076 INFO L290 TraceCheckUtils]: 46: Hoare triple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:33,077 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {25653#true} #755#return; {25684#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-28 08:12:33,077 INFO L290 TraceCheckUtils]: 48: Hoare triple {25684#(= |KbFilter_PnP_#t~ret10| 0)} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {25685#(= KbFilter_PnP_~__cil_tmp23~0 0)} is VALID [2022-04-28 08:12:33,077 INFO L290 TraceCheckUtils]: 49: Hoare triple {25685#(= KbFilter_PnP_~__cil_tmp23~0 0)} assume 259 == ~__cil_tmp23~0; {25654#false} is VALID [2022-04-28 08:12:33,078 INFO L272 TraceCheckUtils]: 50: Hoare triple {25654#false} call #t~ret11 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {25654#false} is VALID [2022-04-28 08:12:33,078 INFO L290 TraceCheckUtils]: 51: Hoare triple {25654#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {25654#false} is VALID [2022-04-28 08:12:33,078 INFO L290 TraceCheckUtils]: 52: Hoare triple {25654#false} assume !(~s~0 == ~MPR3~0); {25654#false} is VALID [2022-04-28 08:12:33,078 INFO L290 TraceCheckUtils]: 53: Hoare triple {25654#false} assume !(1 == ~customIrp~0); {25654#false} is VALID [2022-04-28 08:12:33,078 INFO L290 TraceCheckUtils]: 54: Hoare triple {25654#false} assume ~s~0 == ~MPR3~0; {25654#false} is VALID [2022-04-28 08:12:33,078 INFO L272 TraceCheckUtils]: 55: Hoare triple {25654#false} call errorFn(); {25654#false} is VALID [2022-04-28 08:12:33,078 INFO L290 TraceCheckUtils]: 56: Hoare triple {25654#false} assume !false; {25654#false} is VALID [2022-04-28 08:12:33,078 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:33,078 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:33,078 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [667999620] [2022-04-28 08:12:33,078 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [667999620] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:33,079 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:33,079 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:12:33,079 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:33,079 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [357612558] [2022-04-28 08:12:33,079 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [357612558] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:33,079 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:33,079 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:12:33,079 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [114154668] [2022-04-28 08:12:33,079 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:33,080 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-28 08:12:33,080 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:33,085 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:33,115 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:33,115 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 08:12:33,115 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:33,116 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 08:12:33,116 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-28 08:12:33,116 INFO L87 Difference]: Start difference. First operand 205 states and 266 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:35,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:35,226 INFO L93 Difference]: Finished difference Result 263 states and 337 transitions. [2022-04-28 08:12:35,226 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-28 08:12:35,226 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-28 08:12:35,226 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:35,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:35,228 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 302 transitions. [2022-04-28 08:12:35,228 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:35,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 302 transitions. [2022-04-28 08:12:35,230 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 302 transitions. [2022-04-28 08:12:35,489 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 302 edges. 302 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:35,492 INFO L225 Difference]: With dead ends: 263 [2022-04-28 08:12:35,492 INFO L226 Difference]: Without dead ends: 222 [2022-04-28 08:12:35,492 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-04-28 08:12:35,493 INFO L413 NwaCegarLoop]: 203 mSDtfsCounter, 155 mSDsluCounter, 448 mSDsCounter, 0 mSdLazyCounter, 796 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 651 SdHoareTripleChecker+Invalid, 837 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 796 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:35,493 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [155 Valid, 651 Invalid, 837 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 796 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-28 08:12:35,493 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2022-04-28 08:12:35,840 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 210. [2022-04-28 08:12:35,840 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:35,840 INFO L82 GeneralOperation]: Start isEquivalent. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 08:12:35,841 INFO L74 IsIncluded]: Start isIncluded. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 08:12:35,841 INFO L87 Difference]: Start difference. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 08:12:35,844 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:35,844 INFO L93 Difference]: Finished difference Result 222 states and 287 transitions. [2022-04-28 08:12:35,844 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 287 transitions. [2022-04-28 08:12:35,844 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:35,844 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:35,844 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 222 states. [2022-04-28 08:12:35,845 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 222 states. [2022-04-28 08:12:35,847 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:35,848 INFO L93 Difference]: Finished difference Result 222 states and 287 transitions. [2022-04-28 08:12:35,848 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 287 transitions. [2022-04-28 08:12:35,848 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:35,848 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:35,848 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:35,848 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:35,848 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 08:12:35,851 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 271 transitions. [2022-04-28 08:12:35,851 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 271 transitions. Word has length 57 [2022-04-28 08:12:35,852 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:35,852 INFO L495 AbstractCegarLoop]: Abstraction has 210 states and 271 transitions. [2022-04-28 08:12:35,852 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:35,852 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 210 states and 271 transitions. [2022-04-28 08:12:36,172 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 271 edges. 271 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:36,172 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 271 transitions. [2022-04-28 08:12:36,173 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-28 08:12:36,173 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:36,173 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:36,173 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-04-28 08:12:36,173 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:36,173 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:36,173 INFO L85 PathProgramCache]: Analyzing trace with hash 1039954733, now seen corresponding path program 1 times [2022-04-28 08:12:36,173 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:36,173 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [200623913] [2022-04-28 08:12:36,174 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:36,174 INFO L85 PathProgramCache]: Analyzing trace with hash 1039954733, now seen corresponding path program 2 times [2022-04-28 08:12:36,174 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:36,174 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1142449822] [2022-04-28 08:12:36,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:36,174 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:36,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:36,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:36,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:36,296 INFO L290 TraceCheckUtils]: 0: Hoare triple {27137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {27104#true} is VALID [2022-04-28 08:12:36,297 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 08:12:36,297 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #783#return; {27104#true} is VALID [2022-04-28 08:12:36,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:36,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:36,318 INFO L290 TraceCheckUtils]: 0: Hoare triple {27138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-28 08:12:36,318 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 08:12:36,318 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #715#return; {27104#true} is VALID [2022-04-28 08:12:36,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:36,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:36,331 INFO L290 TraceCheckUtils]: 0: Hoare triple {27139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-28 08:12:36,331 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 08:12:36,331 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #717#return; {27104#true} is VALID [2022-04-28 08:12:36,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:12:36,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:36,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:12:36,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:36,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:36,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:36,392 INFO L290 TraceCheckUtils]: 0: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-28 08:12:36,393 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 08:12:36,393 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-28 08:12:36,393 INFO L290 TraceCheckUtils]: 0: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {27104#true} is VALID [2022-04-28 08:12:36,393 INFO L272 TraceCheckUtils]: 1: Hoare triple {27104#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:36,393 INFO L290 TraceCheckUtils]: 2: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-28 08:12:36,394 INFO L290 TraceCheckUtils]: 3: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 08:12:36,394 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-28 08:12:36,394 INFO L290 TraceCheckUtils]: 5: Hoare triple {27104#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {27104#true} is VALID [2022-04-28 08:12:36,394 INFO L290 TraceCheckUtils]: 6: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 08:12:36,394 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {27104#true} {27104#true} #777#return; {27104#true} is VALID [2022-04-28 08:12:36,394 INFO L290 TraceCheckUtils]: 0: Hoare triple {27140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {27104#true} is VALID [2022-04-28 08:12:36,394 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume 0 != ~compRegistered~0; {27104#true} is VALID [2022-04-28 08:12:36,395 INFO L272 TraceCheckUtils]: 2: Hoare triple {27104#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:36,395 INFO L290 TraceCheckUtils]: 3: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {27104#true} is VALID [2022-04-28 08:12:36,395 INFO L272 TraceCheckUtils]: 4: Hoare triple {27104#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:36,395 INFO L290 TraceCheckUtils]: 5: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-28 08:12:36,395 INFO L290 TraceCheckUtils]: 6: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 08:12:36,395 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-28 08:12:36,395 INFO L290 TraceCheckUtils]: 8: Hoare triple {27104#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {27104#true} is VALID [2022-04-28 08:12:36,395 INFO L290 TraceCheckUtils]: 9: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 08:12:36,396 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {27104#true} {27104#true} #777#return; {27104#true} is VALID [2022-04-28 08:12:36,396 INFO L290 TraceCheckUtils]: 11: Hoare triple {27104#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {27104#true} is VALID [2022-04-28 08:12:36,396 INFO L290 TraceCheckUtils]: 12: Hoare triple {27104#true} assume !(-1073741802 == ~__cil_tmp7~0); {27104#true} is VALID [2022-04-28 08:12:36,396 INFO L290 TraceCheckUtils]: 13: Hoare triple {27104#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {27104#true} is VALID [2022-04-28 08:12:36,396 INFO L290 TraceCheckUtils]: 14: Hoare triple {27104#true} assume 0 == ~tmp_ndt_6~0; {27104#true} is VALID [2022-04-28 08:12:36,396 INFO L290 TraceCheckUtils]: 15: Hoare triple {27104#true} ~returnVal2~0 := 0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:36,396 INFO L290 TraceCheckUtils]: 16: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:36,397 INFO L290 TraceCheckUtils]: 17: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:36,397 INFO L290 TraceCheckUtils]: 18: Hoare triple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:36,398 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {27104#true} #755#return; {27135#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-28 08:12:36,399 INFO L272 TraceCheckUtils]: 0: Hoare triple {27104#true} call ULTIMATE.init(); {27137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:36,399 INFO L290 TraceCheckUtils]: 1: Hoare triple {27137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {27104#true} is VALID [2022-04-28 08:12:36,399 INFO L290 TraceCheckUtils]: 2: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 08:12:36,399 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {27104#true} {27104#true} #783#return; {27104#true} is VALID [2022-04-28 08:12:36,399 INFO L272 TraceCheckUtils]: 4: Hoare triple {27104#true} call #t~ret81 := main(); {27104#true} is VALID [2022-04-28 08:12:36,399 INFO L290 TraceCheckUtils]: 5: Hoare triple {27104#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {27104#true} is VALID [2022-04-28 08:12:36,400 INFO L272 TraceCheckUtils]: 6: Hoare triple {27104#true} call _BLAST_init(); {27138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:36,400 INFO L290 TraceCheckUtils]: 7: Hoare triple {27138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-28 08:12:36,400 INFO L290 TraceCheckUtils]: 8: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 08:12:36,400 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {27104#true} {27104#true} #715#return; {27104#true} is VALID [2022-04-28 08:12:36,400 INFO L290 TraceCheckUtils]: 10: Hoare triple {27104#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {27104#true} is VALID [2022-04-28 08:12:36,400 INFO L290 TraceCheckUtils]: 11: Hoare triple {27104#true} assume !(0 == ~irp_choice~0); {27104#true} is VALID [2022-04-28 08:12:36,401 INFO L272 TraceCheckUtils]: 12: Hoare triple {27104#true} call stub_driver_init(); {27139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:36,401 INFO L290 TraceCheckUtils]: 13: Hoare triple {27139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-28 08:12:36,401 INFO L290 TraceCheckUtils]: 14: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 08:12:36,401 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {27104#true} {27104#true} #717#return; {27104#true} is VALID [2022-04-28 08:12:36,401 INFO L290 TraceCheckUtils]: 16: Hoare triple {27104#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {27104#true} is VALID [2022-04-28 08:12:36,401 INFO L290 TraceCheckUtils]: 17: Hoare triple {27104#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {27104#true} is VALID [2022-04-28 08:12:36,401 INFO L290 TraceCheckUtils]: 18: Hoare triple {27104#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {27104#true} is VALID [2022-04-28 08:12:36,401 INFO L290 TraceCheckUtils]: 19: Hoare triple {27104#true} assume 3 == ~tmp_ndt_3~0; {27104#true} is VALID [2022-04-28 08:12:36,401 INFO L272 TraceCheckUtils]: 20: Hoare triple {27104#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {27104#true} is VALID [2022-04-28 08:12:36,402 INFO L290 TraceCheckUtils]: 21: Hoare triple {27104#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {27104#true} is VALID [2022-04-28 08:12:36,402 INFO L290 TraceCheckUtils]: 22: Hoare triple {27104#true} assume 0 == ~irpStack__MinorFunction~0; {27104#true} is VALID [2022-04-28 08:12:36,402 INFO L290 TraceCheckUtils]: 23: Hoare triple {27104#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {27104#true} is VALID [2022-04-28 08:12:36,402 INFO L290 TraceCheckUtils]: 24: Hoare triple {27104#true} assume !(~s~0 != ~NP~0); {27104#true} is VALID [2022-04-28 08:12:36,402 INFO L290 TraceCheckUtils]: 25: Hoare triple {27104#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {27104#true} is VALID [2022-04-28 08:12:36,402 INFO L290 TraceCheckUtils]: 26: Hoare triple {27104#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {27104#true} is VALID [2022-04-28 08:12:36,402 INFO L272 TraceCheckUtils]: 27: Hoare triple {27104#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {27140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:36,402 INFO L290 TraceCheckUtils]: 28: Hoare triple {27140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {27104#true} is VALID [2022-04-28 08:12:36,403 INFO L290 TraceCheckUtils]: 29: Hoare triple {27104#true} assume 0 != ~compRegistered~0; {27104#true} is VALID [2022-04-28 08:12:36,403 INFO L272 TraceCheckUtils]: 30: Hoare triple {27104#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:36,403 INFO L290 TraceCheckUtils]: 31: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {27104#true} is VALID [2022-04-28 08:12:36,404 INFO L272 TraceCheckUtils]: 32: Hoare triple {27104#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:36,404 INFO L290 TraceCheckUtils]: 33: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-28 08:12:36,404 INFO L290 TraceCheckUtils]: 34: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 08:12:36,404 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-28 08:12:36,404 INFO L290 TraceCheckUtils]: 36: Hoare triple {27104#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {27104#true} is VALID [2022-04-28 08:12:36,404 INFO L290 TraceCheckUtils]: 37: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 08:12:36,404 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {27104#true} {27104#true} #777#return; {27104#true} is VALID [2022-04-28 08:12:36,404 INFO L290 TraceCheckUtils]: 39: Hoare triple {27104#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {27104#true} is VALID [2022-04-28 08:12:36,404 INFO L290 TraceCheckUtils]: 40: Hoare triple {27104#true} assume !(-1073741802 == ~__cil_tmp7~0); {27104#true} is VALID [2022-04-28 08:12:36,404 INFO L290 TraceCheckUtils]: 41: Hoare triple {27104#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {27104#true} is VALID [2022-04-28 08:12:36,404 INFO L290 TraceCheckUtils]: 42: Hoare triple {27104#true} assume 0 == ~tmp_ndt_6~0; {27104#true} is VALID [2022-04-28 08:12:36,405 INFO L290 TraceCheckUtils]: 43: Hoare triple {27104#true} ~returnVal2~0 := 0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:36,405 INFO L290 TraceCheckUtils]: 44: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:36,405 INFO L290 TraceCheckUtils]: 45: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:36,406 INFO L290 TraceCheckUtils]: 46: Hoare triple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 08:12:36,406 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {27104#true} #755#return; {27135#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-28 08:12:36,407 INFO L290 TraceCheckUtils]: 48: Hoare triple {27135#(= |KbFilter_PnP_#t~ret10| 0)} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {27136#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-28 08:12:36,407 INFO L290 TraceCheckUtils]: 49: Hoare triple {27136#(= KbFilter_PnP_~status~0 0)} assume !(259 == ~__cil_tmp23~0); {27136#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-28 08:12:36,407 INFO L290 TraceCheckUtils]: 50: Hoare triple {27136#(= KbFilter_PnP_~status~0 0)} assume !(~status~0 >= 0); {27105#false} is VALID [2022-04-28 08:12:36,407 INFO L290 TraceCheckUtils]: 51: Hoare triple {27105#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {27105#false} is VALID [2022-04-28 08:12:36,407 INFO L272 TraceCheckUtils]: 52: Hoare triple {27105#false} call IofCompleteRequest(~Irp, 0); {27105#false} is VALID [2022-04-28 08:12:36,408 INFO L290 TraceCheckUtils]: 53: Hoare triple {27105#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {27105#false} is VALID [2022-04-28 08:12:36,408 INFO L290 TraceCheckUtils]: 54: Hoare triple {27105#false} assume !(~s~0 == ~NP~0); {27105#false} is VALID [2022-04-28 08:12:36,408 INFO L272 TraceCheckUtils]: 55: Hoare triple {27105#false} call errorFn(); {27105#false} is VALID [2022-04-28 08:12:36,408 INFO L290 TraceCheckUtils]: 56: Hoare triple {27105#false} assume !false; {27105#false} is VALID [2022-04-28 08:12:36,408 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:36,408 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:36,408 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1142449822] [2022-04-28 08:12:36,410 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1142449822] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:36,410 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:36,410 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:12:36,410 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:36,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [200623913] [2022-04-28 08:12:36,410 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [200623913] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:36,410 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:36,410 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 08:12:36,410 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1892614180] [2022-04-28 08:12:36,410 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:36,411 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-28 08:12:36,411 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:36,411 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:36,442 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:36,443 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 08:12:36,443 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:36,443 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 08:12:36,443 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-28 08:12:36,443 INFO L87 Difference]: Start difference. First operand 210 states and 271 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:38,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:38,586 INFO L93 Difference]: Finished difference Result 230 states and 294 transitions. [2022-04-28 08:12:38,586 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-04-28 08:12:38,586 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-28 08:12:38,587 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:38,587 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:38,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 273 transitions. [2022-04-28 08:12:38,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:38,590 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 273 transitions. [2022-04-28 08:12:38,590 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 15 states and 273 transitions. [2022-04-28 08:12:38,813 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 273 edges. 273 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:38,816 INFO L225 Difference]: With dead ends: 230 [2022-04-28 08:12:38,816 INFO L226 Difference]: Without dead ends: 223 [2022-04-28 08:12:38,817 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=77, Invalid=265, Unknown=0, NotChecked=0, Total=342 [2022-04-28 08:12:38,817 INFO L413 NwaCegarLoop]: 202 mSDtfsCounter, 320 mSDsluCounter, 412 mSDsCounter, 0 mSdLazyCounter, 702 mSolverCounterSat, 73 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 320 SdHoareTripleChecker+Valid, 614 SdHoareTripleChecker+Invalid, 775 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 73 IncrementalHoareTripleChecker+Valid, 702 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:38,817 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [320 Valid, 614 Invalid, 775 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [73 Valid, 702 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-28 08:12:38,818 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2022-04-28 08:12:39,176 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 211. [2022-04-28 08:12:39,176 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:39,176 INFO L82 GeneralOperation]: Start isEquivalent. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 08:12:39,177 INFO L74 IsIncluded]: Start isIncluded. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 08:12:39,177 INFO L87 Difference]: Start difference. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 08:12:39,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:39,180 INFO L93 Difference]: Finished difference Result 223 states and 287 transitions. [2022-04-28 08:12:39,180 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 287 transitions. [2022-04-28 08:12:39,180 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:39,180 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:39,180 INFO L74 IsIncluded]: Start isIncluded. First operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 223 states. [2022-04-28 08:12:39,181 INFO L87 Difference]: Start difference. First operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 223 states. [2022-04-28 08:12:39,183 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:39,183 INFO L93 Difference]: Finished difference Result 223 states and 287 transitions. [2022-04-28 08:12:39,184 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 287 transitions. [2022-04-28 08:12:39,184 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:39,184 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:39,184 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:39,184 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:39,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 08:12:39,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 272 transitions. [2022-04-28 08:12:39,187 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 272 transitions. Word has length 57 [2022-04-28 08:12:39,188 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:39,188 INFO L495 AbstractCegarLoop]: Abstraction has 211 states and 272 transitions. [2022-04-28 08:12:39,188 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:39,188 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 211 states and 272 transitions. [2022-04-28 08:12:39,517 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 272 edges. 272 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:39,517 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 272 transitions. [2022-04-28 08:12:39,517 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-04-28 08:12:39,517 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:39,518 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:39,518 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-04-28 08:12:39,518 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:39,518 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:39,518 INFO L85 PathProgramCache]: Analyzing trace with hash -722543360, now seen corresponding path program 1 times [2022-04-28 08:12:39,518 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:39,518 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1559733866] [2022-04-28 08:12:39,518 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:39,519 INFO L85 PathProgramCache]: Analyzing trace with hash -722543360, now seen corresponding path program 2 times [2022-04-28 08:12:39,519 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:39,519 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [889402364] [2022-04-28 08:12:39,519 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:39,519 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:39,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:39,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:39,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:39,585 INFO L290 TraceCheckUtils]: 0: Hoare triple {28539#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {28502#true} is VALID [2022-04-28 08:12:39,585 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 08:12:39,585 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28502#true} {28502#true} #783#return; {28502#true} is VALID [2022-04-28 08:12:39,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:39,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:39,604 INFO L290 TraceCheckUtils]: 0: Hoare triple {28540#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-28 08:12:39,605 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 08:12:39,605 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28502#true} {28502#true} #715#return; {28502#true} is VALID [2022-04-28 08:12:39,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:39,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:39,616 INFO L290 TraceCheckUtils]: 0: Hoare triple {28541#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-28 08:12:39,616 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 08:12:39,616 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28502#true} {28502#true} #717#return; {28502#true} is VALID [2022-04-28 08:12:39,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-28 08:12:39,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:39,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-28 08:12:39,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:39,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-28 08:12:39,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:39,672 INFO L290 TraceCheckUtils]: 0: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-28 08:12:39,672 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-28 08:12:39,672 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-28 08:12:39,672 INFO L290 TraceCheckUtils]: 3: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-28 08:12:39,672 INFO L290 TraceCheckUtils]: 4: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-28 08:12:39,672 INFO L290 TraceCheckUtils]: 5: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-28 08:12:39,672 INFO L290 TraceCheckUtils]: 6: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-28 08:12:39,672 INFO L290 TraceCheckUtils]: 7: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-28 08:12:39,672 INFO L290 TraceCheckUtils]: 8: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-28 08:12:39,672 INFO L290 TraceCheckUtils]: 9: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 08:12:39,672 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-28 08:12:39,673 INFO L290 TraceCheckUtils]: 0: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {28502#true} is VALID [2022-04-28 08:12:39,673 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {28502#true} is VALID [2022-04-28 08:12:39,673 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {28502#true} is VALID [2022-04-28 08:12:39,673 INFO L272 TraceCheckUtils]: 3: Hoare triple {28502#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:39,673 INFO L290 TraceCheckUtils]: 4: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-28 08:12:39,674 INFO L290 TraceCheckUtils]: 5: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-28 08:12:39,674 INFO L290 TraceCheckUtils]: 6: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-28 08:12:39,674 INFO L290 TraceCheckUtils]: 7: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-28 08:12:39,674 INFO L290 TraceCheckUtils]: 8: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-28 08:12:39,674 INFO L290 TraceCheckUtils]: 9: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-28 08:12:39,674 INFO L290 TraceCheckUtils]: 10: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-28 08:12:39,674 INFO L290 TraceCheckUtils]: 11: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-28 08:12:39,674 INFO L290 TraceCheckUtils]: 12: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-28 08:12:39,674 INFO L290 TraceCheckUtils]: 13: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 08:12:39,674 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-28 08:12:39,674 INFO L290 TraceCheckUtils]: 15: Hoare triple {28502#true} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {28502#true} is VALID [2022-04-28 08:12:39,674 INFO L290 TraceCheckUtils]: 16: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 08:12:39,675 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {28502#true} {28503#false} #745#return; {28503#false} is VALID [2022-04-28 08:12:39,675 INFO L290 TraceCheckUtils]: 0: Hoare triple {28542#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {28502#true} is VALID [2022-04-28 08:12:39,675 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {28502#true} is VALID [2022-04-28 08:12:39,675 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} is VALID [2022-04-28 08:12:39,676 INFO L290 TraceCheckUtils]: 3: Hoare triple {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} assume !(~status~3 < 0); {28503#false} is VALID [2022-04-28 08:12:39,676 INFO L272 TraceCheckUtils]: 4: Hoare triple {28503#false} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:39,676 INFO L290 TraceCheckUtils]: 5: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {28502#true} is VALID [2022-04-28 08:12:39,676 INFO L290 TraceCheckUtils]: 6: Hoare triple {28502#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {28502#true} is VALID [2022-04-28 08:12:39,676 INFO L290 TraceCheckUtils]: 7: Hoare triple {28502#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {28502#true} is VALID [2022-04-28 08:12:39,676 INFO L272 TraceCheckUtils]: 8: Hoare triple {28502#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:39,676 INFO L290 TraceCheckUtils]: 9: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-28 08:12:39,677 INFO L290 TraceCheckUtils]: 10: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-28 08:12:39,677 INFO L290 TraceCheckUtils]: 11: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-28 08:12:39,677 INFO L290 TraceCheckUtils]: 12: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-28 08:12:39,677 INFO L290 TraceCheckUtils]: 13: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-28 08:12:39,677 INFO L290 TraceCheckUtils]: 14: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-28 08:12:39,677 INFO L290 TraceCheckUtils]: 15: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-28 08:12:39,677 INFO L290 TraceCheckUtils]: 16: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-28 08:12:39,677 INFO L290 TraceCheckUtils]: 17: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-28 08:12:39,677 INFO L290 TraceCheckUtils]: 18: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 08:12:39,677 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-28 08:12:39,677 INFO L290 TraceCheckUtils]: 20: Hoare triple {28502#true} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {28502#true} is VALID [2022-04-28 08:12:39,677 INFO L290 TraceCheckUtils]: 21: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 08:12:39,677 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {28502#true} {28503#false} #745#return; {28503#false} is VALID [2022-04-28 08:12:39,678 INFO L290 TraceCheckUtils]: 23: Hoare triple {28503#false} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {28503#false} is VALID [2022-04-28 08:12:39,678 INFO L290 TraceCheckUtils]: 24: Hoare triple {28503#false} assume true; {28503#false} is VALID [2022-04-28 08:12:39,678 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {28503#false} {28502#true} #727#return; {28503#false} is VALID [2022-04-28 08:12:39,679 INFO L272 TraceCheckUtils]: 0: Hoare triple {28502#true} call ULTIMATE.init(); {28539#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:39,679 INFO L290 TraceCheckUtils]: 1: Hoare triple {28539#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {28502#true} is VALID [2022-04-28 08:12:39,679 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 08:12:39,679 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {28502#true} {28502#true} #783#return; {28502#true} is VALID [2022-04-28 08:12:39,679 INFO L272 TraceCheckUtils]: 4: Hoare triple {28502#true} call #t~ret81 := main(); {28502#true} is VALID [2022-04-28 08:12:39,679 INFO L290 TraceCheckUtils]: 5: Hoare triple {28502#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {28502#true} is VALID [2022-04-28 08:12:39,680 INFO L272 TraceCheckUtils]: 6: Hoare triple {28502#true} call _BLAST_init(); {28540#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:39,680 INFO L290 TraceCheckUtils]: 7: Hoare triple {28540#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-28 08:12:39,680 INFO L290 TraceCheckUtils]: 8: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 08:12:39,680 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {28502#true} {28502#true} #715#return; {28502#true} is VALID [2022-04-28 08:12:39,680 INFO L290 TraceCheckUtils]: 10: Hoare triple {28502#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {28502#true} is VALID [2022-04-28 08:12:39,680 INFO L290 TraceCheckUtils]: 11: Hoare triple {28502#true} assume !(0 == ~irp_choice~0); {28502#true} is VALID [2022-04-28 08:12:39,681 INFO L272 TraceCheckUtils]: 12: Hoare triple {28502#true} call stub_driver_init(); {28541#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:39,681 INFO L290 TraceCheckUtils]: 13: Hoare triple {28541#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-28 08:12:39,681 INFO L290 TraceCheckUtils]: 14: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 08:12:39,681 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {28502#true} {28502#true} #717#return; {28502#true} is VALID [2022-04-28 08:12:39,681 INFO L290 TraceCheckUtils]: 16: Hoare triple {28502#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {28502#true} is VALID [2022-04-28 08:12:39,681 INFO L290 TraceCheckUtils]: 17: Hoare triple {28502#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {28502#true} is VALID [2022-04-28 08:12:39,681 INFO L290 TraceCheckUtils]: 18: Hoare triple {28502#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {28502#true} is VALID [2022-04-28 08:12:39,681 INFO L290 TraceCheckUtils]: 19: Hoare triple {28502#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {28502#true} is VALID [2022-04-28 08:12:39,681 INFO L290 TraceCheckUtils]: 20: Hoare triple {28502#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {28502#true} is VALID [2022-04-28 08:12:39,681 INFO L290 TraceCheckUtils]: 21: Hoare triple {28502#true} assume 8 == ~tmp_ndt_5~0; {28502#true} is VALID [2022-04-28 08:12:39,682 INFO L272 TraceCheckUtils]: 22: Hoare triple {28502#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {28542#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:39,682 INFO L290 TraceCheckUtils]: 23: Hoare triple {28542#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {28502#true} is VALID [2022-04-28 08:12:39,682 INFO L290 TraceCheckUtils]: 24: Hoare triple {28502#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {28502#true} is VALID [2022-04-28 08:12:39,682 INFO L290 TraceCheckUtils]: 25: Hoare triple {28502#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} is VALID [2022-04-28 08:12:39,683 INFO L290 TraceCheckUtils]: 26: Hoare triple {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} assume !(~status~3 < 0); {28503#false} is VALID [2022-04-28 08:12:39,683 INFO L272 TraceCheckUtils]: 27: Hoare triple {28503#false} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:39,683 INFO L290 TraceCheckUtils]: 28: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {28502#true} is VALID [2022-04-28 08:12:39,683 INFO L290 TraceCheckUtils]: 29: Hoare triple {28502#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {28502#true} is VALID [2022-04-28 08:12:39,683 INFO L290 TraceCheckUtils]: 30: Hoare triple {28502#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {28502#true} is VALID [2022-04-28 08:12:39,683 INFO L272 TraceCheckUtils]: 31: Hoare triple {28502#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:39,684 INFO L290 TraceCheckUtils]: 32: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-28 08:12:39,684 INFO L290 TraceCheckUtils]: 33: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-28 08:12:39,684 INFO L290 TraceCheckUtils]: 34: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-28 08:12:39,684 INFO L290 TraceCheckUtils]: 35: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-28 08:12:39,684 INFO L290 TraceCheckUtils]: 36: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-28 08:12:39,684 INFO L290 TraceCheckUtils]: 37: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-28 08:12:39,684 INFO L290 TraceCheckUtils]: 38: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-28 08:12:39,684 INFO L290 TraceCheckUtils]: 39: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-28 08:12:39,684 INFO L290 TraceCheckUtils]: 40: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-28 08:12:39,684 INFO L290 TraceCheckUtils]: 41: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 08:12:39,684 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-28 08:12:39,684 INFO L290 TraceCheckUtils]: 43: Hoare triple {28502#true} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {28502#true} is VALID [2022-04-28 08:12:39,684 INFO L290 TraceCheckUtils]: 44: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 08:12:39,684 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {28502#true} {28503#false} #745#return; {28503#false} is VALID [2022-04-28 08:12:39,685 INFO L290 TraceCheckUtils]: 46: Hoare triple {28503#false} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {28503#false} is VALID [2022-04-28 08:12:39,685 INFO L290 TraceCheckUtils]: 47: Hoare triple {28503#false} assume true; {28503#false} is VALID [2022-04-28 08:12:39,685 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {28503#false} {28502#true} #727#return; {28503#false} is VALID [2022-04-28 08:12:39,685 INFO L290 TraceCheckUtils]: 49: Hoare triple {28503#false} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {28503#false} is VALID [2022-04-28 08:12:39,685 INFO L290 TraceCheckUtils]: 50: Hoare triple {28503#false} assume !(1 == ~pended~0); {28503#false} is VALID [2022-04-28 08:12:39,685 INFO L290 TraceCheckUtils]: 51: Hoare triple {28503#false} assume !(1 == ~pended~0); {28503#false} is VALID [2022-04-28 08:12:39,685 INFO L290 TraceCheckUtils]: 52: Hoare triple {28503#false} assume ~s~0 != ~UNLOADED~0; {28503#false} is VALID [2022-04-28 08:12:39,685 INFO L290 TraceCheckUtils]: 53: Hoare triple {28503#false} assume -1 != ~status~1; {28503#false} is VALID [2022-04-28 08:12:39,685 INFO L290 TraceCheckUtils]: 54: Hoare triple {28503#false} assume !(~s~0 != ~SKIP2~0); {28503#false} is VALID [2022-04-28 08:12:39,685 INFO L290 TraceCheckUtils]: 55: Hoare triple {28503#false} assume !(1 == ~pended~0); {28503#false} is VALID [2022-04-28 08:12:39,685 INFO L290 TraceCheckUtils]: 56: Hoare triple {28503#false} assume !(~s~0 == ~DC~0); {28503#false} is VALID [2022-04-28 08:12:39,685 INFO L290 TraceCheckUtils]: 57: Hoare triple {28503#false} assume ~status~1 != ~lowerDriverReturn~0; {28503#false} is VALID [2022-04-28 08:12:39,685 INFO L272 TraceCheckUtils]: 58: Hoare triple {28503#false} call errorFn(); {28503#false} is VALID [2022-04-28 08:12:39,686 INFO L290 TraceCheckUtils]: 59: Hoare triple {28503#false} assume !false; {28503#false} is VALID [2022-04-28 08:12:39,686 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:39,686 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:39,686 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [889402364] [2022-04-28 08:12:39,686 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [889402364] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:39,686 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:39,687 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:12:39,687 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:39,687 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1559733866] [2022-04-28 08:12:39,687 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1559733866] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:39,687 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:39,687 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 08:12:39,687 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1029882557] [2022-04-28 08:12:39,687 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:39,687 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 60 [2022-04-28 08:12:39,688 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:39,688 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-28 08:12:39,718 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:39,718 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 08:12:39,718 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:39,719 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 08:12:39,719 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-04-28 08:12:39,719 INFO L87 Difference]: Start difference. First operand 211 states and 272 transitions. Second operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-28 08:12:40,816 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:40,816 INFO L93 Difference]: Finished difference Result 250 states and 313 transitions. [2022-04-28 08:12:40,816 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-28 08:12:40,816 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 60 [2022-04-28 08:12:40,816 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:40,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-28 08:12:40,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 283 transitions. [2022-04-28 08:12:40,818 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-28 08:12:40,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 283 transitions. [2022-04-28 08:12:40,820 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 283 transitions. [2022-04-28 08:12:41,044 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 283 edges. 283 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:41,061 INFO L225 Difference]: With dead ends: 250 [2022-04-28 08:12:41,061 INFO L226 Difference]: Without dead ends: 210 [2022-04-28 08:12:41,062 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-04-28 08:12:41,062 INFO L413 NwaCegarLoop]: 213 mSDtfsCounter, 238 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 265 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 238 SdHoareTripleChecker+Valid, 401 SdHoareTripleChecker+Invalid, 314 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:41,062 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [238 Valid, 401 Invalid, 314 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 265 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-04-28 08:12:41,063 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-04-28 08:12:41,362 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 210. [2022-04-28 08:12:41,362 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:41,363 INFO L82 GeneralOperation]: Start isEquivalent. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 08:12:41,363 INFO L74 IsIncluded]: Start isIncluded. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 08:12:41,363 INFO L87 Difference]: Start difference. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 08:12:41,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:41,366 INFO L93 Difference]: Finished difference Result 210 states and 267 transitions. [2022-04-28 08:12:41,366 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 267 transitions. [2022-04-28 08:12:41,366 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:41,366 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:41,366 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 210 states. [2022-04-28 08:12:41,367 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 210 states. [2022-04-28 08:12:41,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:41,369 INFO L93 Difference]: Finished difference Result 210 states and 267 transitions. [2022-04-28 08:12:41,369 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 267 transitions. [2022-04-28 08:12:41,370 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:41,370 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:41,370 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:41,370 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:41,370 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 08:12:41,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 267 transitions. [2022-04-28 08:12:41,373 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 267 transitions. Word has length 60 [2022-04-28 08:12:41,373 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:41,373 INFO L495 AbstractCegarLoop]: Abstraction has 210 states and 267 transitions. [2022-04-28 08:12:41,374 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-28 08:12:41,374 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 210 states and 267 transitions. [2022-04-28 08:12:41,680 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 267 edges. 267 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:41,681 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 267 transitions. [2022-04-28 08:12:41,681 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-04-28 08:12:41,681 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:41,681 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:41,681 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-04-28 08:12:41,682 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:41,682 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:41,682 INFO L85 PathProgramCache]: Analyzing trace with hash -1986597587, now seen corresponding path program 1 times [2022-04-28 08:12:41,682 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:41,682 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1263177794] [2022-04-28 08:12:41,682 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:41,682 INFO L85 PathProgramCache]: Analyzing trace with hash -1986597587, now seen corresponding path program 2 times [2022-04-28 08:12:41,682 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:41,682 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [239161077] [2022-04-28 08:12:41,682 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:41,683 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:41,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:41,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:41,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:41,788 INFO L290 TraceCheckUtils]: 0: Hoare triple {29958#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {29918#true} is VALID [2022-04-28 08:12:41,788 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-28 08:12:41,788 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29918#true} {29918#true} #783#return; {29918#true} is VALID [2022-04-28 08:12:41,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:41,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:41,812 INFO L290 TraceCheckUtils]: 0: Hoare triple {29959#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-28 08:12:41,812 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-28 08:12:41,812 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29918#true} {29918#true} #715#return; {29918#true} is VALID [2022-04-28 08:12:41,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:41,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:41,825 INFO L290 TraceCheckUtils]: 0: Hoare triple {29960#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-28 08:12:41,825 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-28 08:12:41,825 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29918#true} {29918#true} #717#return; {29918#true} is VALID [2022-04-28 08:12:41,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-28 08:12:41,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:41,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 08:12:41,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:41,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-28 08:12:41,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:41,965 INFO L290 TraceCheckUtils]: 0: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-28 08:12:41,966 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-28 08:12:41,966 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-28 08:12:41,966 INFO L290 TraceCheckUtils]: 3: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-28 08:12:41,966 INFO L290 TraceCheckUtils]: 4: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-28 08:12:41,966 INFO L290 TraceCheckUtils]: 5: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-28 08:12:41,966 INFO L290 TraceCheckUtils]: 6: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-28 08:12:41,966 INFO L290 TraceCheckUtils]: 7: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:41,967 INFO L290 TraceCheckUtils]: 8: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,967 INFO L290 TraceCheckUtils]: 9: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,968 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,968 INFO L290 TraceCheckUtils]: 0: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {29918#true} is VALID [2022-04-28 08:12:41,968 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {29918#true} is VALID [2022-04-28 08:12:41,968 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {29918#true} is VALID [2022-04-28 08:12:41,969 INFO L272 TraceCheckUtils]: 3: Hoare triple {29918#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:41,969 INFO L290 TraceCheckUtils]: 4: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-28 08:12:41,969 INFO L290 TraceCheckUtils]: 5: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-28 08:12:41,969 INFO L290 TraceCheckUtils]: 6: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-28 08:12:41,969 INFO L290 TraceCheckUtils]: 7: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-28 08:12:41,969 INFO L290 TraceCheckUtils]: 8: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-28 08:12:41,969 INFO L290 TraceCheckUtils]: 9: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-28 08:12:41,970 INFO L290 TraceCheckUtils]: 10: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-28 08:12:41,970 INFO L290 TraceCheckUtils]: 11: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:41,970 INFO L290 TraceCheckUtils]: 12: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,971 INFO L290 TraceCheckUtils]: 13: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,971 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,972 INFO L290 TraceCheckUtils]: 15: Hoare triple {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,972 INFO L290 TraceCheckUtils]: 16: Hoare triple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,973 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {29918#true} #745#return; {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} is VALID [2022-04-28 08:12:41,973 INFO L290 TraceCheckUtils]: 0: Hoare triple {29961#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {29918#true} is VALID [2022-04-28 08:12:41,973 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {29918#true} is VALID [2022-04-28 08:12:41,973 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} assume !(0 != ~devExt__UpperConnectData__ClassService~1); {29918#true} is VALID [2022-04-28 08:12:41,973 INFO L290 TraceCheckUtils]: 3: Hoare triple {29918#true} assume !(~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 < ~sizeof__CONNECT_DATA~0);~connectData~0 := ~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0; {29918#true} is VALID [2022-04-28 08:12:41,973 INFO L290 TraceCheckUtils]: 4: Hoare triple {29918#true} assume !(~status~3 < 0); {29918#true} is VALID [2022-04-28 08:12:41,974 INFO L272 TraceCheckUtils]: 5: Hoare triple {29918#true} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:41,974 INFO L290 TraceCheckUtils]: 6: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {29918#true} is VALID [2022-04-28 08:12:41,974 INFO L290 TraceCheckUtils]: 7: Hoare triple {29918#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {29918#true} is VALID [2022-04-28 08:12:41,974 INFO L290 TraceCheckUtils]: 8: Hoare triple {29918#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {29918#true} is VALID [2022-04-28 08:12:41,975 INFO L272 TraceCheckUtils]: 9: Hoare triple {29918#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:41,975 INFO L290 TraceCheckUtils]: 10: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-28 08:12:41,975 INFO L290 TraceCheckUtils]: 11: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-28 08:12:41,975 INFO L290 TraceCheckUtils]: 12: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-28 08:12:41,975 INFO L290 TraceCheckUtils]: 13: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-28 08:12:41,975 INFO L290 TraceCheckUtils]: 14: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-28 08:12:41,975 INFO L290 TraceCheckUtils]: 15: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-28 08:12:41,975 INFO L290 TraceCheckUtils]: 16: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-28 08:12:41,976 INFO L290 TraceCheckUtils]: 17: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:41,976 INFO L290 TraceCheckUtils]: 18: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,976 INFO L290 TraceCheckUtils]: 19: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,977 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,977 INFO L290 TraceCheckUtils]: 21: Hoare triple {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,978 INFO L290 TraceCheckUtils]: 22: Hoare triple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,978 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {29918#true} #745#return; {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} is VALID [2022-04-28 08:12:41,979 INFO L290 TraceCheckUtils]: 24: Hoare triple {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-28 08:12:41,979 INFO L290 TraceCheckUtils]: 25: Hoare triple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} assume true; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-28 08:12:41,980 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} {29918#true} #727#return; {29956#(= |main_#t~ret33| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,981 INFO L272 TraceCheckUtils]: 0: Hoare triple {29918#true} call ULTIMATE.init(); {29958#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:41,981 INFO L290 TraceCheckUtils]: 1: Hoare triple {29958#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {29918#true} is VALID [2022-04-28 08:12:41,981 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-28 08:12:41,982 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {29918#true} {29918#true} #783#return; {29918#true} is VALID [2022-04-28 08:12:41,982 INFO L272 TraceCheckUtils]: 4: Hoare triple {29918#true} call #t~ret81 := main(); {29918#true} is VALID [2022-04-28 08:12:41,982 INFO L290 TraceCheckUtils]: 5: Hoare triple {29918#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {29918#true} is VALID [2022-04-28 08:12:41,983 INFO L272 TraceCheckUtils]: 6: Hoare triple {29918#true} call _BLAST_init(); {29959#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:41,983 INFO L290 TraceCheckUtils]: 7: Hoare triple {29959#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-28 08:12:41,983 INFO L290 TraceCheckUtils]: 8: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-28 08:12:41,983 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {29918#true} {29918#true} #715#return; {29918#true} is VALID [2022-04-28 08:12:41,983 INFO L290 TraceCheckUtils]: 10: Hoare triple {29918#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {29918#true} is VALID [2022-04-28 08:12:41,983 INFO L290 TraceCheckUtils]: 11: Hoare triple {29918#true} assume !(0 == ~irp_choice~0); {29918#true} is VALID [2022-04-28 08:12:41,984 INFO L272 TraceCheckUtils]: 12: Hoare triple {29918#true} call stub_driver_init(); {29960#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:41,984 INFO L290 TraceCheckUtils]: 13: Hoare triple {29960#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-28 08:12:41,984 INFO L290 TraceCheckUtils]: 14: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-28 08:12:41,984 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {29918#true} {29918#true} #717#return; {29918#true} is VALID [2022-04-28 08:12:41,984 INFO L290 TraceCheckUtils]: 16: Hoare triple {29918#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {29918#true} is VALID [2022-04-28 08:12:41,984 INFO L290 TraceCheckUtils]: 17: Hoare triple {29918#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {29918#true} is VALID [2022-04-28 08:12:41,984 INFO L290 TraceCheckUtils]: 18: Hoare triple {29918#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {29918#true} is VALID [2022-04-28 08:12:41,984 INFO L290 TraceCheckUtils]: 19: Hoare triple {29918#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {29918#true} is VALID [2022-04-28 08:12:41,984 INFO L290 TraceCheckUtils]: 20: Hoare triple {29918#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {29918#true} is VALID [2022-04-28 08:12:41,984 INFO L290 TraceCheckUtils]: 21: Hoare triple {29918#true} assume 8 == ~tmp_ndt_5~0; {29918#true} is VALID [2022-04-28 08:12:41,985 INFO L272 TraceCheckUtils]: 22: Hoare triple {29918#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {29961#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:41,985 INFO L290 TraceCheckUtils]: 23: Hoare triple {29961#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {29918#true} is VALID [2022-04-28 08:12:41,985 INFO L290 TraceCheckUtils]: 24: Hoare triple {29918#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {29918#true} is VALID [2022-04-28 08:12:41,985 INFO L290 TraceCheckUtils]: 25: Hoare triple {29918#true} assume !(0 != ~devExt__UpperConnectData__ClassService~1); {29918#true} is VALID [2022-04-28 08:12:41,985 INFO L290 TraceCheckUtils]: 26: Hoare triple {29918#true} assume !(~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 < ~sizeof__CONNECT_DATA~0);~connectData~0 := ~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0; {29918#true} is VALID [2022-04-28 08:12:41,985 INFO L290 TraceCheckUtils]: 27: Hoare triple {29918#true} assume !(~status~3 < 0); {29918#true} is VALID [2022-04-28 08:12:41,986 INFO L272 TraceCheckUtils]: 28: Hoare triple {29918#true} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:41,986 INFO L290 TraceCheckUtils]: 29: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {29918#true} is VALID [2022-04-28 08:12:41,986 INFO L290 TraceCheckUtils]: 30: Hoare triple {29918#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {29918#true} is VALID [2022-04-28 08:12:41,986 INFO L290 TraceCheckUtils]: 31: Hoare triple {29918#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {29918#true} is VALID [2022-04-28 08:12:41,987 INFO L272 TraceCheckUtils]: 32: Hoare triple {29918#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:41,987 INFO L290 TraceCheckUtils]: 33: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-28 08:12:41,987 INFO L290 TraceCheckUtils]: 34: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-28 08:12:41,987 INFO L290 TraceCheckUtils]: 35: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-28 08:12:41,987 INFO L290 TraceCheckUtils]: 36: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-28 08:12:41,987 INFO L290 TraceCheckUtils]: 37: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-28 08:12:41,987 INFO L290 TraceCheckUtils]: 38: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-28 08:12:41,987 INFO L290 TraceCheckUtils]: 39: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-28 08:12:41,988 INFO L290 TraceCheckUtils]: 40: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:41,988 INFO L290 TraceCheckUtils]: 41: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,988 INFO L290 TraceCheckUtils]: 42: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,989 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,989 INFO L290 TraceCheckUtils]: 44: Hoare triple {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,989 INFO L290 TraceCheckUtils]: 45: Hoare triple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,990 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {29918#true} #745#return; {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} is VALID [2022-04-28 08:12:41,990 INFO L290 TraceCheckUtils]: 47: Hoare triple {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-28 08:12:41,991 INFO L290 TraceCheckUtils]: 48: Hoare triple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} assume true; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-28 08:12:41,991 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} {29918#true} #727#return; {29956#(= |main_#t~ret33| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,991 INFO L290 TraceCheckUtils]: 50: Hoare triple {29956#(= |main_#t~ret33| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,992 INFO L290 TraceCheckUtils]: 51: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,992 INFO L290 TraceCheckUtils]: 52: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,992 INFO L290 TraceCheckUtils]: 53: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,992 INFO L290 TraceCheckUtils]: 54: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,993 INFO L290 TraceCheckUtils]: 55: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,993 INFO L290 TraceCheckUtils]: 56: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,993 INFO L290 TraceCheckUtils]: 57: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:41,993 INFO L290 TraceCheckUtils]: 58: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {29919#false} is VALID [2022-04-28 08:12:41,993 INFO L272 TraceCheckUtils]: 59: Hoare triple {29919#false} call errorFn(); {29919#false} is VALID [2022-04-28 08:12:41,994 INFO L290 TraceCheckUtils]: 60: Hoare triple {29919#false} assume !false; {29919#false} is VALID [2022-04-28 08:12:41,994 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:41,994 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:41,994 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [239161077] [2022-04-28 08:12:41,994 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [239161077] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:41,994 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:41,994 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 08:12:41,994 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:41,994 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1263177794] [2022-04-28 08:12:41,994 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1263177794] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:41,995 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:41,995 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 08:12:41,995 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1229903940] [2022-04-28 08:12:41,995 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:41,995 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-04-28 08:12:41,995 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:41,995 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:42,029 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:42,030 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-28 08:12:42,030 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:42,030 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-28 08:12:42,030 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2022-04-28 08:12:42,030 INFO L87 Difference]: Start difference. First operand 210 states and 267 transitions. Second operand has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:44,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:44,912 INFO L93 Difference]: Finished difference Result 222 states and 279 transitions. [2022-04-28 08:12:44,913 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-28 08:12:44,913 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-04-28 08:12:44,913 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:44,913 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:44,914 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 249 transitions. [2022-04-28 08:12:44,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:44,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 249 transitions. [2022-04-28 08:12:44,916 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 249 transitions. [2022-04-28 08:12:45,118 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 249 edges. 249 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:45,120 INFO L225 Difference]: With dead ends: 222 [2022-04-28 08:12:45,120 INFO L226 Difference]: Without dead ends: 184 [2022-04-28 08:12:45,120 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-04-28 08:12:45,121 INFO L413 NwaCegarLoop]: 212 mSDtfsCounter, 456 mSDsluCounter, 767 mSDsCounter, 0 mSdLazyCounter, 1349 mSolverCounterSat, 90 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 456 SdHoareTripleChecker+Valid, 979 SdHoareTripleChecker+Invalid, 1439 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 90 IncrementalHoareTripleChecker+Valid, 1349 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:45,121 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [456 Valid, 979 Invalid, 1439 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [90 Valid, 1349 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-28 08:12:45,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2022-04-28 08:12:45,395 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 184. [2022-04-28 08:12:45,395 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:45,395 INFO L82 GeneralOperation]: Start isEquivalent. First operand 184 states. Second operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-28 08:12:45,395 INFO L74 IsIncluded]: Start isIncluded. First operand 184 states. Second operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-28 08:12:45,396 INFO L87 Difference]: Start difference. First operand 184 states. Second operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-28 08:12:45,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:45,398 INFO L93 Difference]: Finished difference Result 184 states and 229 transitions. [2022-04-28 08:12:45,398 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 229 transitions. [2022-04-28 08:12:45,398 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:45,398 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:45,398 INFO L74 IsIncluded]: Start isIncluded. First operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) Second operand 184 states. [2022-04-28 08:12:45,398 INFO L87 Difference]: Start difference. First operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) Second operand 184 states. [2022-04-28 08:12:45,400 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:45,400 INFO L93 Difference]: Finished difference Result 184 states and 229 transitions. [2022-04-28 08:12:45,400 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 229 transitions. [2022-04-28 08:12:45,401 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:45,401 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:45,401 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:45,401 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:45,401 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-28 08:12:45,403 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 229 transitions. [2022-04-28 08:12:45,403 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 229 transitions. Word has length 61 [2022-04-28 08:12:45,403 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:45,403 INFO L495 AbstractCegarLoop]: Abstraction has 184 states and 229 transitions. [2022-04-28 08:12:45,404 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:45,404 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 184 states and 229 transitions. [2022-04-28 08:12:45,698 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 229 edges. 229 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:45,698 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 229 transitions. [2022-04-28 08:12:45,699 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-04-28 08:12:45,699 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:45,699 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:45,699 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-04-28 08:12:45,699 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:45,699 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:45,700 INFO L85 PathProgramCache]: Analyzing trace with hash -2132592656, now seen corresponding path program 1 times [2022-04-28 08:12:45,700 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:45,700 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [770922346] [2022-04-28 08:12:45,700 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:45,700 INFO L85 PathProgramCache]: Analyzing trace with hash -2132592656, now seen corresponding path program 2 times [2022-04-28 08:12:45,700 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:45,700 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2006290242] [2022-04-28 08:12:45,700 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:45,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:45,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:45,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:45,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:45,762 INFO L290 TraceCheckUtils]: 0: Hoare triple {31221#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {31182#true} is VALID [2022-04-28 08:12:45,762 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-28 08:12:45,762 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31182#true} {31182#true} #783#return; {31182#true} is VALID [2022-04-28 08:12:45,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:45,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:45,782 INFO L290 TraceCheckUtils]: 0: Hoare triple {31222#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-28 08:12:45,782 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-28 08:12:45,782 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31182#true} {31182#true} #715#return; {31182#true} is VALID [2022-04-28 08:12:45,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:45,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:45,793 INFO L290 TraceCheckUtils]: 0: Hoare triple {31223#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-28 08:12:45,794 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-28 08:12:45,794 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31182#true} {31182#true} #717#return; {31182#true} is VALID [2022-04-28 08:12:45,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-04-28 08:12:45,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:45,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-28 08:12:45,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:45,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-28 08:12:45,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:45,881 INFO L290 TraceCheckUtils]: 0: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-28 08:12:45,881 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-28 08:12:45,881 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-28 08:12:45,881 INFO L290 TraceCheckUtils]: 3: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-28 08:12:45,882 INFO L290 TraceCheckUtils]: 4: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-28 08:12:45,882 INFO L290 TraceCheckUtils]: 5: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-28 08:12:45,882 INFO L290 TraceCheckUtils]: 6: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-28 08:12:45,882 INFO L290 TraceCheckUtils]: 7: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:45,882 INFO L290 TraceCheckUtils]: 8: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,883 INFO L290 TraceCheckUtils]: 9: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,883 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,884 INFO L290 TraceCheckUtils]: 0: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {31182#true} is VALID [2022-04-28 08:12:45,884 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {31182#true} is VALID [2022-04-28 08:12:45,884 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {31182#true} is VALID [2022-04-28 08:12:45,884 INFO L272 TraceCheckUtils]: 3: Hoare triple {31182#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:45,884 INFO L290 TraceCheckUtils]: 4: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-28 08:12:45,885 INFO L290 TraceCheckUtils]: 5: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-28 08:12:45,885 INFO L290 TraceCheckUtils]: 6: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-28 08:12:45,885 INFO L290 TraceCheckUtils]: 7: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-28 08:12:45,885 INFO L290 TraceCheckUtils]: 8: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-28 08:12:45,885 INFO L290 TraceCheckUtils]: 9: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-28 08:12:45,885 INFO L290 TraceCheckUtils]: 10: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-28 08:12:45,885 INFO L290 TraceCheckUtils]: 11: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:45,886 INFO L290 TraceCheckUtils]: 12: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,886 INFO L290 TraceCheckUtils]: 13: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,886 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,887 INFO L290 TraceCheckUtils]: 15: Hoare triple {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,887 INFO L290 TraceCheckUtils]: 16: Hoare triple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,888 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {31182#true} #741#return; {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-28 08:12:45,888 INFO L290 TraceCheckUtils]: 0: Hoare triple {31224#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {31182#true} is VALID [2022-04-28 08:12:45,888 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume 0 == ~irpStack__MajorFunction~0; {31182#true} is VALID [2022-04-28 08:12:45,888 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {31182#true} is VALID [2022-04-28 08:12:45,888 INFO L290 TraceCheckUtils]: 3: Hoare triple {31182#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {31182#true} is VALID [2022-04-28 08:12:45,889 INFO L272 TraceCheckUtils]: 4: Hoare triple {31182#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:45,889 INFO L290 TraceCheckUtils]: 5: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {31182#true} is VALID [2022-04-28 08:12:45,889 INFO L290 TraceCheckUtils]: 6: Hoare triple {31182#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {31182#true} is VALID [2022-04-28 08:12:45,889 INFO L290 TraceCheckUtils]: 7: Hoare triple {31182#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {31182#true} is VALID [2022-04-28 08:12:45,889 INFO L272 TraceCheckUtils]: 8: Hoare triple {31182#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:45,889 INFO L290 TraceCheckUtils]: 9: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-28 08:12:45,889 INFO L290 TraceCheckUtils]: 10: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-28 08:12:45,890 INFO L290 TraceCheckUtils]: 11: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-28 08:12:45,890 INFO L290 TraceCheckUtils]: 12: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-28 08:12:45,890 INFO L290 TraceCheckUtils]: 13: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-28 08:12:45,890 INFO L290 TraceCheckUtils]: 14: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-28 08:12:45,890 INFO L290 TraceCheckUtils]: 15: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-28 08:12:45,890 INFO L290 TraceCheckUtils]: 16: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:45,890 INFO L290 TraceCheckUtils]: 17: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,891 INFO L290 TraceCheckUtils]: 18: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,891 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,892 INFO L290 TraceCheckUtils]: 20: Hoare triple {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,892 INFO L290 TraceCheckUtils]: 21: Hoare triple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,892 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {31182#true} #741#return; {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-28 08:12:45,893 INFO L290 TraceCheckUtils]: 23: Hoare triple {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~tmp~0 := #t~ret43;havoc #t~ret43;#res := ~tmp~0; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-28 08:12:45,893 INFO L290 TraceCheckUtils]: 24: Hoare triple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} assume true; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-28 08:12:45,894 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} {31182#true} #719#return; {31219#(= |main_#t~ret29| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,895 INFO L272 TraceCheckUtils]: 0: Hoare triple {31182#true} call ULTIMATE.init(); {31221#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:45,895 INFO L290 TraceCheckUtils]: 1: Hoare triple {31221#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {31182#true} is VALID [2022-04-28 08:12:45,895 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-28 08:12:45,895 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {31182#true} {31182#true} #783#return; {31182#true} is VALID [2022-04-28 08:12:45,895 INFO L272 TraceCheckUtils]: 4: Hoare triple {31182#true} call #t~ret81 := main(); {31182#true} is VALID [2022-04-28 08:12:45,895 INFO L290 TraceCheckUtils]: 5: Hoare triple {31182#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {31182#true} is VALID [2022-04-28 08:12:45,896 INFO L272 TraceCheckUtils]: 6: Hoare triple {31182#true} call _BLAST_init(); {31222#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:45,896 INFO L290 TraceCheckUtils]: 7: Hoare triple {31222#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-28 08:12:45,896 INFO L290 TraceCheckUtils]: 8: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-28 08:12:45,897 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {31182#true} {31182#true} #715#return; {31182#true} is VALID [2022-04-28 08:12:45,897 INFO L290 TraceCheckUtils]: 10: Hoare triple {31182#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {31182#true} is VALID [2022-04-28 08:12:45,897 INFO L290 TraceCheckUtils]: 11: Hoare triple {31182#true} assume !(0 == ~irp_choice~0); {31182#true} is VALID [2022-04-28 08:12:45,897 INFO L272 TraceCheckUtils]: 12: Hoare triple {31182#true} call stub_driver_init(); {31223#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:45,897 INFO L290 TraceCheckUtils]: 13: Hoare triple {31223#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-28 08:12:45,897 INFO L290 TraceCheckUtils]: 14: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-28 08:12:45,897 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {31182#true} {31182#true} #717#return; {31182#true} is VALID [2022-04-28 08:12:45,897 INFO L290 TraceCheckUtils]: 16: Hoare triple {31182#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {31182#true} is VALID [2022-04-28 08:12:45,898 INFO L290 TraceCheckUtils]: 17: Hoare triple {31182#true} assume 0 == ~tmp_ndt_1~0; {31182#true} is VALID [2022-04-28 08:12:45,898 INFO L272 TraceCheckUtils]: 18: Hoare triple {31182#true} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {31224#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:45,898 INFO L290 TraceCheckUtils]: 19: Hoare triple {31224#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {31182#true} is VALID [2022-04-28 08:12:45,898 INFO L290 TraceCheckUtils]: 20: Hoare triple {31182#true} assume 0 == ~irpStack__MajorFunction~0; {31182#true} is VALID [2022-04-28 08:12:45,898 INFO L290 TraceCheckUtils]: 21: Hoare triple {31182#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {31182#true} is VALID [2022-04-28 08:12:45,898 INFO L290 TraceCheckUtils]: 22: Hoare triple {31182#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {31182#true} is VALID [2022-04-28 08:12:45,899 INFO L272 TraceCheckUtils]: 23: Hoare triple {31182#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:45,899 INFO L290 TraceCheckUtils]: 24: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {31182#true} is VALID [2022-04-28 08:12:45,899 INFO L290 TraceCheckUtils]: 25: Hoare triple {31182#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {31182#true} is VALID [2022-04-28 08:12:45,899 INFO L290 TraceCheckUtils]: 26: Hoare triple {31182#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {31182#true} is VALID [2022-04-28 08:12:45,900 INFO L272 TraceCheckUtils]: 27: Hoare triple {31182#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:45,900 INFO L290 TraceCheckUtils]: 28: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-28 08:12:45,900 INFO L290 TraceCheckUtils]: 29: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-28 08:12:45,900 INFO L290 TraceCheckUtils]: 30: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-28 08:12:45,900 INFO L290 TraceCheckUtils]: 31: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-28 08:12:45,900 INFO L290 TraceCheckUtils]: 32: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-28 08:12:45,900 INFO L290 TraceCheckUtils]: 33: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-28 08:12:45,900 INFO L290 TraceCheckUtils]: 34: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-28 08:12:45,901 INFO L290 TraceCheckUtils]: 35: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:45,901 INFO L290 TraceCheckUtils]: 36: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,901 INFO L290 TraceCheckUtils]: 37: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,902 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,902 INFO L290 TraceCheckUtils]: 39: Hoare triple {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,902 INFO L290 TraceCheckUtils]: 40: Hoare triple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,903 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {31182#true} #741#return; {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-28 08:12:45,903 INFO L290 TraceCheckUtils]: 42: Hoare triple {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~tmp~0 := #t~ret43;havoc #t~ret43;#res := ~tmp~0; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-28 08:12:45,904 INFO L290 TraceCheckUtils]: 43: Hoare triple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} assume true; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-28 08:12:45,904 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} {31182#true} #719#return; {31219#(= |main_#t~ret29| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,904 INFO L290 TraceCheckUtils]: 45: Hoare triple {31219#(= |main_#t~ret29| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret29 && #t~ret29 <= 2147483647;~status~1 := #t~ret29;havoc #t~ret29; {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,905 INFO L290 TraceCheckUtils]: 46: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,905 INFO L290 TraceCheckUtils]: 47: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,905 INFO L290 TraceCheckUtils]: 48: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,905 INFO L290 TraceCheckUtils]: 49: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,906 INFO L290 TraceCheckUtils]: 50: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,906 INFO L290 TraceCheckUtils]: 51: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,906 INFO L290 TraceCheckUtils]: 52: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:45,906 INFO L290 TraceCheckUtils]: 53: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {31183#false} is VALID [2022-04-28 08:12:45,907 INFO L272 TraceCheckUtils]: 54: Hoare triple {31183#false} call errorFn(); {31183#false} is VALID [2022-04-28 08:12:45,907 INFO L290 TraceCheckUtils]: 55: Hoare triple {31183#false} assume !false; {31183#false} is VALID [2022-04-28 08:12:45,907 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:45,907 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:45,907 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2006290242] [2022-04-28 08:12:45,907 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2006290242] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:45,907 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:45,907 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 08:12:45,907 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:45,907 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [770922346] [2022-04-28 08:12:45,908 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [770922346] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:45,908 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:45,908 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 08:12:45,908 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1290410379] [2022-04-28 08:12:45,908 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:45,908 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 56 [2022-04-28 08:12:45,908 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:45,908 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:45,944 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:45,944 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-28 08:12:45,944 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:45,945 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-28 08:12:45,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2022-04-28 08:12:45,945 INFO L87 Difference]: Start difference. First operand 184 states and 229 transitions. Second operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:48,412 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:48,412 INFO L93 Difference]: Finished difference Result 196 states and 241 transitions. [2022-04-28 08:12:48,412 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-28 08:12:48,413 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 56 [2022-04-28 08:12:48,413 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:48,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:48,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 211 transitions. [2022-04-28 08:12:48,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:48,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 211 transitions. [2022-04-28 08:12:48,415 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 211 transitions. [2022-04-28 08:12:48,583 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 211 edges. 211 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:48,585 INFO L225 Difference]: With dead ends: 196 [2022-04-28 08:12:48,585 INFO L226 Difference]: Without dead ends: 182 [2022-04-28 08:12:48,585 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-04-28 08:12:48,585 INFO L413 NwaCegarLoop]: 165 mSDtfsCounter, 343 mSDsluCounter, 626 mSDsCounter, 0 mSdLazyCounter, 1181 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 343 SdHoareTripleChecker+Valid, 791 SdHoareTripleChecker+Invalid, 1262 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 1181 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:48,586 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [343 Valid, 791 Invalid, 1262 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 1181 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-04-28 08:12:48,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2022-04-28 08:12:48,854 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 182. [2022-04-28 08:12:48,855 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:48,855 INFO L82 GeneralOperation]: Start isEquivalent. First operand 182 states. Second operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-28 08:12:48,855 INFO L74 IsIncluded]: Start isIncluded. First operand 182 states. Second operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-28 08:12:48,855 INFO L87 Difference]: Start difference. First operand 182 states. Second operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-28 08:12:48,857 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:48,857 INFO L93 Difference]: Finished difference Result 182 states and 225 transitions. [2022-04-28 08:12:48,857 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 225 transitions. [2022-04-28 08:12:48,858 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:48,858 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:48,858 INFO L74 IsIncluded]: Start isIncluded. First operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) Second operand 182 states. [2022-04-28 08:12:48,858 INFO L87 Difference]: Start difference. First operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) Second operand 182 states. [2022-04-28 08:12:48,860 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:48,860 INFO L93 Difference]: Finished difference Result 182 states and 225 transitions. [2022-04-28 08:12:48,860 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 225 transitions. [2022-04-28 08:12:48,860 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:48,860 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:48,860 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:48,860 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:48,860 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-28 08:12:48,862 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 225 transitions. [2022-04-28 08:12:48,863 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 225 transitions. Word has length 56 [2022-04-28 08:12:48,863 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:48,863 INFO L495 AbstractCegarLoop]: Abstraction has 182 states and 225 transitions. [2022-04-28 08:12:48,863 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:48,863 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 182 states and 225 transitions. [2022-04-28 08:12:49,126 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 225 edges. 225 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:49,126 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 225 transitions. [2022-04-28 08:12:49,127 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-04-28 08:12:49,127 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:49,127 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:49,127 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-04-28 08:12:49,127 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:49,127 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:49,127 INFO L85 PathProgramCache]: Analyzing trace with hash 1221590652, now seen corresponding path program 1 times [2022-04-28 08:12:49,127 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:49,127 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [344323624] [2022-04-28 08:12:49,128 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:49,128 INFO L85 PathProgramCache]: Analyzing trace with hash 1221590652, now seen corresponding path program 2 times [2022-04-28 08:12:49,128 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:49,128 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [536269020] [2022-04-28 08:12:49,128 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:49,128 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:49,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:49,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:49,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:49,206 INFO L290 TraceCheckUtils]: 0: Hoare triple {32421#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {32385#true} is VALID [2022-04-28 08:12:49,206 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-28 08:12:49,206 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32385#true} {32385#true} #783#return; {32385#true} is VALID [2022-04-28 08:12:49,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:49,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:49,231 INFO L290 TraceCheckUtils]: 0: Hoare triple {32422#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-28 08:12:49,231 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-28 08:12:49,231 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32385#true} {32385#true} #715#return; {32385#true} is VALID [2022-04-28 08:12:49,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:49,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:49,242 INFO L290 TraceCheckUtils]: 0: Hoare triple {32423#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-28 08:12:49,242 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-28 08:12:49,242 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32385#true} {32385#true} #717#return; {32385#true} is VALID [2022-04-28 08:12:49,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-28 08:12:49,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:49,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-04-28 08:12:49,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:49,319 INFO L290 TraceCheckUtils]: 0: Hoare triple {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {32385#true} is VALID [2022-04-28 08:12:49,319 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume !(0 != ~compRegistered~0); {32385#true} is VALID [2022-04-28 08:12:49,319 INFO L290 TraceCheckUtils]: 2: Hoare triple {32385#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {32385#true} is VALID [2022-04-28 08:12:49,319 INFO L290 TraceCheckUtils]: 3: Hoare triple {32385#true} assume 0 == ~tmp_ndt_6~0; {32385#true} is VALID [2022-04-28 08:12:49,319 INFO L290 TraceCheckUtils]: 4: Hoare triple {32385#true} ~returnVal2~0 := 0; {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:49,320 INFO L290 TraceCheckUtils]: 5: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:49,320 INFO L290 TraceCheckUtils]: 6: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:49,320 INFO L290 TraceCheckUtils]: 7: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 08:12:49,321 INFO L290 TraceCheckUtils]: 8: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 08:12:49,321 INFO L290 TraceCheckUtils]: 9: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume true; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 08:12:49,321 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {32436#(= ~lowerDriverReturn~0 0)} {32385#true} #767#return; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 08:12:49,321 INFO L290 TraceCheckUtils]: 0: Hoare triple {32424#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {32385#true} is VALID [2022-04-28 08:12:49,322 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume !(0 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-28 08:12:49,322 INFO L290 TraceCheckUtils]: 2: Hoare triple {32385#true} assume !(23 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-28 08:12:49,322 INFO L290 TraceCheckUtils]: 3: Hoare triple {32385#true} assume 2 == ~irpStack__MinorFunction~0; {32385#true} is VALID [2022-04-28 08:12:49,322 INFO L290 TraceCheckUtils]: 4: Hoare triple {32385#true} ~devExt__Removed~0 := 1; {32385#true} is VALID [2022-04-28 08:12:49,322 INFO L290 TraceCheckUtils]: 5: Hoare triple {32385#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {32385#true} is VALID [2022-04-28 08:12:49,322 INFO L290 TraceCheckUtils]: 6: Hoare triple {32385#true} #t~post15 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post15;havoc #t~post15;#t~post16 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post16;havoc #t~post16; {32385#true} is VALID [2022-04-28 08:12:49,322 INFO L272 TraceCheckUtils]: 7: Hoare triple {32385#true} call #t~ret17 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:49,323 INFO L290 TraceCheckUtils]: 8: Hoare triple {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {32385#true} is VALID [2022-04-28 08:12:49,323 INFO L290 TraceCheckUtils]: 9: Hoare triple {32385#true} assume !(0 != ~compRegistered~0); {32385#true} is VALID [2022-04-28 08:12:49,323 INFO L290 TraceCheckUtils]: 10: Hoare triple {32385#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {32385#true} is VALID [2022-04-28 08:12:49,323 INFO L290 TraceCheckUtils]: 11: Hoare triple {32385#true} assume 0 == ~tmp_ndt_6~0; {32385#true} is VALID [2022-04-28 08:12:49,323 INFO L290 TraceCheckUtils]: 12: Hoare triple {32385#true} ~returnVal2~0 := 0; {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:49,323 INFO L290 TraceCheckUtils]: 13: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:49,324 INFO L290 TraceCheckUtils]: 14: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:49,324 INFO L290 TraceCheckUtils]: 15: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 08:12:49,324 INFO L290 TraceCheckUtils]: 16: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 08:12:49,325 INFO L290 TraceCheckUtils]: 17: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume true; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 08:12:49,325 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {32436#(= ~lowerDriverReturn~0 0)} {32385#true} #767#return; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 08:12:49,325 INFO L290 TraceCheckUtils]: 19: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume -2147483648 <= #t~ret17 && #t~ret17 <= 2147483647;havoc #t~ret17;~status~0 := 0; {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,326 INFO L290 TraceCheckUtils]: 20: Hoare triple {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,326 INFO L290 TraceCheckUtils]: 21: Hoare triple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,326 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {32385#true} #723#return; {32419#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,327 INFO L272 TraceCheckUtils]: 0: Hoare triple {32385#true} call ULTIMATE.init(); {32421#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:49,328 INFO L290 TraceCheckUtils]: 1: Hoare triple {32421#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {32385#true} is VALID [2022-04-28 08:12:49,328 INFO L290 TraceCheckUtils]: 2: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-28 08:12:49,328 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {32385#true} {32385#true} #783#return; {32385#true} is VALID [2022-04-28 08:12:49,328 INFO L272 TraceCheckUtils]: 4: Hoare triple {32385#true} call #t~ret81 := main(); {32385#true} is VALID [2022-04-28 08:12:49,328 INFO L290 TraceCheckUtils]: 5: Hoare triple {32385#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {32385#true} is VALID [2022-04-28 08:12:49,329 INFO L272 TraceCheckUtils]: 6: Hoare triple {32385#true} call _BLAST_init(); {32422#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:49,329 INFO L290 TraceCheckUtils]: 7: Hoare triple {32422#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-28 08:12:49,329 INFO L290 TraceCheckUtils]: 8: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-28 08:12:49,329 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {32385#true} {32385#true} #715#return; {32385#true} is VALID [2022-04-28 08:12:49,329 INFO L290 TraceCheckUtils]: 10: Hoare triple {32385#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {32385#true} is VALID [2022-04-28 08:12:49,329 INFO L290 TraceCheckUtils]: 11: Hoare triple {32385#true} assume !(0 == ~irp_choice~0); {32385#true} is VALID [2022-04-28 08:12:49,329 INFO L272 TraceCheckUtils]: 12: Hoare triple {32385#true} call stub_driver_init(); {32423#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:49,329 INFO L290 TraceCheckUtils]: 13: Hoare triple {32423#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-28 08:12:49,330 INFO L290 TraceCheckUtils]: 14: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-28 08:12:49,330 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {32385#true} {32385#true} #717#return; {32385#true} is VALID [2022-04-28 08:12:49,330 INFO L290 TraceCheckUtils]: 16: Hoare triple {32385#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {32385#true} is VALID [2022-04-28 08:12:49,330 INFO L290 TraceCheckUtils]: 17: Hoare triple {32385#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {32385#true} is VALID [2022-04-28 08:12:49,330 INFO L290 TraceCheckUtils]: 18: Hoare triple {32385#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {32385#true} is VALID [2022-04-28 08:12:49,330 INFO L290 TraceCheckUtils]: 19: Hoare triple {32385#true} assume 3 == ~tmp_ndt_3~0; {32385#true} is VALID [2022-04-28 08:12:49,330 INFO L272 TraceCheckUtils]: 20: Hoare triple {32385#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {32424#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:49,331 INFO L290 TraceCheckUtils]: 21: Hoare triple {32424#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {32385#true} is VALID [2022-04-28 08:12:49,331 INFO L290 TraceCheckUtils]: 22: Hoare triple {32385#true} assume !(0 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-28 08:12:49,331 INFO L290 TraceCheckUtils]: 23: Hoare triple {32385#true} assume !(23 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-28 08:12:49,331 INFO L290 TraceCheckUtils]: 24: Hoare triple {32385#true} assume 2 == ~irpStack__MinorFunction~0; {32385#true} is VALID [2022-04-28 08:12:49,331 INFO L290 TraceCheckUtils]: 25: Hoare triple {32385#true} ~devExt__Removed~0 := 1; {32385#true} is VALID [2022-04-28 08:12:49,331 INFO L290 TraceCheckUtils]: 26: Hoare triple {32385#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {32385#true} is VALID [2022-04-28 08:12:49,331 INFO L290 TraceCheckUtils]: 27: Hoare triple {32385#true} #t~post15 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post15;havoc #t~post15;#t~post16 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post16;havoc #t~post16; {32385#true} is VALID [2022-04-28 08:12:49,331 INFO L272 TraceCheckUtils]: 28: Hoare triple {32385#true} call #t~ret17 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:49,332 INFO L290 TraceCheckUtils]: 29: Hoare triple {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {32385#true} is VALID [2022-04-28 08:12:49,332 INFO L290 TraceCheckUtils]: 30: Hoare triple {32385#true} assume !(0 != ~compRegistered~0); {32385#true} is VALID [2022-04-28 08:12:49,332 INFO L290 TraceCheckUtils]: 31: Hoare triple {32385#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {32385#true} is VALID [2022-04-28 08:12:49,332 INFO L290 TraceCheckUtils]: 32: Hoare triple {32385#true} assume 0 == ~tmp_ndt_6~0; {32385#true} is VALID [2022-04-28 08:12:49,332 INFO L290 TraceCheckUtils]: 33: Hoare triple {32385#true} ~returnVal2~0 := 0; {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:49,332 INFO L290 TraceCheckUtils]: 34: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:49,333 INFO L290 TraceCheckUtils]: 35: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 08:12:49,333 INFO L290 TraceCheckUtils]: 36: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 08:12:49,333 INFO L290 TraceCheckUtils]: 37: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 08:12:49,333 INFO L290 TraceCheckUtils]: 38: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume true; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 08:12:49,334 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {32436#(= ~lowerDriverReturn~0 0)} {32385#true} #767#return; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 08:12:49,334 INFO L290 TraceCheckUtils]: 40: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume -2147483648 <= #t~ret17 && #t~ret17 <= 2147483647;havoc #t~ret17;~status~0 := 0; {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,335 INFO L290 TraceCheckUtils]: 41: Hoare triple {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,343 INFO L290 TraceCheckUtils]: 42: Hoare triple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,344 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {32385#true} #723#return; {32419#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,344 INFO L290 TraceCheckUtils]: 44: Hoare triple {32419#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,345 INFO L290 TraceCheckUtils]: 45: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,345 INFO L290 TraceCheckUtils]: 46: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,345 INFO L290 TraceCheckUtils]: 47: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,345 INFO L290 TraceCheckUtils]: 48: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,346 INFO L290 TraceCheckUtils]: 49: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,346 INFO L290 TraceCheckUtils]: 50: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,346 INFO L290 TraceCheckUtils]: 51: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:49,346 INFO L290 TraceCheckUtils]: 52: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {32386#false} is VALID [2022-04-28 08:12:49,346 INFO L272 TraceCheckUtils]: 53: Hoare triple {32386#false} call errorFn(); {32386#false} is VALID [2022-04-28 08:12:49,346 INFO L290 TraceCheckUtils]: 54: Hoare triple {32386#false} assume !false; {32386#false} is VALID [2022-04-28 08:12:49,347 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:49,347 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:49,347 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [536269020] [2022-04-28 08:12:49,347 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [536269020] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:49,347 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:49,347 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-28 08:12:49,347 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:49,347 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [344323624] [2022-04-28 08:12:49,347 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [344323624] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:49,347 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:49,347 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-28 08:12:49,347 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1080199223] [2022-04-28 08:12:49,348 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:49,348 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-28 08:12:49,348 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:49,348 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:49,381 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:49,381 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-04-28 08:12:49,382 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:49,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-04-28 08:12:49,382 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2022-04-28 08:12:49,382 INFO L87 Difference]: Start difference. First operand 182 states and 225 transitions. Second operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:51,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:51,905 INFO L93 Difference]: Finished difference Result 235 states and 281 transitions. [2022-04-28 08:12:51,905 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-28 08:12:51,906 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-28 08:12:51,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:51,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:51,908 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 256 transitions. [2022-04-28 08:12:51,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:51,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 256 transitions. [2022-04-28 08:12:51,909 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 256 transitions. [2022-04-28 08:12:52,124 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 256 edges. 256 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:52,130 INFO L225 Difference]: With dead ends: 235 [2022-04-28 08:12:52,130 INFO L226 Difference]: Without dead ends: 218 [2022-04-28 08:12:52,131 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=101, Invalid=405, Unknown=0, NotChecked=0, Total=506 [2022-04-28 08:12:52,131 INFO L413 NwaCegarLoop]: 169 mSDtfsCounter, 565 mSDsluCounter, 430 mSDsCounter, 0 mSdLazyCounter, 892 mSolverCounterSat, 125 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 565 SdHoareTripleChecker+Valid, 599 SdHoareTripleChecker+Invalid, 1017 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 125 IncrementalHoareTripleChecker+Valid, 892 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:52,131 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [565 Valid, 599 Invalid, 1017 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [125 Valid, 892 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-28 08:12:52,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 218 states. [2022-04-28 08:12:52,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 218 to 188. [2022-04-28 08:12:52,420 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:52,420 INFO L82 GeneralOperation]: Start isEquivalent. First operand 218 states. Second operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-28 08:12:52,420 INFO L74 IsIncluded]: Start isIncluded. First operand 218 states. Second operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-28 08:12:52,421 INFO L87 Difference]: Start difference. First operand 218 states. Second operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-28 08:12:52,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:52,423 INFO L93 Difference]: Finished difference Result 218 states and 263 transitions. [2022-04-28 08:12:52,423 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 263 transitions. [2022-04-28 08:12:52,423 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:52,423 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:52,424 INFO L74 IsIncluded]: Start isIncluded. First operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) Second operand 218 states. [2022-04-28 08:12:52,424 INFO L87 Difference]: Start difference. First operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) Second operand 218 states. [2022-04-28 08:12:52,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:52,426 INFO L93 Difference]: Finished difference Result 218 states and 263 transitions. [2022-04-28 08:12:52,427 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 263 transitions. [2022-04-28 08:12:52,427 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:52,427 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:52,427 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:52,427 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:52,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-28 08:12:52,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 232 transitions. [2022-04-28 08:12:52,430 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 232 transitions. Word has length 55 [2022-04-28 08:12:52,430 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:52,430 INFO L495 AbstractCegarLoop]: Abstraction has 188 states and 232 transitions. [2022-04-28 08:12:52,430 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:52,430 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 188 states and 232 transitions. [2022-04-28 08:12:52,713 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 232 edges. 232 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:52,714 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 232 transitions. [2022-04-28 08:12:52,714 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-04-28 08:12:52,714 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:52,714 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:52,715 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-04-28 08:12:52,715 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:52,715 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:52,715 INFO L85 PathProgramCache]: Analyzing trace with hash 2050869943, now seen corresponding path program 1 times [2022-04-28 08:12:52,715 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:52,715 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [448823886] [2022-04-28 08:12:52,715 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:52,715 INFO L85 PathProgramCache]: Analyzing trace with hash 2050869943, now seen corresponding path program 2 times [2022-04-28 08:12:52,715 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:52,715 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1109849953] [2022-04-28 08:12:52,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:52,716 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:52,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:52,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:52,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:52,783 INFO L290 TraceCheckUtils]: 0: Hoare triple {33785#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {33749#true} is VALID [2022-04-28 08:12:52,784 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-28 08:12:52,784 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33749#true} {33749#true} #783#return; {33749#true} is VALID [2022-04-28 08:12:52,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:52,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:52,803 INFO L290 TraceCheckUtils]: 0: Hoare triple {33786#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-28 08:12:52,803 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-28 08:12:52,803 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33749#true} {33749#true} #715#return; {33749#true} is VALID [2022-04-28 08:12:52,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:52,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:52,815 INFO L290 TraceCheckUtils]: 0: Hoare triple {33787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-28 08:12:52,815 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-28 08:12:52,815 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33749#true} {33749#true} #717#return; {33749#true} is VALID [2022-04-28 08:12:52,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-28 08:12:52,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:52,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-04-28 08:12:52,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:52,883 INFO L290 TraceCheckUtils]: 0: Hoare triple {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {33749#true} is VALID [2022-04-28 08:12:52,883 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume !(0 != ~compRegistered~0); {33749#true} is VALID [2022-04-28 08:12:52,883 INFO L290 TraceCheckUtils]: 2: Hoare triple {33749#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {33749#true} is VALID [2022-04-28 08:12:52,883 INFO L290 TraceCheckUtils]: 3: Hoare triple {33749#true} assume 0 == ~tmp_ndt_6~0; {33749#true} is VALID [2022-04-28 08:12:52,883 INFO L290 TraceCheckUtils]: 4: Hoare triple {33749#true} ~returnVal2~0 := 0; {33749#true} is VALID [2022-04-28 08:12:52,883 INFO L290 TraceCheckUtils]: 5: Hoare triple {33749#true} assume !(~s~0 == ~NP~0); {33749#true} is VALID [2022-04-28 08:12:52,884 INFO L290 TraceCheckUtils]: 6: Hoare triple {33749#true} assume !(~s~0 == ~MPR1~0); {33749#true} is VALID [2022-04-28 08:12:52,884 INFO L290 TraceCheckUtils]: 7: Hoare triple {33749#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:52,884 INFO L290 TraceCheckUtils]: 8: Hoare triple {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,884 INFO L290 TraceCheckUtils]: 9: Hoare triple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,885 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {33749#true} #771#return; {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,885 INFO L290 TraceCheckUtils]: 0: Hoare triple {33788#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {33749#true} is VALID [2022-04-28 08:12:52,885 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume !(0 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-28 08:12:52,885 INFO L290 TraceCheckUtils]: 2: Hoare triple {33749#true} assume !(23 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-28 08:12:52,885 INFO L290 TraceCheckUtils]: 3: Hoare triple {33749#true} assume !(2 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-28 08:12:52,885 INFO L290 TraceCheckUtils]: 4: Hoare triple {33749#true} assume 1 == ~irpStack__MinorFunction~0; {33749#true} is VALID [2022-04-28 08:12:52,886 INFO L290 TraceCheckUtils]: 5: Hoare triple {33749#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {33749#true} is VALID [2022-04-28 08:12:52,886 INFO L290 TraceCheckUtils]: 6: Hoare triple {33749#true} #t~post18 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post18;havoc #t~post18;#t~post19 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post19;havoc #t~post19; {33749#true} is VALID [2022-04-28 08:12:52,886 INFO L272 TraceCheckUtils]: 7: Hoare triple {33749#true} call #t~ret20 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:52,886 INFO L290 TraceCheckUtils]: 8: Hoare triple {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {33749#true} is VALID [2022-04-28 08:12:52,886 INFO L290 TraceCheckUtils]: 9: Hoare triple {33749#true} assume !(0 != ~compRegistered~0); {33749#true} is VALID [2022-04-28 08:12:52,886 INFO L290 TraceCheckUtils]: 10: Hoare triple {33749#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {33749#true} is VALID [2022-04-28 08:12:52,886 INFO L290 TraceCheckUtils]: 11: Hoare triple {33749#true} assume 0 == ~tmp_ndt_6~0; {33749#true} is VALID [2022-04-28 08:12:52,887 INFO L290 TraceCheckUtils]: 12: Hoare triple {33749#true} ~returnVal2~0 := 0; {33749#true} is VALID [2022-04-28 08:12:52,887 INFO L290 TraceCheckUtils]: 13: Hoare triple {33749#true} assume !(~s~0 == ~NP~0); {33749#true} is VALID [2022-04-28 08:12:52,887 INFO L290 TraceCheckUtils]: 14: Hoare triple {33749#true} assume !(~s~0 == ~MPR1~0); {33749#true} is VALID [2022-04-28 08:12:52,887 INFO L290 TraceCheckUtils]: 15: Hoare triple {33749#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:52,887 INFO L290 TraceCheckUtils]: 16: Hoare triple {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,888 INFO L290 TraceCheckUtils]: 17: Hoare triple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,888 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {33749#true} #771#return; {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,888 INFO L290 TraceCheckUtils]: 19: Hoare triple {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret20 && #t~ret20 <= 2147483647;~status~0 := #t~ret20;havoc #t~ret20; {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,889 INFO L290 TraceCheckUtils]: 20: Hoare triple {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,889 INFO L290 TraceCheckUtils]: 21: Hoare triple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,889 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {33749#true} #723#return; {33783#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,891 INFO L272 TraceCheckUtils]: 0: Hoare triple {33749#true} call ULTIMATE.init(); {33785#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:52,891 INFO L290 TraceCheckUtils]: 1: Hoare triple {33785#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {33749#true} is VALID [2022-04-28 08:12:52,891 INFO L290 TraceCheckUtils]: 2: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-28 08:12:52,891 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {33749#true} {33749#true} #783#return; {33749#true} is VALID [2022-04-28 08:12:52,891 INFO L272 TraceCheckUtils]: 4: Hoare triple {33749#true} call #t~ret81 := main(); {33749#true} is VALID [2022-04-28 08:12:52,891 INFO L290 TraceCheckUtils]: 5: Hoare triple {33749#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {33749#true} is VALID [2022-04-28 08:12:52,892 INFO L272 TraceCheckUtils]: 6: Hoare triple {33749#true} call _BLAST_init(); {33786#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:52,892 INFO L290 TraceCheckUtils]: 7: Hoare triple {33786#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-28 08:12:52,892 INFO L290 TraceCheckUtils]: 8: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-28 08:12:52,892 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {33749#true} {33749#true} #715#return; {33749#true} is VALID [2022-04-28 08:12:52,892 INFO L290 TraceCheckUtils]: 10: Hoare triple {33749#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {33749#true} is VALID [2022-04-28 08:12:52,892 INFO L290 TraceCheckUtils]: 11: Hoare triple {33749#true} assume !(0 == ~irp_choice~0); {33749#true} is VALID [2022-04-28 08:12:52,893 INFO L272 TraceCheckUtils]: 12: Hoare triple {33749#true} call stub_driver_init(); {33787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:52,893 INFO L290 TraceCheckUtils]: 13: Hoare triple {33787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-28 08:12:52,893 INFO L290 TraceCheckUtils]: 14: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-28 08:12:52,893 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {33749#true} {33749#true} #717#return; {33749#true} is VALID [2022-04-28 08:12:52,893 INFO L290 TraceCheckUtils]: 16: Hoare triple {33749#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {33749#true} is VALID [2022-04-28 08:12:52,893 INFO L290 TraceCheckUtils]: 17: Hoare triple {33749#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {33749#true} is VALID [2022-04-28 08:12:52,893 INFO L290 TraceCheckUtils]: 18: Hoare triple {33749#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {33749#true} is VALID [2022-04-28 08:12:52,893 INFO L290 TraceCheckUtils]: 19: Hoare triple {33749#true} assume 3 == ~tmp_ndt_3~0; {33749#true} is VALID [2022-04-28 08:12:52,894 INFO L272 TraceCheckUtils]: 20: Hoare triple {33749#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {33788#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:52,894 INFO L290 TraceCheckUtils]: 21: Hoare triple {33788#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {33749#true} is VALID [2022-04-28 08:12:52,894 INFO L290 TraceCheckUtils]: 22: Hoare triple {33749#true} assume !(0 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-28 08:12:52,894 INFO L290 TraceCheckUtils]: 23: Hoare triple {33749#true} assume !(23 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-28 08:12:52,894 INFO L290 TraceCheckUtils]: 24: Hoare triple {33749#true} assume !(2 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-28 08:12:52,894 INFO L290 TraceCheckUtils]: 25: Hoare triple {33749#true} assume 1 == ~irpStack__MinorFunction~0; {33749#true} is VALID [2022-04-28 08:12:52,894 INFO L290 TraceCheckUtils]: 26: Hoare triple {33749#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {33749#true} is VALID [2022-04-28 08:12:52,894 INFO L290 TraceCheckUtils]: 27: Hoare triple {33749#true} #t~post18 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post18;havoc #t~post18;#t~post19 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post19;havoc #t~post19; {33749#true} is VALID [2022-04-28 08:12:52,895 INFO L272 TraceCheckUtils]: 28: Hoare triple {33749#true} call #t~ret20 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:52,895 INFO L290 TraceCheckUtils]: 29: Hoare triple {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {33749#true} is VALID [2022-04-28 08:12:52,895 INFO L290 TraceCheckUtils]: 30: Hoare triple {33749#true} assume !(0 != ~compRegistered~0); {33749#true} is VALID [2022-04-28 08:12:52,895 INFO L290 TraceCheckUtils]: 31: Hoare triple {33749#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {33749#true} is VALID [2022-04-28 08:12:52,895 INFO L290 TraceCheckUtils]: 32: Hoare triple {33749#true} assume 0 == ~tmp_ndt_6~0; {33749#true} is VALID [2022-04-28 08:12:52,895 INFO L290 TraceCheckUtils]: 33: Hoare triple {33749#true} ~returnVal2~0 := 0; {33749#true} is VALID [2022-04-28 08:12:52,895 INFO L290 TraceCheckUtils]: 34: Hoare triple {33749#true} assume !(~s~0 == ~NP~0); {33749#true} is VALID [2022-04-28 08:12:52,895 INFO L290 TraceCheckUtils]: 35: Hoare triple {33749#true} assume !(~s~0 == ~MPR1~0); {33749#true} is VALID [2022-04-28 08:12:52,895 INFO L290 TraceCheckUtils]: 36: Hoare triple {33749#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 08:12:52,896 INFO L290 TraceCheckUtils]: 37: Hoare triple {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,896 INFO L290 TraceCheckUtils]: 38: Hoare triple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,896 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {33749#true} #771#return; {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,897 INFO L290 TraceCheckUtils]: 40: Hoare triple {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret20 && #t~ret20 <= 2147483647;~status~0 := #t~ret20;havoc #t~ret20; {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,897 INFO L290 TraceCheckUtils]: 41: Hoare triple {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,897 INFO L290 TraceCheckUtils]: 42: Hoare triple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,898 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {33749#true} #723#return; {33783#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,898 INFO L290 TraceCheckUtils]: 44: Hoare triple {33783#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,898 INFO L290 TraceCheckUtils]: 45: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,899 INFO L290 TraceCheckUtils]: 46: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,899 INFO L290 TraceCheckUtils]: 47: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,899 INFO L290 TraceCheckUtils]: 48: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,899 INFO L290 TraceCheckUtils]: 49: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,900 INFO L290 TraceCheckUtils]: 50: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,900 INFO L290 TraceCheckUtils]: 51: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 08:12:52,900 INFO L290 TraceCheckUtils]: 52: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {33750#false} is VALID [2022-04-28 08:12:52,900 INFO L272 TraceCheckUtils]: 53: Hoare triple {33750#false} call errorFn(); {33750#false} is VALID [2022-04-28 08:12:52,900 INFO L290 TraceCheckUtils]: 54: Hoare triple {33750#false} assume !false; {33750#false} is VALID [2022-04-28 08:12:52,900 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:52,900 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:52,901 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1109849953] [2022-04-28 08:12:52,901 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1109849953] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:52,901 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:52,901 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:12:52,901 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:52,901 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [448823886] [2022-04-28 08:12:52,901 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [448823886] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:52,901 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:52,901 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 08:12:52,901 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1115827278] [2022-04-28 08:12:52,901 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:52,902 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-28 08:12:52,902 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:52,902 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:52,931 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:52,931 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-28 08:12:52,931 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:52,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-28 08:12:52,932 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-04-28 08:12:52,932 INFO L87 Difference]: Start difference. First operand 188 states and 232 transitions. Second operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:55,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:55,119 INFO L93 Difference]: Finished difference Result 204 states and 248 transitions. [2022-04-28 08:12:55,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 08:12:55,119 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-28 08:12:55,119 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:55,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:55,120 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 211 transitions. [2022-04-28 08:12:55,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:55,122 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 211 transitions. [2022-04-28 08:12:55,122 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 211 transitions. [2022-04-28 08:12:55,299 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 211 edges. 211 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:55,301 INFO L225 Difference]: With dead ends: 204 [2022-04-28 08:12:55,301 INFO L226 Difference]: Without dead ends: 166 [2022-04-28 08:12:55,301 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-04-28 08:12:55,302 INFO L413 NwaCegarLoop]: 161 mSDtfsCounter, 345 mSDsluCounter, 489 mSDsCounter, 0 mSdLazyCounter, 923 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 345 SdHoareTripleChecker+Valid, 650 SdHoareTripleChecker+Invalid, 1000 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 923 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:55,302 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [345 Valid, 650 Invalid, 1000 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 923 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-28 08:12:55,302 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2022-04-28 08:12:55,592 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 166. [2022-04-28 08:12:55,592 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:55,593 INFO L82 GeneralOperation]: Start isEquivalent. First operand 166 states. Second operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 08:12:55,593 INFO L74 IsIncluded]: Start isIncluded. First operand 166 states. Second operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 08:12:55,593 INFO L87 Difference]: Start difference. First operand 166 states. Second operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 08:12:55,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:55,595 INFO L93 Difference]: Finished difference Result 166 states and 189 transitions. [2022-04-28 08:12:55,595 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 189 transitions. [2022-04-28 08:12:55,595 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:55,595 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:55,595 INFO L74 IsIncluded]: Start isIncluded. First operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 166 states. [2022-04-28 08:12:55,595 INFO L87 Difference]: Start difference. First operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 166 states. [2022-04-28 08:12:55,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:55,597 INFO L93 Difference]: Finished difference Result 166 states and 189 transitions. [2022-04-28 08:12:55,597 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 189 transitions. [2022-04-28 08:12:55,597 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:55,597 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:55,597 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:55,597 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:55,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 08:12:55,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 189 transitions. [2022-04-28 08:12:55,599 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 189 transitions. Word has length 55 [2022-04-28 08:12:55,599 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:55,599 INFO L495 AbstractCegarLoop]: Abstraction has 166 states and 189 transitions. [2022-04-28 08:12:55,600 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 08:12:55,600 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 166 states and 189 transitions. [2022-04-28 08:12:55,819 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 189 edges. 189 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:55,819 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 189 transitions. [2022-04-28 08:12:55,819 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-04-28 08:12:55,819 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:55,819 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:55,819 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2022-04-28 08:12:55,820 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:55,820 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:55,820 INFO L85 PathProgramCache]: Analyzing trace with hash 1918234721, now seen corresponding path program 1 times [2022-04-28 08:12:55,820 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:55,820 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [592957948] [2022-04-28 08:12:55,820 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:55,820 INFO L85 PathProgramCache]: Analyzing trace with hash 1918234721, now seen corresponding path program 2 times [2022-04-28 08:12:55,820 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:55,820 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1122826154] [2022-04-28 08:12:55,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:55,821 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:55,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:55,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 08:12:55,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:55,887 INFO L290 TraceCheckUtils]: 0: Hoare triple {34915#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {34884#true} is VALID [2022-04-28 08:12:55,887 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 08:12:55,887 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #783#return; {34884#true} is VALID [2022-04-28 08:12:55,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 08:12:55,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:55,906 INFO L290 TraceCheckUtils]: 0: Hoare triple {34916#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-28 08:12:55,906 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 08:12:55,906 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #715#return; {34884#true} is VALID [2022-04-28 08:12:55,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 08:12:55,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:55,921 INFO L290 TraceCheckUtils]: 0: Hoare triple {34917#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-28 08:12:55,921 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 08:12:55,921 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #717#return; {34884#true} is VALID [2022-04-28 08:12:55,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 08:12:55,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:55,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 08:12:55,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:55,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 08:12:55,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 08:12:55,989 INFO L290 TraceCheckUtils]: 0: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-28 08:12:55,989 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 08:12:55,990 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-28 08:12:55,990 INFO L290 TraceCheckUtils]: 0: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {34884#true} is VALID [2022-04-28 08:12:55,990 INFO L272 TraceCheckUtils]: 1: Hoare triple {34884#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:55,990 INFO L290 TraceCheckUtils]: 2: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-28 08:12:55,990 INFO L290 TraceCheckUtils]: 3: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 08:12:55,990 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-28 08:12:55,991 INFO L290 TraceCheckUtils]: 5: Hoare triple {34884#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 08:12:55,991 INFO L290 TraceCheckUtils]: 6: Hoare triple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 08:12:55,992 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {34884#true} #777#return; {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-28 08:12:55,992 INFO L290 TraceCheckUtils]: 0: Hoare triple {34918#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {34884#true} is VALID [2022-04-28 08:12:55,992 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume 0 != ~compRegistered~0; {34884#true} is VALID [2022-04-28 08:12:55,993 INFO L272 TraceCheckUtils]: 2: Hoare triple {34884#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:55,993 INFO L290 TraceCheckUtils]: 3: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {34884#true} is VALID [2022-04-28 08:12:55,993 INFO L272 TraceCheckUtils]: 4: Hoare triple {34884#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:55,993 INFO L290 TraceCheckUtils]: 5: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-28 08:12:55,993 INFO L290 TraceCheckUtils]: 6: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 08:12:55,993 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-28 08:12:55,994 INFO L290 TraceCheckUtils]: 8: Hoare triple {34884#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 08:12:55,994 INFO L290 TraceCheckUtils]: 9: Hoare triple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 08:12:55,995 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {34884#true} #777#return; {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-28 08:12:55,995 INFO L290 TraceCheckUtils]: 11: Hoare triple {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-28 08:12:55,995 INFO L290 TraceCheckUtils]: 12: Hoare triple {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {34885#false} is VALID [2022-04-28 08:12:55,995 INFO L290 TraceCheckUtils]: 13: Hoare triple {34885#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {34885#false} is VALID [2022-04-28 08:12:55,995 INFO L290 TraceCheckUtils]: 14: Hoare triple {34885#false} assume 0 == ~tmp_ndt_6~0; {34885#false} is VALID [2022-04-28 08:12:55,995 INFO L290 TraceCheckUtils]: 15: Hoare triple {34885#false} ~returnVal2~0 := 0; {34885#false} is VALID [2022-04-28 08:12:55,996 INFO L290 TraceCheckUtils]: 16: Hoare triple {34885#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {34885#false} is VALID [2022-04-28 08:12:55,996 INFO L290 TraceCheckUtils]: 17: Hoare triple {34885#false} #res := ~returnVal2~0; {34885#false} is VALID [2022-04-28 08:12:55,996 INFO L290 TraceCheckUtils]: 18: Hoare triple {34885#false} assume true; {34885#false} is VALID [2022-04-28 08:12:55,996 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {34885#false} {34884#true} #755#return; {34885#false} is VALID [2022-04-28 08:12:55,997 INFO L272 TraceCheckUtils]: 0: Hoare triple {34884#true} call ULTIMATE.init(); {34915#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 08:12:55,997 INFO L290 TraceCheckUtils]: 1: Hoare triple {34915#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {34884#true} is VALID [2022-04-28 08:12:55,997 INFO L290 TraceCheckUtils]: 2: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 08:12:55,997 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {34884#true} {34884#true} #783#return; {34884#true} is VALID [2022-04-28 08:12:55,997 INFO L272 TraceCheckUtils]: 4: Hoare triple {34884#true} call #t~ret81 := main(); {34884#true} is VALID [2022-04-28 08:12:55,997 INFO L290 TraceCheckUtils]: 5: Hoare triple {34884#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {34884#true} is VALID [2022-04-28 08:12:55,998 INFO L272 TraceCheckUtils]: 6: Hoare triple {34884#true} call _BLAST_init(); {34916#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:55,998 INFO L290 TraceCheckUtils]: 7: Hoare triple {34916#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-28 08:12:55,998 INFO L290 TraceCheckUtils]: 8: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 08:12:55,998 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {34884#true} {34884#true} #715#return; {34884#true} is VALID [2022-04-28 08:12:55,998 INFO L290 TraceCheckUtils]: 10: Hoare triple {34884#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {34884#true} is VALID [2022-04-28 08:12:55,998 INFO L290 TraceCheckUtils]: 11: Hoare triple {34884#true} assume !(0 == ~irp_choice~0); {34884#true} is VALID [2022-04-28 08:12:55,999 INFO L272 TraceCheckUtils]: 12: Hoare triple {34884#true} call stub_driver_init(); {34917#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:55,999 INFO L290 TraceCheckUtils]: 13: Hoare triple {34917#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-28 08:12:55,999 INFO L290 TraceCheckUtils]: 14: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 08:12:55,999 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {34884#true} {34884#true} #717#return; {34884#true} is VALID [2022-04-28 08:12:55,999 INFO L290 TraceCheckUtils]: 16: Hoare triple {34884#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {34884#true} is VALID [2022-04-28 08:12:55,999 INFO L290 TraceCheckUtils]: 17: Hoare triple {34884#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {34884#true} is VALID [2022-04-28 08:12:55,999 INFO L290 TraceCheckUtils]: 18: Hoare triple {34884#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {34884#true} is VALID [2022-04-28 08:12:55,999 INFO L290 TraceCheckUtils]: 19: Hoare triple {34884#true} assume 3 == ~tmp_ndt_3~0; {34884#true} is VALID [2022-04-28 08:12:55,999 INFO L272 TraceCheckUtils]: 20: Hoare triple {34884#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {34884#true} is VALID [2022-04-28 08:12:55,999 INFO L290 TraceCheckUtils]: 21: Hoare triple {34884#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {34884#true} is VALID [2022-04-28 08:12:55,999 INFO L290 TraceCheckUtils]: 22: Hoare triple {34884#true} assume 0 == ~irpStack__MinorFunction~0; {34884#true} is VALID [2022-04-28 08:12:56,000 INFO L290 TraceCheckUtils]: 23: Hoare triple {34884#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {34884#true} is VALID [2022-04-28 08:12:56,000 INFO L290 TraceCheckUtils]: 24: Hoare triple {34884#true} assume !(~s~0 != ~NP~0); {34884#true} is VALID [2022-04-28 08:12:56,000 INFO L290 TraceCheckUtils]: 25: Hoare triple {34884#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {34884#true} is VALID [2022-04-28 08:12:56,000 INFO L290 TraceCheckUtils]: 26: Hoare triple {34884#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {34884#true} is VALID [2022-04-28 08:12:56,000 INFO L272 TraceCheckUtils]: 27: Hoare triple {34884#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {34918#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 08:12:56,000 INFO L290 TraceCheckUtils]: 28: Hoare triple {34918#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {34884#true} is VALID [2022-04-28 08:12:56,000 INFO L290 TraceCheckUtils]: 29: Hoare triple {34884#true} assume 0 != ~compRegistered~0; {34884#true} is VALID [2022-04-28 08:12:56,001 INFO L272 TraceCheckUtils]: 30: Hoare triple {34884#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:56,001 INFO L290 TraceCheckUtils]: 31: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {34884#true} is VALID [2022-04-28 08:12:56,001 INFO L272 TraceCheckUtils]: 32: Hoare triple {34884#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 08:12:56,002 INFO L290 TraceCheckUtils]: 33: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-28 08:12:56,002 INFO L290 TraceCheckUtils]: 34: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 08:12:56,002 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-28 08:12:56,002 INFO L290 TraceCheckUtils]: 36: Hoare triple {34884#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 08:12:56,002 INFO L290 TraceCheckUtils]: 37: Hoare triple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 08:12:56,003 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {34884#true} #777#return; {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-28 08:12:56,003 INFO L290 TraceCheckUtils]: 39: Hoare triple {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-28 08:12:56,004 INFO L290 TraceCheckUtils]: 40: Hoare triple {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {34885#false} is VALID [2022-04-28 08:12:56,004 INFO L290 TraceCheckUtils]: 41: Hoare triple {34885#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {34885#false} is VALID [2022-04-28 08:12:56,004 INFO L290 TraceCheckUtils]: 42: Hoare triple {34885#false} assume 0 == ~tmp_ndt_6~0; {34885#false} is VALID [2022-04-28 08:12:56,004 INFO L290 TraceCheckUtils]: 43: Hoare triple {34885#false} ~returnVal2~0 := 0; {34885#false} is VALID [2022-04-28 08:12:56,004 INFO L290 TraceCheckUtils]: 44: Hoare triple {34885#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {34885#false} is VALID [2022-04-28 08:12:56,004 INFO L290 TraceCheckUtils]: 45: Hoare triple {34885#false} #res := ~returnVal2~0; {34885#false} is VALID [2022-04-28 08:12:56,004 INFO L290 TraceCheckUtils]: 46: Hoare triple {34885#false} assume true; {34885#false} is VALID [2022-04-28 08:12:56,004 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {34885#false} {34884#true} #755#return; {34885#false} is VALID [2022-04-28 08:12:56,004 INFO L290 TraceCheckUtils]: 48: Hoare triple {34885#false} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {34885#false} is VALID [2022-04-28 08:12:56,004 INFO L290 TraceCheckUtils]: 49: Hoare triple {34885#false} assume !(259 == ~__cil_tmp23~0); {34885#false} is VALID [2022-04-28 08:12:56,004 INFO L290 TraceCheckUtils]: 50: Hoare triple {34885#false} assume ~status~0 >= 0; {34885#false} is VALID [2022-04-28 08:12:56,004 INFO L290 TraceCheckUtils]: 51: Hoare triple {34885#false} assume ~myStatus~0 >= 0;~devExt__Started~0 := 1;~devExt__Removed~0 := 0;~devExt__SurpriseRemoved~0 := 0; {34885#false} is VALID [2022-04-28 08:12:56,004 INFO L290 TraceCheckUtils]: 52: Hoare triple {34885#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {34885#false} is VALID [2022-04-28 08:12:56,005 INFO L272 TraceCheckUtils]: 53: Hoare triple {34885#false} call IofCompleteRequest(~Irp, 0); {34885#false} is VALID [2022-04-28 08:12:56,005 INFO L290 TraceCheckUtils]: 54: Hoare triple {34885#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {34885#false} is VALID [2022-04-28 08:12:56,005 INFO L290 TraceCheckUtils]: 55: Hoare triple {34885#false} assume !(~s~0 == ~NP~0); {34885#false} is VALID [2022-04-28 08:12:56,005 INFO L272 TraceCheckUtils]: 56: Hoare triple {34885#false} call errorFn(); {34885#false} is VALID [2022-04-28 08:12:56,005 INFO L290 TraceCheckUtils]: 57: Hoare triple {34885#false} assume !false; {34885#false} is VALID [2022-04-28 08:12:56,005 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 08:12:56,006 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 08:12:56,006 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1122826154] [2022-04-28 08:12:56,006 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1122826154] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:56,006 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:56,006 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:12:56,006 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 08:12:56,006 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [592957948] [2022-04-28 08:12:56,006 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [592957948] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 08:12:56,006 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 08:12:56,007 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 08:12:56,007 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [867756633] [2022-04-28 08:12:56,007 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 08:12:56,007 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-28 08:12:56,007 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 08:12:56,007 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:56,038 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:56,038 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-28 08:12:56,038 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:56,039 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-28 08:12:56,039 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-28 08:12:56,039 INFO L87 Difference]: Start difference. First operand 166 states and 189 transitions. Second operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:57,000 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:57,000 INFO L93 Difference]: Finished difference Result 202 states and 230 transitions. [2022-04-28 08:12:57,000 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-28 08:12:57,000 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-28 08:12:57,000 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 08:12:57,000 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:57,015 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 197 transitions. [2022-04-28 08:12:57,016 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:57,017 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 197 transitions. [2022-04-28 08:12:57,017 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 197 transitions. [2022-04-28 08:12:57,178 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 197 edges. 197 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:57,180 INFO L225 Difference]: With dead ends: 202 [2022-04-28 08:12:57,180 INFO L226 Difference]: Without dead ends: 160 [2022-04-28 08:12:57,180 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-28 08:12:57,180 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 128 mSDsluCounter, 292 mSDsCounter, 0 mSdLazyCounter, 283 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 422 SdHoareTripleChecker+Invalid, 328 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 283 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-28 08:12:57,180 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 422 Invalid, 328 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 283 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-28 08:12:57,181 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-04-28 08:12:57,430 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 160. [2022-04-28 08:12:57,430 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 08:12:57,431 INFO L82 GeneralOperation]: Start isEquivalent. First operand 160 states. Second operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 08:12:57,431 INFO L74 IsIncluded]: Start isIncluded. First operand 160 states. Second operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 08:12:57,431 INFO L87 Difference]: Start difference. First operand 160 states. Second operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 08:12:57,432 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:57,432 INFO L93 Difference]: Finished difference Result 160 states and 180 transitions. [2022-04-28 08:12:57,433 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 180 transitions. [2022-04-28 08:12:57,433 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:57,433 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:57,433 INFO L74 IsIncluded]: Start isIncluded. First operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 160 states. [2022-04-28 08:12:57,433 INFO L87 Difference]: Start difference. First operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 160 states. [2022-04-28 08:12:57,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 08:12:57,435 INFO L93 Difference]: Finished difference Result 160 states and 180 transitions. [2022-04-28 08:12:57,435 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 180 transitions. [2022-04-28 08:12:57,435 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 08:12:57,435 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 08:12:57,435 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 08:12:57,435 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 08:12:57,435 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 08:12:57,437 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 180 transitions. [2022-04-28 08:12:57,437 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 180 transitions. Word has length 58 [2022-04-28 08:12:57,437 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 08:12:57,437 INFO L495 AbstractCegarLoop]: Abstraction has 160 states and 180 transitions. [2022-04-28 08:12:57,437 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 08:12:57,437 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 160 states and 180 transitions. [2022-04-28 08:12:57,645 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 180 edges. 180 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 08:12:57,646 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 180 transitions. [2022-04-28 08:12:57,646 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-04-28 08:12:57,646 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 08:12:57,646 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 08:12:57,646 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21 [2022-04-28 08:12:57,646 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 08:12:57,647 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 08:12:57,647 INFO L85 PathProgramCache]: Analyzing trace with hash 1199488421, now seen corresponding path program 1 times [2022-04-28 08:12:57,647 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 08:12:57,647 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1014127902] [2022-04-28 08:12:57,647 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 08:12:57,647 INFO L85 PathProgramCache]: Analyzing trace with hash 1199488421, now seen corresponding path program 2 times [2022-04-28 08:12:57,647 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 08:12:57,647 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [856979154] [2022-04-28 08:12:57,647 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 08:12:57,647 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 08:12:57,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-04-28 08:12:57,672 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-04-28 08:12:57,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-04-28 08:12:57,706 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-04-28 08:12:57,706 INFO L130 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found a feasible trace [2022-04-28 08:12:57,706 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-04-28 08:12:57,708 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-04-28 08:12:57,710 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22 [2022-04-28 08:12:57,712 INFO L356 BasicCegarLoop]: Path program histogram: [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2] [2022-04-28 08:12:57,714 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: reach_errorENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: KeSetEventENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: KbFilter_CompleteENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: stub_driver_initENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: KbFilter_PowerENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: _BLAST_initENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: errorFnENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: errorFnENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: IofCallDriverENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: PoCallDriverENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: IofCompleteRequestENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: KbFilter_PnPENTRY has no Hoare annotation [2022-04-28 08:12:57,733 WARN L170 areAnnotationChecker]: reach_errorFINAL has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: KeSetEventFINAL has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L624 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L624 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: stub_driver_initFINAL has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: _BLAST_initFINAL has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: errorFnFINAL has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L489 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L489 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L475-1 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L475 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L475 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L754 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L754 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L638 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L638 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L875 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L875 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L558 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L558 has no Hoare annotation [2022-04-28 08:12:57,734 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: L674 has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: L674 has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: KeSetEventEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: L624-1 has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: stub_driver_initEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: L701 has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: L701 has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: _BLAST_initEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 08:12:57,735 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L491 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L491 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L489-1 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredEXIT has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredEXIT has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L756 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L756 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L754-1 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L645 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L645 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L641 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L641 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L935 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L935 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L883 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L883 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L582 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L582 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L589 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L589 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L562-1 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L562 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L562 has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-04-28 08:12:57,736 WARN L170 areAnnotationChecker]: L678-1 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L678 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L678 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L107 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L109 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L109 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: KbFilter_CompleteFINAL has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L342 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L342 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L724 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L724 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L428 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L814-1 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L594-1 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L180-1 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L225-1 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L241-1 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L256-1 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L734-1 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L546-1 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L328 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L328 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L491-1 has no Hoare annotation [2022-04-28 08:12:57,737 WARN L170 areAnnotationChecker]: L504 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L504 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L756-1 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L653 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L644 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L644 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L940 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L940 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L884 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: IofCompleteRequestEXIT has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: IofCompleteRequestEXIT has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L684 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L684 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L110 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L112 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: L112 has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: KbFilter_CompleteEXIT has no Hoare annotation [2022-04-28 08:12:57,738 WARN L170 areAnnotationChecker]: KbFilter_CompleteEXIT has no Hoare annotation [2022-04-28 08:12:57,739 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2022-04-28 08:12:57,739 WARN L170 areAnnotationChecker]: L351 has no Hoare annotation [2022-04-28 08:12:57,739 WARN L170 areAnnotationChecker]: L351 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L734 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L734 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L709 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L709 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: PoCallDriverFINAL has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L247 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L247 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L262 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L262 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L740 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L740 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: IofCallDriverFINAL has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L413 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L413 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L419 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L419 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2022-04-28 08:12:57,740 WARN L170 areAnnotationChecker]: L505 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L509 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L509 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L760 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L760 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L770 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L660 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L660 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L997 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L997 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L1003 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L1003 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L892 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L892 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L596 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L596 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L997-1 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L267 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L684-1 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L180 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L180 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L221 has no Hoare annotation [2022-04-28 08:12:57,741 WARN L170 areAnnotationChecker]: L221 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L113 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L115 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L115 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L356 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L356 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: PoCallDriverEXIT has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L604 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L606 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L192-1 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L231-1 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L247-1 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L262-1 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L740-1 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2022-04-28 08:12:57,742 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2022-04-28 08:12:57,743 WARN L170 areAnnotationChecker]: L427 has no Hoare annotation [2022-04-28 08:12:57,743 WARN L170 areAnnotationChecker]: L427 has no Hoare annotation [2022-04-28 08:12:57,743 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2022-04-28 08:12:57,743 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2022-04-28 08:12:57,743 WARN L170 areAnnotationChecker]: L524 has no Hoare annotation [2022-04-28 08:12:57,743 WARN L170 areAnnotationChecker]: L524 has no Hoare annotation [2022-04-28 08:12:57,743 WARN L170 areAnnotationChecker]: L510 has no Hoare annotation [2022-04-28 08:12:57,743 WARN L170 areAnnotationChecker]: L512 has no Hoare annotation [2022-04-28 08:12:57,743 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2022-04-28 08:12:57,743 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2022-04-28 08:12:57,743 WARN L170 areAnnotationChecker]: L789 has no Hoare annotation [2022-04-28 08:12:57,743 WARN L170 areAnnotationChecker]: L789 has no Hoare annotation [2022-04-28 08:12:57,743 WARN L170 areAnnotationChecker]: L775 has no Hoare annotation [2022-04-28 08:12:57,743 WARN L170 areAnnotationChecker]: L777 has no Hoare annotation [2022-04-28 08:12:57,743 WARN L170 areAnnotationChecker]: L660-1 has no Hoare annotation [2022-04-28 08:12:57,744 WARN L170 areAnnotationChecker]: L1003-1 has no Hoare annotation [2022-04-28 08:12:57,744 WARN L170 areAnnotationChecker]: L956 has no Hoare annotation [2022-04-28 08:12:57,744 WARN L170 areAnnotationChecker]: L956 has no Hoare annotation [2022-04-28 08:12:57,744 WARN L170 areAnnotationChecker]: L903 has no Hoare annotation [2022-04-28 08:12:57,744 WARN L170 areAnnotationChecker]: L903 has no Hoare annotation [2022-04-28 08:12:57,744 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlFINAL has no Hoare annotation [2022-04-28 08:12:57,744 WARN L170 areAnnotationChecker]: KbFilter_PnPFINAL has no Hoare annotation [2022-04-28 08:12:57,744 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughFINAL has no Hoare annotation [2022-04-28 08:12:57,744 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-04-28 08:12:57,744 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-04-28 08:12:57,744 WARN L170 areAnnotationChecker]: L225 has no Hoare annotation [2022-04-28 08:12:57,744 WARN L170 areAnnotationChecker]: L225 has no Hoare annotation [2022-04-28 08:12:57,744 WARN L170 areAnnotationChecker]: L237 has no Hoare annotation [2022-04-28 08:12:57,744 WARN L170 areAnnotationChecker]: L237 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L378 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L357 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L357 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L361 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L361 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectFINAL has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: KbFilter_PowerFINAL has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L797 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L797 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseFINAL has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L956-2 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L956-2 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlEXIT has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: KbFilter_PnPEXIT has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughEXIT has no Hoare annotation [2022-04-28 08:12:57,745 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughEXIT has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L241 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L241 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L256 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L256 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L383 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L366 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L366 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectEXIT has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L197-2 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L197-2 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: KbFilter_PowerEXIT has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-04-28 08:12:57,746 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseEXIT has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseEXIT has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L959-1 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L917 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L917 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L398 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L388 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L124 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L124 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L367 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L367 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L371 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L371 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L199-1 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L206 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L206 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L205 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L393 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L546 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L546 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L814 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L814 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2022-04-28 08:12:57,747 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L372 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L372 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L374 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L216 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L216 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L441 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L441 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L447 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L447 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L931 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L931 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L133 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L133 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L453 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L453 has no Hoare annotation [2022-04-28 08:12:57,748 WARN L170 areAnnotationChecker]: L136 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L136 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L139 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L139 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L142 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L142 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L145 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L145 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L148 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L148 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L154 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L154 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L157 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L157 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L160 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L160 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L163 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L163 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2022-04-28 08:12:57,749 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2022-04-28 08:12:57,749 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-04-28 08:12:57,751 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.04 08:12:57 BoogieIcfgContainer [2022-04-28 08:12:57,751 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-04-28 08:12:57,752 INFO L158 Benchmark]: Toolchain (without parser) took 71866.54ms. Allocated memory was 191.9MB in the beginning and 360.7MB in the end (delta: 168.8MB). Free memory was 139.7MB in the beginning and 209.0MB in the end (delta: -69.3MB). Peak memory consumption was 100.7MB. Max. memory is 8.0GB. [2022-04-28 08:12:57,752 INFO L158 Benchmark]: CDTParser took 0.10ms. Allocated memory is still 191.9MB. Free memory is still 157.1MB. There was no memory consumed. Max. memory is 8.0GB. [2022-04-28 08:12:57,752 INFO L158 Benchmark]: CACSL2BoogieTranslator took 320.02ms. Allocated memory is still 191.9MB. Free memory was 139.5MB in the beginning and 156.7MB in the end (delta: -17.1MB). Peak memory consumption was 13.0MB. Max. memory is 8.0GB. [2022-04-28 08:12:57,752 INFO L158 Benchmark]: Boogie Preprocessor took 77.16ms. Allocated memory is still 191.9MB. Free memory was 156.7MB in the beginning and 153.5MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-04-28 08:12:57,752 INFO L158 Benchmark]: RCFGBuilder took 682.17ms. Allocated memory is still 191.9MB. Free memory was 153.5MB in the beginning and 110.0MB in the end (delta: 43.5MB). Peak memory consumption was 44.0MB. Max. memory is 8.0GB. [2022-04-28 08:12:57,752 INFO L158 Benchmark]: TraceAbstraction took 70779.38ms. Allocated memory was 191.9MB in the beginning and 360.7MB in the end (delta: 168.8MB). Free memory was 109.5MB in the beginning and 209.0MB in the end (delta: -99.5MB). Peak memory consumption was 70.9MB. Max. memory is 8.0GB. [2022-04-28 08:12:57,753 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10ms. Allocated memory is still 191.9MB. Free memory is still 157.1MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 320.02ms. Allocated memory is still 191.9MB. Free memory was 139.5MB in the beginning and 156.7MB in the end (delta: -17.1MB). Peak memory consumption was 13.0MB. Max. memory is 8.0GB. * Boogie Preprocessor took 77.16ms. Allocated memory is still 191.9MB. Free memory was 156.7MB in the beginning and 153.5MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 682.17ms. Allocated memory is still 191.9MB. Free memory was 153.5MB in the beginning and 110.0MB in the end (delta: 43.5MB). Peak memory consumption was 44.0MB. Max. memory is 8.0GB. * TraceAbstraction took 70779.38ms. Allocated memory was 191.9MB in the beginning and 360.7MB in the end (delta: 168.8MB). Free memory was 109.5MB in the beginning and 209.0MB in the end (delta: -99.5MB). Peak memory consumption was 70.9MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 1013]: a call to reach_error is reachable a call to reach_error is reachable We found a FailurePath: [L23] int KernelMode ; [L24] int Executive ; [L25] int DevicePowerState ; [L26] int s ; [L27] int UNLOADED ; [L28] int NP ; [L29] int DC ; [L30] int SKIP1 ; [L31] int SKIP2 ; [L32] int MPR1 ; [L33] int MPR3 ; [L34] int IPC ; [L35] int pended ; [L36] int compFptr ; [L37] int compRegistered ; [L38] int lowerDriverReturn ; [L39] int setEventCalled ; [L40] int customIrp ; [L41] int myStatus ; [L294] int status ; [L295] int irp = __VERIFIER_nondet_int() ; [L296] int pirp ; [L297] int pirp__IoStatus__Status ; [L298] int irp_choice = __VERIFIER_nondet_int() ; [L299] int devobj = __VERIFIER_nondet_int() ; [L300] int __cil_tmp8 ; [L302] KernelMode = 0 [L303] Executive = 0 [L304] DevicePowerState = 1 [L305] s = 0 [L306] UNLOADED = 0 [L307] NP = 0 [L308] DC = 0 [L309] SKIP1 = 0 [L310] SKIP2 = 0 [L311] MPR1 = 0 [L312] MPR3 = 0 [L313] IPC = 0 [L314] pended = 0 [L315] compFptr = 0 [L316] compRegistered = 0 [L317] lowerDriverReturn = 0 [L318] setEventCalled = 0 [L319] customIrp = 0 [L320] myStatus = 0 [L324] status = 0 [L325] pirp = irp [L326] CALL _BLAST_init() [L61] UNLOADED = 0 [L62] NP = 1 [L63] DC = 2 [L64] SKIP1 = 3 [L65] SKIP2 = 4 [L66] MPR1 = 5 [L67] MPR3 = 6 [L68] IPC = 7 [L69] s = UNLOADED [L70] pended = 0 [L71] compFptr = 0 [L72] compRegistered = 0 [L73] lowerDriverReturn = 0 [L74] setEventCalled = 0 [L75] customIrp = 0 [L326] RET _BLAST_init() [L328] COND TRUE status >= 0 [L329] s = NP [L330] customIrp = 0 [L331] setEventCalled = customIrp [L332] lowerDriverReturn = setEventCalled [L333] compRegistered = lowerDriverReturn [L334] pended = compRegistered [L335] pirp__IoStatus__Status = 0 [L336] myStatus = 0 [L337] COND FALSE !(irp_choice == 0) [L342] CALL stub_driver_init() [L47] s = NP [L48] pended = 0 [L49] compFptr = 0 [L50] compRegistered = 0 [L51] lowerDriverReturn = 0 [L52] setEventCalled = 0 [L53] customIrp = 0 [L342] RET stub_driver_init() [L345] COND FALSE !(status < 0) [L349] int tmp_ndt_1; [L350] tmp_ndt_1 = __VERIFIER_nondet_int() [L351] COND FALSE !(tmp_ndt_1 == 0) [L354] int tmp_ndt_2; [L355] tmp_ndt_2 = __VERIFIER_nondet_int() [L356] COND FALSE !(tmp_ndt_2 == 1) [L359] int tmp_ndt_3; [L360] tmp_ndt_3 = __VERIFIER_nondet_int() [L361] COND TRUE tmp_ndt_3 == 3 [L388] CALL, EXPR KbFilter_PnP(devobj, pirp) [L80] int devExt ; [L81] int irpStack ; [L82] int status ; [L83] int event = __VERIFIER_nondet_int() ; [L84] int DeviceObject__DeviceExtension = __VERIFIER_nondet_int() ; [L85] int Irp__Tail__Overlay__CurrentStackLocation = __VERIFIER_nondet_int() ; [L86] int irpStack__MinorFunction = __VERIFIER_nondet_int() ; [L87] int devExt__TopOfStack = __VERIFIER_nondet_int() ; [L88] int devExt__Started ; [L89] int devExt__Removed ; [L90] int devExt__SurpriseRemoved ; [L91] int Irp__IoStatus__Status ; [L92] int Irp__IoStatus__Information ; [L93] int Irp__CurrentLocation = __VERIFIER_nondet_int() ; [L94] int irpSp ; [L95] int nextIrpSp ; [L96] int nextIrpSp__Control ; [L97] int irpSp___0 ; [L98] int irpSp__Context ; [L99] int irpSp__Control ; [L100] long __cil_tmp23 ; [L103] status = 0 [L104] devExt = DeviceObject__DeviceExtension [L105] irpStack = Irp__Tail__Overlay__CurrentStackLocation [L106] COND FALSE !(irpStack__MinorFunction == 0) [L109] COND FALSE !(irpStack__MinorFunction == 23) [L112] COND TRUE irpStack__MinorFunction == 2 [L236] devExt__Removed = 1 [L237] COND TRUE s == NP [L238] s = SKIP1 [L245] Irp__CurrentLocation ++ [L246] Irp__Tail__Overlay__CurrentStackLocation ++ [L247] CALL IofCallDriver(devExt__TopOfStack, Irp) [L483] int returnVal2 ; [L484] int compRetStatus ; [L485] int lcontext = __VERIFIER_nondet_int() ; [L486] long long __cil_tmp7 ; [L489] COND FALSE !(\read(compRegistered)) [L502] int tmp_ndt_6; [L503] tmp_ndt_6 = __VERIFIER_nondet_int() [L504] COND FALSE !(tmp_ndt_6 == 0) [L507] int tmp_ndt_7; [L508] tmp_ndt_7 = __VERIFIER_nondet_int() [L509] COND TRUE tmp_ndt_7 == 1 [L518] returnVal2 = -1073741823 [L528] COND FALSE !(s == NP) [L532] COND FALSE !(s == MPR1) [L541] COND TRUE s == SKIP1 [L542] s = SKIP2 [L543] lowerDriverReturn = returnVal2 [L551] return (returnVal2); [L247] RET IofCallDriver(devExt__TopOfStack, Irp) [L248] status = 0 [L290] return (status); [L388] RET, EXPR KbFilter_PnP(devobj, pirp) [L388] status = KbFilter_PnP(devobj, pirp) [L412] COND FALSE !(pended == 1) [L420] COND FALSE !(pended == 1) [L428] COND TRUE s != UNLOADED [L429] COND TRUE status != -1 [L430] COND FALSE !(s != SKIP2) [L440] COND FALSE !(pended == 1) [L447] COND FALSE !(s == DC) [L452] COND TRUE status != lowerDriverReturn [L453] CALL errorFn() [L1013] reach_error() - StatisticsResult: Ultimate Automizer benchmark data CFG has 19 procedures, 243 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 70.7s, OverallIterations: 23, TraceHistogramMax: 1, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 51.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 10321 SdHoareTripleChecker+Valid, 14.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 10301 mSDsluCounter, 12823 SdHoareTripleChecker+Invalid, 14.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 7683 mSDsCounter, 1995 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 15378 IncrementalHoareTripleChecker+Invalid, 17373 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1995 mSolverCounterUnsat, 5140 mSDtfsCounter, 15378 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 468 GetRequests, 198 SyntacticMatches, 1 SemanticMatches, 269 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 447 ImplicationChecksByTransitivity, 3.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=344occurred in iteration=3, InterpolantAutomatonStates: 230, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 5.8s AutomataMinimizationTime, 22 MinimizatonAttempts, 227 StatesRemovedByMinimization, 13 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: No data available, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2022-04-28 08:12:57,774 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request...