/usr/bin/java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationQvasr_64.epf -i ../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-fb4f59a-m [2022-04-28 14:49:12,250 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-04-28 14:49:12,251 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-04-28 14:49:12,300 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-04-28 14:49:12,301 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-04-28 14:49:12,301 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-04-28 14:49:12,302 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-04-28 14:49:12,303 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-04-28 14:49:12,304 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-04-28 14:49:12,307 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-04-28 14:49:12,308 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-04-28 14:49:12,310 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-04-28 14:49:12,310 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-04-28 14:49:12,311 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-04-28 14:49:12,312 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-04-28 14:49:12,313 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-04-28 14:49:12,313 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-04-28 14:49:12,314 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-04-28 14:49:12,317 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-04-28 14:49:12,318 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-04-28 14:49:12,319 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-04-28 14:49:12,321 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-04-28 14:49:12,321 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-04-28 14:49:12,323 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-04-28 14:49:12,324 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-04-28 14:49:12,328 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-04-28 14:49:12,328 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-04-28 14:49:12,329 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-04-28 14:49:12,329 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-04-28 14:49:12,329 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-04-28 14:49:12,330 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-04-28 14:49:12,330 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-04-28 14:49:12,330 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-04-28 14:49:12,331 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-04-28 14:49:12,331 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-04-28 14:49:12,331 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-04-28 14:49:12,332 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-04-28 14:49:12,332 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-04-28 14:49:12,332 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-04-28 14:49:12,332 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-04-28 14:49:12,333 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-04-28 14:49:12,337 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-04-28 14:49:12,337 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationQvasr_64.epf [2022-04-28 14:49:12,346 INFO L113 SettingsManager]: Loading preferences was successful [2022-04-28 14:49:12,347 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-04-28 14:49:12,347 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-04-28 14:49:12,348 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-04-28 14:49:12,348 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-04-28 14:49:12,348 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-04-28 14:49:12,348 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-04-28 14:49:12,348 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-04-28 14:49:12,348 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-04-28 14:49:12,348 INFO L138 SettingsManager]: * Use constant arrays=true [2022-04-28 14:49:12,349 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-04-28 14:49:12,349 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-04-28 14:49:12,349 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-04-28 14:49:12,349 INFO L138 SettingsManager]: * To the following directory=./dump/ [2022-04-28 14:49:12,349 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-04-28 14:49:12,349 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-28 14:49:12,349 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-04-28 14:49:12,349 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=Craig_NestedInterpolation [2022-04-28 14:49:12,349 INFO L138 SettingsManager]: * Trace refinement strategy=ACCELERATED_INTERPOLATION [2022-04-28 14:49:12,349 INFO L138 SettingsManager]: * Trace refinement strategy used in Accelerated Interpolation=CAMEL [2022-04-28 14:49:12,349 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-04-28 14:49:12,350 INFO L138 SettingsManager]: * Loop acceleration method that is used by accelerated interpolation=QVASR [2022-04-28 14:49:12,350 INFO L138 SettingsManager]: * Use separate solver for trace checks=false WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-04-28 14:49:12,535 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-04-28 14:49:12,551 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-04-28 14:49:12,552 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-04-28 14:49:12,553 INFO L271 PluginConnector]: Initializing CDTParser... [2022-04-28 14:49:12,554 INFO L275 PluginConnector]: CDTParser initialized [2022-04-28 14:49:12,554 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c [2022-04-28 14:49:12,602 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/dfcd241ed/62dabbba3c3b4fa29544be47f3b36b80/FLAG8cb460f5e [2022-04-28 14:49:12,997 INFO L306 CDTParser]: Found 1 translation units. [2022-04-28 14:49:12,997 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c [2022-04-28 14:49:13,006 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/dfcd241ed/62dabbba3c3b4fa29544be47f3b36b80/FLAG8cb460f5e [2022-04-28 14:49:13,020 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/dfcd241ed/62dabbba3c3b4fa29544be47f3b36b80 [2022-04-28 14:49:13,022 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-04-28 14:49:13,023 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2022-04-28 14:49:13,026 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-04-28 14:49:13,026 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-04-28 14:49:13,029 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-04-28 14:49:13,032 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.04 02:49:13" (1/1) ... [2022-04-28 14:49:13,033 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6e3160e9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 02:49:13, skipping insertion in model container [2022-04-28 14:49:13,033 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.04 02:49:13" (1/1) ... [2022-04-28 14:49:13,039 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-04-28 14:49:13,074 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-04-28 14:49:13,345 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c[29656,29669] [2022-04-28 14:49:13,347 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-28 14:49:13,351 INFO L203 MainTranslator]: Completed pre-run [2022-04-28 14:49:13,429 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c[29656,29669] [2022-04-28 14:49:13,430 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-28 14:49:13,447 INFO L208 MainTranslator]: Completed translation [2022-04-28 14:49:13,448 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 02:49:13 WrapperNode [2022-04-28 14:49:13,448 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-04-28 14:49:13,449 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-04-28 14:49:13,449 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-04-28 14:49:13,449 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-04-28 14:49:13,456 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 02:49:13" (1/1) ... [2022-04-28 14:49:13,456 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 02:49:13" (1/1) ... [2022-04-28 14:49:13,464 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 02:49:13" (1/1) ... [2022-04-28 14:49:13,464 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 02:49:13" (1/1) ... [2022-04-28 14:49:13,494 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 02:49:13" (1/1) ... [2022-04-28 14:49:13,510 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 02:49:13" (1/1) ... [2022-04-28 14:49:13,517 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 02:49:13" (1/1) ... [2022-04-28 14:49:13,523 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-04-28 14:49:13,524 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-04-28 14:49:13,524 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-04-28 14:49:13,524 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-04-28 14:49:13,525 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 02:49:13" (1/1) ... [2022-04-28 14:49:13,536 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-28 14:49:13,544 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 14:49:13,556 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-04-28 14:49:13,574 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-04-28 14:49:13,589 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2022-04-28 14:49:13,589 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-04-28 14:49:13,589 INFO L138 BoogieDeclarations]: Found implementation of procedure reach_error [2022-04-28 14:49:13,589 INFO L138 BoogieDeclarations]: Found implementation of procedure stub_driver_init [2022-04-28 14:49:13,589 INFO L138 BoogieDeclarations]: Found implementation of procedure _BLAST_init [2022-04-28 14:49:13,590 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_PnP [2022-04-28 14:49:13,590 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2022-04-28 14:49:13,590 INFO L138 BoogieDeclarations]: Found implementation of procedure stubMoreProcessingRequired [2022-04-28 14:49:13,590 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCallDriver [2022-04-28 14:49:13,590 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCompleteRequest [2022-04-28 14:49:13,590 INFO L138 BoogieDeclarations]: Found implementation of procedure KeSetEvent [2022-04-28 14:49:13,590 INFO L138 BoogieDeclarations]: Found implementation of procedure KeWaitForSingleObject [2022-04-28 14:49:13,590 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Complete [2022-04-28 14:49:13,591 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_CreateClose [2022-04-28 14:49:13,591 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_DispatchPassThrough [2022-04-28 14:49:13,592 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Power [2022-04-28 14:49:13,592 INFO L138 BoogieDeclarations]: Found implementation of procedure PoCallDriver [2022-04-28 14:49:13,592 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_InternIoCtl [2022-04-28 14:49:13,592 INFO L138 BoogieDeclarations]: Found implementation of procedure errorFn [2022-04-28 14:49:13,592 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2022-04-28 14:49:13,592 INFO L130 BoogieDeclarations]: Found specification of procedure __assert_fail [2022-04-28 14:49:13,592 INFO L130 BoogieDeclarations]: Found specification of procedure reach_error [2022-04-28 14:49:13,592 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-04-28 14:49:13,592 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_char [2022-04-28 14:49:13,593 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2022-04-28 14:49:13,593 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_long [2022-04-28 14:49:13,593 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_PnP [2022-04-28 14:49:13,593 INFO L130 BoogieDeclarations]: Found specification of procedure IofCallDriver [2022-04-28 14:49:13,593 INFO L130 BoogieDeclarations]: Found specification of procedure KeSetEvent [2022-04-28 14:49:13,593 INFO L130 BoogieDeclarations]: Found specification of procedure KeWaitForSingleObject [2022-04-28 14:49:13,593 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Complete [2022-04-28 14:49:13,593 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_CreateClose [2022-04-28 14:49:13,593 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_DispatchPassThrough [2022-04-28 14:49:13,593 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Power [2022-04-28 14:49:13,593 INFO L130 BoogieDeclarations]: Found specification of procedure PoCallDriver [2022-04-28 14:49:13,593 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_InternIoCtl [2022-04-28 14:49:13,593 INFO L130 BoogieDeclarations]: Found specification of procedure errorFn [2022-04-28 14:49:13,593 INFO L130 BoogieDeclarations]: Found specification of procedure IofCompleteRequest [2022-04-28 14:49:13,594 INFO L130 BoogieDeclarations]: Found specification of procedure stub_driver_init [2022-04-28 14:49:13,594 INFO L130 BoogieDeclarations]: Found specification of procedure _BLAST_init [2022-04-28 14:49:13,594 INFO L130 BoogieDeclarations]: Found specification of procedure main [2022-04-28 14:49:13,594 INFO L130 BoogieDeclarations]: Found specification of procedure stubMoreProcessingRequired [2022-04-28 14:49:13,594 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2022-04-28 14:49:13,594 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-04-28 14:49:13,594 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-04-28 14:49:13,594 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-04-28 14:49:13,594 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-04-28 14:49:13,594 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-04-28 14:49:13,745 INFO L234 CfgBuilder]: Building ICFG [2022-04-28 14:49:13,747 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-04-28 14:49:13,812 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 14:49:13,939 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##18: assume false; [2022-04-28 14:49:13,939 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##19: assume !false; [2022-04-28 14:49:13,942 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 14:49:13,987 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-28 14:49:13,987 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-28 14:49:14,117 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 14:49:14,130 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##16: assume !false; [2022-04-28 14:49:14,130 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##15: assume false; [2022-04-28 14:49:14,137 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 14:49:14,227 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##43: assume false; [2022-04-28 14:49:14,227 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##44: assume !false; [2022-04-28 14:49:14,232 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 14:49:14,254 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##10: assume !false; [2022-04-28 14:49:14,254 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##9: assume false; [2022-04-28 14:49:14,257 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-28 14:49:14,305 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-28 14:49:14,305 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-28 14:49:14,354 INFO L275 CfgBuilder]: Performing block encoding [2022-04-28 14:49:14,360 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-04-28 14:49:14,360 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-04-28 14:49:14,362 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.04 02:49:14 BoogieIcfgContainer [2022-04-28 14:49:14,362 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-04-28 14:49:14,363 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-04-28 14:49:14,364 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-04-28 14:49:14,380 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-04-28 14:49:14,380 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.04 02:49:13" (1/3) ... [2022-04-28 14:49:14,381 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d9ee283 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.04 02:49:14, skipping insertion in model container [2022-04-28 14:49:14,381 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 02:49:13" (2/3) ... [2022-04-28 14:49:14,381 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d9ee283 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.04 02:49:14, skipping insertion in model container [2022-04-28 14:49:14,381 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.04 02:49:14" (3/3) ... [2022-04-28 14:49:14,382 INFO L111 eAbstractionObserver]: Analyzing ICFG kbfiltr_simpl2.cil-2.c [2022-04-28 14:49:14,392 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:Craig_NestedInterpolation Determinization: PREDICATE_ABSTRACTION [2022-04-28 14:49:14,392 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-04-28 14:49:14,425 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-04-28 14:49:14,431 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=Craig_NestedInterpolation, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@d84b9c8, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@2be61ed0 [2022-04-28 14:49:14,431 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-04-28 14:49:14,444 INFO L276 IsEmpty]: Start isEmpty. Operand has 240 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 200 states have internal predecessors, (284), 39 states have call successors, (39), 17 states have call predecessors, (39), 17 states have return successors, (39), 37 states have call predecessors, (39), 39 states have call successors, (39) [2022-04-28 14:49:14,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-04-28 14:49:14,449 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:49:14,450 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:49:14,453 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:49:14,457 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:49:14,458 INFO L85 PathProgramCache]: Analyzing trace with hash -1235546278, now seen corresponding path program 1 times [2022-04-28 14:49:14,463 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:14,463 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1146024342] [2022-04-28 14:49:14,472 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:49:14,473 INFO L85 PathProgramCache]: Analyzing trace with hash -1235546278, now seen corresponding path program 2 times [2022-04-28 14:49:14,475 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:49:14,475 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1594822171] [2022-04-28 14:49:14,475 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:49:14,475 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:49:14,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:14,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:49:14,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:14,763 INFO L290 TraceCheckUtils]: 0: Hoare triple {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {243#true} is VALID [2022-04-28 14:49:14,763 INFO L290 TraceCheckUtils]: 1: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-28 14:49:14,763 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {243#true} {243#true} #783#return; {243#true} is VALID [2022-04-28 14:49:14,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:49:14,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:14,814 INFO L290 TraceCheckUtils]: 0: Hoare triple {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {243#true} is VALID [2022-04-28 14:49:14,815 INFO L290 TraceCheckUtils]: 1: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-28 14:49:14,815 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {243#true} {248#(= main_~status~1 0)} #715#return; {248#(= main_~status~1 0)} is VALID [2022-04-28 14:49:14,817 INFO L272 TraceCheckUtils]: 0: Hoare triple {243#true} call ULTIMATE.init(); {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:49:14,817 INFO L290 TraceCheckUtils]: 1: Hoare triple {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {243#true} is VALID [2022-04-28 14:49:14,817 INFO L290 TraceCheckUtils]: 2: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-28 14:49:14,817 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {243#true} {243#true} #783#return; {243#true} is VALID [2022-04-28 14:49:14,817 INFO L272 TraceCheckUtils]: 4: Hoare triple {243#true} call #t~ret81 := main(); {243#true} is VALID [2022-04-28 14:49:14,818 INFO L290 TraceCheckUtils]: 5: Hoare triple {243#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {248#(= main_~status~1 0)} is VALID [2022-04-28 14:49:14,819 INFO L272 TraceCheckUtils]: 6: Hoare triple {248#(= main_~status~1 0)} call _BLAST_init(); {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:14,820 INFO L290 TraceCheckUtils]: 7: Hoare triple {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {243#true} is VALID [2022-04-28 14:49:14,820 INFO L290 TraceCheckUtils]: 8: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-28 14:49:14,820 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {243#true} {248#(= main_~status~1 0)} #715#return; {248#(= main_~status~1 0)} is VALID [2022-04-28 14:49:14,821 INFO L290 TraceCheckUtils]: 10: Hoare triple {248#(= main_~status~1 0)} assume !(~status~1 >= 0); {244#false} is VALID [2022-04-28 14:49:14,821 INFO L290 TraceCheckUtils]: 11: Hoare triple {244#false} assume !(1 == ~pended~0); {244#false} is VALID [2022-04-28 14:49:14,821 INFO L290 TraceCheckUtils]: 12: Hoare triple {244#false} assume !(1 == ~pended~0); {244#false} is VALID [2022-04-28 14:49:14,821 INFO L290 TraceCheckUtils]: 13: Hoare triple {244#false} assume ~s~0 != ~UNLOADED~0; {244#false} is VALID [2022-04-28 14:49:14,821 INFO L290 TraceCheckUtils]: 14: Hoare triple {244#false} assume -1 != ~status~1; {244#false} is VALID [2022-04-28 14:49:14,821 INFO L290 TraceCheckUtils]: 15: Hoare triple {244#false} assume !(~s~0 != ~SKIP2~0); {244#false} is VALID [2022-04-28 14:49:14,822 INFO L290 TraceCheckUtils]: 16: Hoare triple {244#false} assume 1 == ~pended~0; {244#false} is VALID [2022-04-28 14:49:14,822 INFO L290 TraceCheckUtils]: 17: Hoare triple {244#false} assume 259 != ~status~1; {244#false} is VALID [2022-04-28 14:49:14,822 INFO L272 TraceCheckUtils]: 18: Hoare triple {244#false} call errorFn(); {244#false} is VALID [2022-04-28 14:49:14,822 INFO L290 TraceCheckUtils]: 19: Hoare triple {244#false} assume !false; {244#false} is VALID [2022-04-28 14:49:14,824 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:49:14,825 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:49:14,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1594822171] [2022-04-28 14:49:14,825 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1594822171] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:14,825 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:14,826 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-28 14:49:14,827 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:49:14,827 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1146024342] [2022-04-28 14:49:14,827 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1146024342] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:14,828 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:14,828 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-28 14:49:14,828 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [496879768] [2022-04-28 14:49:14,828 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:49:14,831 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-28 14:49:14,832 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:49:14,834 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-28 14:49:14,859 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:14,859 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-04-28 14:49:14,859 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:14,877 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-04-28 14:49:14,878 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-28 14:49:14,883 INFO L87 Difference]: Start difference. First operand has 240 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 200 states have internal predecessors, (284), 39 states have call successors, (39), 17 states have call predecessors, (39), 17 states have return successors, (39), 37 states have call predecessors, (39), 39 states have call successors, (39) Second operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-28 14:49:16,488 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:16,488 INFO L93 Difference]: Finished difference Result 417 states and 628 transitions. [2022-04-28 14:49:16,488 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-04-28 14:49:16,488 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-28 14:49:16,489 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:49:16,489 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-28 14:49:16,506 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 628 transitions. [2022-04-28 14:49:16,506 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-28 14:49:16,518 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 628 transitions. [2022-04-28 14:49:16,519 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 5 states and 628 transitions. [2022-04-28 14:49:17,093 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 628 edges. 628 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:17,107 INFO L225 Difference]: With dead ends: 417 [2022-04-28 14:49:17,107 INFO L226 Difference]: Without dead ends: 259 [2022-04-28 14:49:17,110 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-28 14:49:17,112 INFO L413 NwaCegarLoop]: 297 mSDtfsCounter, 328 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 410 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 334 SdHoareTripleChecker+Valid, 444 SdHoareTripleChecker+Invalid, 491 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 410 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-28 14:49:17,112 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [334 Valid, 444 Invalid, 491 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 410 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-28 14:49:17,123 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-04-28 14:49:17,168 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 231. [2022-04-28 14:49:17,168 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:49:17,173 INFO L82 GeneralOperation]: Start isEquivalent. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-28 14:49:17,174 INFO L74 IsIncluded]: Start isIncluded. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-28 14:49:17,175 INFO L87 Difference]: Start difference. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-28 14:49:17,191 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:17,191 INFO L93 Difference]: Finished difference Result 259 states and 367 transitions. [2022-04-28 14:49:17,191 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 367 transitions. [2022-04-28 14:49:17,198 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:17,198 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:17,200 INFO L74 IsIncluded]: Start isIncluded. First operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 259 states. [2022-04-28 14:49:17,200 INFO L87 Difference]: Start difference. First operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 259 states. [2022-04-28 14:49:17,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:17,215 INFO L93 Difference]: Finished difference Result 259 states and 367 transitions. [2022-04-28 14:49:17,215 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 367 transitions. [2022-04-28 14:49:17,216 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:17,216 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:17,216 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:49:17,216 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:49:17,217 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-28 14:49:17,231 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 326 transitions. [2022-04-28 14:49:17,234 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 326 transitions. Word has length 20 [2022-04-28 14:49:17,234 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:49:17,234 INFO L495 AbstractCegarLoop]: Abstraction has 231 states and 326 transitions. [2022-04-28 14:49:17,235 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-28 14:49:17,235 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 231 states and 326 transitions. [2022-04-28 14:49:17,501 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 326 edges. 326 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:17,501 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 326 transitions. [2022-04-28 14:49:17,501 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-28 14:49:17,501 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:49:17,502 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:49:17,502 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-04-28 14:49:17,502 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:49:17,502 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:49:17,502 INFO L85 PathProgramCache]: Analyzing trace with hash -225403307, now seen corresponding path program 1 times [2022-04-28 14:49:17,502 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:17,503 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1462126800] [2022-04-28 14:49:17,503 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:49:17,503 INFO L85 PathProgramCache]: Analyzing trace with hash -225403307, now seen corresponding path program 2 times [2022-04-28 14:49:17,503 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:49:17,503 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [699208697] [2022-04-28 14:49:17,503 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:49:17,504 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:49:17,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:17,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:49:17,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:17,644 INFO L290 TraceCheckUtils]: 0: Hoare triple {2082#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {2070#true} is VALID [2022-04-28 14:49:17,644 INFO L290 TraceCheckUtils]: 1: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-28 14:49:17,645 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2070#true} {2070#true} #783#return; {2070#true} is VALID [2022-04-28 14:49:17,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:49:17,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:17,666 INFO L290 TraceCheckUtils]: 0: Hoare triple {2083#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2070#true} is VALID [2022-04-28 14:49:17,666 INFO L290 TraceCheckUtils]: 1: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-28 14:49:17,666 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2070#true} {2070#true} #715#return; {2070#true} is VALID [2022-04-28 14:49:17,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:49:17,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:17,680 INFO L290 TraceCheckUtils]: 0: Hoare triple {2084#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 14:49:17,680 INFO L290 TraceCheckUtils]: 1: Hoare triple {2081#(= ~s~0 ~NP~0)} assume true; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 14:49:17,681 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2081#(= ~s~0 ~NP~0)} {2070#true} #717#return; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 14:49:17,682 INFO L272 TraceCheckUtils]: 0: Hoare triple {2070#true} call ULTIMATE.init(); {2082#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:49:17,682 INFO L290 TraceCheckUtils]: 1: Hoare triple {2082#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {2070#true} is VALID [2022-04-28 14:49:17,682 INFO L290 TraceCheckUtils]: 2: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-28 14:49:17,683 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {2070#true} {2070#true} #783#return; {2070#true} is VALID [2022-04-28 14:49:17,683 INFO L272 TraceCheckUtils]: 4: Hoare triple {2070#true} call #t~ret81 := main(); {2070#true} is VALID [2022-04-28 14:49:17,683 INFO L290 TraceCheckUtils]: 5: Hoare triple {2070#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {2070#true} is VALID [2022-04-28 14:49:17,684 INFO L272 TraceCheckUtils]: 6: Hoare triple {2070#true} call _BLAST_init(); {2083#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:17,684 INFO L290 TraceCheckUtils]: 7: Hoare triple {2083#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2070#true} is VALID [2022-04-28 14:49:17,684 INFO L290 TraceCheckUtils]: 8: Hoare triple {2070#true} assume true; {2070#true} is VALID [2022-04-28 14:49:17,684 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {2070#true} {2070#true} #715#return; {2070#true} is VALID [2022-04-28 14:49:17,684 INFO L290 TraceCheckUtils]: 10: Hoare triple {2070#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {2070#true} is VALID [2022-04-28 14:49:17,685 INFO L290 TraceCheckUtils]: 11: Hoare triple {2070#true} assume !(0 == ~irp_choice~0); {2070#true} is VALID [2022-04-28 14:49:17,685 INFO L272 TraceCheckUtils]: 12: Hoare triple {2070#true} call stub_driver_init(); {2084#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:17,686 INFO L290 TraceCheckUtils]: 13: Hoare triple {2084#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 14:49:17,686 INFO L290 TraceCheckUtils]: 14: Hoare triple {2081#(= ~s~0 ~NP~0)} assume true; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 14:49:17,686 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {2081#(= ~s~0 ~NP~0)} {2070#true} #717#return; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 14:49:17,687 INFO L290 TraceCheckUtils]: 16: Hoare triple {2081#(= ~s~0 ~NP~0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 14:49:17,687 INFO L290 TraceCheckUtils]: 17: Hoare triple {2081#(= ~s~0 ~NP~0)} assume 0 == ~tmp_ndt_1~0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 14:49:17,688 INFO L272 TraceCheckUtils]: 18: Hoare triple {2081#(= ~s~0 ~NP~0)} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 14:49:17,688 INFO L290 TraceCheckUtils]: 19: Hoare triple {2081#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 14:49:17,688 INFO L290 TraceCheckUtils]: 20: Hoare triple {2081#(= ~s~0 ~NP~0)} assume 0 == ~irpStack__MajorFunction~0; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 14:49:17,689 INFO L290 TraceCheckUtils]: 21: Hoare triple {2081#(= ~s~0 ~NP~0)} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 14:49:17,689 INFO L290 TraceCheckUtils]: 22: Hoare triple {2081#(= ~s~0 ~NP~0)} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 14:49:17,690 INFO L272 TraceCheckUtils]: 23: Hoare triple {2081#(= ~s~0 ~NP~0)} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 14:49:17,690 INFO L290 TraceCheckUtils]: 24: Hoare triple {2081#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {2081#(= ~s~0 ~NP~0)} is VALID [2022-04-28 14:49:17,691 INFO L290 TraceCheckUtils]: 25: Hoare triple {2081#(= ~s~0 ~NP~0)} assume !(~s~0 == ~NP~0); {2071#false} is VALID [2022-04-28 14:49:17,691 INFO L272 TraceCheckUtils]: 26: Hoare triple {2071#false} call errorFn(); {2071#false} is VALID [2022-04-28 14:49:17,691 INFO L290 TraceCheckUtils]: 27: Hoare triple {2071#false} assume !false; {2071#false} is VALID [2022-04-28 14:49:17,691 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:49:17,691 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:49:17,691 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [699208697] [2022-04-28 14:49:17,692 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [699208697] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:17,692 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:17,692 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 14:49:17,692 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:49:17,692 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1462126800] [2022-04-28 14:49:17,692 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1462126800] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:17,692 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:17,692 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 14:49:17,693 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [438416017] [2022-04-28 14:49:17,693 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:49:17,695 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-28 14:49:17,696 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:49:17,696 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 14:49:17,714 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:17,714 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-28 14:49:17,714 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:17,715 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-28 14:49:17,715 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-28 14:49:17,715 INFO L87 Difference]: Start difference. First operand 231 states and 326 transitions. Second operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 14:49:19,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:19,054 INFO L93 Difference]: Finished difference Result 410 states and 565 transitions. [2022-04-28 14:49:19,054 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-28 14:49:19,055 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-28 14:49:19,055 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:49:19,056 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 14:49:19,064 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 565 transitions. [2022-04-28 14:49:19,065 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 14:49:19,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 565 transitions. [2022-04-28 14:49:19,075 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 565 transitions. [2022-04-28 14:49:19,545 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 565 edges. 565 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:19,553 INFO L225 Difference]: With dead ends: 410 [2022-04-28 14:49:19,553 INFO L226 Difference]: Without dead ends: 349 [2022-04-28 14:49:19,554 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-28 14:49:19,555 INFO L413 NwaCegarLoop]: 361 mSDtfsCounter, 537 mSDsluCounter, 114 mSDsCounter, 0 mSdLazyCounter, 378 mSolverCounterSat, 96 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 537 SdHoareTripleChecker+Valid, 475 SdHoareTripleChecker+Invalid, 474 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 378 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-28 14:49:19,555 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [537 Valid, 475 Invalid, 474 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 378 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-28 14:49:19,556 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 349 states. [2022-04-28 14:49:19,598 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 349 to 304. [2022-04-28 14:49:19,599 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:49:19,602 INFO L82 GeneralOperation]: Start isEquivalent. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-28 14:49:19,602 INFO L74 IsIncluded]: Start isIncluded. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-28 14:49:19,604 INFO L87 Difference]: Start difference. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-28 14:49:19,613 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:19,614 INFO L93 Difference]: Finished difference Result 349 states and 477 transitions. [2022-04-28 14:49:19,614 INFO L276 IsEmpty]: Start isEmpty. Operand 349 states and 477 transitions. [2022-04-28 14:49:19,615 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:19,615 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:19,617 INFO L74 IsIncluded]: Start isIncluded. First operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 349 states. [2022-04-28 14:49:19,618 INFO L87 Difference]: Start difference. First operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 349 states. [2022-04-28 14:49:19,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:19,628 INFO L93 Difference]: Finished difference Result 349 states and 477 transitions. [2022-04-28 14:49:19,628 INFO L276 IsEmpty]: Start isEmpty. Operand 349 states and 477 transitions. [2022-04-28 14:49:19,629 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:19,629 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:19,629 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:49:19,629 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:49:19,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-28 14:49:19,639 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 415 transitions. [2022-04-28 14:49:19,639 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 415 transitions. Word has length 28 [2022-04-28 14:49:19,640 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:49:19,640 INFO L495 AbstractCegarLoop]: Abstraction has 304 states and 415 transitions. [2022-04-28 14:49:19,640 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 14:49:19,640 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 304 states and 415 transitions. [2022-04-28 14:49:20,034 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 415 edges. 415 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:20,034 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 415 transitions. [2022-04-28 14:49:20,034 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-28 14:49:20,035 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:49:20,035 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:49:20,035 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-04-28 14:49:20,035 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:49:20,036 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:49:20,036 INFO L85 PathProgramCache]: Analyzing trace with hash -809602478, now seen corresponding path program 1 times [2022-04-28 14:49:20,036 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:20,036 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [586892117] [2022-04-28 14:49:20,036 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:49:20,036 INFO L85 PathProgramCache]: Analyzing trace with hash -809602478, now seen corresponding path program 2 times [2022-04-28 14:49:20,037 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:49:20,037 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [41927547] [2022-04-28 14:49:20,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:49:20,037 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:49:20,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:20,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:49:20,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:20,148 INFO L290 TraceCheckUtils]: 0: Hoare triple {4230#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {4218#true} is VALID [2022-04-28 14:49:20,148 INFO L290 TraceCheckUtils]: 1: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-28 14:49:20,148 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4218#true} {4218#true} #783#return; {4218#true} is VALID [2022-04-28 14:49:20,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:49:20,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:20,171 INFO L290 TraceCheckUtils]: 0: Hoare triple {4231#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4218#true} is VALID [2022-04-28 14:49:20,171 INFO L290 TraceCheckUtils]: 1: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-28 14:49:20,172 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4218#true} {4218#true} #715#return; {4218#true} is VALID [2022-04-28 14:49:20,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:49:20,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:20,188 INFO L290 TraceCheckUtils]: 0: Hoare triple {4232#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:20,188 INFO L290 TraceCheckUtils]: 1: Hoare triple {4229#(= ~compRegistered~0 0)} assume true; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:20,189 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4229#(= ~compRegistered~0 0)} {4218#true} #717#return; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:20,190 INFO L272 TraceCheckUtils]: 0: Hoare triple {4218#true} call ULTIMATE.init(); {4230#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:49:20,190 INFO L290 TraceCheckUtils]: 1: Hoare triple {4230#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {4218#true} is VALID [2022-04-28 14:49:20,190 INFO L290 TraceCheckUtils]: 2: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-28 14:49:20,190 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {4218#true} {4218#true} #783#return; {4218#true} is VALID [2022-04-28 14:49:20,190 INFO L272 TraceCheckUtils]: 4: Hoare triple {4218#true} call #t~ret81 := main(); {4218#true} is VALID [2022-04-28 14:49:20,191 INFO L290 TraceCheckUtils]: 5: Hoare triple {4218#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {4218#true} is VALID [2022-04-28 14:49:20,193 INFO L272 TraceCheckUtils]: 6: Hoare triple {4218#true} call _BLAST_init(); {4231#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:20,193 INFO L290 TraceCheckUtils]: 7: Hoare triple {4231#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4218#true} is VALID [2022-04-28 14:49:20,193 INFO L290 TraceCheckUtils]: 8: Hoare triple {4218#true} assume true; {4218#true} is VALID [2022-04-28 14:49:20,193 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {4218#true} {4218#true} #715#return; {4218#true} is VALID [2022-04-28 14:49:20,193 INFO L290 TraceCheckUtils]: 10: Hoare triple {4218#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {4218#true} is VALID [2022-04-28 14:49:20,194 INFO L290 TraceCheckUtils]: 11: Hoare triple {4218#true} assume !(0 == ~irp_choice~0); {4218#true} is VALID [2022-04-28 14:49:20,194 INFO L272 TraceCheckUtils]: 12: Hoare triple {4218#true} call stub_driver_init(); {4232#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:20,194 INFO L290 TraceCheckUtils]: 13: Hoare triple {4232#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:20,195 INFO L290 TraceCheckUtils]: 14: Hoare triple {4229#(= ~compRegistered~0 0)} assume true; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:20,195 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {4229#(= ~compRegistered~0 0)} {4218#true} #717#return; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:20,196 INFO L290 TraceCheckUtils]: 16: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:20,197 INFO L290 TraceCheckUtils]: 17: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:20,200 INFO L290 TraceCheckUtils]: 18: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:20,200 INFO L290 TraceCheckUtils]: 19: Hoare triple {4229#(= ~compRegistered~0 0)} assume 3 == ~tmp_ndt_3~0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:20,200 INFO L272 TraceCheckUtils]: 20: Hoare triple {4229#(= ~compRegistered~0 0)} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:20,201 INFO L290 TraceCheckUtils]: 21: Hoare triple {4229#(= ~compRegistered~0 0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:20,201 INFO L290 TraceCheckUtils]: 22: Hoare triple {4229#(= ~compRegistered~0 0)} assume 0 == ~irpStack__MinorFunction~0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:20,201 INFO L290 TraceCheckUtils]: 23: Hoare triple {4229#(= ~compRegistered~0 0)} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:20,202 INFO L290 TraceCheckUtils]: 24: Hoare triple {4229#(= ~compRegistered~0 0)} assume !(~s~0 != ~NP~0); {4229#(= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:20,202 INFO L290 TraceCheckUtils]: 25: Hoare triple {4229#(= ~compRegistered~0 0)} assume 0 != ~compRegistered~0; {4219#false} is VALID [2022-04-28 14:49:20,202 INFO L272 TraceCheckUtils]: 26: Hoare triple {4219#false} call errorFn(); {4219#false} is VALID [2022-04-28 14:49:20,202 INFO L290 TraceCheckUtils]: 27: Hoare triple {4219#false} assume !false; {4219#false} is VALID [2022-04-28 14:49:20,203 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:49:20,203 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:49:20,203 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [41927547] [2022-04-28 14:49:20,203 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [41927547] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:20,203 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:20,203 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 14:49:20,203 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:49:20,203 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [586892117] [2022-04-28 14:49:20,204 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [586892117] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:20,204 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:20,204 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 14:49:20,204 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [560365778] [2022-04-28 14:49:20,204 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:49:20,204 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-28 14:49:20,204 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:49:20,205 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 14:49:20,222 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:20,222 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-28 14:49:20,222 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:20,223 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-28 14:49:20,223 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-28 14:49:20,223 INFO L87 Difference]: Start difference. First operand 304 states and 415 transitions. Second operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 14:49:21,569 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:21,569 INFO L93 Difference]: Finished difference Result 487 states and 647 transitions. [2022-04-28 14:49:21,569 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-28 14:49:21,569 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-28 14:49:21,569 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:49:21,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 14:49:21,574 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 515 transitions. [2022-04-28 14:49:21,574 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 14:49:21,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 515 transitions. [2022-04-28 14:49:21,579 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 515 transitions. [2022-04-28 14:49:22,053 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 515 edges. 515 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:22,062 INFO L225 Difference]: With dead ends: 487 [2022-04-28 14:49:22,062 INFO L226 Difference]: Without dead ends: 368 [2022-04-28 14:49:22,062 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-28 14:49:22,063 INFO L413 NwaCegarLoop]: 267 mSDtfsCounter, 572 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 330 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 572 SdHoareTripleChecker+Valid, 386 SdHoareTripleChecker+Invalid, 431 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 330 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-28 14:49:22,064 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [572 Valid, 386 Invalid, 431 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 330 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-28 14:49:22,064 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 368 states. [2022-04-28 14:49:22,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 368 to 344. [2022-04-28 14:49:22,082 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:49:22,082 INFO L82 GeneralOperation]: Start isEquivalent. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 14:49:22,083 INFO L74 IsIncluded]: Start isIncluded. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 14:49:22,084 INFO L87 Difference]: Start difference. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 14:49:22,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:22,093 INFO L93 Difference]: Finished difference Result 368 states and 494 transitions. [2022-04-28 14:49:22,093 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 494 transitions. [2022-04-28 14:49:22,094 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:22,094 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:22,095 INFO L74 IsIncluded]: Start isIncluded. First operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 368 states. [2022-04-28 14:49:22,098 INFO L87 Difference]: Start difference. First operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 368 states. [2022-04-28 14:49:22,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:22,112 INFO L93 Difference]: Finished difference Result 368 states and 494 transitions. [2022-04-28 14:49:22,112 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 494 transitions. [2022-04-28 14:49:22,114 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:22,114 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:22,115 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:49:22,115 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:49:22,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 14:49:22,124 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 344 states to 344 states and 466 transitions. [2022-04-28 14:49:22,124 INFO L78 Accepts]: Start accepts. Automaton has 344 states and 466 transitions. Word has length 28 [2022-04-28 14:49:22,124 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:49:22,126 INFO L495 AbstractCegarLoop]: Abstraction has 344 states and 466 transitions. [2022-04-28 14:49:22,126 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 14:49:22,126 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 344 states and 466 transitions. [2022-04-28 14:49:22,529 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 466 edges. 466 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:22,529 INFO L276 IsEmpty]: Start isEmpty. Operand 344 states and 466 transitions. [2022-04-28 14:49:22,530 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-04-28 14:49:22,530 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:49:22,530 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:49:22,530 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-04-28 14:49:22,530 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:49:22,531 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:49:22,531 INFO L85 PathProgramCache]: Analyzing trace with hash -1415760533, now seen corresponding path program 1 times [2022-04-28 14:49:22,531 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:22,531 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [2008570712] [2022-04-28 14:49:22,531 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:49:22,531 INFO L85 PathProgramCache]: Analyzing trace with hash -1415760533, now seen corresponding path program 2 times [2022-04-28 14:49:22,532 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:49:22,532 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [283782672] [2022-04-28 14:49:22,532 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:49:22,532 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:49:22,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:22,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:49:22,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:22,630 INFO L290 TraceCheckUtils]: 0: Hoare triple {6650#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6638#true} is VALID [2022-04-28 14:49:22,630 INFO L290 TraceCheckUtils]: 1: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-28 14:49:22,630 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6638#true} {6638#true} #783#return; {6638#true} is VALID [2022-04-28 14:49:22,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:49:22,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:22,654 INFO L290 TraceCheckUtils]: 0: Hoare triple {6651#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-28 14:49:22,654 INFO L290 TraceCheckUtils]: 1: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-28 14:49:22,654 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6638#true} {6638#true} #715#return; {6638#true} is VALID [2022-04-28 14:49:22,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:49:22,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:22,667 INFO L290 TraceCheckUtils]: 0: Hoare triple {6652#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-28 14:49:22,667 INFO L290 TraceCheckUtils]: 1: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-28 14:49:22,667 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6638#true} {6638#true} #717#return; {6638#true} is VALID [2022-04-28 14:49:22,668 INFO L272 TraceCheckUtils]: 0: Hoare triple {6638#true} call ULTIMATE.init(); {6650#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:49:22,669 INFO L290 TraceCheckUtils]: 1: Hoare triple {6650#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6638#true} is VALID [2022-04-28 14:49:22,669 INFO L290 TraceCheckUtils]: 2: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-28 14:49:22,669 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {6638#true} {6638#true} #783#return; {6638#true} is VALID [2022-04-28 14:49:22,669 INFO L272 TraceCheckUtils]: 4: Hoare triple {6638#true} call #t~ret81 := main(); {6638#true} is VALID [2022-04-28 14:49:22,669 INFO L290 TraceCheckUtils]: 5: Hoare triple {6638#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {6638#true} is VALID [2022-04-28 14:49:22,670 INFO L272 TraceCheckUtils]: 6: Hoare triple {6638#true} call _BLAST_init(); {6651#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:22,671 INFO L290 TraceCheckUtils]: 7: Hoare triple {6651#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-28 14:49:22,671 INFO L290 TraceCheckUtils]: 8: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-28 14:49:22,671 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {6638#true} {6638#true} #715#return; {6638#true} is VALID [2022-04-28 14:49:22,671 INFO L290 TraceCheckUtils]: 10: Hoare triple {6638#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {6638#true} is VALID [2022-04-28 14:49:22,671 INFO L290 TraceCheckUtils]: 11: Hoare triple {6638#true} assume !(0 == ~irp_choice~0); {6638#true} is VALID [2022-04-28 14:49:22,673 INFO L272 TraceCheckUtils]: 12: Hoare triple {6638#true} call stub_driver_init(); {6652#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:22,673 INFO L290 TraceCheckUtils]: 13: Hoare triple {6652#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6638#true} is VALID [2022-04-28 14:49:22,673 INFO L290 TraceCheckUtils]: 14: Hoare triple {6638#true} assume true; {6638#true} is VALID [2022-04-28 14:49:22,673 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {6638#true} {6638#true} #717#return; {6638#true} is VALID [2022-04-28 14:49:22,674 INFO L290 TraceCheckUtils]: 16: Hoare triple {6638#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {6638#true} is VALID [2022-04-28 14:49:22,674 INFO L290 TraceCheckUtils]: 17: Hoare triple {6638#true} assume 0 == ~tmp_ndt_1~0; {6638#true} is VALID [2022-04-28 14:49:22,674 INFO L272 TraceCheckUtils]: 18: Hoare triple {6638#true} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {6638#true} is VALID [2022-04-28 14:49:22,674 INFO L290 TraceCheckUtils]: 19: Hoare triple {6638#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {6638#true} is VALID [2022-04-28 14:49:22,674 INFO L290 TraceCheckUtils]: 20: Hoare triple {6638#true} assume 0 == ~irpStack__MajorFunction~0; {6638#true} is VALID [2022-04-28 14:49:22,674 INFO L290 TraceCheckUtils]: 21: Hoare triple {6638#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {6638#true} is VALID [2022-04-28 14:49:22,674 INFO L290 TraceCheckUtils]: 22: Hoare triple {6638#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {6638#true} is VALID [2022-04-28 14:49:22,674 INFO L272 TraceCheckUtils]: 23: Hoare triple {6638#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {6638#true} is VALID [2022-04-28 14:49:22,674 INFO L290 TraceCheckUtils]: 24: Hoare triple {6638#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {6638#true} is VALID [2022-04-28 14:49:22,679 INFO L290 TraceCheckUtils]: 25: Hoare triple {6638#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:22,680 INFO L290 TraceCheckUtils]: 26: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:22,680 INFO L272 TraceCheckUtils]: 27: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:22,681 INFO L290 TraceCheckUtils]: 28: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:22,681 INFO L290 TraceCheckUtils]: 29: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(0 != ~compRegistered~0); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:22,681 INFO L290 TraceCheckUtils]: 30: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:22,682 INFO L290 TraceCheckUtils]: 31: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume 0 == ~tmp_ndt_6~0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:22,682 INFO L290 TraceCheckUtils]: 32: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} ~returnVal2~0 := 0; {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:22,682 INFO L290 TraceCheckUtils]: 33: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~NP~0); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:22,683 INFO L290 TraceCheckUtils]: 34: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~MPR1~0); {6649#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:22,683 INFO L290 TraceCheckUtils]: 35: Hoare triple {6649#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~SKIP1~0); {6639#false} is VALID [2022-04-28 14:49:22,683 INFO L272 TraceCheckUtils]: 36: Hoare triple {6639#false} call errorFn(); {6639#false} is VALID [2022-04-28 14:49:22,683 INFO L290 TraceCheckUtils]: 37: Hoare triple {6639#false} assume !false; {6639#false} is VALID [2022-04-28 14:49:22,683 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:49:22,684 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:49:22,684 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [283782672] [2022-04-28 14:49:22,684 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [283782672] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:22,684 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:22,684 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 14:49:22,684 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:49:22,684 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [2008570712] [2022-04-28 14:49:22,684 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [2008570712] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:22,684 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:22,685 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 14:49:22,685 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1992072057] [2022-04-28 14:49:22,685 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:49:22,685 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-28 14:49:22,685 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:49:22,685 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 14:49:22,708 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 38 edges. 38 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:22,708 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-28 14:49:22,708 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:22,709 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-28 14:49:22,709 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-28 14:49:22,709 INFO L87 Difference]: Start difference. First operand 344 states and 466 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 14:49:24,114 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:24,114 INFO L93 Difference]: Finished difference Result 347 states and 468 transitions. [2022-04-28 14:49:24,114 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-28 14:49:24,114 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-28 14:49:24,115 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:49:24,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 14:49:24,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 338 transitions. [2022-04-28 14:49:24,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 14:49:24,120 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 338 transitions. [2022-04-28 14:49:24,120 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 338 transitions. [2022-04-28 14:49:24,446 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 338 edges. 338 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:24,453 INFO L225 Difference]: With dead ends: 347 [2022-04-28 14:49:24,453 INFO L226 Difference]: Without dead ends: 343 [2022-04-28 14:49:24,453 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-04-28 14:49:24,458 INFO L413 NwaCegarLoop]: 268 mSDtfsCounter, 187 mSDsluCounter, 153 mSDsCounter, 0 mSdLazyCounter, 593 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 421 SdHoareTripleChecker+Invalid, 628 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 593 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-04-28 14:49:24,459 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [187 Valid, 421 Invalid, 628 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 593 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-04-28 14:49:24,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-04-28 14:49:24,485 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2022-04-28 14:49:24,485 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:49:24,485 INFO L82 GeneralOperation]: Start isEquivalent. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 14:49:24,486 INFO L74 IsIncluded]: Start isIncluded. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 14:49:24,487 INFO L87 Difference]: Start difference. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 14:49:24,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:24,497 INFO L93 Difference]: Finished difference Result 343 states and 463 transitions. [2022-04-28 14:49:24,497 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-28 14:49:24,498 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:24,498 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:24,499 INFO L74 IsIncluded]: Start isIncluded. First operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 343 states. [2022-04-28 14:49:24,500 INFO L87 Difference]: Start difference. First operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 343 states. [2022-04-28 14:49:24,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:24,507 INFO L93 Difference]: Finished difference Result 343 states and 463 transitions. [2022-04-28 14:49:24,507 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-28 14:49:24,508 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:24,508 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:24,508 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:49:24,508 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:49:24,509 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-28 14:49:24,516 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 463 transitions. [2022-04-28 14:49:24,516 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 463 transitions. Word has length 38 [2022-04-28 14:49:24,516 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:49:24,516 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 463 transitions. [2022-04-28 14:49:24,516 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-28 14:49:24,517 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 343 states and 463 transitions. [2022-04-28 14:49:24,952 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 463 edges. 463 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:24,952 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-28 14:49:24,953 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-28 14:49:24,953 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:49:24,953 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:49:24,953 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-04-28 14:49:24,953 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:49:24,953 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:49:24,953 INFO L85 PathProgramCache]: Analyzing trace with hash 605107567, now seen corresponding path program 1 times [2022-04-28 14:49:24,954 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:24,954 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1620463917] [2022-04-28 14:49:24,954 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:49:24,954 INFO L85 PathProgramCache]: Analyzing trace with hash 605107567, now seen corresponding path program 2 times [2022-04-28 14:49:24,954 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:49:24,954 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [70734706] [2022-04-28 14:49:24,954 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:49:24,954 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:49:24,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:25,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:49:25,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:25,035 INFO L290 TraceCheckUtils]: 0: Hoare triple {8745#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8724#true} is VALID [2022-04-28 14:49:25,035 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-28 14:49:25,035 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8724#true} {8724#true} #783#return; {8724#true} is VALID [2022-04-28 14:49:25,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:49:25,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:25,057 INFO L290 TraceCheckUtils]: 0: Hoare triple {8746#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-28 14:49:25,057 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-28 14:49:25,057 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8724#true} {8724#true} #715#return; {8724#true} is VALID [2022-04-28 14:49:25,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:49:25,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:25,070 INFO L290 TraceCheckUtils]: 0: Hoare triple {8747#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-28 14:49:25,070 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-28 14:49:25,070 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8724#true} {8724#true} #717#return; {8724#true} is VALID [2022-04-28 14:49:25,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 14:49:25,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:25,092 INFO L290 TraceCheckUtils]: 0: Hoare triple {8748#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {8724#true} is VALID [2022-04-28 14:49:25,092 INFO L290 TraceCheckUtils]: 1: Hoare triple {8724#true} assume !(0 != ~compRegistered~0); {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:25,092 INFO L290 TraceCheckUtils]: 2: Hoare triple {8749#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:25,093 INFO L290 TraceCheckUtils]: 3: Hoare triple {8749#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:25,093 INFO L290 TraceCheckUtils]: 4: Hoare triple {8749#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:25,093 INFO L290 TraceCheckUtils]: 5: Hoare triple {8749#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:25,094 INFO L290 TraceCheckUtils]: 6: Hoare triple {8749#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:25,094 INFO L290 TraceCheckUtils]: 7: Hoare triple {8749#(<= ~compRegistered~0 0)} assume true; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:25,094 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {8749#(<= ~compRegistered~0 0)} {8735#(= ~compRegistered~0 1)} #755#return; {8725#false} is VALID [2022-04-28 14:49:25,134 INFO L272 TraceCheckUtils]: 0: Hoare triple {8724#true} call ULTIMATE.init(); {8745#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:49:25,134 INFO L290 TraceCheckUtils]: 1: Hoare triple {8745#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8724#true} is VALID [2022-04-28 14:49:25,135 INFO L290 TraceCheckUtils]: 2: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-28 14:49:25,135 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {8724#true} {8724#true} #783#return; {8724#true} is VALID [2022-04-28 14:49:25,135 INFO L272 TraceCheckUtils]: 4: Hoare triple {8724#true} call #t~ret81 := main(); {8724#true} is VALID [2022-04-28 14:49:25,135 INFO L290 TraceCheckUtils]: 5: Hoare triple {8724#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {8724#true} is VALID [2022-04-28 14:49:25,136 INFO L272 TraceCheckUtils]: 6: Hoare triple {8724#true} call _BLAST_init(); {8746#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:25,136 INFO L290 TraceCheckUtils]: 7: Hoare triple {8746#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-28 14:49:25,136 INFO L290 TraceCheckUtils]: 8: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-28 14:49:25,136 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {8724#true} {8724#true} #715#return; {8724#true} is VALID [2022-04-28 14:49:25,136 INFO L290 TraceCheckUtils]: 10: Hoare triple {8724#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {8724#true} is VALID [2022-04-28 14:49:25,136 INFO L290 TraceCheckUtils]: 11: Hoare triple {8724#true} assume !(0 == ~irp_choice~0); {8724#true} is VALID [2022-04-28 14:49:25,137 INFO L272 TraceCheckUtils]: 12: Hoare triple {8724#true} call stub_driver_init(); {8747#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:25,137 INFO L290 TraceCheckUtils]: 13: Hoare triple {8747#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8724#true} is VALID [2022-04-28 14:49:25,137 INFO L290 TraceCheckUtils]: 14: Hoare triple {8724#true} assume true; {8724#true} is VALID [2022-04-28 14:49:25,137 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {8724#true} {8724#true} #717#return; {8724#true} is VALID [2022-04-28 14:49:25,137 INFO L290 TraceCheckUtils]: 16: Hoare triple {8724#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {8724#true} is VALID [2022-04-28 14:49:25,137 INFO L290 TraceCheckUtils]: 17: Hoare triple {8724#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {8724#true} is VALID [2022-04-28 14:49:25,137 INFO L290 TraceCheckUtils]: 18: Hoare triple {8724#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {8724#true} is VALID [2022-04-28 14:49:25,138 INFO L290 TraceCheckUtils]: 19: Hoare triple {8724#true} assume 3 == ~tmp_ndt_3~0; {8724#true} is VALID [2022-04-28 14:49:25,138 INFO L272 TraceCheckUtils]: 20: Hoare triple {8724#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {8724#true} is VALID [2022-04-28 14:49:25,138 INFO L290 TraceCheckUtils]: 21: Hoare triple {8724#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {8724#true} is VALID [2022-04-28 14:49:25,138 INFO L290 TraceCheckUtils]: 22: Hoare triple {8724#true} assume 0 == ~irpStack__MinorFunction~0; {8724#true} is VALID [2022-04-28 14:49:25,138 INFO L290 TraceCheckUtils]: 23: Hoare triple {8724#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {8724#true} is VALID [2022-04-28 14:49:25,138 INFO L290 TraceCheckUtils]: 24: Hoare triple {8724#true} assume !(~s~0 != ~NP~0); {8724#true} is VALID [2022-04-28 14:49:25,140 INFO L290 TraceCheckUtils]: 25: Hoare triple {8724#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {8735#(= ~compRegistered~0 1)} is VALID [2022-04-28 14:49:25,141 INFO L290 TraceCheckUtils]: 26: Hoare triple {8735#(= ~compRegistered~0 1)} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {8735#(= ~compRegistered~0 1)} is VALID [2022-04-28 14:49:25,142 INFO L272 TraceCheckUtils]: 27: Hoare triple {8735#(= ~compRegistered~0 1)} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {8748#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:25,142 INFO L290 TraceCheckUtils]: 28: Hoare triple {8748#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {8724#true} is VALID [2022-04-28 14:49:25,142 INFO L290 TraceCheckUtils]: 29: Hoare triple {8724#true} assume !(0 != ~compRegistered~0); {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:25,143 INFO L290 TraceCheckUtils]: 30: Hoare triple {8749#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:25,143 INFO L290 TraceCheckUtils]: 31: Hoare triple {8749#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:25,143 INFO L290 TraceCheckUtils]: 32: Hoare triple {8749#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:25,143 INFO L290 TraceCheckUtils]: 33: Hoare triple {8749#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:25,147 INFO L290 TraceCheckUtils]: 34: Hoare triple {8749#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:25,147 INFO L290 TraceCheckUtils]: 35: Hoare triple {8749#(<= ~compRegistered~0 0)} assume true; {8749#(<= ~compRegistered~0 0)} is VALID [2022-04-28 14:49:25,148 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {8749#(<= ~compRegistered~0 0)} {8735#(= ~compRegistered~0 1)} #755#return; {8725#false} is VALID [2022-04-28 14:49:25,148 INFO L290 TraceCheckUtils]: 37: Hoare triple {8725#false} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {8725#false} is VALID [2022-04-28 14:49:25,148 INFO L290 TraceCheckUtils]: 38: Hoare triple {8725#false} assume 259 == ~__cil_tmp23~0; {8725#false} is VALID [2022-04-28 14:49:25,148 INFO L272 TraceCheckUtils]: 39: Hoare triple {8725#false} call #t~ret11 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {8725#false} is VALID [2022-04-28 14:49:25,148 INFO L290 TraceCheckUtils]: 40: Hoare triple {8725#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {8725#false} is VALID [2022-04-28 14:49:25,148 INFO L290 TraceCheckUtils]: 41: Hoare triple {8725#false} assume !(~s~0 == ~MPR3~0); {8725#false} is VALID [2022-04-28 14:49:25,148 INFO L290 TraceCheckUtils]: 42: Hoare triple {8725#false} assume !(1 == ~customIrp~0); {8725#false} is VALID [2022-04-28 14:49:25,148 INFO L290 TraceCheckUtils]: 43: Hoare triple {8725#false} assume ~s~0 == ~MPR3~0; {8725#false} is VALID [2022-04-28 14:49:25,148 INFO L272 TraceCheckUtils]: 44: Hoare triple {8725#false} call errorFn(); {8725#false} is VALID [2022-04-28 14:49:25,149 INFO L290 TraceCheckUtils]: 45: Hoare triple {8725#false} assume !false; {8725#false} is VALID [2022-04-28 14:49:25,149 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:49:25,149 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:49:25,149 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [70734706] [2022-04-28 14:49:25,149 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [70734706] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:25,149 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:25,149 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 14:49:25,149 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:49:25,149 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1620463917] [2022-04-28 14:49:25,150 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1620463917] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:25,150 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:25,150 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 14:49:25,150 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [200113947] [2022-04-28 14:49:25,150 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:49:25,150 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-28 14:49:25,150 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:49:25,150 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-28 14:49:25,178 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:25,178 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 14:49:25,178 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:25,178 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 14:49:25,178 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-04-28 14:49:25,178 INFO L87 Difference]: Start difference. First operand 343 states and 463 transitions. Second operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-28 14:49:26,539 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:26,541 INFO L93 Difference]: Finished difference Result 394 states and 520 transitions. [2022-04-28 14:49:26,541 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-28 14:49:26,541 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-28 14:49:26,541 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:49:26,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-28 14:49:26,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 425 transitions. [2022-04-28 14:49:26,545 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-28 14:49:26,548 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 425 transitions. [2022-04-28 14:49:26,548 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 425 transitions. [2022-04-28 14:49:26,918 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 425 edges. 425 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:26,924 INFO L225 Difference]: With dead ends: 394 [2022-04-28 14:49:26,924 INFO L226 Difference]: Without dead ends: 325 [2022-04-28 14:49:26,925 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-04-28 14:49:26,925 INFO L413 NwaCegarLoop]: 306 mSDtfsCounter, 607 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 351 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 607 SdHoareTripleChecker+Valid, 534 SdHoareTripleChecker+Invalid, 443 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 351 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-28 14:49:26,925 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [607 Valid, 534 Invalid, 443 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 351 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-28 14:49:26,926 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-28 14:49:27,053 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 304. [2022-04-28 14:49:27,053 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:49:27,054 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-28 14:49:27,054 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-28 14:49:27,054 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-28 14:49:27,061 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:27,061 INFO L93 Difference]: Finished difference Result 325 states and 431 transitions. [2022-04-28 14:49:27,061 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 431 transitions. [2022-04-28 14:49:27,062 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:27,062 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:27,063 INFO L74 IsIncluded]: Start isIncluded. First operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 325 states. [2022-04-28 14:49:27,063 INFO L87 Difference]: Start difference. First operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 325 states. [2022-04-28 14:49:27,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:27,072 INFO L93 Difference]: Finished difference Result 325 states and 431 transitions. [2022-04-28 14:49:27,073 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 431 transitions. [2022-04-28 14:49:27,073 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:27,073 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:27,073 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:49:27,074 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:49:27,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-28 14:49:27,081 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 406 transitions. [2022-04-28 14:49:27,081 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 406 transitions. Word has length 46 [2022-04-28 14:49:27,081 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:49:27,081 INFO L495 AbstractCegarLoop]: Abstraction has 304 states and 406 transitions. [2022-04-28 14:49:27,081 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-28 14:49:27,081 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 304 states and 406 transitions. [2022-04-28 14:49:27,484 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 406 edges. 406 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:27,484 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 406 transitions. [2022-04-28 14:49:27,485 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-04-28 14:49:27,485 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:49:27,485 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:49:27,486 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-04-28 14:49:27,486 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:49:27,486 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:49:27,486 INFO L85 PathProgramCache]: Analyzing trace with hash -447308474, now seen corresponding path program 1 times [2022-04-28 14:49:27,486 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:27,486 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1213402363] [2022-04-28 14:49:27,487 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:49:27,487 INFO L85 PathProgramCache]: Analyzing trace with hash -447308474, now seen corresponding path program 2 times [2022-04-28 14:49:27,487 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:49:27,487 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [614774243] [2022-04-28 14:49:27,487 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:49:27,487 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:49:27,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:27,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:49:27,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:27,604 INFO L290 TraceCheckUtils]: 0: Hoare triple {10833#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {10808#true} is VALID [2022-04-28 14:49:27,604 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-28 14:49:27,604 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10808#true} {10808#true} #783#return; {10808#true} is VALID [2022-04-28 14:49:27,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:49:27,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:27,636 INFO L290 TraceCheckUtils]: 0: Hoare triple {10834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 14:49:27,637 INFO L290 TraceCheckUtils]: 1: Hoare triple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 14:49:27,637 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {10808#true} #715#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 14:49:27,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:49:27,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:27,653 INFO L290 TraceCheckUtils]: 0: Hoare triple {10836#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10808#true} is VALID [2022-04-28 14:49:27,653 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-28 14:49:27,653 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10808#true} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #717#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 14:49:27,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-28 14:49:27,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:27,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-28 14:49:27,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:27,734 INFO L290 TraceCheckUtils]: 0: Hoare triple {10843#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10808#true} is VALID [2022-04-28 14:49:27,734 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 14:49:27,735 INFO L290 TraceCheckUtils]: 2: Hoare triple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 14:49:27,735 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10808#true} #743#return; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 14:49:27,736 INFO L290 TraceCheckUtils]: 0: Hoare triple {10837#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {10808#true} is VALID [2022-04-28 14:49:27,736 INFO L290 TraceCheckUtils]: 1: Hoare triple {10808#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {10808#true} is VALID [2022-04-28 14:49:27,736 INFO L290 TraceCheckUtils]: 2: Hoare triple {10808#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {10808#true} is VALID [2022-04-28 14:49:27,736 INFO L290 TraceCheckUtils]: 3: Hoare triple {10808#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {10808#true} is VALID [2022-04-28 14:49:27,736 INFO L272 TraceCheckUtils]: 4: Hoare triple {10808#true} call IofCompleteRequest(~Irp, 0); {10843#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:27,737 INFO L290 TraceCheckUtils]: 5: Hoare triple {10843#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10808#true} is VALID [2022-04-28 14:49:27,737 INFO L290 TraceCheckUtils]: 6: Hoare triple {10808#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 14:49:27,737 INFO L290 TraceCheckUtils]: 7: Hoare triple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 14:49:27,738 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10808#true} #743#return; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 14:49:27,739 INFO L290 TraceCheckUtils]: 9: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 14:49:27,739 INFO L290 TraceCheckUtils]: 10: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 14:49:27,740 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #727#return; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 14:49:27,742 INFO L272 TraceCheckUtils]: 0: Hoare triple {10808#true} call ULTIMATE.init(); {10833#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:49:27,742 INFO L290 TraceCheckUtils]: 1: Hoare triple {10833#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {10808#true} is VALID [2022-04-28 14:49:27,742 INFO L290 TraceCheckUtils]: 2: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-28 14:49:27,742 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10808#true} {10808#true} #783#return; {10808#true} is VALID [2022-04-28 14:49:27,742 INFO L272 TraceCheckUtils]: 4: Hoare triple {10808#true} call #t~ret81 := main(); {10808#true} is VALID [2022-04-28 14:49:27,742 INFO L290 TraceCheckUtils]: 5: Hoare triple {10808#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {10808#true} is VALID [2022-04-28 14:49:27,744 INFO L272 TraceCheckUtils]: 6: Hoare triple {10808#true} call _BLAST_init(); {10834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:27,748 INFO L290 TraceCheckUtils]: 7: Hoare triple {10834#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 14:49:27,749 INFO L290 TraceCheckUtils]: 8: Hoare triple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-28 14:49:27,751 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {10835#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {10808#true} #715#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 14:49:27,753 INFO L290 TraceCheckUtils]: 10: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 14:49:27,755 INFO L290 TraceCheckUtils]: 11: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~irp_choice~0); {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 14:49:27,756 INFO L272 TraceCheckUtils]: 12: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call stub_driver_init(); {10836#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:27,768 INFO L290 TraceCheckUtils]: 13: Hoare triple {10836#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10808#true} is VALID [2022-04-28 14:49:27,769 INFO L290 TraceCheckUtils]: 14: Hoare triple {10808#true} assume true; {10808#true} is VALID [2022-04-28 14:49:27,769 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {10808#true} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #717#return; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 14:49:27,771 INFO L290 TraceCheckUtils]: 16: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 14:49:27,771 INFO L290 TraceCheckUtils]: 17: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 14:49:27,772 INFO L290 TraceCheckUtils]: 18: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 14:49:27,774 INFO L290 TraceCheckUtils]: 19: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 14:49:27,775 INFO L290 TraceCheckUtils]: 20: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 14:49:27,775 INFO L290 TraceCheckUtils]: 21: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume 8 == ~tmp_ndt_5~0; {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-28 14:49:27,776 INFO L272 TraceCheckUtils]: 22: Hoare triple {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {10837#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:27,776 INFO L290 TraceCheckUtils]: 23: Hoare triple {10837#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {10808#true} is VALID [2022-04-28 14:49:27,776 INFO L290 TraceCheckUtils]: 24: Hoare triple {10808#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {10808#true} is VALID [2022-04-28 14:49:27,777 INFO L290 TraceCheckUtils]: 25: Hoare triple {10808#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {10808#true} is VALID [2022-04-28 14:49:27,778 INFO L290 TraceCheckUtils]: 26: Hoare triple {10808#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {10808#true} is VALID [2022-04-28 14:49:27,778 INFO L272 TraceCheckUtils]: 27: Hoare triple {10808#true} call IofCompleteRequest(~Irp, 0); {10843#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:27,778 INFO L290 TraceCheckUtils]: 28: Hoare triple {10843#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {10808#true} is VALID [2022-04-28 14:49:27,779 INFO L290 TraceCheckUtils]: 29: Hoare triple {10808#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 14:49:27,779 INFO L290 TraceCheckUtils]: 30: Hoare triple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 14:49:27,780 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {10844#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {10808#true} #743#return; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 14:49:27,780 INFO L290 TraceCheckUtils]: 32: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 14:49:27,781 INFO L290 TraceCheckUtils]: 33: Hoare triple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 14:49:27,782 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {10842#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {10816#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #727#return; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 14:49:27,782 INFO L290 TraceCheckUtils]: 35: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 14:49:27,782 INFO L290 TraceCheckUtils]: 36: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 14:49:27,783 INFO L290 TraceCheckUtils]: 37: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 14:49:27,783 INFO L290 TraceCheckUtils]: 38: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume ~s~0 != ~UNLOADED~0; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 14:49:27,783 INFO L290 TraceCheckUtils]: 39: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -1 != ~status~1; {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-28 14:49:27,784 INFO L290 TraceCheckUtils]: 40: Hoare triple {10832#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(~s~0 != ~SKIP2~0); {10809#false} is VALID [2022-04-28 14:49:27,784 INFO L290 TraceCheckUtils]: 41: Hoare triple {10809#false} assume 1 == ~pended~0; {10809#false} is VALID [2022-04-28 14:49:27,784 INFO L290 TraceCheckUtils]: 42: Hoare triple {10809#false} assume 259 != ~status~1; {10809#false} is VALID [2022-04-28 14:49:27,784 INFO L272 TraceCheckUtils]: 43: Hoare triple {10809#false} call errorFn(); {10809#false} is VALID [2022-04-28 14:49:27,784 INFO L290 TraceCheckUtils]: 44: Hoare triple {10809#false} assume !false; {10809#false} is VALID [2022-04-28 14:49:27,785 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:49:27,785 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:49:27,785 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [614774243] [2022-04-28 14:49:27,785 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [614774243] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:27,785 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:27,786 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 14:49:27,786 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:49:27,786 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1213402363] [2022-04-28 14:49:27,786 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1213402363] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:27,786 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:27,786 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 14:49:27,786 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [558516107] [2022-04-28 14:49:27,786 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:49:27,786 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-28 14:49:27,787 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:49:27,788 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 14:49:27,830 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:27,831 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 14:49:27,831 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:27,832 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 14:49:27,832 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-28 14:49:27,832 INFO L87 Difference]: Start difference. First operand 304 states and 406 transitions. Second operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 14:49:30,693 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:30,693 INFO L93 Difference]: Finished difference Result 334 states and 440 transitions. [2022-04-28 14:49:30,693 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 14:49:30,693 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-28 14:49:30,693 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:49:30,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 14:49:30,696 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 365 transitions. [2022-04-28 14:49:30,696 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 14:49:30,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 365 transitions. [2022-04-28 14:49:30,698 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 365 transitions. [2022-04-28 14:49:31,045 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:31,052 INFO L225 Difference]: With dead ends: 334 [2022-04-28 14:49:31,053 INFO L226 Difference]: Without dead ends: 325 [2022-04-28 14:49:31,053 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-28 14:49:31,053 INFO L413 NwaCegarLoop]: 255 mSDtfsCounter, 770 mSDsluCounter, 324 mSDsCounter, 0 mSdLazyCounter, 918 mSolverCounterSat, 150 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 772 SdHoareTripleChecker+Valid, 579 SdHoareTripleChecker+Invalid, 1068 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 150 IncrementalHoareTripleChecker+Valid, 918 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-04-28 14:49:31,053 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [772 Valid, 579 Invalid, 1068 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [150 Valid, 918 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-04-28 14:49:31,054 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-28 14:49:31,307 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 320. [2022-04-28 14:49:31,307 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:49:31,308 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 14:49:31,316 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 14:49:31,317 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 14:49:31,323 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:31,323 INFO L93 Difference]: Finished difference Result 325 states and 429 transitions. [2022-04-28 14:49:31,323 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 429 transitions. [2022-04-28 14:49:31,323 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:31,323 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:31,324 INFO L74 IsIncluded]: Start isIncluded. First operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-28 14:49:31,324 INFO L87 Difference]: Start difference. First operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-28 14:49:31,330 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:31,330 INFO L93 Difference]: Finished difference Result 325 states and 429 transitions. [2022-04-28 14:49:31,330 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 429 transitions. [2022-04-28 14:49:31,330 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:31,330 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:31,330 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:49:31,330 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:49:31,331 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 14:49:31,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 425 transitions. [2022-04-28 14:49:31,337 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 425 transitions. Word has length 45 [2022-04-28 14:49:31,337 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:49:31,337 INFO L495 AbstractCegarLoop]: Abstraction has 320 states and 425 transitions. [2022-04-28 14:49:31,337 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 14:49:31,337 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 320 states and 425 transitions. [2022-04-28 14:49:31,777 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 425 edges. 425 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:31,777 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 425 transitions. [2022-04-28 14:49:31,778 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-28 14:49:31,778 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:49:31,778 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:49:31,778 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-04-28 14:49:31,778 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:49:31,778 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:49:31,778 INFO L85 PathProgramCache]: Analyzing trace with hash -1360970565, now seen corresponding path program 1 times [2022-04-28 14:49:31,779 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:31,779 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [583293818] [2022-04-28 14:49:31,779 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:49:31,779 INFO L85 PathProgramCache]: Analyzing trace with hash -1360970565, now seen corresponding path program 2 times [2022-04-28 14:49:31,779 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:49:31,779 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [809693011] [2022-04-28 14:49:31,779 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:49:31,779 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:49:31,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:31,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:49:31,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:31,905 INFO L290 TraceCheckUtils]: 0: Hoare triple {12847#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12822#true} is VALID [2022-04-28 14:49:31,905 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-28 14:49:31,905 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12822#true} {12822#true} #783#return; {12822#true} is VALID [2022-04-28 14:49:31,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:49:31,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:31,941 INFO L290 TraceCheckUtils]: 0: Hoare triple {12848#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 14:49:31,942 INFO L290 TraceCheckUtils]: 1: Hoare triple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 14:49:31,942 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {12822#true} #715#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:31,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:49:31,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:31,959 INFO L290 TraceCheckUtils]: 0: Hoare triple {12850#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12822#true} is VALID [2022-04-28 14:49:31,959 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-28 14:49:31,960 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12822#true} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #717#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:31,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-28 14:49:31,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:32,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-28 14:49:32,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:32,033 INFO L290 TraceCheckUtils]: 0: Hoare triple {12857#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12822#true} is VALID [2022-04-28 14:49:32,034 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 14:49:32,034 INFO L290 TraceCheckUtils]: 2: Hoare triple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 14:49:32,034 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12822#true} #743#return; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 14:49:32,035 INFO L290 TraceCheckUtils]: 0: Hoare triple {12851#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {12822#true} is VALID [2022-04-28 14:49:32,035 INFO L290 TraceCheckUtils]: 1: Hoare triple {12822#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {12822#true} is VALID [2022-04-28 14:49:32,035 INFO L290 TraceCheckUtils]: 2: Hoare triple {12822#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {12822#true} is VALID [2022-04-28 14:49:32,035 INFO L290 TraceCheckUtils]: 3: Hoare triple {12822#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {12822#true} is VALID [2022-04-28 14:49:32,035 INFO L272 TraceCheckUtils]: 4: Hoare triple {12822#true} call IofCompleteRequest(~Irp, 0); {12857#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:32,035 INFO L290 TraceCheckUtils]: 5: Hoare triple {12857#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12822#true} is VALID [2022-04-28 14:49:32,036 INFO L290 TraceCheckUtils]: 6: Hoare triple {12822#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 14:49:32,036 INFO L290 TraceCheckUtils]: 7: Hoare triple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 14:49:32,036 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12822#true} #743#return; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 14:49:32,037 INFO L290 TraceCheckUtils]: 9: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 14:49:32,037 INFO L290 TraceCheckUtils]: 10: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 14:49:32,038 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #727#return; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,039 INFO L272 TraceCheckUtils]: 0: Hoare triple {12822#true} call ULTIMATE.init(); {12847#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:49:32,039 INFO L290 TraceCheckUtils]: 1: Hoare triple {12847#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12822#true} is VALID [2022-04-28 14:49:32,039 INFO L290 TraceCheckUtils]: 2: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-28 14:49:32,039 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12822#true} {12822#true} #783#return; {12822#true} is VALID [2022-04-28 14:49:32,039 INFO L272 TraceCheckUtils]: 4: Hoare triple {12822#true} call #t~ret81 := main(); {12822#true} is VALID [2022-04-28 14:49:32,039 INFO L290 TraceCheckUtils]: 5: Hoare triple {12822#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {12822#true} is VALID [2022-04-28 14:49:32,040 INFO L272 TraceCheckUtils]: 6: Hoare triple {12822#true} call _BLAST_init(); {12848#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:32,041 INFO L290 TraceCheckUtils]: 7: Hoare triple {12848#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 14:49:32,041 INFO L290 TraceCheckUtils]: 8: Hoare triple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-28 14:49:32,041 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {12849#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {12822#true} #715#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,042 INFO L290 TraceCheckUtils]: 10: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,042 INFO L290 TraceCheckUtils]: 11: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~irp_choice~0); {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,042 INFO L272 TraceCheckUtils]: 12: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call stub_driver_init(); {12850#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:32,043 INFO L290 TraceCheckUtils]: 13: Hoare triple {12850#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12822#true} is VALID [2022-04-28 14:49:32,043 INFO L290 TraceCheckUtils]: 14: Hoare triple {12822#true} assume true; {12822#true} is VALID [2022-04-28 14:49:32,043 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {12822#true} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #717#return; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,043 INFO L290 TraceCheckUtils]: 16: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,044 INFO L290 TraceCheckUtils]: 17: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,044 INFO L290 TraceCheckUtils]: 18: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,044 INFO L290 TraceCheckUtils]: 19: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,045 INFO L290 TraceCheckUtils]: 20: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,045 INFO L290 TraceCheckUtils]: 21: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume 8 == ~tmp_ndt_5~0; {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,046 INFO L272 TraceCheckUtils]: 22: Hoare triple {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {12851#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:32,046 INFO L290 TraceCheckUtils]: 23: Hoare triple {12851#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {12822#true} is VALID [2022-04-28 14:49:32,046 INFO L290 TraceCheckUtils]: 24: Hoare triple {12822#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {12822#true} is VALID [2022-04-28 14:49:32,046 INFO L290 TraceCheckUtils]: 25: Hoare triple {12822#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {12822#true} is VALID [2022-04-28 14:49:32,047 INFO L290 TraceCheckUtils]: 26: Hoare triple {12822#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {12822#true} is VALID [2022-04-28 14:49:32,047 INFO L272 TraceCheckUtils]: 27: Hoare triple {12822#true} call IofCompleteRequest(~Irp, 0); {12857#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:32,047 INFO L290 TraceCheckUtils]: 28: Hoare triple {12857#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {12822#true} is VALID [2022-04-28 14:49:32,048 INFO L290 TraceCheckUtils]: 29: Hoare triple {12822#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 14:49:32,048 INFO L290 TraceCheckUtils]: 30: Hoare triple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-28 14:49:32,048 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {12858#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {12822#true} #743#return; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 14:49:32,049 INFO L290 TraceCheckUtils]: 32: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 14:49:32,049 INFO L290 TraceCheckUtils]: 33: Hoare triple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-28 14:49:32,050 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {12856#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {12830#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #727#return; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,050 INFO L290 TraceCheckUtils]: 35: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,051 INFO L290 TraceCheckUtils]: 36: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,051 INFO L290 TraceCheckUtils]: 37: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,051 INFO L290 TraceCheckUtils]: 38: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~UNLOADED~0; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,052 INFO L290 TraceCheckUtils]: 39: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -1 != ~status~1; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,052 INFO L290 TraceCheckUtils]: 40: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~SKIP2~0; {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-28 14:49:32,056 INFO L290 TraceCheckUtils]: 41: Hoare triple {12846#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(~s~0 != ~IPC~0); {12823#false} is VALID [2022-04-28 14:49:32,056 INFO L290 TraceCheckUtils]: 42: Hoare triple {12823#false} assume 1 == ~pended~0; {12823#false} is VALID [2022-04-28 14:49:32,056 INFO L290 TraceCheckUtils]: 43: Hoare triple {12823#false} assume 259 != ~status~1; {12823#false} is VALID [2022-04-28 14:49:32,056 INFO L272 TraceCheckUtils]: 44: Hoare triple {12823#false} call errorFn(); {12823#false} is VALID [2022-04-28 14:49:32,057 INFO L290 TraceCheckUtils]: 45: Hoare triple {12823#false} assume !false; {12823#false} is VALID [2022-04-28 14:49:32,057 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:49:32,057 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:49:32,057 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [809693011] [2022-04-28 14:49:32,057 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [809693011] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:32,057 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:32,057 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 14:49:32,057 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:49:32,058 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [583293818] [2022-04-28 14:49:32,058 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [583293818] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:32,058 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:32,058 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 14:49:32,058 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [941514655] [2022-04-28 14:49:32,058 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:49:32,058 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-28 14:49:32,058 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:49:32,058 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 14:49:32,086 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:32,086 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 14:49:32,086 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:32,087 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 14:49:32,087 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-28 14:49:32,087 INFO L87 Difference]: Start difference. First operand 320 states and 425 transitions. Second operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 14:49:34,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:34,832 INFO L93 Difference]: Finished difference Result 330 states and 433 transitions. [2022-04-28 14:49:34,832 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 14:49:34,833 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-28 14:49:34,833 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:49:34,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 14:49:34,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 358 transitions. [2022-04-28 14:49:34,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 14:49:34,838 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 358 transitions. [2022-04-28 14:49:34,838 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 358 transitions. [2022-04-28 14:49:35,165 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 358 edges. 358 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:35,170 INFO L225 Difference]: With dead ends: 330 [2022-04-28 14:49:35,170 INFO L226 Difference]: Without dead ends: 325 [2022-04-28 14:49:35,171 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-28 14:49:35,172 INFO L413 NwaCegarLoop]: 256 mSDtfsCounter, 521 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 824 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 523 SdHoareTripleChecker+Valid, 533 SdHoareTripleChecker+Invalid, 916 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 824 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-04-28 14:49:35,172 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [523 Valid, 533 Invalid, 916 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 824 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-04-28 14:49:35,173 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-28 14:49:35,567 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 320. [2022-04-28 14:49:35,567 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:49:35,568 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 14:49:35,568 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 14:49:35,569 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 14:49:35,574 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:35,574 INFO L93 Difference]: Finished difference Result 325 states and 428 transitions. [2022-04-28 14:49:35,574 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 428 transitions. [2022-04-28 14:49:35,575 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:35,575 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:35,575 INFO L74 IsIncluded]: Start isIncluded. First operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-28 14:49:35,576 INFO L87 Difference]: Start difference. First operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-28 14:49:35,581 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:35,581 INFO L93 Difference]: Finished difference Result 325 states and 428 transitions. [2022-04-28 14:49:35,581 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 428 transitions. [2022-04-28 14:49:35,581 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:35,581 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:35,581 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:49:35,581 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:49:35,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-28 14:49:35,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 424 transitions. [2022-04-28 14:49:35,588 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 424 transitions. Word has length 46 [2022-04-28 14:49:35,588 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:49:35,588 INFO L495 AbstractCegarLoop]: Abstraction has 320 states and 424 transitions. [2022-04-28 14:49:35,588 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 14:49:35,588 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 320 states and 424 transitions. [2022-04-28 14:49:36,026 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 424 edges. 424 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:36,026 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 424 transitions. [2022-04-28 14:49:36,027 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-04-28 14:49:36,027 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:49:36,027 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:49:36,027 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-04-28 14:49:36,027 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:49:36,027 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:49:36,027 INFO L85 PathProgramCache]: Analyzing trace with hash 548356508, now seen corresponding path program 1 times [2022-04-28 14:49:36,027 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:36,027 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [832002680] [2022-04-28 14:49:36,028 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:49:36,028 INFO L85 PathProgramCache]: Analyzing trace with hash 548356508, now seen corresponding path program 2 times [2022-04-28 14:49:36,028 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:49:36,028 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1824234650] [2022-04-28 14:49:36,028 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:49:36,028 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:49:36,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:36,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:49:36,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:36,104 INFO L290 TraceCheckUtils]: 0: Hoare triple {14852#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14828#true} is VALID [2022-04-28 14:49:36,104 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 14:49:36,105 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14828#true} {14828#true} #783#return; {14828#true} is VALID [2022-04-28 14:49:36,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:49:36,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:36,125 INFO L290 TraceCheckUtils]: 0: Hoare triple {14853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-28 14:49:36,125 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 14:49:36,125 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14828#true} {14828#true} #715#return; {14828#true} is VALID [2022-04-28 14:49:36,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:49:36,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:36,138 INFO L290 TraceCheckUtils]: 0: Hoare triple {14854#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-28 14:49:36,138 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 14:49:36,138 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14828#true} {14828#true} #717#return; {14828#true} is VALID [2022-04-28 14:49:36,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-28 14:49:36,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:36,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-28 14:49:36,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:36,173 INFO L290 TraceCheckUtils]: 0: Hoare triple {14860#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14828#true} is VALID [2022-04-28 14:49:36,173 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14828#true} is VALID [2022-04-28 14:49:36,173 INFO L290 TraceCheckUtils]: 2: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 14:49:36,173 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14828#true} {14828#true} #743#return; {14828#true} is VALID [2022-04-28 14:49:36,173 INFO L290 TraceCheckUtils]: 0: Hoare triple {14855#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {14828#true} is VALID [2022-04-28 14:49:36,173 INFO L290 TraceCheckUtils]: 1: Hoare triple {14828#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {14828#true} is VALID [2022-04-28 14:49:36,173 INFO L290 TraceCheckUtils]: 2: Hoare triple {14828#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {14828#true} is VALID [2022-04-28 14:49:36,173 INFO L290 TraceCheckUtils]: 3: Hoare triple {14828#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {14828#true} is VALID [2022-04-28 14:49:36,174 INFO L272 TraceCheckUtils]: 4: Hoare triple {14828#true} call IofCompleteRequest(~Irp, 0); {14860#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:36,174 INFO L290 TraceCheckUtils]: 5: Hoare triple {14860#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14828#true} is VALID [2022-04-28 14:49:36,175 INFO L290 TraceCheckUtils]: 6: Hoare triple {14828#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14828#true} is VALID [2022-04-28 14:49:36,175 INFO L290 TraceCheckUtils]: 7: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 14:49:36,176 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {14828#true} {14828#true} #743#return; {14828#true} is VALID [2022-04-28 14:49:36,176 INFO L290 TraceCheckUtils]: 9: Hoare triple {14828#true} #res := ~status~3; {14828#true} is VALID [2022-04-28 14:49:36,176 INFO L290 TraceCheckUtils]: 10: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 14:49:36,176 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {14828#true} {14828#true} #727#return; {14828#true} is VALID [2022-04-28 14:49:36,177 INFO L272 TraceCheckUtils]: 0: Hoare triple {14828#true} call ULTIMATE.init(); {14852#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:49:36,177 INFO L290 TraceCheckUtils]: 1: Hoare triple {14852#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14828#true} is VALID [2022-04-28 14:49:36,177 INFO L290 TraceCheckUtils]: 2: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 14:49:36,177 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14828#true} {14828#true} #783#return; {14828#true} is VALID [2022-04-28 14:49:36,177 INFO L272 TraceCheckUtils]: 4: Hoare triple {14828#true} call #t~ret81 := main(); {14828#true} is VALID [2022-04-28 14:49:36,177 INFO L290 TraceCheckUtils]: 5: Hoare triple {14828#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {14828#true} is VALID [2022-04-28 14:49:36,178 INFO L272 TraceCheckUtils]: 6: Hoare triple {14828#true} call _BLAST_init(); {14853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:36,178 INFO L290 TraceCheckUtils]: 7: Hoare triple {14853#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-28 14:49:36,179 INFO L290 TraceCheckUtils]: 8: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 14:49:36,179 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {14828#true} {14828#true} #715#return; {14828#true} is VALID [2022-04-28 14:49:36,179 INFO L290 TraceCheckUtils]: 10: Hoare triple {14828#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {14828#true} is VALID [2022-04-28 14:49:36,179 INFO L290 TraceCheckUtils]: 11: Hoare triple {14828#true} assume !(0 == ~irp_choice~0); {14828#true} is VALID [2022-04-28 14:49:36,179 INFO L272 TraceCheckUtils]: 12: Hoare triple {14828#true} call stub_driver_init(); {14854#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:36,179 INFO L290 TraceCheckUtils]: 13: Hoare triple {14854#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14828#true} is VALID [2022-04-28 14:49:36,179 INFO L290 TraceCheckUtils]: 14: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 14:49:36,180 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {14828#true} {14828#true} #717#return; {14828#true} is VALID [2022-04-28 14:49:36,180 INFO L290 TraceCheckUtils]: 16: Hoare triple {14828#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {14828#true} is VALID [2022-04-28 14:49:36,180 INFO L290 TraceCheckUtils]: 17: Hoare triple {14828#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {14828#true} is VALID [2022-04-28 14:49:36,180 INFO L290 TraceCheckUtils]: 18: Hoare triple {14828#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {14828#true} is VALID [2022-04-28 14:49:36,180 INFO L290 TraceCheckUtils]: 19: Hoare triple {14828#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {14828#true} is VALID [2022-04-28 14:49:36,180 INFO L290 TraceCheckUtils]: 20: Hoare triple {14828#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {14828#true} is VALID [2022-04-28 14:49:36,180 INFO L290 TraceCheckUtils]: 21: Hoare triple {14828#true} assume 8 == ~tmp_ndt_5~0; {14828#true} is VALID [2022-04-28 14:49:36,181 INFO L272 TraceCheckUtils]: 22: Hoare triple {14828#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {14855#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:36,181 INFO L290 TraceCheckUtils]: 23: Hoare triple {14855#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {14828#true} is VALID [2022-04-28 14:49:36,181 INFO L290 TraceCheckUtils]: 24: Hoare triple {14828#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {14828#true} is VALID [2022-04-28 14:49:36,181 INFO L290 TraceCheckUtils]: 25: Hoare triple {14828#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {14828#true} is VALID [2022-04-28 14:49:36,181 INFO L290 TraceCheckUtils]: 26: Hoare triple {14828#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {14828#true} is VALID [2022-04-28 14:49:36,183 INFO L272 TraceCheckUtils]: 27: Hoare triple {14828#true} call IofCompleteRequest(~Irp, 0); {14860#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:36,183 INFO L290 TraceCheckUtils]: 28: Hoare triple {14860#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14828#true} is VALID [2022-04-28 14:49:36,183 INFO L290 TraceCheckUtils]: 29: Hoare triple {14828#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {14828#true} is VALID [2022-04-28 14:49:36,183 INFO L290 TraceCheckUtils]: 30: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 14:49:36,183 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {14828#true} {14828#true} #743#return; {14828#true} is VALID [2022-04-28 14:49:36,184 INFO L290 TraceCheckUtils]: 32: Hoare triple {14828#true} #res := ~status~3; {14828#true} is VALID [2022-04-28 14:49:36,184 INFO L290 TraceCheckUtils]: 33: Hoare triple {14828#true} assume true; {14828#true} is VALID [2022-04-28 14:49:36,184 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {14828#true} {14828#true} #727#return; {14828#true} is VALID [2022-04-28 14:49:36,184 INFO L290 TraceCheckUtils]: 35: Hoare triple {14828#true} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {14828#true} is VALID [2022-04-28 14:49:36,191 INFO L290 TraceCheckUtils]: 36: Hoare triple {14828#true} assume !(1 == ~pended~0); {14851#(not (= ~pended~0 1))} is VALID [2022-04-28 14:49:36,192 INFO L290 TraceCheckUtils]: 37: Hoare triple {14851#(not (= ~pended~0 1))} assume !(1 == ~pended~0); {14851#(not (= ~pended~0 1))} is VALID [2022-04-28 14:49:36,192 INFO L290 TraceCheckUtils]: 38: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 != ~UNLOADED~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-28 14:49:36,192 INFO L290 TraceCheckUtils]: 39: Hoare triple {14851#(not (= ~pended~0 1))} assume -1 != ~status~1; {14851#(not (= ~pended~0 1))} is VALID [2022-04-28 14:49:36,192 INFO L290 TraceCheckUtils]: 40: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 != ~SKIP2~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-28 14:49:36,193 INFO L290 TraceCheckUtils]: 41: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 != ~IPC~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-28 14:49:36,193 INFO L290 TraceCheckUtils]: 42: Hoare triple {14851#(not (= ~pended~0 1))} assume ~s~0 == ~DC~0; {14851#(not (= ~pended~0 1))} is VALID [2022-04-28 14:49:36,193 INFO L290 TraceCheckUtils]: 43: Hoare triple {14851#(not (= ~pended~0 1))} assume 1 == ~pended~0; {14829#false} is VALID [2022-04-28 14:49:36,193 INFO L290 TraceCheckUtils]: 44: Hoare triple {14829#false} assume 259 != ~status~1; {14829#false} is VALID [2022-04-28 14:49:36,194 INFO L272 TraceCheckUtils]: 45: Hoare triple {14829#false} call errorFn(); {14829#false} is VALID [2022-04-28 14:49:36,194 INFO L290 TraceCheckUtils]: 46: Hoare triple {14829#false} assume !false; {14829#false} is VALID [2022-04-28 14:49:36,194 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:49:36,194 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:49:36,194 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1824234650] [2022-04-28 14:49:36,194 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1824234650] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:36,194 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:36,194 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 14:49:36,194 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:49:36,195 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [832002680] [2022-04-28 14:49:36,195 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [832002680] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:36,195 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:36,195 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 14:49:36,195 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1787042583] [2022-04-28 14:49:36,195 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:49:36,195 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-28 14:49:36,195 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:49:36,195 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:49:36,220 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 47 edges. 47 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:36,221 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 14:49:36,221 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:36,221 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 14:49:36,221 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-04-28 14:49:36,221 INFO L87 Difference]: Start difference. First operand 320 states and 424 transitions. Second operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:49:37,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:37,922 INFO L93 Difference]: Finished difference Result 338 states and 446 transitions. [2022-04-28 14:49:37,922 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-28 14:49:37,922 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-28 14:49:37,922 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:49:37,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:49:37,924 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 346 transitions. [2022-04-28 14:49:37,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:49:37,926 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 346 transitions. [2022-04-28 14:49:37,926 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 346 transitions. [2022-04-28 14:49:38,238 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 346 edges. 346 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:38,242 INFO L225 Difference]: With dead ends: 338 [2022-04-28 14:49:38,242 INFO L226 Difference]: Without dead ends: 272 [2022-04-28 14:49:38,243 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=49, Invalid=83, Unknown=0, NotChecked=0, Total=132 [2022-04-28 14:49:38,243 INFO L413 NwaCegarLoop]: 250 mSDtfsCounter, 724 mSDsluCounter, 177 mSDsCounter, 0 mSdLazyCounter, 415 mSolverCounterSat, 119 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 724 SdHoareTripleChecker+Valid, 427 SdHoareTripleChecker+Invalid, 534 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 119 IncrementalHoareTripleChecker+Valid, 415 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-28 14:49:38,243 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [724 Valid, 427 Invalid, 534 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [119 Valid, 415 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-28 14:49:38,244 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2022-04-28 14:49:38,556 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 242. [2022-04-28 14:49:38,557 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:49:38,557 INFO L82 GeneralOperation]: Start isEquivalent. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:38,558 INFO L74 IsIncluded]: Start isIncluded. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:38,559 INFO L87 Difference]: Start difference. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:38,565 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:38,565 INFO L93 Difference]: Finished difference Result 272 states and 356 transitions. [2022-04-28 14:49:38,565 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 356 transitions. [2022-04-28 14:49:38,566 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:38,566 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:38,567 INFO L74 IsIncluded]: Start isIncluded. First operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 272 states. [2022-04-28 14:49:38,567 INFO L87 Difference]: Start difference. First operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 272 states. [2022-04-28 14:49:38,571 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:38,571 INFO L93 Difference]: Finished difference Result 272 states and 356 transitions. [2022-04-28 14:49:38,571 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 356 transitions. [2022-04-28 14:49:38,572 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:38,572 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:38,572 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:49:38,572 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:49:38,572 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:38,576 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 321 transitions. [2022-04-28 14:49:38,577 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 321 transitions. Word has length 47 [2022-04-28 14:49:38,577 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:49:38,577 INFO L495 AbstractCegarLoop]: Abstraction has 242 states and 321 transitions. [2022-04-28 14:49:38,577 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:49:38,577 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 242 states and 321 transitions. [2022-04-28 14:49:38,961 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 321 edges. 321 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:38,961 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 321 transitions. [2022-04-28 14:49:38,962 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-28 14:49:38,962 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:49:38,962 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:49:38,962 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-04-28 14:49:38,963 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:49:38,963 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:49:38,963 INFO L85 PathProgramCache]: Analyzing trace with hash 916659597, now seen corresponding path program 1 times [2022-04-28 14:49:38,963 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:38,963 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [967220170] [2022-04-28 14:49:38,963 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:49:38,963 INFO L85 PathProgramCache]: Analyzing trace with hash 916659597, now seen corresponding path program 2 times [2022-04-28 14:49:38,963 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:49:38,964 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1444263264] [2022-04-28 14:49:38,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:49:38,964 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:49:38,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:39,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:49:39,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:39,040 INFO L290 TraceCheckUtils]: 0: Hoare triple {16600#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16577#true} is VALID [2022-04-28 14:49:39,040 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 14:49:39,041 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #783#return; {16577#true} is VALID [2022-04-28 14:49:39,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:49:39,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:39,065 INFO L290 TraceCheckUtils]: 0: Hoare triple {16601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-28 14:49:39,065 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 14:49:39,065 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #715#return; {16577#true} is VALID [2022-04-28 14:49:39,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:49:39,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:39,079 INFO L290 TraceCheckUtils]: 0: Hoare triple {16602#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-28 14:49:39,079 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 14:49:39,079 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #717#return; {16577#true} is VALID [2022-04-28 14:49:39,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-04-28 14:49:39,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:39,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 14:49:39,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:39,092 INFO L290 TraceCheckUtils]: 0: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {16577#true} is VALID [2022-04-28 14:49:39,092 INFO L290 TraceCheckUtils]: 1: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 14:49:39,092 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16577#true} {16577#true} #713#return; {16577#true} is VALID [2022-04-28 14:49:39,092 INFO L290 TraceCheckUtils]: 0: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16577#true} is VALID [2022-04-28 14:49:39,093 INFO L272 TraceCheckUtils]: 1: Hoare triple {16577#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:49:39,093 INFO L290 TraceCheckUtils]: 2: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {16577#true} is VALID [2022-04-28 14:49:39,093 INFO L290 TraceCheckUtils]: 3: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 14:49:39,093 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {16577#true} {16577#true} #713#return; {16577#true} is VALID [2022-04-28 14:49:39,093 INFO L290 TraceCheckUtils]: 5: Hoare triple {16577#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {16577#true} is VALID [2022-04-28 14:49:39,094 INFO L290 TraceCheckUtils]: 6: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 14:49:39,094 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {16577#true} {16577#true} #777#return; {16577#true} is VALID [2022-04-28 14:49:39,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-04-28 14:49:39,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:39,103 INFO L290 TraceCheckUtils]: 0: Hoare triple {16607#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 14:49:39,104 INFO L290 TraceCheckUtils]: 1: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 14:49:39,104 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {16577#true} #779#return; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 14:49:39,105 INFO L272 TraceCheckUtils]: 0: Hoare triple {16577#true} call ULTIMATE.init(); {16600#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:49:39,105 INFO L290 TraceCheckUtils]: 1: Hoare triple {16600#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16577#true} is VALID [2022-04-28 14:49:39,106 INFO L290 TraceCheckUtils]: 2: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 14:49:39,106 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {16577#true} {16577#true} #783#return; {16577#true} is VALID [2022-04-28 14:49:39,106 INFO L272 TraceCheckUtils]: 4: Hoare triple {16577#true} call #t~ret81 := main(); {16577#true} is VALID [2022-04-28 14:49:39,106 INFO L290 TraceCheckUtils]: 5: Hoare triple {16577#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {16577#true} is VALID [2022-04-28 14:49:39,107 INFO L272 TraceCheckUtils]: 6: Hoare triple {16577#true} call _BLAST_init(); {16601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:39,107 INFO L290 TraceCheckUtils]: 7: Hoare triple {16601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-28 14:49:39,107 INFO L290 TraceCheckUtils]: 8: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 14:49:39,107 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {16577#true} {16577#true} #715#return; {16577#true} is VALID [2022-04-28 14:49:39,107 INFO L290 TraceCheckUtils]: 10: Hoare triple {16577#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {16577#true} is VALID [2022-04-28 14:49:39,107 INFO L290 TraceCheckUtils]: 11: Hoare triple {16577#true} assume !(0 == ~irp_choice~0); {16577#true} is VALID [2022-04-28 14:49:39,108 INFO L272 TraceCheckUtils]: 12: Hoare triple {16577#true} call stub_driver_init(); {16602#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:39,108 INFO L290 TraceCheckUtils]: 13: Hoare triple {16602#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16577#true} is VALID [2022-04-28 14:49:39,108 INFO L290 TraceCheckUtils]: 14: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 14:49:39,108 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {16577#true} {16577#true} #717#return; {16577#true} is VALID [2022-04-28 14:49:39,108 INFO L290 TraceCheckUtils]: 16: Hoare triple {16577#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {16577#true} is VALID [2022-04-28 14:49:39,108 INFO L290 TraceCheckUtils]: 17: Hoare triple {16577#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {16577#true} is VALID [2022-04-28 14:49:39,108 INFO L290 TraceCheckUtils]: 18: Hoare triple {16577#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {16577#true} is VALID [2022-04-28 14:49:39,109 INFO L290 TraceCheckUtils]: 19: Hoare triple {16577#true} assume 3 == ~tmp_ndt_3~0; {16577#true} is VALID [2022-04-28 14:49:39,109 INFO L272 TraceCheckUtils]: 20: Hoare triple {16577#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {16577#true} is VALID [2022-04-28 14:49:39,109 INFO L290 TraceCheckUtils]: 21: Hoare triple {16577#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {16577#true} is VALID [2022-04-28 14:49:39,109 INFO L290 TraceCheckUtils]: 22: Hoare triple {16577#true} assume 0 == ~irpStack__MinorFunction~0; {16577#true} is VALID [2022-04-28 14:49:39,109 INFO L290 TraceCheckUtils]: 23: Hoare triple {16577#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {16577#true} is VALID [2022-04-28 14:49:39,109 INFO L290 TraceCheckUtils]: 24: Hoare triple {16577#true} assume !(~s~0 != ~NP~0); {16577#true} is VALID [2022-04-28 14:49:39,109 INFO L290 TraceCheckUtils]: 25: Hoare triple {16577#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {16577#true} is VALID [2022-04-28 14:49:39,109 INFO L290 TraceCheckUtils]: 26: Hoare triple {16577#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {16577#true} is VALID [2022-04-28 14:49:39,109 INFO L272 TraceCheckUtils]: 27: Hoare triple {16577#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {16577#true} is VALID [2022-04-28 14:49:39,109 INFO L290 TraceCheckUtils]: 28: Hoare triple {16577#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {16577#true} is VALID [2022-04-28 14:49:39,110 INFO L290 TraceCheckUtils]: 29: Hoare triple {16577#true} assume 0 != ~compRegistered~0; {16577#true} is VALID [2022-04-28 14:49:39,110 INFO L272 TraceCheckUtils]: 30: Hoare triple {16577#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:49:39,110 INFO L290 TraceCheckUtils]: 31: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16577#true} is VALID [2022-04-28 14:49:39,111 INFO L272 TraceCheckUtils]: 32: Hoare triple {16577#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:49:39,111 INFO L290 TraceCheckUtils]: 33: Hoare triple {16603#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {16577#true} is VALID [2022-04-28 14:49:39,111 INFO L290 TraceCheckUtils]: 34: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 14:49:39,111 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {16577#true} {16577#true} #713#return; {16577#true} is VALID [2022-04-28 14:49:39,111 INFO L290 TraceCheckUtils]: 36: Hoare triple {16577#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {16577#true} is VALID [2022-04-28 14:49:39,111 INFO L290 TraceCheckUtils]: 37: Hoare triple {16577#true} assume true; {16577#true} is VALID [2022-04-28 14:49:39,111 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {16577#true} {16577#true} #777#return; {16577#true} is VALID [2022-04-28 14:49:39,112 INFO L290 TraceCheckUtils]: 39: Hoare triple {16577#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {16577#true} is VALID [2022-04-28 14:49:39,112 INFO L290 TraceCheckUtils]: 40: Hoare triple {16577#true} assume -1073741802 == ~__cil_tmp7~0; {16577#true} is VALID [2022-04-28 14:49:39,112 INFO L272 TraceCheckUtils]: 41: Hoare triple {16577#true} call stubMoreProcessingRequired(); {16607#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:39,112 INFO L290 TraceCheckUtils]: 42: Hoare triple {16607#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 14:49:39,113 INFO L290 TraceCheckUtils]: 43: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 14:49:39,113 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {16577#true} #779#return; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 14:49:39,113 INFO L290 TraceCheckUtils]: 45: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 14:49:39,114 INFO L290 TraceCheckUtils]: 46: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume 0 == ~tmp_ndt_6~0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 14:49:39,114 INFO L290 TraceCheckUtils]: 47: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} ~returnVal2~0 := 0; {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 14:49:39,114 INFO L290 TraceCheckUtils]: 48: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~NP~0); {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-28 14:49:39,115 INFO L290 TraceCheckUtils]: 49: Hoare triple {16599#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~MPR1~0); {16578#false} is VALID [2022-04-28 14:49:39,115 INFO L290 TraceCheckUtils]: 50: Hoare triple {16578#false} assume !(~s~0 == ~SKIP1~0); {16578#false} is VALID [2022-04-28 14:49:39,115 INFO L272 TraceCheckUtils]: 51: Hoare triple {16578#false} call errorFn(); {16578#false} is VALID [2022-04-28 14:49:39,115 INFO L290 TraceCheckUtils]: 52: Hoare triple {16578#false} assume !false; {16578#false} is VALID [2022-04-28 14:49:39,115 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:49:39,116 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:49:39,116 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1444263264] [2022-04-28 14:49:39,116 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1444263264] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:39,116 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:39,116 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 14:49:39,116 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:49:39,116 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [967220170] [2022-04-28 14:49:39,116 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [967220170] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:39,117 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:39,117 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 14:49:39,117 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [127891984] [2022-04-28 14:49:39,117 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:49:39,117 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-28 14:49:39,118 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:49:39,118 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:49:39,151 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:39,151 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 14:49:39,151 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:39,151 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 14:49:39,151 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-04-28 14:49:39,152 INFO L87 Difference]: Start difference. First operand 242 states and 321 transitions. Second operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:49:40,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:40,564 INFO L93 Difference]: Finished difference Result 270 states and 354 transitions. [2022-04-28 14:49:40,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-04-28 14:49:40,564 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-28 14:49:40,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:49:40,565 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:49:40,567 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 341 transitions. [2022-04-28 14:49:40,567 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:49:40,568 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 341 transitions. [2022-04-28 14:49:40,569 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 10 states and 341 transitions. [2022-04-28 14:49:40,844 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 341 edges. 341 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:40,848 INFO L225 Difference]: With dead ends: 270 [2022-04-28 14:49:40,848 INFO L226 Difference]: Without dead ends: 240 [2022-04-28 14:49:40,848 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=67, Unknown=0, NotChecked=0, Total=110 [2022-04-28 14:49:40,848 INFO L413 NwaCegarLoop]: 243 mSDtfsCounter, 484 mSDsluCounter, 218 mSDsCounter, 0 mSdLazyCounter, 347 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 484 SdHoareTripleChecker+Valid, 461 SdHoareTripleChecker+Invalid, 448 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 347 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-28 14:49:40,849 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [484 Valid, 461 Invalid, 448 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 347 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-28 14:49:40,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2022-04-28 14:49:41,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 240. [2022-04-28 14:49:41,203 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:49:41,204 INFO L82 GeneralOperation]: Start isEquivalent. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:41,205 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:41,205 INFO L87 Difference]: Start difference. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:41,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:41,210 INFO L93 Difference]: Finished difference Result 240 states and 317 transitions. [2022-04-28 14:49:41,210 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-28 14:49:41,210 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:41,210 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:41,211 INFO L74 IsIncluded]: Start isIncluded. First operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-28 14:49:41,211 INFO L87 Difference]: Start difference. First operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-28 14:49:41,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:41,215 INFO L93 Difference]: Finished difference Result 240 states and 317 transitions. [2022-04-28 14:49:41,215 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-28 14:49:41,216 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:41,216 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:41,216 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:49:41,216 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:49:41,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:41,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 317 transitions. [2022-04-28 14:49:41,221 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 317 transitions. Word has length 53 [2022-04-28 14:49:41,221 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:49:41,221 INFO L495 AbstractCegarLoop]: Abstraction has 240 states and 317 transitions. [2022-04-28 14:49:41,221 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:49:41,221 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 240 states and 317 transitions. [2022-04-28 14:49:41,584 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 317 edges. 317 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:41,584 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-28 14:49:41,584 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-04-28 14:49:41,584 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:49:41,585 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:49:41,585 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-04-28 14:49:41,585 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:49:41,585 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:49:41,585 INFO L85 PathProgramCache]: Analyzing trace with hash -1556296422, now seen corresponding path program 1 times [2022-04-28 14:49:41,585 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:41,585 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [2066093725] [2022-04-28 14:49:41,585 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:49:41,586 INFO L85 PathProgramCache]: Analyzing trace with hash -1556296422, now seen corresponding path program 2 times [2022-04-28 14:49:41,586 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:49:41,586 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1449960228] [2022-04-28 14:49:41,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:49:41,586 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:49:41,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:41,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:49:41,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:41,650 INFO L290 TraceCheckUtils]: 0: Hoare triple {18147#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18117#true} is VALID [2022-04-28 14:49:41,650 INFO L290 TraceCheckUtils]: 1: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-28 14:49:41,650 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18117#true} {18117#true} #783#return; {18117#true} is VALID [2022-04-28 14:49:41,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:49:41,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:41,671 INFO L290 TraceCheckUtils]: 0: Hoare triple {18148#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 14:49:41,671 INFO L290 TraceCheckUtils]: 1: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume true; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 14:49:41,671 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18125#(not (= ~SKIP1~0 ~NP~0))} {18117#true} #715#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 14:49:41,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:49:41,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:41,683 INFO L290 TraceCheckUtils]: 0: Hoare triple {18149#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18117#true} is VALID [2022-04-28 14:49:41,683 INFO L290 TraceCheckUtils]: 1: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-28 14:49:41,683 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18117#true} {18125#(not (= ~SKIP1~0 ~NP~0))} #717#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 14:49:41,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-28 14:49:41,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:41,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 14:49:41,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:41,721 INFO L290 TraceCheckUtils]: 0: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,722 INFO L290 TraceCheckUtils]: 1: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,722 INFO L290 TraceCheckUtils]: 2: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,722 INFO L290 TraceCheckUtils]: 3: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,722 INFO L290 TraceCheckUtils]: 4: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,723 INFO L290 TraceCheckUtils]: 5: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,723 INFO L290 TraceCheckUtils]: 6: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,723 INFO L290 TraceCheckUtils]: 7: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} assume true; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,724 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {18163#(= ~NP~0 |old(~s~0)|)} {18151#(= ~SKIP1~0 ~s~0)} #775#return; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 14:49:41,724 INFO L290 TraceCheckUtils]: 0: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {18117#true} is VALID [2022-04-28 14:49:41,724 INFO L290 TraceCheckUtils]: 1: Hoare triple {18117#true} assume 2 == ~irpStack__MinorFunction~1; {18117#true} is VALID [2022-04-28 14:49:41,724 INFO L290 TraceCheckUtils]: 2: Hoare triple {18117#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {18117#true} is VALID [2022-04-28 14:49:41,725 INFO L290 TraceCheckUtils]: 3: Hoare triple {18117#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:41,725 INFO L290 TraceCheckUtils]: 4: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:41,726 INFO L272 TraceCheckUtils]: 5: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:41,726 INFO L290 TraceCheckUtils]: 6: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,726 INFO L290 TraceCheckUtils]: 7: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,727 INFO L290 TraceCheckUtils]: 8: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,727 INFO L290 TraceCheckUtils]: 9: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,727 INFO L290 TraceCheckUtils]: 10: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,727 INFO L290 TraceCheckUtils]: 11: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,728 INFO L290 TraceCheckUtils]: 12: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,728 INFO L290 TraceCheckUtils]: 13: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} assume true; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,728 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {18163#(= ~NP~0 |old(~s~0)|)} {18151#(= ~SKIP1~0 ~s~0)} #775#return; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 14:49:41,729 INFO L290 TraceCheckUtils]: 15: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 14:49:41,729 INFO L290 TraceCheckUtils]: 16: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume true; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 14:49:41,730 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {18161#(= ~SKIP1~0 ~NP~0)} {18125#(not (= ~SKIP1~0 ~NP~0))} #725#return; {18118#false} is VALID [2022-04-28 14:49:41,731 INFO L272 TraceCheckUtils]: 0: Hoare triple {18117#true} call ULTIMATE.init(); {18147#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:49:41,731 INFO L290 TraceCheckUtils]: 1: Hoare triple {18147#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18117#true} is VALID [2022-04-28 14:49:41,731 INFO L290 TraceCheckUtils]: 2: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-28 14:49:41,731 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {18117#true} {18117#true} #783#return; {18117#true} is VALID [2022-04-28 14:49:41,731 INFO L272 TraceCheckUtils]: 4: Hoare triple {18117#true} call #t~ret81 := main(); {18117#true} is VALID [2022-04-28 14:49:41,731 INFO L290 TraceCheckUtils]: 5: Hoare triple {18117#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {18117#true} is VALID [2022-04-28 14:49:41,732 INFO L272 TraceCheckUtils]: 6: Hoare triple {18117#true} call _BLAST_init(); {18148#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:41,733 INFO L290 TraceCheckUtils]: 7: Hoare triple {18148#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 14:49:41,733 INFO L290 TraceCheckUtils]: 8: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume true; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 14:49:41,733 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {18125#(not (= ~SKIP1~0 ~NP~0))} {18117#true} #715#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 14:49:41,733 INFO L290 TraceCheckUtils]: 10: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 14:49:41,734 INFO L290 TraceCheckUtils]: 11: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(0 == ~irp_choice~0); {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 14:49:41,734 INFO L272 TraceCheckUtils]: 12: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} call stub_driver_init(); {18149#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:41,734 INFO L290 TraceCheckUtils]: 13: Hoare triple {18149#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18117#true} is VALID [2022-04-28 14:49:41,734 INFO L290 TraceCheckUtils]: 14: Hoare triple {18117#true} assume true; {18117#true} is VALID [2022-04-28 14:49:41,735 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {18117#true} {18125#(not (= ~SKIP1~0 ~NP~0))} #717#return; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 14:49:41,735 INFO L290 TraceCheckUtils]: 16: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 14:49:41,735 INFO L290 TraceCheckUtils]: 17: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 14:49:41,735 INFO L290 TraceCheckUtils]: 18: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 14:49:41,736 INFO L290 TraceCheckUtils]: 19: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 14:49:41,736 INFO L290 TraceCheckUtils]: 20: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} assume 4 == ~tmp_ndt_4~0; {18125#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-28 14:49:41,736 INFO L272 TraceCheckUtils]: 21: Hoare triple {18125#(not (= ~SKIP1~0 ~NP~0))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:41,736 INFO L290 TraceCheckUtils]: 22: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {18117#true} is VALID [2022-04-28 14:49:41,737 INFO L290 TraceCheckUtils]: 23: Hoare triple {18117#true} assume 2 == ~irpStack__MinorFunction~1; {18117#true} is VALID [2022-04-28 14:49:41,737 INFO L290 TraceCheckUtils]: 24: Hoare triple {18117#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {18117#true} is VALID [2022-04-28 14:49:41,737 INFO L290 TraceCheckUtils]: 25: Hoare triple {18117#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:41,737 INFO L290 TraceCheckUtils]: 26: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {18151#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:41,738 INFO L272 TraceCheckUtils]: 27: Hoare triple {18151#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:41,738 INFO L290 TraceCheckUtils]: 28: Hoare triple {18150#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,738 INFO L290 TraceCheckUtils]: 29: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,739 INFO L290 TraceCheckUtils]: 30: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,739 INFO L290 TraceCheckUtils]: 31: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,739 INFO L290 TraceCheckUtils]: 32: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {18162#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,739 INFO L290 TraceCheckUtils]: 33: Hoare triple {18162#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,740 INFO L290 TraceCheckUtils]: 34: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,740 INFO L290 TraceCheckUtils]: 35: Hoare triple {18163#(= ~NP~0 |old(~s~0)|)} assume true; {18163#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:41,740 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {18163#(= ~NP~0 |old(~s~0)|)} {18151#(= ~SKIP1~0 ~s~0)} #775#return; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 14:49:41,741 INFO L290 TraceCheckUtils]: 37: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 14:49:41,741 INFO L290 TraceCheckUtils]: 38: Hoare triple {18161#(= ~SKIP1~0 ~NP~0)} assume true; {18161#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-28 14:49:41,741 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {18161#(= ~SKIP1~0 ~NP~0)} {18125#(not (= ~SKIP1~0 ~NP~0))} #725#return; {18118#false} is VALID [2022-04-28 14:49:41,741 INFO L290 TraceCheckUtils]: 40: Hoare triple {18118#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {18118#false} is VALID [2022-04-28 14:49:41,742 INFO L290 TraceCheckUtils]: 41: Hoare triple {18118#false} assume !(1 == ~pended~0); {18118#false} is VALID [2022-04-28 14:49:41,742 INFO L290 TraceCheckUtils]: 42: Hoare triple {18118#false} assume !(1 == ~pended~0); {18118#false} is VALID [2022-04-28 14:49:41,742 INFO L290 TraceCheckUtils]: 43: Hoare triple {18118#false} assume ~s~0 != ~UNLOADED~0; {18118#false} is VALID [2022-04-28 14:49:41,742 INFO L290 TraceCheckUtils]: 44: Hoare triple {18118#false} assume -1 != ~status~1; {18118#false} is VALID [2022-04-28 14:49:41,742 INFO L290 TraceCheckUtils]: 45: Hoare triple {18118#false} assume !(~s~0 != ~SKIP2~0); {18118#false} is VALID [2022-04-28 14:49:41,742 INFO L290 TraceCheckUtils]: 46: Hoare triple {18118#false} assume !(1 == ~pended~0); {18118#false} is VALID [2022-04-28 14:49:41,742 INFO L290 TraceCheckUtils]: 47: Hoare triple {18118#false} assume !(~s~0 == ~DC~0); {18118#false} is VALID [2022-04-28 14:49:41,742 INFO L290 TraceCheckUtils]: 48: Hoare triple {18118#false} assume ~status~1 != ~lowerDriverReturn~0; {18118#false} is VALID [2022-04-28 14:49:41,742 INFO L272 TraceCheckUtils]: 49: Hoare triple {18118#false} call errorFn(); {18118#false} is VALID [2022-04-28 14:49:41,742 INFO L290 TraceCheckUtils]: 50: Hoare triple {18118#false} assume !false; {18118#false} is VALID [2022-04-28 14:49:41,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:49:41,743 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:49:41,743 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1449960228] [2022-04-28 14:49:41,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1449960228] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:41,743 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:41,743 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 14:49:41,743 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:49:41,743 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [2066093725] [2022-04-28 14:49:41,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [2066093725] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:41,743 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:41,743 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 14:49:41,743 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1391560593] [2022-04-28 14:49:41,743 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:49:41,744 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 51 [2022-04-28 14:49:41,744 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:49:41,744 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 14:49:41,772 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:41,772 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 14:49:41,772 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:41,772 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 14:49:41,772 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-28 14:49:41,773 INFO L87 Difference]: Start difference. First operand 240 states and 317 transitions. Second operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 14:49:44,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:44,090 INFO L93 Difference]: Finished difference Result 284 states and 365 transitions. [2022-04-28 14:49:44,090 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-28 14:49:44,090 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 51 [2022-04-28 14:49:44,090 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:49:44,090 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 14:49:44,093 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 365 transitions. [2022-04-28 14:49:44,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 14:49:44,095 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 365 transitions. [2022-04-28 14:49:44,095 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 365 transitions. [2022-04-28 14:49:44,437 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:44,440 INFO L225 Difference]: With dead ends: 284 [2022-04-28 14:49:44,440 INFO L226 Difference]: Without dead ends: 243 [2022-04-28 14:49:44,441 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=109, Invalid=311, Unknown=0, NotChecked=0, Total=420 [2022-04-28 14:49:44,442 INFO L413 NwaCegarLoop]: 252 mSDtfsCounter, 655 mSDsluCounter, 341 mSDsCounter, 0 mSdLazyCounter, 741 mSolverCounterSat, 143 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 660 SdHoareTripleChecker+Valid, 593 SdHoareTripleChecker+Invalid, 884 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 143 IncrementalHoareTripleChecker+Valid, 741 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-28 14:49:44,442 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [660 Valid, 593 Invalid, 884 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [143 Valid, 741 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-28 14:49:44,443 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243 states. [2022-04-28 14:49:44,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 243 to 240. [2022-04-28 14:49:44,737 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:49:44,737 INFO L82 GeneralOperation]: Start isEquivalent. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:44,737 INFO L74 IsIncluded]: Start isIncluded. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:44,738 INFO L87 Difference]: Start difference. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:44,741 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:44,741 INFO L93 Difference]: Finished difference Result 243 states and 317 transitions. [2022-04-28 14:49:44,741 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 317 transitions. [2022-04-28 14:49:44,745 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:44,745 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:44,745 INFO L74 IsIncluded]: Start isIncluded. First operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 243 states. [2022-04-28 14:49:44,745 INFO L87 Difference]: Start difference. First operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 243 states. [2022-04-28 14:49:44,748 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:44,748 INFO L93 Difference]: Finished difference Result 243 states and 317 transitions. [2022-04-28 14:49:44,749 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 317 transitions. [2022-04-28 14:49:44,762 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:44,762 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:44,762 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:49:44,762 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:49:44,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:44,766 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 315 transitions. [2022-04-28 14:49:44,766 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 315 transitions. Word has length 51 [2022-04-28 14:49:44,767 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:49:44,767 INFO L495 AbstractCegarLoop]: Abstraction has 240 states and 315 transitions. [2022-04-28 14:49:44,767 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 14:49:44,767 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 240 states and 315 transitions. [2022-04-28 14:49:45,122 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 315 edges. 315 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:45,122 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 315 transitions. [2022-04-28 14:49:45,123 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-28 14:49:45,123 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:49:45,123 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:49:45,123 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-04-28 14:49:45,123 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:49:45,123 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:49:45,123 INFO L85 PathProgramCache]: Analyzing trace with hash 460482069, now seen corresponding path program 1 times [2022-04-28 14:49:45,123 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:45,123 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1220569676] [2022-04-28 14:49:45,124 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:49:45,124 INFO L85 PathProgramCache]: Analyzing trace with hash 460482069, now seen corresponding path program 2 times [2022-04-28 14:49:45,124 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:49:45,124 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1826436899] [2022-04-28 14:49:45,124 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:49:45,124 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:49:45,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:45,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:49:45,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:45,194 INFO L290 TraceCheckUtils]: 0: Hoare triple {19754#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {19722#true} is VALID [2022-04-28 14:49:45,194 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-28 14:49:45,194 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19722#true} {19722#true} #783#return; {19722#true} is VALID [2022-04-28 14:49:45,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:49:45,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:45,240 INFO L290 TraceCheckUtils]: 0: Hoare triple {19755#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 14:49:45,241 INFO L290 TraceCheckUtils]: 1: Hoare triple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 14:49:45,241 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {19722#true} #715#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:45,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:49:45,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:45,262 INFO L290 TraceCheckUtils]: 0: Hoare triple {19757#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19722#true} is VALID [2022-04-28 14:49:45,262 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-28 14:49:45,262 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19722#true} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:45,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-28 14:49:45,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:45,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 14:49:45,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:45,307 INFO L290 TraceCheckUtils]: 0: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {19722#true} is VALID [2022-04-28 14:49:45,307 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume !(0 != ~compRegistered~0); {19722#true} is VALID [2022-04-28 14:49:45,307 INFO L290 TraceCheckUtils]: 2: Hoare triple {19722#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {19722#true} is VALID [2022-04-28 14:49:45,307 INFO L290 TraceCheckUtils]: 3: Hoare triple {19722#true} assume 0 == ~tmp_ndt_9~0; {19722#true} is VALID [2022-04-28 14:49:45,313 INFO L290 TraceCheckUtils]: 4: Hoare triple {19722#true} ~returnVal~0 := 0; {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-28 14:49:45,313 INFO L290 TraceCheckUtils]: 5: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-28 14:49:45,313 INFO L290 TraceCheckUtils]: 6: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-28 14:49:45,313 INFO L290 TraceCheckUtils]: 7: Hoare triple {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {19723#false} is VALID [2022-04-28 14:49:45,314 INFO L290 TraceCheckUtils]: 8: Hoare triple {19723#false} #res := ~returnVal~0; {19723#false} is VALID [2022-04-28 14:49:45,314 INFO L290 TraceCheckUtils]: 9: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-28 14:49:45,314 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {19723#false} {19722#true} #775#return; {19723#false} is VALID [2022-04-28 14:49:45,314 INFO L290 TraceCheckUtils]: 0: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {19722#true} is VALID [2022-04-28 14:49:45,314 INFO L290 TraceCheckUtils]: 1: Hoare triple {19722#true} assume 2 == ~irpStack__MinorFunction~1; {19722#true} is VALID [2022-04-28 14:49:45,314 INFO L290 TraceCheckUtils]: 2: Hoare triple {19722#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {19722#true} is VALID [2022-04-28 14:49:45,314 INFO L290 TraceCheckUtils]: 3: Hoare triple {19722#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {19722#true} is VALID [2022-04-28 14:49:45,314 INFO L290 TraceCheckUtils]: 4: Hoare triple {19722#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {19722#true} is VALID [2022-04-28 14:49:45,315 INFO L272 TraceCheckUtils]: 5: Hoare triple {19722#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:45,315 INFO L290 TraceCheckUtils]: 6: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {19722#true} is VALID [2022-04-28 14:49:45,315 INFO L290 TraceCheckUtils]: 7: Hoare triple {19722#true} assume !(0 != ~compRegistered~0); {19722#true} is VALID [2022-04-28 14:49:45,315 INFO L290 TraceCheckUtils]: 8: Hoare triple {19722#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {19722#true} is VALID [2022-04-28 14:49:45,315 INFO L290 TraceCheckUtils]: 9: Hoare triple {19722#true} assume 0 == ~tmp_ndt_9~0; {19722#true} is VALID [2022-04-28 14:49:45,315 INFO L290 TraceCheckUtils]: 10: Hoare triple {19722#true} ~returnVal~0 := 0; {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-28 14:49:45,316 INFO L290 TraceCheckUtils]: 11: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-28 14:49:45,316 INFO L290 TraceCheckUtils]: 12: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-28 14:49:45,316 INFO L290 TraceCheckUtils]: 13: Hoare triple {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {19723#false} is VALID [2022-04-28 14:49:45,316 INFO L290 TraceCheckUtils]: 14: Hoare triple {19723#false} #res := ~returnVal~0; {19723#false} is VALID [2022-04-28 14:49:45,316 INFO L290 TraceCheckUtils]: 15: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-28 14:49:45,316 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {19723#false} {19722#true} #775#return; {19723#false} is VALID [2022-04-28 14:49:45,316 INFO L290 TraceCheckUtils]: 17: Hoare triple {19723#false} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {19723#false} is VALID [2022-04-28 14:49:45,316 INFO L290 TraceCheckUtils]: 18: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-28 14:49:45,317 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {19723#false} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {19723#false} is VALID [2022-04-28 14:49:45,318 INFO L272 TraceCheckUtils]: 0: Hoare triple {19722#true} call ULTIMATE.init(); {19754#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:49:45,318 INFO L290 TraceCheckUtils]: 1: Hoare triple {19754#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {19722#true} is VALID [2022-04-28 14:49:45,318 INFO L290 TraceCheckUtils]: 2: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-28 14:49:45,318 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {19722#true} {19722#true} #783#return; {19722#true} is VALID [2022-04-28 14:49:45,318 INFO L272 TraceCheckUtils]: 4: Hoare triple {19722#true} call #t~ret81 := main(); {19722#true} is VALID [2022-04-28 14:49:45,318 INFO L290 TraceCheckUtils]: 5: Hoare triple {19722#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {19722#true} is VALID [2022-04-28 14:49:45,319 INFO L272 TraceCheckUtils]: 6: Hoare triple {19722#true} call _BLAST_init(); {19755#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:45,319 INFO L290 TraceCheckUtils]: 7: Hoare triple {19755#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 14:49:45,320 INFO L290 TraceCheckUtils]: 8: Hoare triple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 14:49:45,320 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {19756#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {19722#true} #715#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:45,320 INFO L290 TraceCheckUtils]: 10: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:45,321 INFO L290 TraceCheckUtils]: 11: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~irp_choice~0); {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:45,321 INFO L272 TraceCheckUtils]: 12: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call stub_driver_init(); {19757#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:45,321 INFO L290 TraceCheckUtils]: 13: Hoare triple {19757#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {19722#true} is VALID [2022-04-28 14:49:45,321 INFO L290 TraceCheckUtils]: 14: Hoare triple {19722#true} assume true; {19722#true} is VALID [2022-04-28 14:49:45,322 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {19722#true} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:45,322 INFO L290 TraceCheckUtils]: 16: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:45,322 INFO L290 TraceCheckUtils]: 17: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:45,323 INFO L290 TraceCheckUtils]: 18: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:45,323 INFO L290 TraceCheckUtils]: 19: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:45,323 INFO L290 TraceCheckUtils]: 20: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 4 == ~tmp_ndt_4~0; {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:45,324 INFO L272 TraceCheckUtils]: 21: Hoare triple {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:45,324 INFO L290 TraceCheckUtils]: 22: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {19722#true} is VALID [2022-04-28 14:49:45,324 INFO L290 TraceCheckUtils]: 23: Hoare triple {19722#true} assume 2 == ~irpStack__MinorFunction~1; {19722#true} is VALID [2022-04-28 14:49:45,324 INFO L290 TraceCheckUtils]: 24: Hoare triple {19722#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {19722#true} is VALID [2022-04-28 14:49:45,324 INFO L290 TraceCheckUtils]: 25: Hoare triple {19722#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {19722#true} is VALID [2022-04-28 14:49:45,324 INFO L290 TraceCheckUtils]: 26: Hoare triple {19722#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {19722#true} is VALID [2022-04-28 14:49:45,325 INFO L272 TraceCheckUtils]: 27: Hoare triple {19722#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:45,325 INFO L290 TraceCheckUtils]: 28: Hoare triple {19758#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {19722#true} is VALID [2022-04-28 14:49:45,325 INFO L290 TraceCheckUtils]: 29: Hoare triple {19722#true} assume !(0 != ~compRegistered~0); {19722#true} is VALID [2022-04-28 14:49:45,325 INFO L290 TraceCheckUtils]: 30: Hoare triple {19722#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {19722#true} is VALID [2022-04-28 14:49:45,325 INFO L290 TraceCheckUtils]: 31: Hoare triple {19722#true} assume 0 == ~tmp_ndt_9~0; {19722#true} is VALID [2022-04-28 14:49:45,325 INFO L290 TraceCheckUtils]: 32: Hoare triple {19722#true} ~returnVal~0 := 0; {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-28 14:49:45,325 INFO L290 TraceCheckUtils]: 33: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {19770#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-28 14:49:45,326 INFO L290 TraceCheckUtils]: 34: Hoare triple {19770#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-28 14:49:45,326 INFO L290 TraceCheckUtils]: 35: Hoare triple {19771#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {19723#false} is VALID [2022-04-28 14:49:45,326 INFO L290 TraceCheckUtils]: 36: Hoare triple {19723#false} #res := ~returnVal~0; {19723#false} is VALID [2022-04-28 14:49:45,326 INFO L290 TraceCheckUtils]: 37: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-28 14:49:45,326 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {19723#false} {19722#true} #775#return; {19723#false} is VALID [2022-04-28 14:49:45,326 INFO L290 TraceCheckUtils]: 39: Hoare triple {19723#false} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {19723#false} is VALID [2022-04-28 14:49:45,326 INFO L290 TraceCheckUtils]: 40: Hoare triple {19723#false} assume true; {19723#false} is VALID [2022-04-28 14:49:45,326 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {19723#false} {19730#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {19723#false} is VALID [2022-04-28 14:49:45,326 INFO L290 TraceCheckUtils]: 42: Hoare triple {19723#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {19723#false} is VALID [2022-04-28 14:49:45,327 INFO L290 TraceCheckUtils]: 43: Hoare triple {19723#false} assume !(1 == ~pended~0); {19723#false} is VALID [2022-04-28 14:49:45,327 INFO L290 TraceCheckUtils]: 44: Hoare triple {19723#false} assume !(1 == ~pended~0); {19723#false} is VALID [2022-04-28 14:49:45,327 INFO L290 TraceCheckUtils]: 45: Hoare triple {19723#false} assume ~s~0 != ~UNLOADED~0; {19723#false} is VALID [2022-04-28 14:49:45,327 INFO L290 TraceCheckUtils]: 46: Hoare triple {19723#false} assume -1 != ~status~1; {19723#false} is VALID [2022-04-28 14:49:45,327 INFO L290 TraceCheckUtils]: 47: Hoare triple {19723#false} assume !(~s~0 != ~SKIP2~0); {19723#false} is VALID [2022-04-28 14:49:45,327 INFO L290 TraceCheckUtils]: 48: Hoare triple {19723#false} assume !(1 == ~pended~0); {19723#false} is VALID [2022-04-28 14:49:45,327 INFO L290 TraceCheckUtils]: 49: Hoare triple {19723#false} assume !(~s~0 == ~DC~0); {19723#false} is VALID [2022-04-28 14:49:45,327 INFO L290 TraceCheckUtils]: 50: Hoare triple {19723#false} assume ~status~1 != ~lowerDriverReturn~0; {19723#false} is VALID [2022-04-28 14:49:45,327 INFO L272 TraceCheckUtils]: 51: Hoare triple {19723#false} call errorFn(); {19723#false} is VALID [2022-04-28 14:49:45,327 INFO L290 TraceCheckUtils]: 52: Hoare triple {19723#false} assume !false; {19723#false} is VALID [2022-04-28 14:49:45,327 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:49:45,328 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:49:45,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1826436899] [2022-04-28 14:49:45,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1826436899] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:45,328 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:45,328 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 14:49:45,328 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:49:45,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1220569676] [2022-04-28 14:49:45,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1220569676] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:45,328 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:45,328 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 14:49:45,328 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [998477876] [2022-04-28 14:49:45,328 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:49:45,329 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 53 [2022-04-28 14:49:45,329 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:49:45,329 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 14:49:45,377 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:45,377 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-28 14:49:45,377 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:45,378 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-28 14:49:45,378 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=66, Unknown=0, NotChecked=0, Total=90 [2022-04-28 14:49:45,378 INFO L87 Difference]: Start difference. First operand 240 states and 315 transitions. Second operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 14:49:47,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:47,381 INFO L93 Difference]: Finished difference Result 272 states and 349 transitions. [2022-04-28 14:49:47,381 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 14:49:47,383 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 53 [2022-04-28 14:49:47,383 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:49:47,384 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 14:49:47,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 325 transitions. [2022-04-28 14:49:47,396 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 14:49:47,400 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 325 transitions. [2022-04-28 14:49:47,400 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 325 transitions. [2022-04-28 14:49:47,698 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 325 edges. 325 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:47,703 INFO L225 Difference]: With dead ends: 272 [2022-04-28 14:49:47,703 INFO L226 Difference]: Without dead ends: 253 [2022-04-28 14:49:47,703 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 37 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=95, Invalid=211, Unknown=0, NotChecked=0, Total=306 [2022-04-28 14:49:47,703 INFO L413 NwaCegarLoop]: 238 mSDtfsCounter, 723 mSDsluCounter, 298 mSDsCounter, 0 mSdLazyCounter, 434 mSolverCounterSat, 102 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 726 SdHoareTripleChecker+Valid, 536 SdHoareTripleChecker+Invalid, 536 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 102 IncrementalHoareTripleChecker+Valid, 434 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-28 14:49:47,704 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [726 Valid, 536 Invalid, 536 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [102 Valid, 434 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-28 14:49:47,704 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 253 states. [2022-04-28 14:49:48,178 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 253 to 243. [2022-04-28 14:49:48,178 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:49:48,178 INFO L82 GeneralOperation]: Start isEquivalent. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:48,179 INFO L74 IsIncluded]: Start isIncluded. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:48,179 INFO L87 Difference]: Start difference. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:48,183 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:48,183 INFO L93 Difference]: Finished difference Result 253 states and 329 transitions. [2022-04-28 14:49:48,183 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 329 transitions. [2022-04-28 14:49:48,184 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:48,184 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:48,184 INFO L74 IsIncluded]: Start isIncluded. First operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 253 states. [2022-04-28 14:49:48,184 INFO L87 Difference]: Start difference. First operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 253 states. [2022-04-28 14:49:48,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:48,189 INFO L93 Difference]: Finished difference Result 253 states and 329 transitions. [2022-04-28 14:49:48,189 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 329 transitions. [2022-04-28 14:49:48,189 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:48,189 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:48,189 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:49:48,189 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:49:48,190 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:48,194 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 319 transitions. [2022-04-28 14:49:48,195 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 319 transitions. Word has length 53 [2022-04-28 14:49:48,195 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:49:48,195 INFO L495 AbstractCegarLoop]: Abstraction has 243 states and 319 transitions. [2022-04-28 14:49:48,195 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-28 14:49:48,195 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 243 states and 319 transitions. [2022-04-28 14:49:48,568 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 319 edges. 319 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:48,568 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 319 transitions. [2022-04-28 14:49:48,569 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-28 14:49:48,569 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:49:48,569 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:49:48,569 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-04-28 14:49:48,569 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:49:48,569 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:49:48,570 INFO L85 PathProgramCache]: Analyzing trace with hash -1533662637, now seen corresponding path program 1 times [2022-04-28 14:49:48,570 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:48,570 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1812820952] [2022-04-28 14:49:48,570 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:49:48,570 INFO L85 PathProgramCache]: Analyzing trace with hash -1533662637, now seen corresponding path program 2 times [2022-04-28 14:49:48,570 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:49:48,570 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1181825191] [2022-04-28 14:49:48,570 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:49:48,570 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:49:48,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:48,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:49:48,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:48,642 INFO L290 TraceCheckUtils]: 0: Hoare triple {21359#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {21327#true} is VALID [2022-04-28 14:49:48,642 INFO L290 TraceCheckUtils]: 1: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-28 14:49:48,642 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21327#true} {21327#true} #783#return; {21327#true} is VALID [2022-04-28 14:49:48,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:49:48,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:48,673 INFO L290 TraceCheckUtils]: 0: Hoare triple {21360#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 14:49:48,673 INFO L290 TraceCheckUtils]: 1: Hoare triple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 14:49:48,674 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {21327#true} #715#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:48,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:49:48,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:48,689 INFO L290 TraceCheckUtils]: 0: Hoare triple {21362#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21327#true} is VALID [2022-04-28 14:49:48,689 INFO L290 TraceCheckUtils]: 1: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-28 14:49:48,689 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21327#true} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:48,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-28 14:49:48,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:48,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 14:49:48,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:48,739 INFO L290 TraceCheckUtils]: 0: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,739 INFO L290 TraceCheckUtils]: 1: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,739 INFO L290 TraceCheckUtils]: 2: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,740 INFO L290 TraceCheckUtils]: 3: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,740 INFO L290 TraceCheckUtils]: 4: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,740 INFO L290 TraceCheckUtils]: 5: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,741 INFO L290 TraceCheckUtils]: 6: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,741 INFO L290 TraceCheckUtils]: 7: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,741 INFO L290 TraceCheckUtils]: 8: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,742 INFO L290 TraceCheckUtils]: 9: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume true; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,742 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {21378#(= ~MPR1~0 |old(~s~0)|)} {21364#(= ~SKIP1~0 ~s~0)} #775#return; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 14:49:48,743 INFO L290 TraceCheckUtils]: 0: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {21327#true} is VALID [2022-04-28 14:49:48,743 INFO L290 TraceCheckUtils]: 1: Hoare triple {21327#true} assume 2 == ~irpStack__MinorFunction~1; {21327#true} is VALID [2022-04-28 14:49:48,743 INFO L290 TraceCheckUtils]: 2: Hoare triple {21327#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {21327#true} is VALID [2022-04-28 14:49:48,743 INFO L290 TraceCheckUtils]: 3: Hoare triple {21327#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:48,743 INFO L290 TraceCheckUtils]: 4: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:48,744 INFO L272 TraceCheckUtils]: 5: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:48,744 INFO L290 TraceCheckUtils]: 6: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,745 INFO L290 TraceCheckUtils]: 7: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,745 INFO L290 TraceCheckUtils]: 8: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,745 INFO L290 TraceCheckUtils]: 9: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,746 INFO L290 TraceCheckUtils]: 10: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,746 INFO L290 TraceCheckUtils]: 11: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,746 INFO L290 TraceCheckUtils]: 12: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,746 INFO L290 TraceCheckUtils]: 13: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,747 INFO L290 TraceCheckUtils]: 14: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,747 INFO L290 TraceCheckUtils]: 15: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume true; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,748 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {21378#(= ~MPR1~0 |old(~s~0)|)} {21364#(= ~SKIP1~0 ~s~0)} #775#return; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 14:49:48,748 INFO L290 TraceCheckUtils]: 17: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 14:49:48,748 INFO L290 TraceCheckUtils]: 18: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume true; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 14:49:48,749 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {21376#(= ~MPR1~0 ~SKIP1~0)} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {21328#false} is VALID [2022-04-28 14:49:48,750 INFO L272 TraceCheckUtils]: 0: Hoare triple {21327#true} call ULTIMATE.init(); {21359#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:49:48,751 INFO L290 TraceCheckUtils]: 1: Hoare triple {21359#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {21327#true} is VALID [2022-04-28 14:49:48,751 INFO L290 TraceCheckUtils]: 2: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-28 14:49:48,751 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {21327#true} {21327#true} #783#return; {21327#true} is VALID [2022-04-28 14:49:48,751 INFO L272 TraceCheckUtils]: 4: Hoare triple {21327#true} call #t~ret81 := main(); {21327#true} is VALID [2022-04-28 14:49:48,751 INFO L290 TraceCheckUtils]: 5: Hoare triple {21327#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {21327#true} is VALID [2022-04-28 14:49:48,752 INFO L272 TraceCheckUtils]: 6: Hoare triple {21327#true} call _BLAST_init(); {21360#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:48,752 INFO L290 TraceCheckUtils]: 7: Hoare triple {21360#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 14:49:48,753 INFO L290 TraceCheckUtils]: 8: Hoare triple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-28 14:49:48,753 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {21361#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {21327#true} #715#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:48,754 INFO L290 TraceCheckUtils]: 10: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:48,754 INFO L290 TraceCheckUtils]: 11: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~irp_choice~0); {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:48,755 INFO L272 TraceCheckUtils]: 12: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call stub_driver_init(); {21362#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:48,755 INFO L290 TraceCheckUtils]: 13: Hoare triple {21362#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21327#true} is VALID [2022-04-28 14:49:48,755 INFO L290 TraceCheckUtils]: 14: Hoare triple {21327#true} assume true; {21327#true} is VALID [2022-04-28 14:49:48,755 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {21327#true} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:48,756 INFO L290 TraceCheckUtils]: 16: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:48,756 INFO L290 TraceCheckUtils]: 17: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:48,757 INFO L290 TraceCheckUtils]: 18: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:48,757 INFO L290 TraceCheckUtils]: 19: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:48,757 INFO L290 TraceCheckUtils]: 20: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 4 == ~tmp_ndt_4~0; {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-28 14:49:48,758 INFO L272 TraceCheckUtils]: 21: Hoare triple {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:48,758 INFO L290 TraceCheckUtils]: 22: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {21327#true} is VALID [2022-04-28 14:49:48,758 INFO L290 TraceCheckUtils]: 23: Hoare triple {21327#true} assume 2 == ~irpStack__MinorFunction~1; {21327#true} is VALID [2022-04-28 14:49:48,758 INFO L290 TraceCheckUtils]: 24: Hoare triple {21327#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {21327#true} is VALID [2022-04-28 14:49:48,759 INFO L290 TraceCheckUtils]: 25: Hoare triple {21327#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:48,759 INFO L290 TraceCheckUtils]: 26: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {21364#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-28 14:49:48,759 INFO L272 TraceCheckUtils]: 27: Hoare triple {21364#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:48,760 INFO L290 TraceCheckUtils]: 28: Hoare triple {21363#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,760 INFO L290 TraceCheckUtils]: 29: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,760 INFO L290 TraceCheckUtils]: 30: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,760 INFO L290 TraceCheckUtils]: 31: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,761 INFO L290 TraceCheckUtils]: 32: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,761 INFO L290 TraceCheckUtils]: 33: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {21377#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,761 INFO L290 TraceCheckUtils]: 34: Hoare triple {21377#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,762 INFO L290 TraceCheckUtils]: 35: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,762 INFO L290 TraceCheckUtils]: 36: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,762 INFO L290 TraceCheckUtils]: 37: Hoare triple {21378#(= ~MPR1~0 |old(~s~0)|)} assume true; {21378#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-28 14:49:48,763 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {21378#(= ~MPR1~0 |old(~s~0)|)} {21364#(= ~SKIP1~0 ~s~0)} #775#return; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 14:49:48,763 INFO L290 TraceCheckUtils]: 39: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 14:49:48,763 INFO L290 TraceCheckUtils]: 40: Hoare triple {21376#(= ~MPR1~0 ~SKIP1~0)} assume true; {21376#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-28 14:49:48,764 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {21376#(= ~MPR1~0 ~SKIP1~0)} {21335#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {21328#false} is VALID [2022-04-28 14:49:48,764 INFO L290 TraceCheckUtils]: 42: Hoare triple {21328#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {21328#false} is VALID [2022-04-28 14:49:48,764 INFO L290 TraceCheckUtils]: 43: Hoare triple {21328#false} assume !(1 == ~pended~0); {21328#false} is VALID [2022-04-28 14:49:48,764 INFO L290 TraceCheckUtils]: 44: Hoare triple {21328#false} assume !(1 == ~pended~0); {21328#false} is VALID [2022-04-28 14:49:48,764 INFO L290 TraceCheckUtils]: 45: Hoare triple {21328#false} assume ~s~0 != ~UNLOADED~0; {21328#false} is VALID [2022-04-28 14:49:48,764 INFO L290 TraceCheckUtils]: 46: Hoare triple {21328#false} assume -1 != ~status~1; {21328#false} is VALID [2022-04-28 14:49:48,764 INFO L290 TraceCheckUtils]: 47: Hoare triple {21328#false} assume !(~s~0 != ~SKIP2~0); {21328#false} is VALID [2022-04-28 14:49:48,764 INFO L290 TraceCheckUtils]: 48: Hoare triple {21328#false} assume !(1 == ~pended~0); {21328#false} is VALID [2022-04-28 14:49:48,764 INFO L290 TraceCheckUtils]: 49: Hoare triple {21328#false} assume !(~s~0 == ~DC~0); {21328#false} is VALID [2022-04-28 14:49:48,765 INFO L290 TraceCheckUtils]: 50: Hoare triple {21328#false} assume ~status~1 != ~lowerDriverReturn~0; {21328#false} is VALID [2022-04-28 14:49:48,765 INFO L272 TraceCheckUtils]: 51: Hoare triple {21328#false} call errorFn(); {21328#false} is VALID [2022-04-28 14:49:48,765 INFO L290 TraceCheckUtils]: 52: Hoare triple {21328#false} assume !false; {21328#false} is VALID [2022-04-28 14:49:48,765 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:49:48,765 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:49:48,765 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1181825191] [2022-04-28 14:49:48,765 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1181825191] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:48,765 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:48,765 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 14:49:48,765 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:49:48,766 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1812820952] [2022-04-28 14:49:48,766 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1812820952] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:48,766 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:48,766 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 14:49:48,766 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [130823716] [2022-04-28 14:49:48,766 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:49:48,766 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 53 [2022-04-28 14:49:48,766 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:49:48,766 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 14:49:48,801 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:48,801 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 14:49:48,801 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:48,802 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 14:49:48,802 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-28 14:49:48,802 INFO L87 Difference]: Start difference. First operand 243 states and 319 transitions. Second operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 14:49:51,404 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:51,404 INFO L93 Difference]: Finished difference Result 284 states and 365 transitions. [2022-04-28 14:49:51,404 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 14:49:51,404 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 53 [2022-04-28 14:49:51,404 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:49:51,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 14:49:51,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 347 transitions. [2022-04-28 14:49:51,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 14:49:51,409 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 347 transitions. [2022-04-28 14:49:51,409 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 347 transitions. [2022-04-28 14:49:51,734 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 347 edges. 347 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:51,738 INFO L225 Difference]: With dead ends: 284 [2022-04-28 14:49:51,738 INFO L226 Difference]: Without dead ends: 240 [2022-04-28 14:49:51,738 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=101, Invalid=279, Unknown=0, NotChecked=0, Total=380 [2022-04-28 14:49:51,739 INFO L413 NwaCegarLoop]: 234 mSDtfsCounter, 964 mSDsluCounter, 349 mSDsCounter, 0 mSdLazyCounter, 711 mSolverCounterSat, 177 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 965 SdHoareTripleChecker+Valid, 583 SdHoareTripleChecker+Invalid, 888 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 177 IncrementalHoareTripleChecker+Valid, 711 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-28 14:49:51,739 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [965 Valid, 583 Invalid, 888 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [177 Valid, 711 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-28 14:49:51,739 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2022-04-28 14:49:52,144 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 238. [2022-04-28 14:49:52,144 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:49:52,144 INFO L82 GeneralOperation]: Start isEquivalent. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:52,145 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:52,145 INFO L87 Difference]: Start difference. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:52,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:52,148 INFO L93 Difference]: Finished difference Result 240 states and 311 transitions. [2022-04-28 14:49:52,149 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 311 transitions. [2022-04-28 14:49:52,149 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:52,149 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:52,149 INFO L74 IsIncluded]: Start isIncluded. First operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-28 14:49:52,149 INFO L87 Difference]: Start difference. First operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-28 14:49:52,153 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:52,153 INFO L93 Difference]: Finished difference Result 240 states and 311 transitions. [2022-04-28 14:49:52,153 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 311 transitions. [2022-04-28 14:49:52,153 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:52,153 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:52,153 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:49:52,154 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:49:52,154 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-28 14:49:52,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 238 states to 238 states and 309 transitions. [2022-04-28 14:49:52,158 INFO L78 Accepts]: Start accepts. Automaton has 238 states and 309 transitions. Word has length 53 [2022-04-28 14:49:52,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:49:52,158 INFO L495 AbstractCegarLoop]: Abstraction has 238 states and 309 transitions. [2022-04-28 14:49:52,158 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-28 14:49:52,158 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 238 states and 309 transitions. [2022-04-28 14:49:52,514 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 309 edges. 309 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:52,514 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 309 transitions. [2022-04-28 14:49:52,515 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-28 14:49:52,515 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:49:52,515 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:49:52,515 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-04-28 14:49:52,515 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:49:52,516 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:49:52,516 INFO L85 PathProgramCache]: Analyzing trace with hash -1386969835, now seen corresponding path program 1 times [2022-04-28 14:49:52,516 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:52,516 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1744332871] [2022-04-28 14:49:52,516 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:49:52,516 INFO L85 PathProgramCache]: Analyzing trace with hash -1386969835, now seen corresponding path program 2 times [2022-04-28 14:49:52,516 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:49:52,516 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1539300171] [2022-04-28 14:49:52,517 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:49:52,517 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:49:52,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:52,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:49:52,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:52,581 INFO L290 TraceCheckUtils]: 0: Hoare triple {22956#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22923#true} is VALID [2022-04-28 14:49:52,581 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-28 14:49:52,581 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22923#true} {22923#true} #783#return; {22923#true} is VALID [2022-04-28 14:49:52,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:49:52,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:52,601 INFO L290 TraceCheckUtils]: 0: Hoare triple {22957#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-28 14:49:52,602 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-28 14:49:52,602 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22923#true} {22923#true} #715#return; {22923#true} is VALID [2022-04-28 14:49:52,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:49:52,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:52,620 INFO L290 TraceCheckUtils]: 0: Hoare triple {22958#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-28 14:49:52,621 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-28 14:49:52,621 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22923#true} {22923#true} #717#return; {22923#true} is VALID [2022-04-28 14:49:52,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-28 14:49:52,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:52,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 14:49:52,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:52,663 INFO L290 TraceCheckUtils]: 0: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {22923#true} is VALID [2022-04-28 14:49:52,664 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume !(0 != ~compRegistered~0); {22923#true} is VALID [2022-04-28 14:49:52,664 INFO L290 TraceCheckUtils]: 2: Hoare triple {22923#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {22923#true} is VALID [2022-04-28 14:49:52,664 INFO L290 TraceCheckUtils]: 3: Hoare triple {22923#true} assume 0 == ~tmp_ndt_9~0; {22923#true} is VALID [2022-04-28 14:49:52,664 INFO L290 TraceCheckUtils]: 4: Hoare triple {22923#true} ~returnVal~0 := 0; {22923#true} is VALID [2022-04-28 14:49:52,664 INFO L290 TraceCheckUtils]: 5: Hoare triple {22923#true} assume !(~s~0 == ~NP~0); {22923#true} is VALID [2022-04-28 14:49:52,664 INFO L290 TraceCheckUtils]: 6: Hoare triple {22923#true} assume !(~s~0 == ~MPR1~0); {22923#true} is VALID [2022-04-28 14:49:52,664 INFO L290 TraceCheckUtils]: 7: Hoare triple {22923#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-28 14:49:52,664 INFO L290 TraceCheckUtils]: 8: Hoare triple {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,665 INFO L290 TraceCheckUtils]: 9: Hoare triple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,665 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {22923#true} #775#return; {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-28 14:49:52,665 INFO L290 TraceCheckUtils]: 0: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {22923#true} is VALID [2022-04-28 14:49:52,666 INFO L290 TraceCheckUtils]: 1: Hoare triple {22923#true} assume 2 == ~irpStack__MinorFunction~1; {22923#true} is VALID [2022-04-28 14:49:52,666 INFO L290 TraceCheckUtils]: 2: Hoare triple {22923#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {22923#true} is VALID [2022-04-28 14:49:52,666 INFO L290 TraceCheckUtils]: 3: Hoare triple {22923#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {22923#true} is VALID [2022-04-28 14:49:52,666 INFO L290 TraceCheckUtils]: 4: Hoare triple {22923#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {22923#true} is VALID [2022-04-28 14:49:52,666 INFO L272 TraceCheckUtils]: 5: Hoare triple {22923#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:52,666 INFO L290 TraceCheckUtils]: 6: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {22923#true} is VALID [2022-04-28 14:49:52,667 INFO L290 TraceCheckUtils]: 7: Hoare triple {22923#true} assume !(0 != ~compRegistered~0); {22923#true} is VALID [2022-04-28 14:49:52,667 INFO L290 TraceCheckUtils]: 8: Hoare triple {22923#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {22923#true} is VALID [2022-04-28 14:49:52,667 INFO L290 TraceCheckUtils]: 9: Hoare triple {22923#true} assume 0 == ~tmp_ndt_9~0; {22923#true} is VALID [2022-04-28 14:49:52,667 INFO L290 TraceCheckUtils]: 10: Hoare triple {22923#true} ~returnVal~0 := 0; {22923#true} is VALID [2022-04-28 14:49:52,667 INFO L290 TraceCheckUtils]: 11: Hoare triple {22923#true} assume !(~s~0 == ~NP~0); {22923#true} is VALID [2022-04-28 14:49:52,667 INFO L290 TraceCheckUtils]: 12: Hoare triple {22923#true} assume !(~s~0 == ~MPR1~0); {22923#true} is VALID [2022-04-28 14:49:52,667 INFO L290 TraceCheckUtils]: 13: Hoare triple {22923#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-28 14:49:52,667 INFO L290 TraceCheckUtils]: 14: Hoare triple {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,668 INFO L290 TraceCheckUtils]: 15: Hoare triple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,668 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {22923#true} #775#return; {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-28 14:49:52,669 INFO L290 TraceCheckUtils]: 17: Hoare triple {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,669 INFO L290 TraceCheckUtils]: 18: Hoare triple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} assume true; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,669 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} {22923#true} #725#return; {22954#(= |main_#t~ret32| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,671 INFO L272 TraceCheckUtils]: 0: Hoare triple {22923#true} call ULTIMATE.init(); {22956#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:49:52,671 INFO L290 TraceCheckUtils]: 1: Hoare triple {22956#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22923#true} is VALID [2022-04-28 14:49:52,671 INFO L290 TraceCheckUtils]: 2: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-28 14:49:52,671 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {22923#true} {22923#true} #783#return; {22923#true} is VALID [2022-04-28 14:49:52,671 INFO L272 TraceCheckUtils]: 4: Hoare triple {22923#true} call #t~ret81 := main(); {22923#true} is VALID [2022-04-28 14:49:52,671 INFO L290 TraceCheckUtils]: 5: Hoare triple {22923#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {22923#true} is VALID [2022-04-28 14:49:52,672 INFO L272 TraceCheckUtils]: 6: Hoare triple {22923#true} call _BLAST_init(); {22957#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:52,672 INFO L290 TraceCheckUtils]: 7: Hoare triple {22957#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-28 14:49:52,672 INFO L290 TraceCheckUtils]: 8: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-28 14:49:52,672 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {22923#true} {22923#true} #715#return; {22923#true} is VALID [2022-04-28 14:49:52,672 INFO L290 TraceCheckUtils]: 10: Hoare triple {22923#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {22923#true} is VALID [2022-04-28 14:49:52,672 INFO L290 TraceCheckUtils]: 11: Hoare triple {22923#true} assume !(0 == ~irp_choice~0); {22923#true} is VALID [2022-04-28 14:49:52,673 INFO L272 TraceCheckUtils]: 12: Hoare triple {22923#true} call stub_driver_init(); {22958#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:52,673 INFO L290 TraceCheckUtils]: 13: Hoare triple {22958#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22923#true} is VALID [2022-04-28 14:49:52,673 INFO L290 TraceCheckUtils]: 14: Hoare triple {22923#true} assume true; {22923#true} is VALID [2022-04-28 14:49:52,673 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {22923#true} {22923#true} #717#return; {22923#true} is VALID [2022-04-28 14:49:52,673 INFO L290 TraceCheckUtils]: 16: Hoare triple {22923#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {22923#true} is VALID [2022-04-28 14:49:52,673 INFO L290 TraceCheckUtils]: 17: Hoare triple {22923#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {22923#true} is VALID [2022-04-28 14:49:52,673 INFO L290 TraceCheckUtils]: 18: Hoare triple {22923#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {22923#true} is VALID [2022-04-28 14:49:52,673 INFO L290 TraceCheckUtils]: 19: Hoare triple {22923#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {22923#true} is VALID [2022-04-28 14:49:52,673 INFO L290 TraceCheckUtils]: 20: Hoare triple {22923#true} assume 4 == ~tmp_ndt_4~0; {22923#true} is VALID [2022-04-28 14:49:52,674 INFO L272 TraceCheckUtils]: 21: Hoare triple {22923#true} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:52,674 INFO L290 TraceCheckUtils]: 22: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {22923#true} is VALID [2022-04-28 14:49:52,674 INFO L290 TraceCheckUtils]: 23: Hoare triple {22923#true} assume 2 == ~irpStack__MinorFunction~1; {22923#true} is VALID [2022-04-28 14:49:52,674 INFO L290 TraceCheckUtils]: 24: Hoare triple {22923#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {22923#true} is VALID [2022-04-28 14:49:52,674 INFO L290 TraceCheckUtils]: 25: Hoare triple {22923#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {22923#true} is VALID [2022-04-28 14:49:52,674 INFO L290 TraceCheckUtils]: 26: Hoare triple {22923#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {22923#true} is VALID [2022-04-28 14:49:52,675 INFO L272 TraceCheckUtils]: 27: Hoare triple {22923#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:52,675 INFO L290 TraceCheckUtils]: 28: Hoare triple {22959#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {22923#true} is VALID [2022-04-28 14:49:52,675 INFO L290 TraceCheckUtils]: 29: Hoare triple {22923#true} assume !(0 != ~compRegistered~0); {22923#true} is VALID [2022-04-28 14:49:52,675 INFO L290 TraceCheckUtils]: 30: Hoare triple {22923#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {22923#true} is VALID [2022-04-28 14:49:52,675 INFO L290 TraceCheckUtils]: 31: Hoare triple {22923#true} assume 0 == ~tmp_ndt_9~0; {22923#true} is VALID [2022-04-28 14:49:52,675 INFO L290 TraceCheckUtils]: 32: Hoare triple {22923#true} ~returnVal~0 := 0; {22923#true} is VALID [2022-04-28 14:49:52,675 INFO L290 TraceCheckUtils]: 33: Hoare triple {22923#true} assume !(~s~0 == ~NP~0); {22923#true} is VALID [2022-04-28 14:49:52,675 INFO L290 TraceCheckUtils]: 34: Hoare triple {22923#true} assume !(~s~0 == ~MPR1~0); {22923#true} is VALID [2022-04-28 14:49:52,675 INFO L290 TraceCheckUtils]: 35: Hoare triple {22923#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-28 14:49:52,676 INFO L290 TraceCheckUtils]: 36: Hoare triple {22973#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,676 INFO L290 TraceCheckUtils]: 37: Hoare triple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,676 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {22974#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {22923#true} #775#return; {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-28 14:49:52,677 INFO L290 TraceCheckUtils]: 39: Hoare triple {22971#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,677 INFO L290 TraceCheckUtils]: 40: Hoare triple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} assume true; {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,677 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {22972#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} {22923#true} #725#return; {22954#(= |main_#t~ret32| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,678 INFO L290 TraceCheckUtils]: 42: Hoare triple {22954#(= |main_#t~ret32| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,678 INFO L290 TraceCheckUtils]: 43: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,678 INFO L290 TraceCheckUtils]: 44: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,678 INFO L290 TraceCheckUtils]: 45: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,679 INFO L290 TraceCheckUtils]: 46: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,679 INFO L290 TraceCheckUtils]: 47: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,679 INFO L290 TraceCheckUtils]: 48: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,679 INFO L290 TraceCheckUtils]: 49: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {22955#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:52,680 INFO L290 TraceCheckUtils]: 50: Hoare triple {22955#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {22924#false} is VALID [2022-04-28 14:49:52,680 INFO L272 TraceCheckUtils]: 51: Hoare triple {22924#false} call errorFn(); {22924#false} is VALID [2022-04-28 14:49:52,680 INFO L290 TraceCheckUtils]: 52: Hoare triple {22924#false} assume !false; {22924#false} is VALID [2022-04-28 14:49:52,680 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:49:52,680 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:49:52,680 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1539300171] [2022-04-28 14:49:52,680 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1539300171] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:52,680 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:52,680 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 14:49:52,681 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:49:52,681 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1744332871] [2022-04-28 14:49:52,681 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1744332871] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:52,681 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:52,681 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 14:49:52,681 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [493486681] [2022-04-28 14:49:52,681 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:49:52,681 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 53 [2022-04-28 14:49:52,681 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:49:52,682 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:49:52,709 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:52,710 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 14:49:52,710 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:52,710 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 14:49:52,710 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=105, Unknown=0, NotChecked=0, Total=132 [2022-04-28 14:49:52,710 INFO L87 Difference]: Start difference. First operand 238 states and 309 transitions. Second operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:49:55,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:55,658 INFO L93 Difference]: Finished difference Result 250 states and 321 transitions. [2022-04-28 14:49:55,658 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-04-28 14:49:55,658 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 53 [2022-04-28 14:49:55,658 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:49:55,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:49:55,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 297 transitions. [2022-04-28 14:49:55,660 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:49:55,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 297 transitions. [2022-04-28 14:49:55,662 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 11 states and 297 transitions. [2022-04-28 14:49:55,954 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 297 edges. 297 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:55,956 INFO L225 Difference]: With dead ends: 250 [2022-04-28 14:49:55,957 INFO L226 Difference]: Without dead ends: 210 [2022-04-28 14:49:55,957 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2022-04-28 14:49:55,958 INFO L413 NwaCegarLoop]: 244 mSDtfsCounter, 433 mSDsluCounter, 661 mSDsCounter, 0 mSdLazyCounter, 1249 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 433 SdHoareTripleChecker+Valid, 905 SdHoareTripleChecker+Invalid, 1323 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 1249 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-28 14:49:55,958 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [433 Valid, 905 Invalid, 1323 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 1249 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-28 14:49:55,958 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-04-28 14:49:56,287 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 210. [2022-04-28 14:49:56,287 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:49:56,288 INFO L82 GeneralOperation]: Start isEquivalent. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-28 14:49:56,288 INFO L74 IsIncluded]: Start isIncluded. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-28 14:49:56,288 INFO L87 Difference]: Start difference. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-28 14:49:56,291 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:56,291 INFO L93 Difference]: Finished difference Result 210 states and 273 transitions. [2022-04-28 14:49:56,291 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-28 14:49:56,291 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:56,292 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:56,292 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) Second operand 210 states. [2022-04-28 14:49:56,292 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) Second operand 210 states. [2022-04-28 14:49:56,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:56,295 INFO L93 Difference]: Finished difference Result 210 states and 273 transitions. [2022-04-28 14:49:56,295 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-28 14:49:56,295 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:49:56,295 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:49:56,295 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:49:56,295 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:49:56,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-28 14:49:56,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 273 transitions. [2022-04-28 14:49:56,299 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 273 transitions. Word has length 53 [2022-04-28 14:49:56,299 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:49:56,299 INFO L495 AbstractCegarLoop]: Abstraction has 210 states and 273 transitions. [2022-04-28 14:49:56,299 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:49:56,299 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 210 states and 273 transitions. [2022-04-28 14:49:56,613 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 273 edges. 273 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:56,613 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-28 14:49:56,614 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-04-28 14:49:56,614 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:49:56,614 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:49:56,614 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-04-28 14:49:56,614 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:49:56,614 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:49:56,614 INFO L85 PathProgramCache]: Analyzing trace with hash -438914869, now seen corresponding path program 1 times [2022-04-28 14:49:56,614 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:56,614 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [309412300] [2022-04-28 14:49:56,615 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:49:56,615 INFO L85 PathProgramCache]: Analyzing trace with hash -438914869, now seen corresponding path program 2 times [2022-04-28 14:49:56,615 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:49:56,615 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1826698178] [2022-04-28 14:49:56,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:49:56,615 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:49:56,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:56,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:49:56,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:56,687 INFO L290 TraceCheckUtils]: 0: Hoare triple {24354#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {24319#true} is VALID [2022-04-28 14:49:56,687 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-28 14:49:56,687 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24319#true} {24319#true} #783#return; {24319#true} is VALID [2022-04-28 14:49:56,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:49:56,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:56,710 INFO L290 TraceCheckUtils]: 0: Hoare triple {24355#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-28 14:49:56,710 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-28 14:49:56,710 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24319#true} {24319#true} #715#return; {24319#true} is VALID [2022-04-28 14:49:56,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:49:56,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:56,723 INFO L290 TraceCheckUtils]: 0: Hoare triple {24356#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-28 14:49:56,723 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-28 14:49:56,723 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24319#true} {24319#true} #717#return; {24319#true} is VALID [2022-04-28 14:49:56,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-28 14:49:56,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:56,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:49:56,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:49:56,789 INFO L290 TraceCheckUtils]: 0: Hoare triple {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24319#true} is VALID [2022-04-28 14:49:56,789 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume !(0 != ~compRegistered~0); {24319#true} is VALID [2022-04-28 14:49:56,790 INFO L290 TraceCheckUtils]: 2: Hoare triple {24319#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24319#true} is VALID [2022-04-28 14:49:56,790 INFO L290 TraceCheckUtils]: 3: Hoare triple {24319#true} assume 0 == ~tmp_ndt_6~0; {24319#true} is VALID [2022-04-28 14:49:56,790 INFO L290 TraceCheckUtils]: 4: Hoare triple {24319#true} ~returnVal2~0 := 0; {24319#true} is VALID [2022-04-28 14:49:56,790 INFO L290 TraceCheckUtils]: 5: Hoare triple {24319#true} assume !(~s~0 == ~NP~0); {24319#true} is VALID [2022-04-28 14:49:56,790 INFO L290 TraceCheckUtils]: 6: Hoare triple {24319#true} assume !(~s~0 == ~MPR1~0); {24319#true} is VALID [2022-04-28 14:49:56,790 INFO L290 TraceCheckUtils]: 7: Hoare triple {24319#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 14:49:56,791 INFO L290 TraceCheckUtils]: 8: Hoare triple {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,791 INFO L290 TraceCheckUtils]: 9: Hoare triple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,791 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24319#true} #763#return; {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,792 INFO L290 TraceCheckUtils]: 0: Hoare triple {24357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {24319#true} is VALID [2022-04-28 14:49:56,792 INFO L290 TraceCheckUtils]: 1: Hoare triple {24319#true} assume !(0 == ~irpStack__MinorFunction~0); {24319#true} is VALID [2022-04-28 14:49:56,792 INFO L290 TraceCheckUtils]: 2: Hoare triple {24319#true} assume 23 == ~irpStack__MinorFunction~0; {24319#true} is VALID [2022-04-28 14:49:56,792 INFO L290 TraceCheckUtils]: 3: Hoare triple {24319#true} ~devExt__SurpriseRemoved~0 := 1; {24319#true} is VALID [2022-04-28 14:49:56,792 INFO L290 TraceCheckUtils]: 4: Hoare triple {24319#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {24319#true} is VALID [2022-04-28 14:49:56,792 INFO L290 TraceCheckUtils]: 5: Hoare triple {24319#true} #t~post12 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post12;havoc #t~post12;#t~post13 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post13;havoc #t~post13; {24319#true} is VALID [2022-04-28 14:49:56,793 INFO L272 TraceCheckUtils]: 6: Hoare triple {24319#true} call #t~ret14 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:56,793 INFO L290 TraceCheckUtils]: 7: Hoare triple {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24319#true} is VALID [2022-04-28 14:49:56,793 INFO L290 TraceCheckUtils]: 8: Hoare triple {24319#true} assume !(0 != ~compRegistered~0); {24319#true} is VALID [2022-04-28 14:49:56,793 INFO L290 TraceCheckUtils]: 9: Hoare triple {24319#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24319#true} is VALID [2022-04-28 14:49:56,793 INFO L290 TraceCheckUtils]: 10: Hoare triple {24319#true} assume 0 == ~tmp_ndt_6~0; {24319#true} is VALID [2022-04-28 14:49:56,793 INFO L290 TraceCheckUtils]: 11: Hoare triple {24319#true} ~returnVal2~0 := 0; {24319#true} is VALID [2022-04-28 14:49:56,793 INFO L290 TraceCheckUtils]: 12: Hoare triple {24319#true} assume !(~s~0 == ~NP~0); {24319#true} is VALID [2022-04-28 14:49:56,793 INFO L290 TraceCheckUtils]: 13: Hoare triple {24319#true} assume !(~s~0 == ~MPR1~0); {24319#true} is VALID [2022-04-28 14:49:56,793 INFO L290 TraceCheckUtils]: 14: Hoare triple {24319#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 14:49:56,794 INFO L290 TraceCheckUtils]: 15: Hoare triple {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,794 INFO L290 TraceCheckUtils]: 16: Hoare triple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,794 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24319#true} #763#return; {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,795 INFO L290 TraceCheckUtils]: 18: Hoare triple {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;~status~0 := #t~ret14;havoc #t~ret14; {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,795 INFO L290 TraceCheckUtils]: 19: Hoare triple {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,795 INFO L290 TraceCheckUtils]: 20: Hoare triple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,796 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {24319#true} #723#return; {24352#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,797 INFO L272 TraceCheckUtils]: 0: Hoare triple {24319#true} call ULTIMATE.init(); {24354#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:49:56,797 INFO L290 TraceCheckUtils]: 1: Hoare triple {24354#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {24319#true} is VALID [2022-04-28 14:49:56,797 INFO L290 TraceCheckUtils]: 2: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-28 14:49:56,797 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {24319#true} {24319#true} #783#return; {24319#true} is VALID [2022-04-28 14:49:56,797 INFO L272 TraceCheckUtils]: 4: Hoare triple {24319#true} call #t~ret81 := main(); {24319#true} is VALID [2022-04-28 14:49:56,797 INFO L290 TraceCheckUtils]: 5: Hoare triple {24319#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {24319#true} is VALID [2022-04-28 14:49:56,798 INFO L272 TraceCheckUtils]: 6: Hoare triple {24319#true} call _BLAST_init(); {24355#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:56,798 INFO L290 TraceCheckUtils]: 7: Hoare triple {24355#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-28 14:49:56,798 INFO L290 TraceCheckUtils]: 8: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-28 14:49:56,798 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {24319#true} {24319#true} #715#return; {24319#true} is VALID [2022-04-28 14:49:56,798 INFO L290 TraceCheckUtils]: 10: Hoare triple {24319#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {24319#true} is VALID [2022-04-28 14:49:56,798 INFO L290 TraceCheckUtils]: 11: Hoare triple {24319#true} assume !(0 == ~irp_choice~0); {24319#true} is VALID [2022-04-28 14:49:56,799 INFO L272 TraceCheckUtils]: 12: Hoare triple {24319#true} call stub_driver_init(); {24356#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:56,799 INFO L290 TraceCheckUtils]: 13: Hoare triple {24356#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24319#true} is VALID [2022-04-28 14:49:56,799 INFO L290 TraceCheckUtils]: 14: Hoare triple {24319#true} assume true; {24319#true} is VALID [2022-04-28 14:49:56,799 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {24319#true} {24319#true} #717#return; {24319#true} is VALID [2022-04-28 14:49:56,799 INFO L290 TraceCheckUtils]: 16: Hoare triple {24319#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {24319#true} is VALID [2022-04-28 14:49:56,799 INFO L290 TraceCheckUtils]: 17: Hoare triple {24319#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {24319#true} is VALID [2022-04-28 14:49:56,799 INFO L290 TraceCheckUtils]: 18: Hoare triple {24319#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {24319#true} is VALID [2022-04-28 14:49:56,799 INFO L290 TraceCheckUtils]: 19: Hoare triple {24319#true} assume 3 == ~tmp_ndt_3~0; {24319#true} is VALID [2022-04-28 14:49:56,800 INFO L272 TraceCheckUtils]: 20: Hoare triple {24319#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {24357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:56,800 INFO L290 TraceCheckUtils]: 21: Hoare triple {24357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {24319#true} is VALID [2022-04-28 14:49:56,800 INFO L290 TraceCheckUtils]: 22: Hoare triple {24319#true} assume !(0 == ~irpStack__MinorFunction~0); {24319#true} is VALID [2022-04-28 14:49:56,800 INFO L290 TraceCheckUtils]: 23: Hoare triple {24319#true} assume 23 == ~irpStack__MinorFunction~0; {24319#true} is VALID [2022-04-28 14:49:56,800 INFO L290 TraceCheckUtils]: 24: Hoare triple {24319#true} ~devExt__SurpriseRemoved~0 := 1; {24319#true} is VALID [2022-04-28 14:49:56,800 INFO L290 TraceCheckUtils]: 25: Hoare triple {24319#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {24319#true} is VALID [2022-04-28 14:49:56,800 INFO L290 TraceCheckUtils]: 26: Hoare triple {24319#true} #t~post12 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post12;havoc #t~post12;#t~post13 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post13;havoc #t~post13; {24319#true} is VALID [2022-04-28 14:49:56,801 INFO L272 TraceCheckUtils]: 27: Hoare triple {24319#true} call #t~ret14 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:49:56,801 INFO L290 TraceCheckUtils]: 28: Hoare triple {24372#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24319#true} is VALID [2022-04-28 14:49:56,801 INFO L290 TraceCheckUtils]: 29: Hoare triple {24319#true} assume !(0 != ~compRegistered~0); {24319#true} is VALID [2022-04-28 14:49:56,801 INFO L290 TraceCheckUtils]: 30: Hoare triple {24319#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24319#true} is VALID [2022-04-28 14:49:56,801 INFO L290 TraceCheckUtils]: 31: Hoare triple {24319#true} assume 0 == ~tmp_ndt_6~0; {24319#true} is VALID [2022-04-28 14:49:56,801 INFO L290 TraceCheckUtils]: 32: Hoare triple {24319#true} ~returnVal2~0 := 0; {24319#true} is VALID [2022-04-28 14:49:56,801 INFO L290 TraceCheckUtils]: 33: Hoare triple {24319#true} assume !(~s~0 == ~NP~0); {24319#true} is VALID [2022-04-28 14:49:56,801 INFO L290 TraceCheckUtils]: 34: Hoare triple {24319#true} assume !(~s~0 == ~MPR1~0); {24319#true} is VALID [2022-04-28 14:49:56,802 INFO L290 TraceCheckUtils]: 35: Hoare triple {24319#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 14:49:56,802 INFO L290 TraceCheckUtils]: 36: Hoare triple {24373#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,802 INFO L290 TraceCheckUtils]: 37: Hoare triple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,803 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {24374#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24319#true} #763#return; {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,803 INFO L290 TraceCheckUtils]: 39: Hoare triple {24369#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;~status~0 := #t~ret14;havoc #t~ret14; {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,803 INFO L290 TraceCheckUtils]: 40: Hoare triple {24370#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,803 INFO L290 TraceCheckUtils]: 41: Hoare triple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,804 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {24371#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {24319#true} #723#return; {24352#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,804 INFO L290 TraceCheckUtils]: 43: Hoare triple {24352#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,805 INFO L290 TraceCheckUtils]: 44: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,805 INFO L290 TraceCheckUtils]: 45: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,805 INFO L290 TraceCheckUtils]: 46: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,805 INFO L290 TraceCheckUtils]: 47: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,805 INFO L290 TraceCheckUtils]: 48: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,806 INFO L290 TraceCheckUtils]: 49: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,806 INFO L290 TraceCheckUtils]: 50: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {24353#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:49:56,806 INFO L290 TraceCheckUtils]: 51: Hoare triple {24353#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {24320#false} is VALID [2022-04-28 14:49:56,806 INFO L272 TraceCheckUtils]: 52: Hoare triple {24320#false} call errorFn(); {24320#false} is VALID [2022-04-28 14:49:56,806 INFO L290 TraceCheckUtils]: 53: Hoare triple {24320#false} assume !false; {24320#false} is VALID [2022-04-28 14:49:56,806 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:49:56,807 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:49:56,807 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1826698178] [2022-04-28 14:49:56,807 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1826698178] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:56,807 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:56,807 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 14:49:56,807 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:49:56,807 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [309412300] [2022-04-28 14:49:56,807 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [309412300] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:49:56,807 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:49:56,807 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 14:49:56,807 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1638650292] [2022-04-28 14:49:56,807 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:49:56,808 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 54 [2022-04-28 14:49:56,808 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:49:56,808 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:49:56,838 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 54 edges. 54 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:56,838 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-28 14:49:56,839 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:49:56,840 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-28 14:49:56,840 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-04-28 14:49:56,840 INFO L87 Difference]: Start difference. First operand 210 states and 273 transitions. Second operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:49:59,562 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:49:59,562 INFO L93 Difference]: Finished difference Result 226 states and 289 transitions. [2022-04-28 14:49:59,562 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 14:49:59,562 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 54 [2022-04-28 14:49:59,562 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:49:59,563 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:49:59,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 265 transitions. [2022-04-28 14:49:59,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:49:59,566 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 265 transitions. [2022-04-28 14:49:59,566 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 265 transitions. [2022-04-28 14:49:59,810 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 265 edges. 265 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:49:59,813 INFO L225 Difference]: With dead ends: 226 [2022-04-28 14:49:59,813 INFO L226 Difference]: Without dead ends: 205 [2022-04-28 14:49:59,814 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-04-28 14:49:59,814 INFO L413 NwaCegarLoop]: 214 mSDtfsCounter, 246 mSDsluCounter, 625 mSDsCounter, 0 mSdLazyCounter, 1286 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 246 SdHoareTripleChecker+Valid, 839 SdHoareTripleChecker+Invalid, 1337 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 1286 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-28 14:49:59,814 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [246 Valid, 839 Invalid, 1337 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 1286 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-28 14:49:59,815 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2022-04-28 14:50:00,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 205. [2022-04-28 14:50:00,116 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:50:00,116 INFO L82 GeneralOperation]: Start isEquivalent. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-28 14:50:00,116 INFO L74 IsIncluded]: Start isIncluded. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-28 14:50:00,117 INFO L87 Difference]: Start difference. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-28 14:50:00,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:00,120 INFO L93 Difference]: Finished difference Result 205 states and 266 transitions. [2022-04-28 14:50:00,120 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-28 14:50:00,120 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:00,120 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:00,120 INFO L74 IsIncluded]: Start isIncluded. First operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) Second operand 205 states. [2022-04-28 14:50:00,121 INFO L87 Difference]: Start difference. First operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) Second operand 205 states. [2022-04-28 14:50:00,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:00,124 INFO L93 Difference]: Finished difference Result 205 states and 266 transitions. [2022-04-28 14:50:00,124 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-28 14:50:00,124 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:00,124 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:00,124 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:50:00,124 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:50:00,125 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-28 14:50:00,128 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 205 states to 205 states and 266 transitions. [2022-04-28 14:50:00,128 INFO L78 Accepts]: Start accepts. Automaton has 205 states and 266 transitions. Word has length 54 [2022-04-28 14:50:00,128 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:50:00,128 INFO L495 AbstractCegarLoop]: Abstraction has 205 states and 266 transitions. [2022-04-28 14:50:00,128 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:50:00,128 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 205 states and 266 transitions. [2022-04-28 14:50:00,449 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 266 edges. 266 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:00,449 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-28 14:50:00,456 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-28 14:50:00,456 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:50:00,456 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:50:00,456 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-04-28 14:50:00,456 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:50:00,456 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:50:00,456 INFO L85 PathProgramCache]: Analyzing trace with hash 432963036, now seen corresponding path program 1 times [2022-04-28 14:50:00,457 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:00,457 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1135167031] [2022-04-28 14:50:00,457 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:50:00,457 INFO L85 PathProgramCache]: Analyzing trace with hash 432963036, now seen corresponding path program 2 times [2022-04-28 14:50:00,457 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:50:00,457 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [597695008] [2022-04-28 14:50:00,457 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:50:00,457 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:50:00,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:00,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:50:00,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:00,528 INFO L290 TraceCheckUtils]: 0: Hoare triple {25686#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {25653#true} is VALID [2022-04-28 14:50:00,528 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 14:50:00,528 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #783#return; {25653#true} is VALID [2022-04-28 14:50:00,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:50:00,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:00,554 INFO L290 TraceCheckUtils]: 0: Hoare triple {25687#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-28 14:50:00,554 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 14:50:00,554 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #715#return; {25653#true} is VALID [2022-04-28 14:50:00,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:50:00,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:00,570 INFO L290 TraceCheckUtils]: 0: Hoare triple {25688#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-28 14:50:00,570 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 14:50:00,570 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #717#return; {25653#true} is VALID [2022-04-28 14:50:00,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 14:50:00,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:00,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 14:50:00,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:00,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 14:50:00,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:00,631 INFO L290 TraceCheckUtils]: 0: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-28 14:50:00,631 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 14:50:00,631 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-28 14:50:00,631 INFO L290 TraceCheckUtils]: 0: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25653#true} is VALID [2022-04-28 14:50:00,631 INFO L272 TraceCheckUtils]: 1: Hoare triple {25653#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:50:00,632 INFO L290 TraceCheckUtils]: 2: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-28 14:50:00,632 INFO L290 TraceCheckUtils]: 3: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 14:50:00,632 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-28 14:50:00,632 INFO L290 TraceCheckUtils]: 5: Hoare triple {25653#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25653#true} is VALID [2022-04-28 14:50:00,632 INFO L290 TraceCheckUtils]: 6: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 14:50:00,632 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {25653#true} {25653#true} #777#return; {25653#true} is VALID [2022-04-28 14:50:00,632 INFO L290 TraceCheckUtils]: 0: Hoare triple {25689#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {25653#true} is VALID [2022-04-28 14:50:00,632 INFO L290 TraceCheckUtils]: 1: Hoare triple {25653#true} assume 0 != ~compRegistered~0; {25653#true} is VALID [2022-04-28 14:50:00,633 INFO L272 TraceCheckUtils]: 2: Hoare triple {25653#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:50:00,633 INFO L290 TraceCheckUtils]: 3: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25653#true} is VALID [2022-04-28 14:50:00,633 INFO L272 TraceCheckUtils]: 4: Hoare triple {25653#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:50:00,633 INFO L290 TraceCheckUtils]: 5: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-28 14:50:00,633 INFO L290 TraceCheckUtils]: 6: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 14:50:00,634 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-28 14:50:00,634 INFO L290 TraceCheckUtils]: 8: Hoare triple {25653#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25653#true} is VALID [2022-04-28 14:50:00,634 INFO L290 TraceCheckUtils]: 9: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 14:50:00,634 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {25653#true} {25653#true} #777#return; {25653#true} is VALID [2022-04-28 14:50:00,634 INFO L290 TraceCheckUtils]: 11: Hoare triple {25653#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {25653#true} is VALID [2022-04-28 14:50:00,634 INFO L290 TraceCheckUtils]: 12: Hoare triple {25653#true} assume !(-1073741802 == ~__cil_tmp7~0); {25653#true} is VALID [2022-04-28 14:50:00,634 INFO L290 TraceCheckUtils]: 13: Hoare triple {25653#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {25653#true} is VALID [2022-04-28 14:50:00,634 INFO L290 TraceCheckUtils]: 14: Hoare triple {25653#true} assume 0 == ~tmp_ndt_6~0; {25653#true} is VALID [2022-04-28 14:50:00,634 INFO L290 TraceCheckUtils]: 15: Hoare triple {25653#true} ~returnVal2~0 := 0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:00,635 INFO L290 TraceCheckUtils]: 16: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:00,635 INFO L290 TraceCheckUtils]: 17: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 14:50:00,635 INFO L290 TraceCheckUtils]: 18: Hoare triple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 14:50:00,636 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {25653#true} #755#return; {25684#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-28 14:50:00,637 INFO L272 TraceCheckUtils]: 0: Hoare triple {25653#true} call ULTIMATE.init(); {25686#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:50:00,637 INFO L290 TraceCheckUtils]: 1: Hoare triple {25686#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {25653#true} is VALID [2022-04-28 14:50:00,637 INFO L290 TraceCheckUtils]: 2: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 14:50:00,637 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {25653#true} {25653#true} #783#return; {25653#true} is VALID [2022-04-28 14:50:00,637 INFO L272 TraceCheckUtils]: 4: Hoare triple {25653#true} call #t~ret81 := main(); {25653#true} is VALID [2022-04-28 14:50:00,637 INFO L290 TraceCheckUtils]: 5: Hoare triple {25653#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {25653#true} is VALID [2022-04-28 14:50:00,638 INFO L272 TraceCheckUtils]: 6: Hoare triple {25653#true} call _BLAST_init(); {25687#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:00,638 INFO L290 TraceCheckUtils]: 7: Hoare triple {25687#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-28 14:50:00,638 INFO L290 TraceCheckUtils]: 8: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 14:50:00,638 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {25653#true} {25653#true} #715#return; {25653#true} is VALID [2022-04-28 14:50:00,638 INFO L290 TraceCheckUtils]: 10: Hoare triple {25653#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {25653#true} is VALID [2022-04-28 14:50:00,639 INFO L290 TraceCheckUtils]: 11: Hoare triple {25653#true} assume !(0 == ~irp_choice~0); {25653#true} is VALID [2022-04-28 14:50:00,639 INFO L272 TraceCheckUtils]: 12: Hoare triple {25653#true} call stub_driver_init(); {25688#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:00,639 INFO L290 TraceCheckUtils]: 13: Hoare triple {25688#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25653#true} is VALID [2022-04-28 14:50:00,639 INFO L290 TraceCheckUtils]: 14: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 14:50:00,639 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {25653#true} {25653#true} #717#return; {25653#true} is VALID [2022-04-28 14:50:00,639 INFO L290 TraceCheckUtils]: 16: Hoare triple {25653#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {25653#true} is VALID [2022-04-28 14:50:00,639 INFO L290 TraceCheckUtils]: 17: Hoare triple {25653#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {25653#true} is VALID [2022-04-28 14:50:00,639 INFO L290 TraceCheckUtils]: 18: Hoare triple {25653#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {25653#true} is VALID [2022-04-28 14:50:00,640 INFO L290 TraceCheckUtils]: 19: Hoare triple {25653#true} assume 3 == ~tmp_ndt_3~0; {25653#true} is VALID [2022-04-28 14:50:00,640 INFO L272 TraceCheckUtils]: 20: Hoare triple {25653#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {25653#true} is VALID [2022-04-28 14:50:00,640 INFO L290 TraceCheckUtils]: 21: Hoare triple {25653#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {25653#true} is VALID [2022-04-28 14:50:00,640 INFO L290 TraceCheckUtils]: 22: Hoare triple {25653#true} assume 0 == ~irpStack__MinorFunction~0; {25653#true} is VALID [2022-04-28 14:50:00,640 INFO L290 TraceCheckUtils]: 23: Hoare triple {25653#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {25653#true} is VALID [2022-04-28 14:50:00,640 INFO L290 TraceCheckUtils]: 24: Hoare triple {25653#true} assume !(~s~0 != ~NP~0); {25653#true} is VALID [2022-04-28 14:50:00,640 INFO L290 TraceCheckUtils]: 25: Hoare triple {25653#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {25653#true} is VALID [2022-04-28 14:50:00,640 INFO L290 TraceCheckUtils]: 26: Hoare triple {25653#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {25653#true} is VALID [2022-04-28 14:50:00,641 INFO L272 TraceCheckUtils]: 27: Hoare triple {25653#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {25689#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:00,641 INFO L290 TraceCheckUtils]: 28: Hoare triple {25689#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {25653#true} is VALID [2022-04-28 14:50:00,641 INFO L290 TraceCheckUtils]: 29: Hoare triple {25653#true} assume 0 != ~compRegistered~0; {25653#true} is VALID [2022-04-28 14:50:00,641 INFO L272 TraceCheckUtils]: 30: Hoare triple {25653#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:50:00,641 INFO L290 TraceCheckUtils]: 31: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25653#true} is VALID [2022-04-28 14:50:00,642 INFO L272 TraceCheckUtils]: 32: Hoare triple {25653#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:50:00,642 INFO L290 TraceCheckUtils]: 33: Hoare triple {25700#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25653#true} is VALID [2022-04-28 14:50:00,642 INFO L290 TraceCheckUtils]: 34: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 14:50:00,642 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {25653#true} {25653#true} #713#return; {25653#true} is VALID [2022-04-28 14:50:00,642 INFO L290 TraceCheckUtils]: 36: Hoare triple {25653#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25653#true} is VALID [2022-04-28 14:50:00,642 INFO L290 TraceCheckUtils]: 37: Hoare triple {25653#true} assume true; {25653#true} is VALID [2022-04-28 14:50:00,642 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {25653#true} {25653#true} #777#return; {25653#true} is VALID [2022-04-28 14:50:00,642 INFO L290 TraceCheckUtils]: 39: Hoare triple {25653#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {25653#true} is VALID [2022-04-28 14:50:00,642 INFO L290 TraceCheckUtils]: 40: Hoare triple {25653#true} assume !(-1073741802 == ~__cil_tmp7~0); {25653#true} is VALID [2022-04-28 14:50:00,642 INFO L290 TraceCheckUtils]: 41: Hoare triple {25653#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {25653#true} is VALID [2022-04-28 14:50:00,642 INFO L290 TraceCheckUtils]: 42: Hoare triple {25653#true} assume 0 == ~tmp_ndt_6~0; {25653#true} is VALID [2022-04-28 14:50:00,643 INFO L290 TraceCheckUtils]: 43: Hoare triple {25653#true} ~returnVal2~0 := 0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:00,643 INFO L290 TraceCheckUtils]: 44: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:00,643 INFO L290 TraceCheckUtils]: 45: Hoare triple {25698#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 14:50:00,644 INFO L290 TraceCheckUtils]: 46: Hoare triple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 14:50:00,644 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {25699#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {25653#true} #755#return; {25684#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-28 14:50:00,645 INFO L290 TraceCheckUtils]: 48: Hoare triple {25684#(= |KbFilter_PnP_#t~ret10| 0)} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {25685#(= KbFilter_PnP_~__cil_tmp23~0 0)} is VALID [2022-04-28 14:50:00,645 INFO L290 TraceCheckUtils]: 49: Hoare triple {25685#(= KbFilter_PnP_~__cil_tmp23~0 0)} assume 259 == ~__cil_tmp23~0; {25654#false} is VALID [2022-04-28 14:50:00,645 INFO L272 TraceCheckUtils]: 50: Hoare triple {25654#false} call #t~ret11 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {25654#false} is VALID [2022-04-28 14:50:00,645 INFO L290 TraceCheckUtils]: 51: Hoare triple {25654#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {25654#false} is VALID [2022-04-28 14:50:00,645 INFO L290 TraceCheckUtils]: 52: Hoare triple {25654#false} assume !(~s~0 == ~MPR3~0); {25654#false} is VALID [2022-04-28 14:50:00,645 INFO L290 TraceCheckUtils]: 53: Hoare triple {25654#false} assume !(1 == ~customIrp~0); {25654#false} is VALID [2022-04-28 14:50:00,645 INFO L290 TraceCheckUtils]: 54: Hoare triple {25654#false} assume ~s~0 == ~MPR3~0; {25654#false} is VALID [2022-04-28 14:50:00,645 INFO L272 TraceCheckUtils]: 55: Hoare triple {25654#false} call errorFn(); {25654#false} is VALID [2022-04-28 14:50:00,645 INFO L290 TraceCheckUtils]: 56: Hoare triple {25654#false} assume !false; {25654#false} is VALID [2022-04-28 14:50:00,646 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:50:00,646 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:50:00,646 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [597695008] [2022-04-28 14:50:00,646 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [597695008] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:00,646 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:00,646 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 14:50:00,646 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:50:00,646 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1135167031] [2022-04-28 14:50:00,646 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1135167031] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:00,646 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:00,646 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 14:50:00,646 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [519790592] [2022-04-28 14:50:00,647 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:50:00,647 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-28 14:50:00,647 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:50:00,647 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:00,679 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:00,679 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 14:50:00,679 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:00,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 14:50:00,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-28 14:50:00,680 INFO L87 Difference]: Start difference. First operand 205 states and 266 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:02,833 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:02,833 INFO L93 Difference]: Finished difference Result 263 states and 337 transitions. [2022-04-28 14:50:02,833 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-28 14:50:02,833 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-28 14:50:02,833 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:50:02,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:02,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 302 transitions. [2022-04-28 14:50:02,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:02,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 302 transitions. [2022-04-28 14:50:02,837 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 302 transitions. [2022-04-28 14:50:03,096 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 302 edges. 302 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:03,101 INFO L225 Difference]: With dead ends: 263 [2022-04-28 14:50:03,101 INFO L226 Difference]: Without dead ends: 222 [2022-04-28 14:50:03,102 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-04-28 14:50:03,102 INFO L413 NwaCegarLoop]: 203 mSDtfsCounter, 155 mSDsluCounter, 448 mSDsCounter, 0 mSdLazyCounter, 796 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 651 SdHoareTripleChecker+Invalid, 837 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 796 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-28 14:50:03,102 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [155 Valid, 651 Invalid, 837 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 796 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-28 14:50:03,103 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2022-04-28 14:50:03,440 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 210. [2022-04-28 14:50:03,441 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:50:03,441 INFO L82 GeneralOperation]: Start isEquivalent. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 14:50:03,441 INFO L74 IsIncluded]: Start isIncluded. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 14:50:03,442 INFO L87 Difference]: Start difference. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 14:50:03,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:03,445 INFO L93 Difference]: Finished difference Result 222 states and 287 transitions. [2022-04-28 14:50:03,445 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 287 transitions. [2022-04-28 14:50:03,445 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:03,445 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:03,445 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 222 states. [2022-04-28 14:50:03,446 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 222 states. [2022-04-28 14:50:03,448 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:03,448 INFO L93 Difference]: Finished difference Result 222 states and 287 transitions. [2022-04-28 14:50:03,449 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 287 transitions. [2022-04-28 14:50:03,449 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:03,449 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:03,449 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:50:03,449 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:50:03,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 14:50:03,452 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 271 transitions. [2022-04-28 14:50:03,452 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 271 transitions. Word has length 57 [2022-04-28 14:50:03,452 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:50:03,452 INFO L495 AbstractCegarLoop]: Abstraction has 210 states and 271 transitions. [2022-04-28 14:50:03,453 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:03,453 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 210 states and 271 transitions. [2022-04-28 14:50:03,777 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 271 edges. 271 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:03,777 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 271 transitions. [2022-04-28 14:50:03,777 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-28 14:50:03,778 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:50:03,778 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:50:03,778 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-04-28 14:50:03,778 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:50:03,778 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:50:03,778 INFO L85 PathProgramCache]: Analyzing trace with hash 1039954733, now seen corresponding path program 1 times [2022-04-28 14:50:03,778 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:03,778 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [644972368] [2022-04-28 14:50:03,778 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:50:03,779 INFO L85 PathProgramCache]: Analyzing trace with hash 1039954733, now seen corresponding path program 2 times [2022-04-28 14:50:03,779 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:50:03,779 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [179630793] [2022-04-28 14:50:03,779 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:50:03,779 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:50:03,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:03,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:50:03,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:03,848 INFO L290 TraceCheckUtils]: 0: Hoare triple {27137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {27104#true} is VALID [2022-04-28 14:50:03,848 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 14:50:03,848 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #783#return; {27104#true} is VALID [2022-04-28 14:50:03,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:50:03,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:03,873 INFO L290 TraceCheckUtils]: 0: Hoare triple {27138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-28 14:50:03,873 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 14:50:03,873 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #715#return; {27104#true} is VALID [2022-04-28 14:50:03,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:50:03,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:03,888 INFO L290 TraceCheckUtils]: 0: Hoare triple {27139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-28 14:50:03,888 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 14:50:03,888 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #717#return; {27104#true} is VALID [2022-04-28 14:50:03,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 14:50:03,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:03,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 14:50:03,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:03,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 14:50:03,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:03,944 INFO L290 TraceCheckUtils]: 0: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-28 14:50:03,944 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 14:50:03,944 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-28 14:50:03,944 INFO L290 TraceCheckUtils]: 0: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {27104#true} is VALID [2022-04-28 14:50:03,944 INFO L272 TraceCheckUtils]: 1: Hoare triple {27104#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:50:03,945 INFO L290 TraceCheckUtils]: 2: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-28 14:50:03,945 INFO L290 TraceCheckUtils]: 3: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 14:50:03,945 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-28 14:50:03,945 INFO L290 TraceCheckUtils]: 5: Hoare triple {27104#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {27104#true} is VALID [2022-04-28 14:50:03,945 INFO L290 TraceCheckUtils]: 6: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 14:50:03,945 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {27104#true} {27104#true} #777#return; {27104#true} is VALID [2022-04-28 14:50:03,945 INFO L290 TraceCheckUtils]: 0: Hoare triple {27140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {27104#true} is VALID [2022-04-28 14:50:03,945 INFO L290 TraceCheckUtils]: 1: Hoare triple {27104#true} assume 0 != ~compRegistered~0; {27104#true} is VALID [2022-04-28 14:50:03,946 INFO L272 TraceCheckUtils]: 2: Hoare triple {27104#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:50:03,946 INFO L290 TraceCheckUtils]: 3: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {27104#true} is VALID [2022-04-28 14:50:03,946 INFO L272 TraceCheckUtils]: 4: Hoare triple {27104#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:50:03,946 INFO L290 TraceCheckUtils]: 5: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-28 14:50:03,946 INFO L290 TraceCheckUtils]: 6: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 14:50:03,946 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-28 14:50:03,947 INFO L290 TraceCheckUtils]: 8: Hoare triple {27104#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {27104#true} is VALID [2022-04-28 14:50:03,947 INFO L290 TraceCheckUtils]: 9: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 14:50:03,947 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {27104#true} {27104#true} #777#return; {27104#true} is VALID [2022-04-28 14:50:03,947 INFO L290 TraceCheckUtils]: 11: Hoare triple {27104#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {27104#true} is VALID [2022-04-28 14:50:03,947 INFO L290 TraceCheckUtils]: 12: Hoare triple {27104#true} assume !(-1073741802 == ~__cil_tmp7~0); {27104#true} is VALID [2022-04-28 14:50:03,947 INFO L290 TraceCheckUtils]: 13: Hoare triple {27104#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {27104#true} is VALID [2022-04-28 14:50:03,947 INFO L290 TraceCheckUtils]: 14: Hoare triple {27104#true} assume 0 == ~tmp_ndt_6~0; {27104#true} is VALID [2022-04-28 14:50:03,947 INFO L290 TraceCheckUtils]: 15: Hoare triple {27104#true} ~returnVal2~0 := 0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:03,948 INFO L290 TraceCheckUtils]: 16: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:03,948 INFO L290 TraceCheckUtils]: 17: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 14:50:03,948 INFO L290 TraceCheckUtils]: 18: Hoare triple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 14:50:03,949 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {27104#true} #755#return; {27135#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-28 14:50:03,950 INFO L272 TraceCheckUtils]: 0: Hoare triple {27104#true} call ULTIMATE.init(); {27137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:50:03,950 INFO L290 TraceCheckUtils]: 1: Hoare triple {27137#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {27104#true} is VALID [2022-04-28 14:50:03,950 INFO L290 TraceCheckUtils]: 2: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 14:50:03,950 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {27104#true} {27104#true} #783#return; {27104#true} is VALID [2022-04-28 14:50:03,950 INFO L272 TraceCheckUtils]: 4: Hoare triple {27104#true} call #t~ret81 := main(); {27104#true} is VALID [2022-04-28 14:50:03,951 INFO L290 TraceCheckUtils]: 5: Hoare triple {27104#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {27104#true} is VALID [2022-04-28 14:50:03,951 INFO L272 TraceCheckUtils]: 6: Hoare triple {27104#true} call _BLAST_init(); {27138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:03,951 INFO L290 TraceCheckUtils]: 7: Hoare triple {27138#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-28 14:50:03,952 INFO L290 TraceCheckUtils]: 8: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 14:50:03,952 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {27104#true} {27104#true} #715#return; {27104#true} is VALID [2022-04-28 14:50:03,952 INFO L290 TraceCheckUtils]: 10: Hoare triple {27104#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {27104#true} is VALID [2022-04-28 14:50:03,952 INFO L290 TraceCheckUtils]: 11: Hoare triple {27104#true} assume !(0 == ~irp_choice~0); {27104#true} is VALID [2022-04-28 14:50:03,952 INFO L272 TraceCheckUtils]: 12: Hoare triple {27104#true} call stub_driver_init(); {27139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:03,952 INFO L290 TraceCheckUtils]: 13: Hoare triple {27139#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {27104#true} is VALID [2022-04-28 14:50:03,952 INFO L290 TraceCheckUtils]: 14: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 14:50:03,953 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {27104#true} {27104#true} #717#return; {27104#true} is VALID [2022-04-28 14:50:03,953 INFO L290 TraceCheckUtils]: 16: Hoare triple {27104#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {27104#true} is VALID [2022-04-28 14:50:03,953 INFO L290 TraceCheckUtils]: 17: Hoare triple {27104#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {27104#true} is VALID [2022-04-28 14:50:03,953 INFO L290 TraceCheckUtils]: 18: Hoare triple {27104#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {27104#true} is VALID [2022-04-28 14:50:03,953 INFO L290 TraceCheckUtils]: 19: Hoare triple {27104#true} assume 3 == ~tmp_ndt_3~0; {27104#true} is VALID [2022-04-28 14:50:03,953 INFO L272 TraceCheckUtils]: 20: Hoare triple {27104#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {27104#true} is VALID [2022-04-28 14:50:03,953 INFO L290 TraceCheckUtils]: 21: Hoare triple {27104#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {27104#true} is VALID [2022-04-28 14:50:03,953 INFO L290 TraceCheckUtils]: 22: Hoare triple {27104#true} assume 0 == ~irpStack__MinorFunction~0; {27104#true} is VALID [2022-04-28 14:50:03,953 INFO L290 TraceCheckUtils]: 23: Hoare triple {27104#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {27104#true} is VALID [2022-04-28 14:50:03,953 INFO L290 TraceCheckUtils]: 24: Hoare triple {27104#true} assume !(~s~0 != ~NP~0); {27104#true} is VALID [2022-04-28 14:50:03,953 INFO L290 TraceCheckUtils]: 25: Hoare triple {27104#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {27104#true} is VALID [2022-04-28 14:50:03,953 INFO L290 TraceCheckUtils]: 26: Hoare triple {27104#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {27104#true} is VALID [2022-04-28 14:50:03,954 INFO L272 TraceCheckUtils]: 27: Hoare triple {27104#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {27140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:03,954 INFO L290 TraceCheckUtils]: 28: Hoare triple {27140#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {27104#true} is VALID [2022-04-28 14:50:03,954 INFO L290 TraceCheckUtils]: 29: Hoare triple {27104#true} assume 0 != ~compRegistered~0; {27104#true} is VALID [2022-04-28 14:50:03,955 INFO L272 TraceCheckUtils]: 30: Hoare triple {27104#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:50:03,955 INFO L290 TraceCheckUtils]: 31: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {27104#true} is VALID [2022-04-28 14:50:03,955 INFO L272 TraceCheckUtils]: 32: Hoare triple {27104#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:50:03,955 INFO L290 TraceCheckUtils]: 33: Hoare triple {27151#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {27104#true} is VALID [2022-04-28 14:50:03,955 INFO L290 TraceCheckUtils]: 34: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 14:50:03,955 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {27104#true} {27104#true} #713#return; {27104#true} is VALID [2022-04-28 14:50:03,955 INFO L290 TraceCheckUtils]: 36: Hoare triple {27104#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {27104#true} is VALID [2022-04-28 14:50:03,956 INFO L290 TraceCheckUtils]: 37: Hoare triple {27104#true} assume true; {27104#true} is VALID [2022-04-28 14:50:03,956 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {27104#true} {27104#true} #777#return; {27104#true} is VALID [2022-04-28 14:50:03,956 INFO L290 TraceCheckUtils]: 39: Hoare triple {27104#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {27104#true} is VALID [2022-04-28 14:50:03,956 INFO L290 TraceCheckUtils]: 40: Hoare triple {27104#true} assume !(-1073741802 == ~__cil_tmp7~0); {27104#true} is VALID [2022-04-28 14:50:03,956 INFO L290 TraceCheckUtils]: 41: Hoare triple {27104#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {27104#true} is VALID [2022-04-28 14:50:03,956 INFO L290 TraceCheckUtils]: 42: Hoare triple {27104#true} assume 0 == ~tmp_ndt_6~0; {27104#true} is VALID [2022-04-28 14:50:03,956 INFO L290 TraceCheckUtils]: 43: Hoare triple {27104#true} ~returnVal2~0 := 0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:03,957 INFO L290 TraceCheckUtils]: 44: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:03,957 INFO L290 TraceCheckUtils]: 45: Hoare triple {27149#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 14:50:03,957 INFO L290 TraceCheckUtils]: 46: Hoare triple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-28 14:50:03,958 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {27150#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {27104#true} #755#return; {27135#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-28 14:50:03,958 INFO L290 TraceCheckUtils]: 48: Hoare triple {27135#(= |KbFilter_PnP_#t~ret10| 0)} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {27136#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-28 14:50:03,958 INFO L290 TraceCheckUtils]: 49: Hoare triple {27136#(= KbFilter_PnP_~status~0 0)} assume !(259 == ~__cil_tmp23~0); {27136#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-28 14:50:03,959 INFO L290 TraceCheckUtils]: 50: Hoare triple {27136#(= KbFilter_PnP_~status~0 0)} assume !(~status~0 >= 0); {27105#false} is VALID [2022-04-28 14:50:03,959 INFO L290 TraceCheckUtils]: 51: Hoare triple {27105#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {27105#false} is VALID [2022-04-28 14:50:03,959 INFO L272 TraceCheckUtils]: 52: Hoare triple {27105#false} call IofCompleteRequest(~Irp, 0); {27105#false} is VALID [2022-04-28 14:50:03,959 INFO L290 TraceCheckUtils]: 53: Hoare triple {27105#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {27105#false} is VALID [2022-04-28 14:50:03,959 INFO L290 TraceCheckUtils]: 54: Hoare triple {27105#false} assume !(~s~0 == ~NP~0); {27105#false} is VALID [2022-04-28 14:50:03,959 INFO L272 TraceCheckUtils]: 55: Hoare triple {27105#false} call errorFn(); {27105#false} is VALID [2022-04-28 14:50:03,959 INFO L290 TraceCheckUtils]: 56: Hoare triple {27105#false} assume !false; {27105#false} is VALID [2022-04-28 14:50:03,959 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:50:03,959 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:50:03,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [179630793] [2022-04-28 14:50:03,960 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [179630793] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:03,960 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:03,960 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 14:50:03,960 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:50:03,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [644972368] [2022-04-28 14:50:03,960 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [644972368] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:03,960 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:03,960 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 14:50:03,960 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [67452435] [2022-04-28 14:50:03,960 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:50:03,961 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-28 14:50:03,961 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:50:03,961 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:04,001 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:04,001 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 14:50:04,001 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:04,001 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 14:50:04,002 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-28 14:50:04,002 INFO L87 Difference]: Start difference. First operand 210 states and 271 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:06,146 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:06,146 INFO L93 Difference]: Finished difference Result 230 states and 294 transitions. [2022-04-28 14:50:06,146 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-04-28 14:50:06,146 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-28 14:50:06,147 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:50:06,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:06,149 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 273 transitions. [2022-04-28 14:50:06,149 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:06,151 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 273 transitions. [2022-04-28 14:50:06,151 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 15 states and 273 transitions. [2022-04-28 14:50:06,382 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 273 edges. 273 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:06,385 INFO L225 Difference]: With dead ends: 230 [2022-04-28 14:50:06,385 INFO L226 Difference]: Without dead ends: 223 [2022-04-28 14:50:06,386 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=77, Invalid=265, Unknown=0, NotChecked=0, Total=342 [2022-04-28 14:50:06,386 INFO L413 NwaCegarLoop]: 202 mSDtfsCounter, 320 mSDsluCounter, 412 mSDsCounter, 0 mSdLazyCounter, 702 mSolverCounterSat, 73 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 320 SdHoareTripleChecker+Valid, 614 SdHoareTripleChecker+Invalid, 775 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 73 IncrementalHoareTripleChecker+Valid, 702 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-28 14:50:06,386 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [320 Valid, 614 Invalid, 775 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [73 Valid, 702 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-28 14:50:06,387 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2022-04-28 14:50:06,764 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 211. [2022-04-28 14:50:06,764 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:50:06,764 INFO L82 GeneralOperation]: Start isEquivalent. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 14:50:06,765 INFO L74 IsIncluded]: Start isIncluded. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 14:50:06,765 INFO L87 Difference]: Start difference. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 14:50:06,768 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:06,768 INFO L93 Difference]: Finished difference Result 223 states and 287 transitions. [2022-04-28 14:50:06,768 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 287 transitions. [2022-04-28 14:50:06,768 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:06,768 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:06,768 INFO L74 IsIncluded]: Start isIncluded. First operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 223 states. [2022-04-28 14:50:06,769 INFO L87 Difference]: Start difference. First operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 223 states. [2022-04-28 14:50:06,771 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:06,772 INFO L93 Difference]: Finished difference Result 223 states and 287 transitions. [2022-04-28 14:50:06,772 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 287 transitions. [2022-04-28 14:50:06,772 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:06,772 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:06,772 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:50:06,772 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:50:06,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 14:50:06,775 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 272 transitions. [2022-04-28 14:50:06,775 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 272 transitions. Word has length 57 [2022-04-28 14:50:06,775 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:50:06,775 INFO L495 AbstractCegarLoop]: Abstraction has 211 states and 272 transitions. [2022-04-28 14:50:06,776 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:06,776 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 211 states and 272 transitions. [2022-04-28 14:50:07,085 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 272 edges. 272 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:07,086 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 272 transitions. [2022-04-28 14:50:07,086 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-04-28 14:50:07,086 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:50:07,086 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:50:07,086 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-04-28 14:50:07,087 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:50:07,087 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:50:07,087 INFO L85 PathProgramCache]: Analyzing trace with hash -722543360, now seen corresponding path program 1 times [2022-04-28 14:50:07,087 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:07,087 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [908021725] [2022-04-28 14:50:07,087 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:50:07,087 INFO L85 PathProgramCache]: Analyzing trace with hash -722543360, now seen corresponding path program 2 times [2022-04-28 14:50:07,087 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:50:07,088 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1042170982] [2022-04-28 14:50:07,088 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:50:07,088 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:50:07,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:07,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:50:07,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:07,173 INFO L290 TraceCheckUtils]: 0: Hoare triple {28539#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {28502#true} is VALID [2022-04-28 14:50:07,174 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 14:50:07,174 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28502#true} {28502#true} #783#return; {28502#true} is VALID [2022-04-28 14:50:07,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:50:07,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:07,195 INFO L290 TraceCheckUtils]: 0: Hoare triple {28540#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-28 14:50:07,195 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 14:50:07,195 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28502#true} {28502#true} #715#return; {28502#true} is VALID [2022-04-28 14:50:07,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:50:07,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:07,208 INFO L290 TraceCheckUtils]: 0: Hoare triple {28541#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-28 14:50:07,208 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 14:50:07,208 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28502#true} {28502#true} #717#return; {28502#true} is VALID [2022-04-28 14:50:07,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-28 14:50:07,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:07,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-28 14:50:07,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:07,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-28 14:50:07,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:07,258 INFO L290 TraceCheckUtils]: 0: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-28 14:50:07,258 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-28 14:50:07,259 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-28 14:50:07,259 INFO L290 TraceCheckUtils]: 3: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-28 14:50:07,259 INFO L290 TraceCheckUtils]: 4: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-28 14:50:07,259 INFO L290 TraceCheckUtils]: 5: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-28 14:50:07,259 INFO L290 TraceCheckUtils]: 6: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-28 14:50:07,259 INFO L290 TraceCheckUtils]: 7: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-28 14:50:07,259 INFO L290 TraceCheckUtils]: 8: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-28 14:50:07,259 INFO L290 TraceCheckUtils]: 9: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 14:50:07,259 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-28 14:50:07,259 INFO L290 TraceCheckUtils]: 0: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {28502#true} is VALID [2022-04-28 14:50:07,259 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {28502#true} is VALID [2022-04-28 14:50:07,259 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {28502#true} is VALID [2022-04-28 14:50:07,260 INFO L272 TraceCheckUtils]: 3: Hoare triple {28502#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:07,260 INFO L290 TraceCheckUtils]: 4: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-28 14:50:07,260 INFO L290 TraceCheckUtils]: 5: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-28 14:50:07,260 INFO L290 TraceCheckUtils]: 6: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-28 14:50:07,261 INFO L290 TraceCheckUtils]: 7: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-28 14:50:07,261 INFO L290 TraceCheckUtils]: 8: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-28 14:50:07,261 INFO L290 TraceCheckUtils]: 9: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-28 14:50:07,261 INFO L290 TraceCheckUtils]: 10: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-28 14:50:07,261 INFO L290 TraceCheckUtils]: 11: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-28 14:50:07,261 INFO L290 TraceCheckUtils]: 12: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-28 14:50:07,261 INFO L290 TraceCheckUtils]: 13: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 14:50:07,261 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-28 14:50:07,261 INFO L290 TraceCheckUtils]: 15: Hoare triple {28502#true} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {28502#true} is VALID [2022-04-28 14:50:07,261 INFO L290 TraceCheckUtils]: 16: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 14:50:07,261 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {28502#true} {28503#false} #745#return; {28503#false} is VALID [2022-04-28 14:50:07,261 INFO L290 TraceCheckUtils]: 0: Hoare triple {28542#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {28502#true} is VALID [2022-04-28 14:50:07,262 INFO L290 TraceCheckUtils]: 1: Hoare triple {28502#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {28502#true} is VALID [2022-04-28 14:50:07,262 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} is VALID [2022-04-28 14:50:07,262 INFO L290 TraceCheckUtils]: 3: Hoare triple {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} assume !(~status~3 < 0); {28503#false} is VALID [2022-04-28 14:50:07,262 INFO L272 TraceCheckUtils]: 4: Hoare triple {28503#false} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:07,262 INFO L290 TraceCheckUtils]: 5: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {28502#true} is VALID [2022-04-28 14:50:07,262 INFO L290 TraceCheckUtils]: 6: Hoare triple {28502#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {28502#true} is VALID [2022-04-28 14:50:07,263 INFO L290 TraceCheckUtils]: 7: Hoare triple {28502#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {28502#true} is VALID [2022-04-28 14:50:07,263 INFO L272 TraceCheckUtils]: 8: Hoare triple {28502#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:07,263 INFO L290 TraceCheckUtils]: 9: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-28 14:50:07,263 INFO L290 TraceCheckUtils]: 10: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-28 14:50:07,263 INFO L290 TraceCheckUtils]: 11: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-28 14:50:07,263 INFO L290 TraceCheckUtils]: 12: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-28 14:50:07,263 INFO L290 TraceCheckUtils]: 13: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-28 14:50:07,264 INFO L290 TraceCheckUtils]: 14: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-28 14:50:07,264 INFO L290 TraceCheckUtils]: 15: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-28 14:50:07,264 INFO L290 TraceCheckUtils]: 16: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-28 14:50:07,264 INFO L290 TraceCheckUtils]: 17: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-28 14:50:07,264 INFO L290 TraceCheckUtils]: 18: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 14:50:07,264 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-28 14:50:07,264 INFO L290 TraceCheckUtils]: 20: Hoare triple {28502#true} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {28502#true} is VALID [2022-04-28 14:50:07,264 INFO L290 TraceCheckUtils]: 21: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 14:50:07,264 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {28502#true} {28503#false} #745#return; {28503#false} is VALID [2022-04-28 14:50:07,264 INFO L290 TraceCheckUtils]: 23: Hoare triple {28503#false} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {28503#false} is VALID [2022-04-28 14:50:07,264 INFO L290 TraceCheckUtils]: 24: Hoare triple {28503#false} assume true; {28503#false} is VALID [2022-04-28 14:50:07,264 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {28503#false} {28502#true} #727#return; {28503#false} is VALID [2022-04-28 14:50:07,266 INFO L272 TraceCheckUtils]: 0: Hoare triple {28502#true} call ULTIMATE.init(); {28539#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:50:07,266 INFO L290 TraceCheckUtils]: 1: Hoare triple {28539#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {28502#true} is VALID [2022-04-28 14:50:07,266 INFO L290 TraceCheckUtils]: 2: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 14:50:07,266 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {28502#true} {28502#true} #783#return; {28502#true} is VALID [2022-04-28 14:50:07,266 INFO L272 TraceCheckUtils]: 4: Hoare triple {28502#true} call #t~ret81 := main(); {28502#true} is VALID [2022-04-28 14:50:07,266 INFO L290 TraceCheckUtils]: 5: Hoare triple {28502#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {28502#true} is VALID [2022-04-28 14:50:07,267 INFO L272 TraceCheckUtils]: 6: Hoare triple {28502#true} call _BLAST_init(); {28540#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:07,267 INFO L290 TraceCheckUtils]: 7: Hoare triple {28540#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-28 14:50:07,267 INFO L290 TraceCheckUtils]: 8: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 14:50:07,267 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {28502#true} {28502#true} #715#return; {28502#true} is VALID [2022-04-28 14:50:07,267 INFO L290 TraceCheckUtils]: 10: Hoare triple {28502#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {28502#true} is VALID [2022-04-28 14:50:07,267 INFO L290 TraceCheckUtils]: 11: Hoare triple {28502#true} assume !(0 == ~irp_choice~0); {28502#true} is VALID [2022-04-28 14:50:07,268 INFO L272 TraceCheckUtils]: 12: Hoare triple {28502#true} call stub_driver_init(); {28541#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:07,268 INFO L290 TraceCheckUtils]: 13: Hoare triple {28541#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28502#true} is VALID [2022-04-28 14:50:07,268 INFO L290 TraceCheckUtils]: 14: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 14:50:07,268 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {28502#true} {28502#true} #717#return; {28502#true} is VALID [2022-04-28 14:50:07,268 INFO L290 TraceCheckUtils]: 16: Hoare triple {28502#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {28502#true} is VALID [2022-04-28 14:50:07,268 INFO L290 TraceCheckUtils]: 17: Hoare triple {28502#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {28502#true} is VALID [2022-04-28 14:50:07,268 INFO L290 TraceCheckUtils]: 18: Hoare triple {28502#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {28502#true} is VALID [2022-04-28 14:50:07,268 INFO L290 TraceCheckUtils]: 19: Hoare triple {28502#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {28502#true} is VALID [2022-04-28 14:50:07,268 INFO L290 TraceCheckUtils]: 20: Hoare triple {28502#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {28502#true} is VALID [2022-04-28 14:50:07,268 INFO L290 TraceCheckUtils]: 21: Hoare triple {28502#true} assume 8 == ~tmp_ndt_5~0; {28502#true} is VALID [2022-04-28 14:50:07,269 INFO L272 TraceCheckUtils]: 22: Hoare triple {28502#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {28542#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:07,269 INFO L290 TraceCheckUtils]: 23: Hoare triple {28542#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {28502#true} is VALID [2022-04-28 14:50:07,269 INFO L290 TraceCheckUtils]: 24: Hoare triple {28502#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {28502#true} is VALID [2022-04-28 14:50:07,270 INFO L290 TraceCheckUtils]: 25: Hoare triple {28502#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} is VALID [2022-04-28 14:50:07,270 INFO L290 TraceCheckUtils]: 26: Hoare triple {28543#(<= (+ 1073741757 KbFilter_InternIoCtl_~status~3) 0)} assume !(~status~3 < 0); {28503#false} is VALID [2022-04-28 14:50:07,270 INFO L272 TraceCheckUtils]: 27: Hoare triple {28503#false} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:07,270 INFO L290 TraceCheckUtils]: 28: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {28502#true} is VALID [2022-04-28 14:50:07,270 INFO L290 TraceCheckUtils]: 29: Hoare triple {28502#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {28502#true} is VALID [2022-04-28 14:50:07,270 INFO L290 TraceCheckUtils]: 30: Hoare triple {28502#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {28502#true} is VALID [2022-04-28 14:50:07,271 INFO L272 TraceCheckUtils]: 31: Hoare triple {28502#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:07,271 INFO L290 TraceCheckUtils]: 32: Hoare triple {28562#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {28502#true} is VALID [2022-04-28 14:50:07,271 INFO L290 TraceCheckUtils]: 33: Hoare triple {28502#true} assume !(0 != ~compRegistered~0); {28502#true} is VALID [2022-04-28 14:50:07,271 INFO L290 TraceCheckUtils]: 34: Hoare triple {28502#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {28502#true} is VALID [2022-04-28 14:50:07,271 INFO L290 TraceCheckUtils]: 35: Hoare triple {28502#true} assume 0 == ~tmp_ndt_6~0; {28502#true} is VALID [2022-04-28 14:50:07,271 INFO L290 TraceCheckUtils]: 36: Hoare triple {28502#true} ~returnVal2~0 := 0; {28502#true} is VALID [2022-04-28 14:50:07,271 INFO L290 TraceCheckUtils]: 37: Hoare triple {28502#true} assume !(~s~0 == ~NP~0); {28502#true} is VALID [2022-04-28 14:50:07,271 INFO L290 TraceCheckUtils]: 38: Hoare triple {28502#true} assume !(~s~0 == ~MPR1~0); {28502#true} is VALID [2022-04-28 14:50:07,271 INFO L290 TraceCheckUtils]: 39: Hoare triple {28502#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {28502#true} is VALID [2022-04-28 14:50:07,272 INFO L290 TraceCheckUtils]: 40: Hoare triple {28502#true} #res := ~returnVal2~0; {28502#true} is VALID [2022-04-28 14:50:07,272 INFO L290 TraceCheckUtils]: 41: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 14:50:07,272 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {28502#true} {28502#true} #789#return; {28502#true} is VALID [2022-04-28 14:50:07,272 INFO L290 TraceCheckUtils]: 43: Hoare triple {28502#true} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {28502#true} is VALID [2022-04-28 14:50:07,272 INFO L290 TraceCheckUtils]: 44: Hoare triple {28502#true} assume true; {28502#true} is VALID [2022-04-28 14:50:07,272 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {28502#true} {28503#false} #745#return; {28503#false} is VALID [2022-04-28 14:50:07,272 INFO L290 TraceCheckUtils]: 46: Hoare triple {28503#false} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {28503#false} is VALID [2022-04-28 14:50:07,272 INFO L290 TraceCheckUtils]: 47: Hoare triple {28503#false} assume true; {28503#false} is VALID [2022-04-28 14:50:07,272 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {28503#false} {28502#true} #727#return; {28503#false} is VALID [2022-04-28 14:50:07,272 INFO L290 TraceCheckUtils]: 49: Hoare triple {28503#false} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {28503#false} is VALID [2022-04-28 14:50:07,272 INFO L290 TraceCheckUtils]: 50: Hoare triple {28503#false} assume !(1 == ~pended~0); {28503#false} is VALID [2022-04-28 14:50:07,272 INFO L290 TraceCheckUtils]: 51: Hoare triple {28503#false} assume !(1 == ~pended~0); {28503#false} is VALID [2022-04-28 14:50:07,272 INFO L290 TraceCheckUtils]: 52: Hoare triple {28503#false} assume ~s~0 != ~UNLOADED~0; {28503#false} is VALID [2022-04-28 14:50:07,272 INFO L290 TraceCheckUtils]: 53: Hoare triple {28503#false} assume -1 != ~status~1; {28503#false} is VALID [2022-04-28 14:50:07,273 INFO L290 TraceCheckUtils]: 54: Hoare triple {28503#false} assume !(~s~0 != ~SKIP2~0); {28503#false} is VALID [2022-04-28 14:50:07,273 INFO L290 TraceCheckUtils]: 55: Hoare triple {28503#false} assume !(1 == ~pended~0); {28503#false} is VALID [2022-04-28 14:50:07,273 INFO L290 TraceCheckUtils]: 56: Hoare triple {28503#false} assume !(~s~0 == ~DC~0); {28503#false} is VALID [2022-04-28 14:50:07,273 INFO L290 TraceCheckUtils]: 57: Hoare triple {28503#false} assume ~status~1 != ~lowerDriverReturn~0; {28503#false} is VALID [2022-04-28 14:50:07,273 INFO L272 TraceCheckUtils]: 58: Hoare triple {28503#false} call errorFn(); {28503#false} is VALID [2022-04-28 14:50:07,273 INFO L290 TraceCheckUtils]: 59: Hoare triple {28503#false} assume !false; {28503#false} is VALID [2022-04-28 14:50:07,273 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:50:07,273 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:50:07,273 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1042170982] [2022-04-28 14:50:07,273 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1042170982] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:07,274 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:07,274 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 14:50:07,274 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:50:07,274 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [908021725] [2022-04-28 14:50:07,274 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [908021725] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:07,274 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:07,274 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 14:50:07,274 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [158453389] [2022-04-28 14:50:07,274 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:50:07,275 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 60 [2022-04-28 14:50:07,276 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:50:07,276 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-28 14:50:07,314 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:07,315 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 14:50:07,315 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:07,315 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 14:50:07,315 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-04-28 14:50:07,315 INFO L87 Difference]: Start difference. First operand 211 states and 272 transitions. Second operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-28 14:50:08,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:08,481 INFO L93 Difference]: Finished difference Result 250 states and 313 transitions. [2022-04-28 14:50:08,481 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-28 14:50:08,481 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 60 [2022-04-28 14:50:08,482 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:50:08,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-28 14:50:08,483 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 283 transitions. [2022-04-28 14:50:08,483 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-28 14:50:08,485 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 283 transitions. [2022-04-28 14:50:08,485 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 283 transitions. [2022-04-28 14:50:08,705 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 283 edges. 283 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:08,708 INFO L225 Difference]: With dead ends: 250 [2022-04-28 14:50:08,709 INFO L226 Difference]: Without dead ends: 210 [2022-04-28 14:50:08,709 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-04-28 14:50:08,709 INFO L413 NwaCegarLoop]: 213 mSDtfsCounter, 238 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 265 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 238 SdHoareTripleChecker+Valid, 401 SdHoareTripleChecker+Invalid, 314 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-28 14:50:08,709 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [238 Valid, 401 Invalid, 314 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 265 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-28 14:50:08,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-04-28 14:50:09,071 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 210. [2022-04-28 14:50:09,071 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:50:09,071 INFO L82 GeneralOperation]: Start isEquivalent. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 14:50:09,071 INFO L74 IsIncluded]: Start isIncluded. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 14:50:09,072 INFO L87 Difference]: Start difference. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 14:50:09,074 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:09,074 INFO L93 Difference]: Finished difference Result 210 states and 267 transitions. [2022-04-28 14:50:09,074 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 267 transitions. [2022-04-28 14:50:09,075 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:09,075 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:09,075 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 210 states. [2022-04-28 14:50:09,075 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 210 states. [2022-04-28 14:50:09,078 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:09,078 INFO L93 Difference]: Finished difference Result 210 states and 267 transitions. [2022-04-28 14:50:09,078 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 267 transitions. [2022-04-28 14:50:09,078 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:09,078 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:09,078 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:50:09,078 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:50:09,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.3157894736842106) internal successors, (225), 173 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-28 14:50:09,081 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 267 transitions. [2022-04-28 14:50:09,081 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 267 transitions. Word has length 60 [2022-04-28 14:50:09,082 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:50:09,082 INFO L495 AbstractCegarLoop]: Abstraction has 210 states and 267 transitions. [2022-04-28 14:50:09,082 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-04-28 14:50:09,082 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 210 states and 267 transitions. [2022-04-28 14:50:09,397 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 267 edges. 267 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:09,397 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 267 transitions. [2022-04-28 14:50:09,411 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-04-28 14:50:09,411 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:50:09,411 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:50:09,412 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-04-28 14:50:09,412 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:50:09,412 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:50:09,412 INFO L85 PathProgramCache]: Analyzing trace with hash -1986597587, now seen corresponding path program 1 times [2022-04-28 14:50:09,412 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:09,412 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1049818010] [2022-04-28 14:50:09,412 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:50:09,412 INFO L85 PathProgramCache]: Analyzing trace with hash -1986597587, now seen corresponding path program 2 times [2022-04-28 14:50:09,412 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:50:09,413 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1954326103] [2022-04-28 14:50:09,413 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:50:09,413 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:50:09,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:09,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:50:09,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:09,483 INFO L290 TraceCheckUtils]: 0: Hoare triple {29958#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {29918#true} is VALID [2022-04-28 14:50:09,483 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-28 14:50:09,483 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29918#true} {29918#true} #783#return; {29918#true} is VALID [2022-04-28 14:50:09,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:50:09,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:09,503 INFO L290 TraceCheckUtils]: 0: Hoare triple {29959#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-28 14:50:09,503 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-28 14:50:09,503 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29918#true} {29918#true} #715#return; {29918#true} is VALID [2022-04-28 14:50:09,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:50:09,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:09,515 INFO L290 TraceCheckUtils]: 0: Hoare triple {29960#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-28 14:50:09,515 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-28 14:50:09,515 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29918#true} {29918#true} #717#return; {29918#true} is VALID [2022-04-28 14:50:09,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-28 14:50:09,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:09,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-28 14:50:09,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:09,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-28 14:50:09,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:09,601 INFO L290 TraceCheckUtils]: 0: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-28 14:50:09,601 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-28 14:50:09,601 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-28 14:50:09,601 INFO L290 TraceCheckUtils]: 3: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-28 14:50:09,601 INFO L290 TraceCheckUtils]: 4: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-28 14:50:09,601 INFO L290 TraceCheckUtils]: 5: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-28 14:50:09,601 INFO L290 TraceCheckUtils]: 6: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-28 14:50:09,602 INFO L290 TraceCheckUtils]: 7: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 14:50:09,602 INFO L290 TraceCheckUtils]: 8: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,602 INFO L290 TraceCheckUtils]: 9: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,603 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,603 INFO L290 TraceCheckUtils]: 0: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {29918#true} is VALID [2022-04-28 14:50:09,603 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {29918#true} is VALID [2022-04-28 14:50:09,603 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {29918#true} is VALID [2022-04-28 14:50:09,604 INFO L272 TraceCheckUtils]: 3: Hoare triple {29918#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:09,604 INFO L290 TraceCheckUtils]: 4: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-28 14:50:09,604 INFO L290 TraceCheckUtils]: 5: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-28 14:50:09,604 INFO L290 TraceCheckUtils]: 6: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-28 14:50:09,604 INFO L290 TraceCheckUtils]: 7: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-28 14:50:09,604 INFO L290 TraceCheckUtils]: 8: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-28 14:50:09,604 INFO L290 TraceCheckUtils]: 9: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-28 14:50:09,604 INFO L290 TraceCheckUtils]: 10: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-28 14:50:09,604 INFO L290 TraceCheckUtils]: 11: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 14:50:09,605 INFO L290 TraceCheckUtils]: 12: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,605 INFO L290 TraceCheckUtils]: 13: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,606 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,606 INFO L290 TraceCheckUtils]: 15: Hoare triple {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,606 INFO L290 TraceCheckUtils]: 16: Hoare triple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,607 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {29918#true} #745#return; {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} is VALID [2022-04-28 14:50:09,607 INFO L290 TraceCheckUtils]: 0: Hoare triple {29961#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {29918#true} is VALID [2022-04-28 14:50:09,607 INFO L290 TraceCheckUtils]: 1: Hoare triple {29918#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {29918#true} is VALID [2022-04-28 14:50:09,607 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} assume !(0 != ~devExt__UpperConnectData__ClassService~1); {29918#true} is VALID [2022-04-28 14:50:09,607 INFO L290 TraceCheckUtils]: 3: Hoare triple {29918#true} assume !(~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 < ~sizeof__CONNECT_DATA~0);~connectData~0 := ~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0; {29918#true} is VALID [2022-04-28 14:50:09,607 INFO L290 TraceCheckUtils]: 4: Hoare triple {29918#true} assume !(~status~3 < 0); {29918#true} is VALID [2022-04-28 14:50:09,608 INFO L272 TraceCheckUtils]: 5: Hoare triple {29918#true} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:09,608 INFO L290 TraceCheckUtils]: 6: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {29918#true} is VALID [2022-04-28 14:50:09,608 INFO L290 TraceCheckUtils]: 7: Hoare triple {29918#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {29918#true} is VALID [2022-04-28 14:50:09,608 INFO L290 TraceCheckUtils]: 8: Hoare triple {29918#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {29918#true} is VALID [2022-04-28 14:50:09,608 INFO L272 TraceCheckUtils]: 9: Hoare triple {29918#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:09,608 INFO L290 TraceCheckUtils]: 10: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-28 14:50:09,609 INFO L290 TraceCheckUtils]: 11: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-28 14:50:09,609 INFO L290 TraceCheckUtils]: 12: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-28 14:50:09,609 INFO L290 TraceCheckUtils]: 13: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-28 14:50:09,609 INFO L290 TraceCheckUtils]: 14: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-28 14:50:09,609 INFO L290 TraceCheckUtils]: 15: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-28 14:50:09,609 INFO L290 TraceCheckUtils]: 16: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-28 14:50:09,609 INFO L290 TraceCheckUtils]: 17: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 14:50:09,609 INFO L290 TraceCheckUtils]: 18: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,610 INFO L290 TraceCheckUtils]: 19: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,610 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,611 INFO L290 TraceCheckUtils]: 21: Hoare triple {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,611 INFO L290 TraceCheckUtils]: 22: Hoare triple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,611 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {29918#true} #745#return; {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} is VALID [2022-04-28 14:50:09,612 INFO L290 TraceCheckUtils]: 24: Hoare triple {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-28 14:50:09,612 INFO L290 TraceCheckUtils]: 25: Hoare triple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} assume true; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-28 14:50:09,613 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} {29918#true} #727#return; {29956#(= |main_#t~ret33| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,614 INFO L272 TraceCheckUtils]: 0: Hoare triple {29918#true} call ULTIMATE.init(); {29958#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:50:09,614 INFO L290 TraceCheckUtils]: 1: Hoare triple {29958#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {29918#true} is VALID [2022-04-28 14:50:09,614 INFO L290 TraceCheckUtils]: 2: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-28 14:50:09,614 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {29918#true} {29918#true} #783#return; {29918#true} is VALID [2022-04-28 14:50:09,614 INFO L272 TraceCheckUtils]: 4: Hoare triple {29918#true} call #t~ret81 := main(); {29918#true} is VALID [2022-04-28 14:50:09,614 INFO L290 TraceCheckUtils]: 5: Hoare triple {29918#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {29918#true} is VALID [2022-04-28 14:50:09,615 INFO L272 TraceCheckUtils]: 6: Hoare triple {29918#true} call _BLAST_init(); {29959#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:09,615 INFO L290 TraceCheckUtils]: 7: Hoare triple {29959#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-28 14:50:09,615 INFO L290 TraceCheckUtils]: 8: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-28 14:50:09,615 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {29918#true} {29918#true} #715#return; {29918#true} is VALID [2022-04-28 14:50:09,615 INFO L290 TraceCheckUtils]: 10: Hoare triple {29918#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {29918#true} is VALID [2022-04-28 14:50:09,615 INFO L290 TraceCheckUtils]: 11: Hoare triple {29918#true} assume !(0 == ~irp_choice~0); {29918#true} is VALID [2022-04-28 14:50:09,616 INFO L272 TraceCheckUtils]: 12: Hoare triple {29918#true} call stub_driver_init(); {29960#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:09,616 INFO L290 TraceCheckUtils]: 13: Hoare triple {29960#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {29918#true} is VALID [2022-04-28 14:50:09,616 INFO L290 TraceCheckUtils]: 14: Hoare triple {29918#true} assume true; {29918#true} is VALID [2022-04-28 14:50:09,616 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {29918#true} {29918#true} #717#return; {29918#true} is VALID [2022-04-28 14:50:09,616 INFO L290 TraceCheckUtils]: 16: Hoare triple {29918#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {29918#true} is VALID [2022-04-28 14:50:09,616 INFO L290 TraceCheckUtils]: 17: Hoare triple {29918#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {29918#true} is VALID [2022-04-28 14:50:09,616 INFO L290 TraceCheckUtils]: 18: Hoare triple {29918#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {29918#true} is VALID [2022-04-28 14:50:09,616 INFO L290 TraceCheckUtils]: 19: Hoare triple {29918#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {29918#true} is VALID [2022-04-28 14:50:09,616 INFO L290 TraceCheckUtils]: 20: Hoare triple {29918#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {29918#true} is VALID [2022-04-28 14:50:09,616 INFO L290 TraceCheckUtils]: 21: Hoare triple {29918#true} assume 8 == ~tmp_ndt_5~0; {29918#true} is VALID [2022-04-28 14:50:09,617 INFO L272 TraceCheckUtils]: 22: Hoare triple {29918#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {29961#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:09,617 INFO L290 TraceCheckUtils]: 23: Hoare triple {29961#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {29918#true} is VALID [2022-04-28 14:50:09,617 INFO L290 TraceCheckUtils]: 24: Hoare triple {29918#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {29918#true} is VALID [2022-04-28 14:50:09,617 INFO L290 TraceCheckUtils]: 25: Hoare triple {29918#true} assume !(0 != ~devExt__UpperConnectData__ClassService~1); {29918#true} is VALID [2022-04-28 14:50:09,617 INFO L290 TraceCheckUtils]: 26: Hoare triple {29918#true} assume !(~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 < ~sizeof__CONNECT_DATA~0);~connectData~0 := ~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0; {29918#true} is VALID [2022-04-28 14:50:09,617 INFO L290 TraceCheckUtils]: 27: Hoare triple {29918#true} assume !(~status~3 < 0); {29918#true} is VALID [2022-04-28 14:50:09,618 INFO L272 TraceCheckUtils]: 28: Hoare triple {29918#true} call #t~ret80 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:09,618 INFO L290 TraceCheckUtils]: 29: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {29918#true} is VALID [2022-04-28 14:50:09,618 INFO L290 TraceCheckUtils]: 30: Hoare triple {29918#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {29918#true} is VALID [2022-04-28 14:50:09,618 INFO L290 TraceCheckUtils]: 31: Hoare triple {29918#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {29918#true} is VALID [2022-04-28 14:50:09,618 INFO L272 TraceCheckUtils]: 32: Hoare triple {29918#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:09,619 INFO L290 TraceCheckUtils]: 33: Hoare triple {29982#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {29918#true} is VALID [2022-04-28 14:50:09,619 INFO L290 TraceCheckUtils]: 34: Hoare triple {29918#true} assume !(0 != ~compRegistered~0); {29918#true} is VALID [2022-04-28 14:50:09,619 INFO L290 TraceCheckUtils]: 35: Hoare triple {29918#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {29918#true} is VALID [2022-04-28 14:50:09,619 INFO L290 TraceCheckUtils]: 36: Hoare triple {29918#true} assume 0 == ~tmp_ndt_6~0; {29918#true} is VALID [2022-04-28 14:50:09,619 INFO L290 TraceCheckUtils]: 37: Hoare triple {29918#true} ~returnVal2~0 := 0; {29918#true} is VALID [2022-04-28 14:50:09,619 INFO L290 TraceCheckUtils]: 38: Hoare triple {29918#true} assume !(~s~0 == ~NP~0); {29918#true} is VALID [2022-04-28 14:50:09,619 INFO L290 TraceCheckUtils]: 39: Hoare triple {29918#true} assume !(~s~0 == ~MPR1~0); {29918#true} is VALID [2022-04-28 14:50:09,619 INFO L290 TraceCheckUtils]: 40: Hoare triple {29918#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 14:50:09,620 INFO L290 TraceCheckUtils]: 41: Hoare triple {29996#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,620 INFO L290 TraceCheckUtils]: 42: Hoare triple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,620 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {29997#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {29918#true} #789#return; {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,621 INFO L290 TraceCheckUtils]: 44: Hoare triple {29994#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,621 INFO L290 TraceCheckUtils]: 45: Hoare triple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,621 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {29995#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {29918#true} #745#return; {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} is VALID [2022-04-28 14:50:09,622 INFO L290 TraceCheckUtils]: 47: Hoare triple {29980#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#t~ret80|)} assume -2147483648 <= #t~ret80 && #t~ret80 <= 2147483647;~tmp~3 := #t~ret80;havoc #t~ret80;#res := ~tmp~3; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-28 14:50:09,622 INFO L290 TraceCheckUtils]: 48: Hoare triple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} assume true; {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} is VALID [2022-04-28 14:50:09,622 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {29981#(= ~lowerDriverReturn~0 |KbFilter_InternIoCtl_#res|)} {29918#true} #727#return; {29956#(= |main_#t~ret33| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,623 INFO L290 TraceCheckUtils]: 50: Hoare triple {29956#(= |main_#t~ret33| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,623 INFO L290 TraceCheckUtils]: 51: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,623 INFO L290 TraceCheckUtils]: 52: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,623 INFO L290 TraceCheckUtils]: 53: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,624 INFO L290 TraceCheckUtils]: 54: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,624 INFO L290 TraceCheckUtils]: 55: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,624 INFO L290 TraceCheckUtils]: 56: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,624 INFO L290 TraceCheckUtils]: 57: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {29957#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:09,625 INFO L290 TraceCheckUtils]: 58: Hoare triple {29957#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {29919#false} is VALID [2022-04-28 14:50:09,625 INFO L272 TraceCheckUtils]: 59: Hoare triple {29919#false} call errorFn(); {29919#false} is VALID [2022-04-28 14:50:09,625 INFO L290 TraceCheckUtils]: 60: Hoare triple {29919#false} assume !false; {29919#false} is VALID [2022-04-28 14:50:09,625 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:50:09,625 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:50:09,625 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1954326103] [2022-04-28 14:50:09,625 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1954326103] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:09,625 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:09,625 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 14:50:09,626 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:50:09,626 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1049818010] [2022-04-28 14:50:09,626 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1049818010] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:09,626 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:09,626 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 14:50:09,626 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [444161464] [2022-04-28 14:50:09,626 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:50:09,626 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-04-28 14:50:09,626 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:50:09,626 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:09,660 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:09,660 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-28 14:50:09,660 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:09,660 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-28 14:50:09,660 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2022-04-28 14:50:09,660 INFO L87 Difference]: Start difference. First operand 210 states and 267 transitions. Second operand has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:12,687 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:12,687 INFO L93 Difference]: Finished difference Result 222 states and 279 transitions. [2022-04-28 14:50:12,687 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-28 14:50:12,687 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-04-28 14:50:12,688 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:50:12,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:12,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 249 transitions. [2022-04-28 14:50:12,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:12,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 249 transitions. [2022-04-28 14:50:12,690 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 249 transitions. [2022-04-28 14:50:12,921 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 249 edges. 249 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:12,924 INFO L225 Difference]: With dead ends: 222 [2022-04-28 14:50:12,924 INFO L226 Difference]: Without dead ends: 184 [2022-04-28 14:50:12,924 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-04-28 14:50:12,924 INFO L413 NwaCegarLoop]: 212 mSDtfsCounter, 456 mSDsluCounter, 767 mSDsCounter, 0 mSdLazyCounter, 1349 mSolverCounterSat, 90 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 456 SdHoareTripleChecker+Valid, 979 SdHoareTripleChecker+Invalid, 1439 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 90 IncrementalHoareTripleChecker+Valid, 1349 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-04-28 14:50:12,924 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [456 Valid, 979 Invalid, 1439 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [90 Valid, 1349 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-04-28 14:50:12,925 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2022-04-28 14:50:13,217 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 184. [2022-04-28 14:50:13,217 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:50:13,218 INFO L82 GeneralOperation]: Start isEquivalent. First operand 184 states. Second operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-28 14:50:13,218 INFO L74 IsIncluded]: Start isIncluded. First operand 184 states. Second operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-28 14:50:13,218 INFO L87 Difference]: Start difference. First operand 184 states. Second operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-28 14:50:13,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:13,220 INFO L93 Difference]: Finished difference Result 184 states and 229 transitions. [2022-04-28 14:50:13,220 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 229 transitions. [2022-04-28 14:50:13,221 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:13,221 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:13,221 INFO L74 IsIncluded]: Start isIncluded. First operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) Second operand 184 states. [2022-04-28 14:50:13,221 INFO L87 Difference]: Start difference. First operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) Second operand 184 states. [2022-04-28 14:50:13,223 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:13,223 INFO L93 Difference]: Finished difference Result 184 states and 229 transitions. [2022-04-28 14:50:13,223 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 229 transitions. [2022-04-28 14:50:13,223 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:13,223 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:13,223 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:50:13,223 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:50:13,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 148 states have (on average 1.2905405405405406) internal successors, (191), 150 states have internal predecessors, (191), 21 states have call successors, (21), 16 states have call predecessors, (21), 14 states have return successors, (17), 17 states have call predecessors, (17), 15 states have call successors, (17) [2022-04-28 14:50:13,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 229 transitions. [2022-04-28 14:50:13,226 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 229 transitions. Word has length 61 [2022-04-28 14:50:13,226 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:50:13,226 INFO L495 AbstractCegarLoop]: Abstraction has 184 states and 229 transitions. [2022-04-28 14:50:13,226 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 3.1333333333333333) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:13,226 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 184 states and 229 transitions. [2022-04-28 14:50:13,511 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 229 edges. 229 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:13,512 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 229 transitions. [2022-04-28 14:50:13,512 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-04-28 14:50:13,512 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:50:13,512 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:50:13,512 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-04-28 14:50:13,513 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:50:13,513 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:50:13,513 INFO L85 PathProgramCache]: Analyzing trace with hash -2132592656, now seen corresponding path program 1 times [2022-04-28 14:50:13,513 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:13,513 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1360844008] [2022-04-28 14:50:13,513 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:50:13,513 INFO L85 PathProgramCache]: Analyzing trace with hash -2132592656, now seen corresponding path program 2 times [2022-04-28 14:50:13,513 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:50:13,513 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [32719016] [2022-04-28 14:50:13,513 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:50:13,514 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:50:13,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:13,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:50:13,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:13,594 INFO L290 TraceCheckUtils]: 0: Hoare triple {31221#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {31182#true} is VALID [2022-04-28 14:50:13,594 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-28 14:50:13,594 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31182#true} {31182#true} #783#return; {31182#true} is VALID [2022-04-28 14:50:13,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:50:13,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:13,623 INFO L290 TraceCheckUtils]: 0: Hoare triple {31222#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-28 14:50:13,623 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-28 14:50:13,623 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31182#true} {31182#true} #715#return; {31182#true} is VALID [2022-04-28 14:50:13,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:50:13,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:13,639 INFO L290 TraceCheckUtils]: 0: Hoare triple {31223#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-28 14:50:13,639 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-28 14:50:13,639 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31182#true} {31182#true} #717#return; {31182#true} is VALID [2022-04-28 14:50:13,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-04-28 14:50:13,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:13,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-28 14:50:13,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:13,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-28 14:50:13,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:13,732 INFO L290 TraceCheckUtils]: 0: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-28 14:50:13,733 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-28 14:50:13,733 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-28 14:50:13,733 INFO L290 TraceCheckUtils]: 3: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-28 14:50:13,733 INFO L290 TraceCheckUtils]: 4: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-28 14:50:13,733 INFO L290 TraceCheckUtils]: 5: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-28 14:50:13,733 INFO L290 TraceCheckUtils]: 6: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-28 14:50:13,734 INFO L290 TraceCheckUtils]: 7: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 14:50:13,734 INFO L290 TraceCheckUtils]: 8: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,734 INFO L290 TraceCheckUtils]: 9: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,735 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,735 INFO L290 TraceCheckUtils]: 0: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {31182#true} is VALID [2022-04-28 14:50:13,735 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {31182#true} is VALID [2022-04-28 14:50:13,735 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {31182#true} is VALID [2022-04-28 14:50:13,736 INFO L272 TraceCheckUtils]: 3: Hoare triple {31182#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:13,736 INFO L290 TraceCheckUtils]: 4: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-28 14:50:13,736 INFO L290 TraceCheckUtils]: 5: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-28 14:50:13,736 INFO L290 TraceCheckUtils]: 6: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-28 14:50:13,736 INFO L290 TraceCheckUtils]: 7: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-28 14:50:13,737 INFO L290 TraceCheckUtils]: 8: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-28 14:50:13,737 INFO L290 TraceCheckUtils]: 9: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-28 14:50:13,737 INFO L290 TraceCheckUtils]: 10: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-28 14:50:13,737 INFO L290 TraceCheckUtils]: 11: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 14:50:13,737 INFO L290 TraceCheckUtils]: 12: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,738 INFO L290 TraceCheckUtils]: 13: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,738 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,739 INFO L290 TraceCheckUtils]: 15: Hoare triple {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,739 INFO L290 TraceCheckUtils]: 16: Hoare triple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,740 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {31182#true} #741#return; {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-28 14:50:13,740 INFO L290 TraceCheckUtils]: 0: Hoare triple {31224#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {31182#true} is VALID [2022-04-28 14:50:13,740 INFO L290 TraceCheckUtils]: 1: Hoare triple {31182#true} assume 0 == ~irpStack__MajorFunction~0; {31182#true} is VALID [2022-04-28 14:50:13,740 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {31182#true} is VALID [2022-04-28 14:50:13,740 INFO L290 TraceCheckUtils]: 3: Hoare triple {31182#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {31182#true} is VALID [2022-04-28 14:50:13,741 INFO L272 TraceCheckUtils]: 4: Hoare triple {31182#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:13,741 INFO L290 TraceCheckUtils]: 5: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {31182#true} is VALID [2022-04-28 14:50:13,741 INFO L290 TraceCheckUtils]: 6: Hoare triple {31182#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {31182#true} is VALID [2022-04-28 14:50:13,741 INFO L290 TraceCheckUtils]: 7: Hoare triple {31182#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {31182#true} is VALID [2022-04-28 14:50:13,742 INFO L272 TraceCheckUtils]: 8: Hoare triple {31182#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:13,742 INFO L290 TraceCheckUtils]: 9: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-28 14:50:13,742 INFO L290 TraceCheckUtils]: 10: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-28 14:50:13,742 INFO L290 TraceCheckUtils]: 11: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-28 14:50:13,742 INFO L290 TraceCheckUtils]: 12: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-28 14:50:13,742 INFO L290 TraceCheckUtils]: 13: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-28 14:50:13,742 INFO L290 TraceCheckUtils]: 14: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-28 14:50:13,742 INFO L290 TraceCheckUtils]: 15: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-28 14:50:13,743 INFO L290 TraceCheckUtils]: 16: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 14:50:13,743 INFO L290 TraceCheckUtils]: 17: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,743 INFO L290 TraceCheckUtils]: 18: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,744 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,744 INFO L290 TraceCheckUtils]: 20: Hoare triple {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,745 INFO L290 TraceCheckUtils]: 21: Hoare triple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,745 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {31182#true} #741#return; {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-28 14:50:13,746 INFO L290 TraceCheckUtils]: 23: Hoare triple {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~tmp~0 := #t~ret43;havoc #t~ret43;#res := ~tmp~0; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-28 14:50:13,746 INFO L290 TraceCheckUtils]: 24: Hoare triple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} assume true; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-28 14:50:13,747 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} {31182#true} #719#return; {31219#(= |main_#t~ret29| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,748 INFO L272 TraceCheckUtils]: 0: Hoare triple {31182#true} call ULTIMATE.init(); {31221#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:50:13,748 INFO L290 TraceCheckUtils]: 1: Hoare triple {31221#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {31182#true} is VALID [2022-04-28 14:50:13,748 INFO L290 TraceCheckUtils]: 2: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-28 14:50:13,748 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {31182#true} {31182#true} #783#return; {31182#true} is VALID [2022-04-28 14:50:13,748 INFO L272 TraceCheckUtils]: 4: Hoare triple {31182#true} call #t~ret81 := main(); {31182#true} is VALID [2022-04-28 14:50:13,748 INFO L290 TraceCheckUtils]: 5: Hoare triple {31182#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {31182#true} is VALID [2022-04-28 14:50:13,749 INFO L272 TraceCheckUtils]: 6: Hoare triple {31182#true} call _BLAST_init(); {31222#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:13,749 INFO L290 TraceCheckUtils]: 7: Hoare triple {31222#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-28 14:50:13,750 INFO L290 TraceCheckUtils]: 8: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-28 14:50:13,750 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {31182#true} {31182#true} #715#return; {31182#true} is VALID [2022-04-28 14:50:13,750 INFO L290 TraceCheckUtils]: 10: Hoare triple {31182#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {31182#true} is VALID [2022-04-28 14:50:13,750 INFO L290 TraceCheckUtils]: 11: Hoare triple {31182#true} assume !(0 == ~irp_choice~0); {31182#true} is VALID [2022-04-28 14:50:13,750 INFO L272 TraceCheckUtils]: 12: Hoare triple {31182#true} call stub_driver_init(); {31223#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:13,750 INFO L290 TraceCheckUtils]: 13: Hoare triple {31223#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {31182#true} is VALID [2022-04-28 14:50:13,750 INFO L290 TraceCheckUtils]: 14: Hoare triple {31182#true} assume true; {31182#true} is VALID [2022-04-28 14:50:13,751 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {31182#true} {31182#true} #717#return; {31182#true} is VALID [2022-04-28 14:50:13,751 INFO L290 TraceCheckUtils]: 16: Hoare triple {31182#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {31182#true} is VALID [2022-04-28 14:50:13,751 INFO L290 TraceCheckUtils]: 17: Hoare triple {31182#true} assume 0 == ~tmp_ndt_1~0; {31182#true} is VALID [2022-04-28 14:50:13,751 INFO L272 TraceCheckUtils]: 18: Hoare triple {31182#true} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {31224#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:13,751 INFO L290 TraceCheckUtils]: 19: Hoare triple {31224#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {31182#true} is VALID [2022-04-28 14:50:13,752 INFO L290 TraceCheckUtils]: 20: Hoare triple {31182#true} assume 0 == ~irpStack__MajorFunction~0; {31182#true} is VALID [2022-04-28 14:50:13,752 INFO L290 TraceCheckUtils]: 21: Hoare triple {31182#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {31182#true} is VALID [2022-04-28 14:50:13,752 INFO L290 TraceCheckUtils]: 22: Hoare triple {31182#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {31182#true} is VALID [2022-04-28 14:50:13,752 INFO L272 TraceCheckUtils]: 23: Hoare triple {31182#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:13,752 INFO L290 TraceCheckUtils]: 24: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {31182#true} is VALID [2022-04-28 14:50:13,752 INFO L290 TraceCheckUtils]: 25: Hoare triple {31182#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {31182#true} is VALID [2022-04-28 14:50:13,752 INFO L290 TraceCheckUtils]: 26: Hoare triple {31182#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {31182#true} is VALID [2022-04-28 14:50:13,753 INFO L272 TraceCheckUtils]: 27: Hoare triple {31182#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:13,753 INFO L290 TraceCheckUtils]: 28: Hoare triple {31245#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {31182#true} is VALID [2022-04-28 14:50:13,753 INFO L290 TraceCheckUtils]: 29: Hoare triple {31182#true} assume !(0 != ~compRegistered~0); {31182#true} is VALID [2022-04-28 14:50:13,753 INFO L290 TraceCheckUtils]: 30: Hoare triple {31182#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {31182#true} is VALID [2022-04-28 14:50:13,753 INFO L290 TraceCheckUtils]: 31: Hoare triple {31182#true} assume 0 == ~tmp_ndt_6~0; {31182#true} is VALID [2022-04-28 14:50:13,753 INFO L290 TraceCheckUtils]: 32: Hoare triple {31182#true} ~returnVal2~0 := 0; {31182#true} is VALID [2022-04-28 14:50:13,754 INFO L290 TraceCheckUtils]: 33: Hoare triple {31182#true} assume !(~s~0 == ~NP~0); {31182#true} is VALID [2022-04-28 14:50:13,754 INFO L290 TraceCheckUtils]: 34: Hoare triple {31182#true} assume !(~s~0 == ~MPR1~0); {31182#true} is VALID [2022-04-28 14:50:13,754 INFO L290 TraceCheckUtils]: 35: Hoare triple {31182#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 14:50:13,754 INFO L290 TraceCheckUtils]: 36: Hoare triple {31259#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,754 INFO L290 TraceCheckUtils]: 37: Hoare triple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,755 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {31260#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {31182#true} #789#return; {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,755 INFO L290 TraceCheckUtils]: 39: Hoare triple {31257#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,756 INFO L290 TraceCheckUtils]: 40: Hoare triple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,756 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {31258#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {31182#true} #741#return; {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-28 14:50:13,757 INFO L290 TraceCheckUtils]: 42: Hoare triple {31243#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~tmp~0 := #t~ret43;havoc #t~ret43;#res := ~tmp~0; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-28 14:50:13,757 INFO L290 TraceCheckUtils]: 43: Hoare triple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} assume true; {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-28 14:50:13,757 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {31244#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} {31182#true} #719#return; {31219#(= |main_#t~ret29| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,758 INFO L290 TraceCheckUtils]: 45: Hoare triple {31219#(= |main_#t~ret29| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret29 && #t~ret29 <= 2147483647;~status~1 := #t~ret29;havoc #t~ret29; {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,758 INFO L290 TraceCheckUtils]: 46: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,758 INFO L290 TraceCheckUtils]: 47: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,759 INFO L290 TraceCheckUtils]: 48: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,759 INFO L290 TraceCheckUtils]: 49: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,759 INFO L290 TraceCheckUtils]: 50: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,759 INFO L290 TraceCheckUtils]: 51: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,760 INFO L290 TraceCheckUtils]: 52: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {31220#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:13,760 INFO L290 TraceCheckUtils]: 53: Hoare triple {31220#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {31183#false} is VALID [2022-04-28 14:50:13,760 INFO L272 TraceCheckUtils]: 54: Hoare triple {31183#false} call errorFn(); {31183#false} is VALID [2022-04-28 14:50:13,760 INFO L290 TraceCheckUtils]: 55: Hoare triple {31183#false} assume !false; {31183#false} is VALID [2022-04-28 14:50:13,760 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:50:13,760 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:50:13,760 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [32719016] [2022-04-28 14:50:13,762 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [32719016] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:13,762 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:13,762 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 14:50:13,762 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:50:13,762 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1360844008] [2022-04-28 14:50:13,762 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1360844008] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:13,762 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:13,762 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 14:50:13,762 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2141744786] [2022-04-28 14:50:13,763 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:50:13,763 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 56 [2022-04-28 14:50:13,763 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:50:13,763 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:13,799 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:13,800 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-28 14:50:13,800 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:13,800 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-28 14:50:13,800 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2022-04-28 14:50:13,800 INFO L87 Difference]: Start difference. First operand 184 states and 229 transitions. Second operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:16,362 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:16,362 INFO L93 Difference]: Finished difference Result 196 states and 241 transitions. [2022-04-28 14:50:16,362 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-28 14:50:16,362 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 56 [2022-04-28 14:50:16,362 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:50:16,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:16,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 211 transitions. [2022-04-28 14:50:16,364 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:16,365 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 211 transitions. [2022-04-28 14:50:16,365 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 211 transitions. [2022-04-28 14:50:16,529 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 211 edges. 211 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:16,540 INFO L225 Difference]: With dead ends: 196 [2022-04-28 14:50:16,540 INFO L226 Difference]: Without dead ends: 182 [2022-04-28 14:50:16,540 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-04-28 14:50:16,540 INFO L413 NwaCegarLoop]: 165 mSDtfsCounter, 343 mSDsluCounter, 626 mSDsCounter, 0 mSdLazyCounter, 1181 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 343 SdHoareTripleChecker+Valid, 791 SdHoareTripleChecker+Invalid, 1262 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 1181 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-04-28 14:50:16,541 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [343 Valid, 791 Invalid, 1262 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 1181 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-04-28 14:50:16,541 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2022-04-28 14:50:16,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 182. [2022-04-28 14:50:16,808 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:50:16,808 INFO L82 GeneralOperation]: Start isEquivalent. First operand 182 states. Second operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-28 14:50:16,808 INFO L74 IsIncluded]: Start isIncluded. First operand 182 states. Second operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-28 14:50:16,809 INFO L87 Difference]: Start difference. First operand 182 states. Second operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-28 14:50:16,810 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:16,811 INFO L93 Difference]: Finished difference Result 182 states and 225 transitions. [2022-04-28 14:50:16,811 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 225 transitions. [2022-04-28 14:50:16,811 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:16,811 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:16,811 INFO L74 IsIncluded]: Start isIncluded. First operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) Second operand 182 states. [2022-04-28 14:50:16,811 INFO L87 Difference]: Start difference. First operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) Second operand 182 states. [2022-04-28 14:50:16,813 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:16,813 INFO L93 Difference]: Finished difference Result 182 states and 225 transitions. [2022-04-28 14:50:16,813 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 225 transitions. [2022-04-28 14:50:16,813 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:16,813 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:16,814 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:50:16,814 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:50:16,814 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 147 states have (on average 1.2857142857142858) internal successors, (189), 149 states have internal predecessors, (189), 20 states have call successors, (20), 16 states have call predecessors, (20), 14 states have return successors, (16), 16 states have call predecessors, (16), 14 states have call successors, (16) [2022-04-28 14:50:16,816 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 225 transitions. [2022-04-28 14:50:16,816 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 225 transitions. Word has length 56 [2022-04-28 14:50:16,816 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:50:16,816 INFO L495 AbstractCegarLoop]: Abstraction has 182 states and 225 transitions. [2022-04-28 14:50:16,816 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:16,816 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 182 states and 225 transitions. [2022-04-28 14:50:17,072 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 225 edges. 225 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:17,073 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 225 transitions. [2022-04-28 14:50:17,073 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-04-28 14:50:17,073 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:50:17,073 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:50:17,073 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-04-28 14:50:17,073 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:50:17,074 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:50:17,074 INFO L85 PathProgramCache]: Analyzing trace with hash 1221590652, now seen corresponding path program 1 times [2022-04-28 14:50:17,074 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:17,074 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1150200064] [2022-04-28 14:50:17,074 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:50:17,074 INFO L85 PathProgramCache]: Analyzing trace with hash 1221590652, now seen corresponding path program 2 times [2022-04-28 14:50:17,074 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:50:17,074 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1600487480] [2022-04-28 14:50:17,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:50:17,074 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:50:17,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:17,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:50:17,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:17,138 INFO L290 TraceCheckUtils]: 0: Hoare triple {32421#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {32385#true} is VALID [2022-04-28 14:50:17,138 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-28 14:50:17,138 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32385#true} {32385#true} #783#return; {32385#true} is VALID [2022-04-28 14:50:17,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:50:17,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:17,164 INFO L290 TraceCheckUtils]: 0: Hoare triple {32422#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-28 14:50:17,164 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-28 14:50:17,164 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32385#true} {32385#true} #715#return; {32385#true} is VALID [2022-04-28 14:50:17,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:50:17,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:17,175 INFO L290 TraceCheckUtils]: 0: Hoare triple {32423#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-28 14:50:17,176 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-28 14:50:17,176 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32385#true} {32385#true} #717#return; {32385#true} is VALID [2022-04-28 14:50:17,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-28 14:50:17,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:17,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-04-28 14:50:17,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:17,261 INFO L290 TraceCheckUtils]: 0: Hoare triple {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {32385#true} is VALID [2022-04-28 14:50:17,262 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume !(0 != ~compRegistered~0); {32385#true} is VALID [2022-04-28 14:50:17,262 INFO L290 TraceCheckUtils]: 2: Hoare triple {32385#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {32385#true} is VALID [2022-04-28 14:50:17,262 INFO L290 TraceCheckUtils]: 3: Hoare triple {32385#true} assume 0 == ~tmp_ndt_6~0; {32385#true} is VALID [2022-04-28 14:50:17,262 INFO L290 TraceCheckUtils]: 4: Hoare triple {32385#true} ~returnVal2~0 := 0; {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:17,262 INFO L290 TraceCheckUtils]: 5: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:17,263 INFO L290 TraceCheckUtils]: 6: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:17,263 INFO L290 TraceCheckUtils]: 7: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 14:50:17,263 INFO L290 TraceCheckUtils]: 8: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 14:50:17,264 INFO L290 TraceCheckUtils]: 9: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume true; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 14:50:17,264 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {32436#(= ~lowerDriverReturn~0 0)} {32385#true} #767#return; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 14:50:17,264 INFO L290 TraceCheckUtils]: 0: Hoare triple {32424#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {32385#true} is VALID [2022-04-28 14:50:17,264 INFO L290 TraceCheckUtils]: 1: Hoare triple {32385#true} assume !(0 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-28 14:50:17,264 INFO L290 TraceCheckUtils]: 2: Hoare triple {32385#true} assume !(23 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-28 14:50:17,265 INFO L290 TraceCheckUtils]: 3: Hoare triple {32385#true} assume 2 == ~irpStack__MinorFunction~0; {32385#true} is VALID [2022-04-28 14:50:17,265 INFO L290 TraceCheckUtils]: 4: Hoare triple {32385#true} ~devExt__Removed~0 := 1; {32385#true} is VALID [2022-04-28 14:50:17,265 INFO L290 TraceCheckUtils]: 5: Hoare triple {32385#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {32385#true} is VALID [2022-04-28 14:50:17,265 INFO L290 TraceCheckUtils]: 6: Hoare triple {32385#true} #t~post15 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post15;havoc #t~post15;#t~post16 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post16;havoc #t~post16; {32385#true} is VALID [2022-04-28 14:50:17,265 INFO L272 TraceCheckUtils]: 7: Hoare triple {32385#true} call #t~ret17 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:17,265 INFO L290 TraceCheckUtils]: 8: Hoare triple {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {32385#true} is VALID [2022-04-28 14:50:17,265 INFO L290 TraceCheckUtils]: 9: Hoare triple {32385#true} assume !(0 != ~compRegistered~0); {32385#true} is VALID [2022-04-28 14:50:17,265 INFO L290 TraceCheckUtils]: 10: Hoare triple {32385#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {32385#true} is VALID [2022-04-28 14:50:17,266 INFO L290 TraceCheckUtils]: 11: Hoare triple {32385#true} assume 0 == ~tmp_ndt_6~0; {32385#true} is VALID [2022-04-28 14:50:17,266 INFO L290 TraceCheckUtils]: 12: Hoare triple {32385#true} ~returnVal2~0 := 0; {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:17,266 INFO L290 TraceCheckUtils]: 13: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:17,266 INFO L290 TraceCheckUtils]: 14: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:17,267 INFO L290 TraceCheckUtils]: 15: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 14:50:17,267 INFO L290 TraceCheckUtils]: 16: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 14:50:17,267 INFO L290 TraceCheckUtils]: 17: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume true; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 14:50:17,268 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {32436#(= ~lowerDriverReturn~0 0)} {32385#true} #767#return; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 14:50:17,268 INFO L290 TraceCheckUtils]: 19: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume -2147483648 <= #t~ret17 && #t~ret17 <= 2147483647;havoc #t~ret17;~status~0 := 0; {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,268 INFO L290 TraceCheckUtils]: 20: Hoare triple {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,269 INFO L290 TraceCheckUtils]: 21: Hoare triple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,269 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {32385#true} #723#return; {32419#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,270 INFO L272 TraceCheckUtils]: 0: Hoare triple {32385#true} call ULTIMATE.init(); {32421#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:50:17,270 INFO L290 TraceCheckUtils]: 1: Hoare triple {32421#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {32385#true} is VALID [2022-04-28 14:50:17,270 INFO L290 TraceCheckUtils]: 2: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-28 14:50:17,270 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {32385#true} {32385#true} #783#return; {32385#true} is VALID [2022-04-28 14:50:17,270 INFO L272 TraceCheckUtils]: 4: Hoare triple {32385#true} call #t~ret81 := main(); {32385#true} is VALID [2022-04-28 14:50:17,271 INFO L290 TraceCheckUtils]: 5: Hoare triple {32385#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {32385#true} is VALID [2022-04-28 14:50:17,271 INFO L272 TraceCheckUtils]: 6: Hoare triple {32385#true} call _BLAST_init(); {32422#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:17,271 INFO L290 TraceCheckUtils]: 7: Hoare triple {32422#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-28 14:50:17,271 INFO L290 TraceCheckUtils]: 8: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-28 14:50:17,272 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {32385#true} {32385#true} #715#return; {32385#true} is VALID [2022-04-28 14:50:17,272 INFO L290 TraceCheckUtils]: 10: Hoare triple {32385#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {32385#true} is VALID [2022-04-28 14:50:17,272 INFO L290 TraceCheckUtils]: 11: Hoare triple {32385#true} assume !(0 == ~irp_choice~0); {32385#true} is VALID [2022-04-28 14:50:17,272 INFO L272 TraceCheckUtils]: 12: Hoare triple {32385#true} call stub_driver_init(); {32423#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:17,272 INFO L290 TraceCheckUtils]: 13: Hoare triple {32423#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32385#true} is VALID [2022-04-28 14:50:17,272 INFO L290 TraceCheckUtils]: 14: Hoare triple {32385#true} assume true; {32385#true} is VALID [2022-04-28 14:50:17,272 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {32385#true} {32385#true} #717#return; {32385#true} is VALID [2022-04-28 14:50:17,272 INFO L290 TraceCheckUtils]: 16: Hoare triple {32385#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {32385#true} is VALID [2022-04-28 14:50:17,273 INFO L290 TraceCheckUtils]: 17: Hoare triple {32385#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {32385#true} is VALID [2022-04-28 14:50:17,273 INFO L290 TraceCheckUtils]: 18: Hoare triple {32385#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {32385#true} is VALID [2022-04-28 14:50:17,273 INFO L290 TraceCheckUtils]: 19: Hoare triple {32385#true} assume 3 == ~tmp_ndt_3~0; {32385#true} is VALID [2022-04-28 14:50:17,273 INFO L272 TraceCheckUtils]: 20: Hoare triple {32385#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {32424#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:17,273 INFO L290 TraceCheckUtils]: 21: Hoare triple {32424#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {32385#true} is VALID [2022-04-28 14:50:17,273 INFO L290 TraceCheckUtils]: 22: Hoare triple {32385#true} assume !(0 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-28 14:50:17,273 INFO L290 TraceCheckUtils]: 23: Hoare triple {32385#true} assume !(23 == ~irpStack__MinorFunction~0); {32385#true} is VALID [2022-04-28 14:50:17,274 INFO L290 TraceCheckUtils]: 24: Hoare triple {32385#true} assume 2 == ~irpStack__MinorFunction~0; {32385#true} is VALID [2022-04-28 14:50:17,274 INFO L290 TraceCheckUtils]: 25: Hoare triple {32385#true} ~devExt__Removed~0 := 1; {32385#true} is VALID [2022-04-28 14:50:17,274 INFO L290 TraceCheckUtils]: 26: Hoare triple {32385#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {32385#true} is VALID [2022-04-28 14:50:17,274 INFO L290 TraceCheckUtils]: 27: Hoare triple {32385#true} #t~post15 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post15;havoc #t~post15;#t~post16 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post16;havoc #t~post16; {32385#true} is VALID [2022-04-28 14:50:17,274 INFO L272 TraceCheckUtils]: 28: Hoare triple {32385#true} call #t~ret17 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:17,274 INFO L290 TraceCheckUtils]: 29: Hoare triple {32439#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {32385#true} is VALID [2022-04-28 14:50:17,274 INFO L290 TraceCheckUtils]: 30: Hoare triple {32385#true} assume !(0 != ~compRegistered~0); {32385#true} is VALID [2022-04-28 14:50:17,274 INFO L290 TraceCheckUtils]: 31: Hoare triple {32385#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {32385#true} is VALID [2022-04-28 14:50:17,275 INFO L290 TraceCheckUtils]: 32: Hoare triple {32385#true} assume 0 == ~tmp_ndt_6~0; {32385#true} is VALID [2022-04-28 14:50:17,275 INFO L290 TraceCheckUtils]: 33: Hoare triple {32385#true} ~returnVal2~0 := 0; {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:17,275 INFO L290 TraceCheckUtils]: 34: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:17,275 INFO L290 TraceCheckUtils]: 35: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-28 14:50:17,276 INFO L290 TraceCheckUtils]: 36: Hoare triple {32440#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 14:50:17,276 INFO L290 TraceCheckUtils]: 37: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 14:50:17,276 INFO L290 TraceCheckUtils]: 38: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume true; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 14:50:17,277 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {32436#(= ~lowerDriverReturn~0 0)} {32385#true} #767#return; {32436#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-28 14:50:17,277 INFO L290 TraceCheckUtils]: 40: Hoare triple {32436#(= ~lowerDriverReturn~0 0)} assume -2147483648 <= #t~ret17 && #t~ret17 <= 2147483647;havoc #t~ret17;~status~0 := 0; {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,277 INFO L290 TraceCheckUtils]: 41: Hoare triple {32437#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,277 INFO L290 TraceCheckUtils]: 42: Hoare triple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,278 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {32438#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {32385#true} #723#return; {32419#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,278 INFO L290 TraceCheckUtils]: 44: Hoare triple {32419#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,278 INFO L290 TraceCheckUtils]: 45: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,279 INFO L290 TraceCheckUtils]: 46: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,279 INFO L290 TraceCheckUtils]: 47: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,279 INFO L290 TraceCheckUtils]: 48: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,279 INFO L290 TraceCheckUtils]: 49: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,280 INFO L290 TraceCheckUtils]: 50: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,280 INFO L290 TraceCheckUtils]: 51: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {32420#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:17,280 INFO L290 TraceCheckUtils]: 52: Hoare triple {32420#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {32386#false} is VALID [2022-04-28 14:50:17,280 INFO L272 TraceCheckUtils]: 53: Hoare triple {32386#false} call errorFn(); {32386#false} is VALID [2022-04-28 14:50:17,280 INFO L290 TraceCheckUtils]: 54: Hoare triple {32386#false} assume !false; {32386#false} is VALID [2022-04-28 14:50:17,280 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:50:17,280 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:50:17,281 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1600487480] [2022-04-28 14:50:17,281 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1600487480] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:17,281 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:17,281 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-28 14:50:17,281 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:50:17,281 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1150200064] [2022-04-28 14:50:17,281 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1150200064] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:17,281 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:17,281 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-28 14:50:17,281 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1200562237] [2022-04-28 14:50:17,281 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:50:17,282 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-28 14:50:17,282 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:50:17,282 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:50:17,311 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:17,311 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-04-28 14:50:17,311 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:17,311 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-04-28 14:50:17,311 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2022-04-28 14:50:17,311 INFO L87 Difference]: Start difference. First operand 182 states and 225 transitions. Second operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:50:19,742 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:19,742 INFO L93 Difference]: Finished difference Result 235 states and 281 transitions. [2022-04-28 14:50:19,743 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-28 14:50:19,743 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-28 14:50:19,759 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:50:19,759 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:50:19,761 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 256 transitions. [2022-04-28 14:50:19,761 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:50:19,762 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 256 transitions. [2022-04-28 14:50:19,762 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 256 transitions. [2022-04-28 14:50:19,964 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 256 edges. 256 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:19,970 INFO L225 Difference]: With dead ends: 235 [2022-04-28 14:50:19,970 INFO L226 Difference]: Without dead ends: 218 [2022-04-28 14:50:19,971 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=101, Invalid=405, Unknown=0, NotChecked=0, Total=506 [2022-04-28 14:50:19,971 INFO L413 NwaCegarLoop]: 169 mSDtfsCounter, 565 mSDsluCounter, 430 mSDsCounter, 0 mSdLazyCounter, 892 mSolverCounterSat, 125 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 565 SdHoareTripleChecker+Valid, 599 SdHoareTripleChecker+Invalid, 1017 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 125 IncrementalHoareTripleChecker+Valid, 892 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-28 14:50:19,971 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [565 Valid, 599 Invalid, 1017 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [125 Valid, 892 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-28 14:50:19,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 218 states. [2022-04-28 14:50:20,257 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 218 to 188. [2022-04-28 14:50:20,257 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:50:20,258 INFO L82 GeneralOperation]: Start isEquivalent. First operand 218 states. Second operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-28 14:50:20,258 INFO L74 IsIncluded]: Start isIncluded. First operand 218 states. Second operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-28 14:50:20,263 INFO L87 Difference]: Start difference. First operand 218 states. Second operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-28 14:50:20,267 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:20,267 INFO L93 Difference]: Finished difference Result 218 states and 263 transitions. [2022-04-28 14:50:20,267 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 263 transitions. [2022-04-28 14:50:20,267 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:20,267 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:20,267 INFO L74 IsIncluded]: Start isIncluded. First operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) Second operand 218 states. [2022-04-28 14:50:20,267 INFO L87 Difference]: Start difference. First operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) Second operand 218 states. [2022-04-28 14:50:20,270 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:20,270 INFO L93 Difference]: Finished difference Result 218 states and 263 transitions. [2022-04-28 14:50:20,271 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 263 transitions. [2022-04-28 14:50:20,271 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:20,271 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:20,271 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:50:20,271 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:50:20,271 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 188 states, 152 states have (on average 1.2763157894736843) internal successors, (194), 155 states have internal predecessors, (194), 20 states have call successors, (20), 16 states have call predecessors, (20), 15 states have return successors, (18), 16 states have call predecessors, (18), 14 states have call successors, (18) [2022-04-28 14:50:20,274 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 232 transitions. [2022-04-28 14:50:20,274 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 232 transitions. Word has length 55 [2022-04-28 14:50:20,274 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:50:20,274 INFO L495 AbstractCegarLoop]: Abstraction has 188 states and 232 transitions. [2022-04-28 14:50:20,274 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:50:20,276 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 188 states and 232 transitions. [2022-04-28 14:50:20,564 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 232 edges. 232 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:20,564 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 232 transitions. [2022-04-28 14:50:20,564 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-04-28 14:50:20,564 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:50:20,564 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:50:20,565 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-04-28 14:50:20,565 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:50:20,565 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:50:20,565 INFO L85 PathProgramCache]: Analyzing trace with hash 2050869943, now seen corresponding path program 1 times [2022-04-28 14:50:20,565 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:20,565 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [577485659] [2022-04-28 14:50:20,565 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:50:20,565 INFO L85 PathProgramCache]: Analyzing trace with hash 2050869943, now seen corresponding path program 2 times [2022-04-28 14:50:20,565 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:50:20,566 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [354803351] [2022-04-28 14:50:20,566 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:50:20,566 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:50:20,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:20,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:50:20,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:20,632 INFO L290 TraceCheckUtils]: 0: Hoare triple {33785#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {33749#true} is VALID [2022-04-28 14:50:20,632 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-28 14:50:20,632 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33749#true} {33749#true} #783#return; {33749#true} is VALID [2022-04-28 14:50:20,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:50:20,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:20,654 INFO L290 TraceCheckUtils]: 0: Hoare triple {33786#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-28 14:50:20,654 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-28 14:50:20,654 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33749#true} {33749#true} #715#return; {33749#true} is VALID [2022-04-28 14:50:20,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:50:20,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:20,666 INFO L290 TraceCheckUtils]: 0: Hoare triple {33787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-28 14:50:20,666 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-28 14:50:20,666 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33749#true} {33749#true} #717#return; {33749#true} is VALID [2022-04-28 14:50:20,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-28 14:50:20,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:20,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-04-28 14:50:20,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:20,730 INFO L290 TraceCheckUtils]: 0: Hoare triple {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {33749#true} is VALID [2022-04-28 14:50:20,730 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume !(0 != ~compRegistered~0); {33749#true} is VALID [2022-04-28 14:50:20,730 INFO L290 TraceCheckUtils]: 2: Hoare triple {33749#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {33749#true} is VALID [2022-04-28 14:50:20,730 INFO L290 TraceCheckUtils]: 3: Hoare triple {33749#true} assume 0 == ~tmp_ndt_6~0; {33749#true} is VALID [2022-04-28 14:50:20,731 INFO L290 TraceCheckUtils]: 4: Hoare triple {33749#true} ~returnVal2~0 := 0; {33749#true} is VALID [2022-04-28 14:50:20,731 INFO L290 TraceCheckUtils]: 5: Hoare triple {33749#true} assume !(~s~0 == ~NP~0); {33749#true} is VALID [2022-04-28 14:50:20,731 INFO L290 TraceCheckUtils]: 6: Hoare triple {33749#true} assume !(~s~0 == ~MPR1~0); {33749#true} is VALID [2022-04-28 14:50:20,731 INFO L290 TraceCheckUtils]: 7: Hoare triple {33749#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 14:50:20,731 INFO L290 TraceCheckUtils]: 8: Hoare triple {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,732 INFO L290 TraceCheckUtils]: 9: Hoare triple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,732 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {33749#true} #771#return; {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,732 INFO L290 TraceCheckUtils]: 0: Hoare triple {33788#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {33749#true} is VALID [2022-04-28 14:50:20,732 INFO L290 TraceCheckUtils]: 1: Hoare triple {33749#true} assume !(0 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-28 14:50:20,732 INFO L290 TraceCheckUtils]: 2: Hoare triple {33749#true} assume !(23 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-28 14:50:20,733 INFO L290 TraceCheckUtils]: 3: Hoare triple {33749#true} assume !(2 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-28 14:50:20,733 INFO L290 TraceCheckUtils]: 4: Hoare triple {33749#true} assume 1 == ~irpStack__MinorFunction~0; {33749#true} is VALID [2022-04-28 14:50:20,733 INFO L290 TraceCheckUtils]: 5: Hoare triple {33749#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {33749#true} is VALID [2022-04-28 14:50:20,733 INFO L290 TraceCheckUtils]: 6: Hoare triple {33749#true} #t~post18 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post18;havoc #t~post18;#t~post19 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post19;havoc #t~post19; {33749#true} is VALID [2022-04-28 14:50:20,733 INFO L272 TraceCheckUtils]: 7: Hoare triple {33749#true} call #t~ret20 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:20,733 INFO L290 TraceCheckUtils]: 8: Hoare triple {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {33749#true} is VALID [2022-04-28 14:50:20,733 INFO L290 TraceCheckUtils]: 9: Hoare triple {33749#true} assume !(0 != ~compRegistered~0); {33749#true} is VALID [2022-04-28 14:50:20,734 INFO L290 TraceCheckUtils]: 10: Hoare triple {33749#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {33749#true} is VALID [2022-04-28 14:50:20,734 INFO L290 TraceCheckUtils]: 11: Hoare triple {33749#true} assume 0 == ~tmp_ndt_6~0; {33749#true} is VALID [2022-04-28 14:50:20,734 INFO L290 TraceCheckUtils]: 12: Hoare triple {33749#true} ~returnVal2~0 := 0; {33749#true} is VALID [2022-04-28 14:50:20,734 INFO L290 TraceCheckUtils]: 13: Hoare triple {33749#true} assume !(~s~0 == ~NP~0); {33749#true} is VALID [2022-04-28 14:50:20,734 INFO L290 TraceCheckUtils]: 14: Hoare triple {33749#true} assume !(~s~0 == ~MPR1~0); {33749#true} is VALID [2022-04-28 14:50:20,734 INFO L290 TraceCheckUtils]: 15: Hoare triple {33749#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 14:50:20,734 INFO L290 TraceCheckUtils]: 16: Hoare triple {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,735 INFO L290 TraceCheckUtils]: 17: Hoare triple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,735 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {33749#true} #771#return; {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,735 INFO L290 TraceCheckUtils]: 19: Hoare triple {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret20 && #t~ret20 <= 2147483647;~status~0 := #t~ret20;havoc #t~ret20; {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,736 INFO L290 TraceCheckUtils]: 20: Hoare triple {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,736 INFO L290 TraceCheckUtils]: 21: Hoare triple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,737 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {33749#true} #723#return; {33783#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,738 INFO L272 TraceCheckUtils]: 0: Hoare triple {33749#true} call ULTIMATE.init(); {33785#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:50:20,738 INFO L290 TraceCheckUtils]: 1: Hoare triple {33785#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {33749#true} is VALID [2022-04-28 14:50:20,738 INFO L290 TraceCheckUtils]: 2: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-28 14:50:20,738 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {33749#true} {33749#true} #783#return; {33749#true} is VALID [2022-04-28 14:50:20,738 INFO L272 TraceCheckUtils]: 4: Hoare triple {33749#true} call #t~ret81 := main(); {33749#true} is VALID [2022-04-28 14:50:20,738 INFO L290 TraceCheckUtils]: 5: Hoare triple {33749#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {33749#true} is VALID [2022-04-28 14:50:20,739 INFO L272 TraceCheckUtils]: 6: Hoare triple {33749#true} call _BLAST_init(); {33786#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:20,739 INFO L290 TraceCheckUtils]: 7: Hoare triple {33786#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-28 14:50:20,739 INFO L290 TraceCheckUtils]: 8: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-28 14:50:20,739 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {33749#true} {33749#true} #715#return; {33749#true} is VALID [2022-04-28 14:50:20,739 INFO L290 TraceCheckUtils]: 10: Hoare triple {33749#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {33749#true} is VALID [2022-04-28 14:50:20,739 INFO L290 TraceCheckUtils]: 11: Hoare triple {33749#true} assume !(0 == ~irp_choice~0); {33749#true} is VALID [2022-04-28 14:50:20,740 INFO L272 TraceCheckUtils]: 12: Hoare triple {33749#true} call stub_driver_init(); {33787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:20,740 INFO L290 TraceCheckUtils]: 13: Hoare triple {33787#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {33749#true} is VALID [2022-04-28 14:50:20,740 INFO L290 TraceCheckUtils]: 14: Hoare triple {33749#true} assume true; {33749#true} is VALID [2022-04-28 14:50:20,740 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {33749#true} {33749#true} #717#return; {33749#true} is VALID [2022-04-28 14:50:20,740 INFO L290 TraceCheckUtils]: 16: Hoare triple {33749#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {33749#true} is VALID [2022-04-28 14:50:20,740 INFO L290 TraceCheckUtils]: 17: Hoare triple {33749#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {33749#true} is VALID [2022-04-28 14:50:20,740 INFO L290 TraceCheckUtils]: 18: Hoare triple {33749#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {33749#true} is VALID [2022-04-28 14:50:20,740 INFO L290 TraceCheckUtils]: 19: Hoare triple {33749#true} assume 3 == ~tmp_ndt_3~0; {33749#true} is VALID [2022-04-28 14:50:20,741 INFO L272 TraceCheckUtils]: 20: Hoare triple {33749#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {33788#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:20,741 INFO L290 TraceCheckUtils]: 21: Hoare triple {33788#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {33749#true} is VALID [2022-04-28 14:50:20,741 INFO L290 TraceCheckUtils]: 22: Hoare triple {33749#true} assume !(0 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-28 14:50:20,741 INFO L290 TraceCheckUtils]: 23: Hoare triple {33749#true} assume !(23 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-28 14:50:20,741 INFO L290 TraceCheckUtils]: 24: Hoare triple {33749#true} assume !(2 == ~irpStack__MinorFunction~0); {33749#true} is VALID [2022-04-28 14:50:20,741 INFO L290 TraceCheckUtils]: 25: Hoare triple {33749#true} assume 1 == ~irpStack__MinorFunction~0; {33749#true} is VALID [2022-04-28 14:50:20,741 INFO L290 TraceCheckUtils]: 26: Hoare triple {33749#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {33749#true} is VALID [2022-04-28 14:50:20,741 INFO L290 TraceCheckUtils]: 27: Hoare triple {33749#true} #t~post18 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post18;havoc #t~post18;#t~post19 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post19;havoc #t~post19; {33749#true} is VALID [2022-04-28 14:50:20,742 INFO L272 TraceCheckUtils]: 28: Hoare triple {33749#true} call #t~ret20 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:20,742 INFO L290 TraceCheckUtils]: 29: Hoare triple {33803#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {33749#true} is VALID [2022-04-28 14:50:20,742 INFO L290 TraceCheckUtils]: 30: Hoare triple {33749#true} assume !(0 != ~compRegistered~0); {33749#true} is VALID [2022-04-28 14:50:20,742 INFO L290 TraceCheckUtils]: 31: Hoare triple {33749#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {33749#true} is VALID [2022-04-28 14:50:20,742 INFO L290 TraceCheckUtils]: 32: Hoare triple {33749#true} assume 0 == ~tmp_ndt_6~0; {33749#true} is VALID [2022-04-28 14:50:20,742 INFO L290 TraceCheckUtils]: 33: Hoare triple {33749#true} ~returnVal2~0 := 0; {33749#true} is VALID [2022-04-28 14:50:20,742 INFO L290 TraceCheckUtils]: 34: Hoare triple {33749#true} assume !(~s~0 == ~NP~0); {33749#true} is VALID [2022-04-28 14:50:20,742 INFO L290 TraceCheckUtils]: 35: Hoare triple {33749#true} assume !(~s~0 == ~MPR1~0); {33749#true} is VALID [2022-04-28 14:50:20,742 INFO L290 TraceCheckUtils]: 36: Hoare triple {33749#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-28 14:50:20,743 INFO L290 TraceCheckUtils]: 37: Hoare triple {33804#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,743 INFO L290 TraceCheckUtils]: 38: Hoare triple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,743 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {33805#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {33749#true} #771#return; {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,744 INFO L290 TraceCheckUtils]: 40: Hoare triple {33800#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret20 && #t~ret20 <= 2147483647;~status~0 := #t~ret20;havoc #t~ret20; {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,744 INFO L290 TraceCheckUtils]: 41: Hoare triple {33801#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,744 INFO L290 TraceCheckUtils]: 42: Hoare triple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,745 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {33802#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {33749#true} #723#return; {33783#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,745 INFO L290 TraceCheckUtils]: 44: Hoare triple {33783#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,745 INFO L290 TraceCheckUtils]: 45: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,746 INFO L290 TraceCheckUtils]: 46: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,746 INFO L290 TraceCheckUtils]: 47: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,746 INFO L290 TraceCheckUtils]: 48: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,746 INFO L290 TraceCheckUtils]: 49: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,746 INFO L290 TraceCheckUtils]: 50: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,747 INFO L290 TraceCheckUtils]: 51: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {33784#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-28 14:50:20,747 INFO L290 TraceCheckUtils]: 52: Hoare triple {33784#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {33750#false} is VALID [2022-04-28 14:50:20,747 INFO L272 TraceCheckUtils]: 53: Hoare triple {33750#false} call errorFn(); {33750#false} is VALID [2022-04-28 14:50:20,747 INFO L290 TraceCheckUtils]: 54: Hoare triple {33750#false} assume !false; {33750#false} is VALID [2022-04-28 14:50:20,747 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:50:20,747 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:50:20,747 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [354803351] [2022-04-28 14:50:20,748 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [354803351] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:20,748 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:20,748 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 14:50:20,748 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:50:20,748 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [577485659] [2022-04-28 14:50:20,748 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [577485659] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:20,748 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:20,748 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 14:50:20,748 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [988972548] [2022-04-28 14:50:20,748 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:50:20,749 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-28 14:50:20,749 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:50:20,749 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:50:20,779 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:20,779 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-28 14:50:20,779 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:20,779 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-28 14:50:20,780 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-04-28 14:50:20,780 INFO L87 Difference]: Start difference. First operand 188 states and 232 transitions. Second operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:50:22,968 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:22,968 INFO L93 Difference]: Finished difference Result 204 states and 248 transitions. [2022-04-28 14:50:22,968 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 14:50:22,968 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-28 14:50:22,969 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:50:22,969 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:50:22,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 211 transitions. [2022-04-28 14:50:22,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:50:22,971 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 211 transitions. [2022-04-28 14:50:22,971 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 211 transitions. [2022-04-28 14:50:23,139 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 211 edges. 211 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:23,142 INFO L225 Difference]: With dead ends: 204 [2022-04-28 14:50:23,142 INFO L226 Difference]: Without dead ends: 166 [2022-04-28 14:50:23,142 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-04-28 14:50:23,143 INFO L413 NwaCegarLoop]: 161 mSDtfsCounter, 345 mSDsluCounter, 489 mSDsCounter, 0 mSdLazyCounter, 923 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 345 SdHoareTripleChecker+Valid, 650 SdHoareTripleChecker+Invalid, 1000 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 923 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-28 14:50:23,143 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [345 Valid, 650 Invalid, 1000 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 923 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-28 14:50:23,143 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2022-04-28 14:50:23,406 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 166. [2022-04-28 14:50:23,407 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:50:23,407 INFO L82 GeneralOperation]: Start isEquivalent. First operand 166 states. Second operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 14:50:23,407 INFO L74 IsIncluded]: Start isIncluded. First operand 166 states. Second operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 14:50:23,407 INFO L87 Difference]: Start difference. First operand 166 states. Second operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 14:50:23,409 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:23,409 INFO L93 Difference]: Finished difference Result 166 states and 189 transitions. [2022-04-28 14:50:23,409 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 189 transitions. [2022-04-28 14:50:23,409 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:23,409 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:23,409 INFO L74 IsIncluded]: Start isIncluded. First operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 166 states. [2022-04-28 14:50:23,409 INFO L87 Difference]: Start difference. First operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 166 states. [2022-04-28 14:50:23,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:23,411 INFO L93 Difference]: Finished difference Result 166 states and 189 transitions. [2022-04-28 14:50:23,411 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 189 transitions. [2022-04-28 14:50:23,411 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:23,412 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:23,412 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:50:23,412 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:50:23,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 131 states have (on average 1.1755725190839694) internal successors, (154), 134 states have internal predecessors, (154), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 14:50:23,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 189 transitions. [2022-04-28 14:50:23,414 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 189 transitions. Word has length 55 [2022-04-28 14:50:23,414 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:50:23,414 INFO L495 AbstractCegarLoop]: Abstraction has 166 states and 189 transitions. [2022-04-28 14:50:23,414 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-28 14:50:23,414 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 166 states and 189 transitions. [2022-04-28 14:50:23,653 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 189 edges. 189 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:23,653 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 189 transitions. [2022-04-28 14:50:23,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-04-28 14:50:23,653 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:50:23,653 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:50:23,653 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2022-04-28 14:50:23,654 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:50:23,654 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:50:23,654 INFO L85 PathProgramCache]: Analyzing trace with hash 1918234721, now seen corresponding path program 1 times [2022-04-28 14:50:23,654 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:23,654 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [2064906211] [2022-04-28 14:50:23,660 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:50:23,661 INFO L85 PathProgramCache]: Analyzing trace with hash 1918234721, now seen corresponding path program 2 times [2022-04-28 14:50:23,661 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:50:23,661 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2078543503] [2022-04-28 14:50:23,661 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:50:23,661 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:50:23,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:23,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 14:50:23,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:23,736 INFO L290 TraceCheckUtils]: 0: Hoare triple {34915#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {34884#true} is VALID [2022-04-28 14:50:23,736 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 14:50:23,736 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #783#return; {34884#true} is VALID [2022-04-28 14:50:23,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-28 14:50:23,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:23,764 INFO L290 TraceCheckUtils]: 0: Hoare triple {34916#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-28 14:50:23,764 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 14:50:23,764 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #715#return; {34884#true} is VALID [2022-04-28 14:50:23,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-28 14:50:23,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:23,780 INFO L290 TraceCheckUtils]: 0: Hoare triple {34917#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-28 14:50:23,780 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 14:50:23,780 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #717#return; {34884#true} is VALID [2022-04-28 14:50:23,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-28 14:50:23,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:23,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-28 14:50:23,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:23,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-28 14:50:23,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 14:50:23,866 INFO L290 TraceCheckUtils]: 0: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-28 14:50:23,866 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 14:50:23,867 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-28 14:50:23,867 INFO L290 TraceCheckUtils]: 0: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {34884#true} is VALID [2022-04-28 14:50:23,867 INFO L272 TraceCheckUtils]: 1: Hoare triple {34884#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:50:23,867 INFO L290 TraceCheckUtils]: 2: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-28 14:50:23,867 INFO L290 TraceCheckUtils]: 3: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 14:50:23,867 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-28 14:50:23,868 INFO L290 TraceCheckUtils]: 5: Hoare triple {34884#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 14:50:23,868 INFO L290 TraceCheckUtils]: 6: Hoare triple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 14:50:23,869 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {34884#true} #777#return; {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-28 14:50:23,869 INFO L290 TraceCheckUtils]: 0: Hoare triple {34918#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {34884#true} is VALID [2022-04-28 14:50:23,869 INFO L290 TraceCheckUtils]: 1: Hoare triple {34884#true} assume 0 != ~compRegistered~0; {34884#true} is VALID [2022-04-28 14:50:23,870 INFO L272 TraceCheckUtils]: 2: Hoare triple {34884#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:50:23,870 INFO L290 TraceCheckUtils]: 3: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {34884#true} is VALID [2022-04-28 14:50:23,870 INFO L272 TraceCheckUtils]: 4: Hoare triple {34884#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:50:23,870 INFO L290 TraceCheckUtils]: 5: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-28 14:50:23,870 INFO L290 TraceCheckUtils]: 6: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 14:50:23,870 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-28 14:50:23,871 INFO L290 TraceCheckUtils]: 8: Hoare triple {34884#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 14:50:23,871 INFO L290 TraceCheckUtils]: 9: Hoare triple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 14:50:23,872 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {34884#true} #777#return; {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-28 14:50:23,872 INFO L290 TraceCheckUtils]: 11: Hoare triple {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-28 14:50:23,872 INFO L290 TraceCheckUtils]: 12: Hoare triple {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {34885#false} is VALID [2022-04-28 14:50:23,873 INFO L290 TraceCheckUtils]: 13: Hoare triple {34885#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {34885#false} is VALID [2022-04-28 14:50:23,873 INFO L290 TraceCheckUtils]: 14: Hoare triple {34885#false} assume 0 == ~tmp_ndt_6~0; {34885#false} is VALID [2022-04-28 14:50:23,873 INFO L290 TraceCheckUtils]: 15: Hoare triple {34885#false} ~returnVal2~0 := 0; {34885#false} is VALID [2022-04-28 14:50:23,873 INFO L290 TraceCheckUtils]: 16: Hoare triple {34885#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {34885#false} is VALID [2022-04-28 14:50:23,873 INFO L290 TraceCheckUtils]: 17: Hoare triple {34885#false} #res := ~returnVal2~0; {34885#false} is VALID [2022-04-28 14:50:23,873 INFO L290 TraceCheckUtils]: 18: Hoare triple {34885#false} assume true; {34885#false} is VALID [2022-04-28 14:50:23,873 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {34885#false} {34884#true} #755#return; {34885#false} is VALID [2022-04-28 14:50:23,874 INFO L272 TraceCheckUtils]: 0: Hoare triple {34884#true} call ULTIMATE.init(); {34915#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 14:50:23,874 INFO L290 TraceCheckUtils]: 1: Hoare triple {34915#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {34884#true} is VALID [2022-04-28 14:50:23,874 INFO L290 TraceCheckUtils]: 2: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 14:50:23,874 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {34884#true} {34884#true} #783#return; {34884#true} is VALID [2022-04-28 14:50:23,874 INFO L272 TraceCheckUtils]: 4: Hoare triple {34884#true} call #t~ret81 := main(); {34884#true} is VALID [2022-04-28 14:50:23,874 INFO L290 TraceCheckUtils]: 5: Hoare triple {34884#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {34884#true} is VALID [2022-04-28 14:50:23,875 INFO L272 TraceCheckUtils]: 6: Hoare triple {34884#true} call _BLAST_init(); {34916#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:23,875 INFO L290 TraceCheckUtils]: 7: Hoare triple {34916#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-28 14:50:23,875 INFO L290 TraceCheckUtils]: 8: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 14:50:23,875 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {34884#true} {34884#true} #715#return; {34884#true} is VALID [2022-04-28 14:50:23,876 INFO L290 TraceCheckUtils]: 10: Hoare triple {34884#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {34884#true} is VALID [2022-04-28 14:50:23,876 INFO L290 TraceCheckUtils]: 11: Hoare triple {34884#true} assume !(0 == ~irp_choice~0); {34884#true} is VALID [2022-04-28 14:50:23,876 INFO L272 TraceCheckUtils]: 12: Hoare triple {34884#true} call stub_driver_init(); {34917#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:23,876 INFO L290 TraceCheckUtils]: 13: Hoare triple {34917#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34884#true} is VALID [2022-04-28 14:50:23,876 INFO L290 TraceCheckUtils]: 14: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 14:50:23,876 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {34884#true} {34884#true} #717#return; {34884#true} is VALID [2022-04-28 14:50:23,876 INFO L290 TraceCheckUtils]: 16: Hoare triple {34884#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {34884#true} is VALID [2022-04-28 14:50:23,876 INFO L290 TraceCheckUtils]: 17: Hoare triple {34884#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {34884#true} is VALID [2022-04-28 14:50:23,877 INFO L290 TraceCheckUtils]: 18: Hoare triple {34884#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {34884#true} is VALID [2022-04-28 14:50:23,877 INFO L290 TraceCheckUtils]: 19: Hoare triple {34884#true} assume 3 == ~tmp_ndt_3~0; {34884#true} is VALID [2022-04-28 14:50:23,877 INFO L272 TraceCheckUtils]: 20: Hoare triple {34884#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {34884#true} is VALID [2022-04-28 14:50:23,877 INFO L290 TraceCheckUtils]: 21: Hoare triple {34884#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {34884#true} is VALID [2022-04-28 14:50:23,877 INFO L290 TraceCheckUtils]: 22: Hoare triple {34884#true} assume 0 == ~irpStack__MinorFunction~0; {34884#true} is VALID [2022-04-28 14:50:23,877 INFO L290 TraceCheckUtils]: 23: Hoare triple {34884#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {34884#true} is VALID [2022-04-28 14:50:23,877 INFO L290 TraceCheckUtils]: 24: Hoare triple {34884#true} assume !(~s~0 != ~NP~0); {34884#true} is VALID [2022-04-28 14:50:23,877 INFO L290 TraceCheckUtils]: 25: Hoare triple {34884#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {34884#true} is VALID [2022-04-28 14:50:23,877 INFO L290 TraceCheckUtils]: 26: Hoare triple {34884#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {34884#true} is VALID [2022-04-28 14:50:23,878 INFO L272 TraceCheckUtils]: 27: Hoare triple {34884#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {34918#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-28 14:50:23,878 INFO L290 TraceCheckUtils]: 28: Hoare triple {34918#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {34884#true} is VALID [2022-04-28 14:50:23,878 INFO L290 TraceCheckUtils]: 29: Hoare triple {34884#true} assume 0 != ~compRegistered~0; {34884#true} is VALID [2022-04-28 14:50:23,878 INFO L272 TraceCheckUtils]: 30: Hoare triple {34884#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:50:23,878 INFO L290 TraceCheckUtils]: 31: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {34884#true} is VALID [2022-04-28 14:50:23,879 INFO L272 TraceCheckUtils]: 32: Hoare triple {34884#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-28 14:50:23,879 INFO L290 TraceCheckUtils]: 33: Hoare triple {34929#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {34884#true} is VALID [2022-04-28 14:50:23,879 INFO L290 TraceCheckUtils]: 34: Hoare triple {34884#true} assume true; {34884#true} is VALID [2022-04-28 14:50:23,879 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {34884#true} {34884#true} #713#return; {34884#true} is VALID [2022-04-28 14:50:23,879 INFO L290 TraceCheckUtils]: 36: Hoare triple {34884#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 14:50:23,880 INFO L290 TraceCheckUtils]: 37: Hoare triple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-28 14:50:23,880 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {34933#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {34884#true} #777#return; {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-28 14:50:23,881 INFO L290 TraceCheckUtils]: 39: Hoare triple {34927#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-28 14:50:23,881 INFO L290 TraceCheckUtils]: 40: Hoare triple {34928#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {34885#false} is VALID [2022-04-28 14:50:23,881 INFO L290 TraceCheckUtils]: 41: Hoare triple {34885#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {34885#false} is VALID [2022-04-28 14:50:23,881 INFO L290 TraceCheckUtils]: 42: Hoare triple {34885#false} assume 0 == ~tmp_ndt_6~0; {34885#false} is VALID [2022-04-28 14:50:23,881 INFO L290 TraceCheckUtils]: 43: Hoare triple {34885#false} ~returnVal2~0 := 0; {34885#false} is VALID [2022-04-28 14:50:23,881 INFO L290 TraceCheckUtils]: 44: Hoare triple {34885#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {34885#false} is VALID [2022-04-28 14:50:23,881 INFO L290 TraceCheckUtils]: 45: Hoare triple {34885#false} #res := ~returnVal2~0; {34885#false} is VALID [2022-04-28 14:50:23,881 INFO L290 TraceCheckUtils]: 46: Hoare triple {34885#false} assume true; {34885#false} is VALID [2022-04-28 14:50:23,881 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {34885#false} {34884#true} #755#return; {34885#false} is VALID [2022-04-28 14:50:23,881 INFO L290 TraceCheckUtils]: 48: Hoare triple {34885#false} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {34885#false} is VALID [2022-04-28 14:50:23,881 INFO L290 TraceCheckUtils]: 49: Hoare triple {34885#false} assume !(259 == ~__cil_tmp23~0); {34885#false} is VALID [2022-04-28 14:50:23,882 INFO L290 TraceCheckUtils]: 50: Hoare triple {34885#false} assume ~status~0 >= 0; {34885#false} is VALID [2022-04-28 14:50:23,882 INFO L290 TraceCheckUtils]: 51: Hoare triple {34885#false} assume ~myStatus~0 >= 0;~devExt__Started~0 := 1;~devExt__Removed~0 := 0;~devExt__SurpriseRemoved~0 := 0; {34885#false} is VALID [2022-04-28 14:50:23,882 INFO L290 TraceCheckUtils]: 52: Hoare triple {34885#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {34885#false} is VALID [2022-04-28 14:50:23,882 INFO L272 TraceCheckUtils]: 53: Hoare triple {34885#false} call IofCompleteRequest(~Irp, 0); {34885#false} is VALID [2022-04-28 14:50:23,882 INFO L290 TraceCheckUtils]: 54: Hoare triple {34885#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {34885#false} is VALID [2022-04-28 14:50:23,882 INFO L290 TraceCheckUtils]: 55: Hoare triple {34885#false} assume !(~s~0 == ~NP~0); {34885#false} is VALID [2022-04-28 14:50:23,882 INFO L272 TraceCheckUtils]: 56: Hoare triple {34885#false} call errorFn(); {34885#false} is VALID [2022-04-28 14:50:23,882 INFO L290 TraceCheckUtils]: 57: Hoare triple {34885#false} assume !false; {34885#false} is VALID [2022-04-28 14:50:23,882 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 14:50:23,882 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 14:50:23,882 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2078543503] [2022-04-28 14:50:23,883 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2078543503] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:23,883 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:23,883 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 14:50:23,883 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 14:50:23,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [2064906211] [2022-04-28 14:50:23,883 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [2064906211] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 14:50:23,883 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 14:50:23,883 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-28 14:50:23,883 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1458112333] [2022-04-28 14:50:23,883 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 14:50:23,884 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-28 14:50:23,884 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 14:50:23,884 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:23,914 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:23,914 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-28 14:50:23,914 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:23,915 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-28 14:50:23,915 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-28 14:50:23,915 INFO L87 Difference]: Start difference. First operand 166 states and 189 transitions. Second operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:24,904 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:24,904 INFO L93 Difference]: Finished difference Result 202 states and 230 transitions. [2022-04-28 14:50:24,904 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-28 14:50:24,904 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-28 14:50:24,904 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 14:50:24,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:24,905 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 197 transitions. [2022-04-28 14:50:24,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:24,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 197 transitions. [2022-04-28 14:50:24,907 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 197 transitions. [2022-04-28 14:50:25,051 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 197 edges. 197 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:25,053 INFO L225 Difference]: With dead ends: 202 [2022-04-28 14:50:25,053 INFO L226 Difference]: Without dead ends: 160 [2022-04-28 14:50:25,054 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-28 14:50:25,055 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 128 mSDsluCounter, 292 mSDsCounter, 0 mSdLazyCounter, 283 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 422 SdHoareTripleChecker+Invalid, 328 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 283 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-28 14:50:25,055 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 422 Invalid, 328 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 283 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-28 14:50:25,055 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-04-28 14:50:25,337 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 160. [2022-04-28 14:50:25,338 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 14:50:25,338 INFO L82 GeneralOperation]: Start isEquivalent. First operand 160 states. Second operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 14:50:25,338 INFO L74 IsIncluded]: Start isIncluded. First operand 160 states. Second operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 14:50:25,338 INFO L87 Difference]: Start difference. First operand 160 states. Second operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 14:50:25,340 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:25,340 INFO L93 Difference]: Finished difference Result 160 states and 180 transitions. [2022-04-28 14:50:25,340 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 180 transitions. [2022-04-28 14:50:25,340 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:25,340 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:25,340 INFO L74 IsIncluded]: Start isIncluded. First operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 160 states. [2022-04-28 14:50:25,340 INFO L87 Difference]: Start difference. First operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) Second operand 160 states. [2022-04-28 14:50:25,342 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 14:50:25,342 INFO L93 Difference]: Finished difference Result 160 states and 180 transitions. [2022-04-28 14:50:25,342 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 180 transitions. [2022-04-28 14:50:25,342 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 14:50:25,342 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 14:50:25,342 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 14:50:25,342 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 14:50:25,342 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 125 states have (on average 1.16) internal successors, (145), 128 states have internal predecessors, (145), 19 states have call successors, (19), 16 states have call predecessors, (19), 15 states have return successors, (16), 15 states have call predecessors, (16), 13 states have call successors, (16) [2022-04-28 14:50:25,344 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 180 transitions. [2022-04-28 14:50:25,344 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 180 transitions. Word has length 58 [2022-04-28 14:50:25,344 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 14:50:25,344 INFO L495 AbstractCegarLoop]: Abstraction has 160 states and 180 transitions. [2022-04-28 14:50:25,344 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-28 14:50:25,344 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 160 states and 180 transitions. [2022-04-28 14:50:25,573 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 180 edges. 180 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 14:50:25,573 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 180 transitions. [2022-04-28 14:50:25,574 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-04-28 14:50:25,574 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 14:50:25,574 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 14:50:25,574 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21 [2022-04-28 14:50:25,574 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 14:50:25,574 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 14:50:25,574 INFO L85 PathProgramCache]: Analyzing trace with hash 1199488421, now seen corresponding path program 1 times [2022-04-28 14:50:25,574 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 14:50:25,574 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1129051536] [2022-04-28 14:50:25,575 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 14:50:25,575 INFO L85 PathProgramCache]: Analyzing trace with hash 1199488421, now seen corresponding path program 2 times [2022-04-28 14:50:25,575 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 14:50:25,575 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1231418497] [2022-04-28 14:50:25,575 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 14:50:25,575 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 14:50:25,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-04-28 14:50:25,620 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-04-28 14:50:25,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-04-28 14:50:25,680 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-04-28 14:50:25,680 INFO L130 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found a feasible trace [2022-04-28 14:50:25,680 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-04-28 14:50:25,682 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-04-28 14:50:25,683 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22 [2022-04-28 14:50:25,686 INFO L356 BasicCegarLoop]: Path program histogram: [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2] [2022-04-28 14:50:25,689 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-04-28 14:50:25,711 WARN L170 areAnnotationChecker]: reach_errorENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: KeSetEventENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: KbFilter_CompleteENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: stub_driver_initENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: KbFilter_PowerENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: _BLAST_initENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: errorFnENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: errorFnENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: IofCallDriverENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: PoCallDriverENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: IofCompleteRequestENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: KbFilter_PnPENTRY has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: reach_errorFINAL has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: KeSetEventFINAL has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: L624 has no Hoare annotation [2022-04-28 14:50:25,712 WARN L170 areAnnotationChecker]: L624 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: stub_driver_initFINAL has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: _BLAST_initFINAL has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: errorFnFINAL has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L489 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L489 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L475-1 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L475 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L475 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L754 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L754 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L638 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L638 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L875 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L875 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L558 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L558 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L674 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L674 has no Hoare annotation [2022-04-28 14:50:25,713 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: KeSetEventEXIT has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: L624-1 has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: stub_driver_initEXIT has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: L701 has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: L701 has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: _BLAST_initEXIT has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 14:50:25,714 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L491 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L491 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L489-1 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredEXIT has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredEXIT has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L756 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L756 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L754-1 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L645 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L645 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L641 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L641 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L935 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L935 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L883 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L883 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L582 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L582 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L589 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L589 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L562-1 has no Hoare annotation [2022-04-28 14:50:25,715 WARN L170 areAnnotationChecker]: L562 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L562 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L678-1 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L678 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L678 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L107 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L109 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L109 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: KbFilter_CompleteFINAL has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L342 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L342 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L724 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L724 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L428 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L814-1 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L594-1 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L180-1 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L225-1 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L241-1 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L256-1 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L734-1 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L546-1 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L328 has no Hoare annotation [2022-04-28 14:50:25,716 WARN L170 areAnnotationChecker]: L328 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L491-1 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L504 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L504 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L756-1 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L653 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L644 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L644 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L940 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L940 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L884 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: IofCompleteRequestEXIT has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: IofCompleteRequestEXIT has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L684 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L684 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L110 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L112 has no Hoare annotation [2022-04-28 14:50:25,717 WARN L170 areAnnotationChecker]: L112 has no Hoare annotation [2022-04-28 14:50:25,718 WARN L170 areAnnotationChecker]: KbFilter_CompleteEXIT has no Hoare annotation [2022-04-28 14:50:25,718 WARN L170 areAnnotationChecker]: KbFilter_CompleteEXIT has no Hoare annotation [2022-04-28 14:50:25,718 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2022-04-28 14:50:25,718 WARN L170 areAnnotationChecker]: L351 has no Hoare annotation [2022-04-28 14:50:25,718 WARN L170 areAnnotationChecker]: L351 has no Hoare annotation [2022-04-28 14:50:25,718 WARN L170 areAnnotationChecker]: L734 has no Hoare annotation [2022-04-28 14:50:25,718 WARN L170 areAnnotationChecker]: L734 has no Hoare annotation [2022-04-28 14:50:25,718 WARN L170 areAnnotationChecker]: L709 has no Hoare annotation [2022-04-28 14:50:25,718 WARN L170 areAnnotationChecker]: L709 has no Hoare annotation [2022-04-28 14:50:25,718 WARN L170 areAnnotationChecker]: PoCallDriverFINAL has no Hoare annotation [2022-04-28 14:50:25,718 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L247 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L247 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L262 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L262 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L740 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L740 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: IofCallDriverFINAL has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L413 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L413 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L419 has no Hoare annotation [2022-04-28 14:50:25,719 WARN L170 areAnnotationChecker]: L419 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L505 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L509 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L509 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L760 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L760 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L770 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L660 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L660 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L997 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L997 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L1003 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L1003 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L892 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L892 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L596 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L596 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L997-1 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L267 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L684-1 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L180 has no Hoare annotation [2022-04-28 14:50:25,720 WARN L170 areAnnotationChecker]: L180 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L221 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L221 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L113 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L115 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L115 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L356 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L356 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: PoCallDriverEXIT has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L604 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L606 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L192-1 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L231-1 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L247-1 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L262-1 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L740-1 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L427 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L427 has no Hoare annotation [2022-04-28 14:50:25,721 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2022-04-28 14:50:25,722 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2022-04-28 14:50:25,722 WARN L170 areAnnotationChecker]: L524 has no Hoare annotation [2022-04-28 14:50:25,722 WARN L170 areAnnotationChecker]: L524 has no Hoare annotation [2022-04-28 14:50:25,722 WARN L170 areAnnotationChecker]: L510 has no Hoare annotation [2022-04-28 14:50:25,722 WARN L170 areAnnotationChecker]: L512 has no Hoare annotation [2022-04-28 14:50:25,722 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2022-04-28 14:50:25,722 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2022-04-28 14:50:25,722 WARN L170 areAnnotationChecker]: L789 has no Hoare annotation [2022-04-28 14:50:25,722 WARN L170 areAnnotationChecker]: L789 has no Hoare annotation [2022-04-28 14:50:25,722 WARN L170 areAnnotationChecker]: L775 has no Hoare annotation [2022-04-28 14:50:25,722 WARN L170 areAnnotationChecker]: L777 has no Hoare annotation [2022-04-28 14:50:25,722 WARN L170 areAnnotationChecker]: L660-1 has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: L1003-1 has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: L956 has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: L956 has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: L903 has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: L903 has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlFINAL has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: KbFilter_PnPFINAL has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughFINAL has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: L225 has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: L225 has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: L237 has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: L237 has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2022-04-28 14:50:25,723 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L378 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L357 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L357 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L361 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L361 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectFINAL has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: KbFilter_PowerFINAL has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L797 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L797 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseFINAL has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L956-2 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L956-2 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlEXIT has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: KbFilter_PnPEXIT has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughEXIT has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughEXIT has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L241 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L241 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L256 has no Hoare annotation [2022-04-28 14:50:25,724 WARN L170 areAnnotationChecker]: L256 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L383 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L366 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L366 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectEXIT has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L197-2 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L197-2 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: KbFilter_PowerEXIT has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseEXIT has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseEXIT has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L959-1 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L917 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L917 has no Hoare annotation [2022-04-28 14:50:25,725 WARN L170 areAnnotationChecker]: L398 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L388 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L124 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L124 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L367 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L367 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L371 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L371 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L199-1 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L206 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L206 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L205 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L393 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L546 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L546 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L814 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L814 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L372 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L372 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L374 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L216 has no Hoare annotation [2022-04-28 14:50:25,726 WARN L170 areAnnotationChecker]: L216 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L441 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L441 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L447 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L447 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L931 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L931 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L133 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L133 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L453 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L453 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L136 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L136 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L139 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L139 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L142 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L142 has no Hoare annotation [2022-04-28 14:50:25,727 WARN L170 areAnnotationChecker]: L145 has no Hoare annotation [2022-04-28 14:50:25,728 WARN L170 areAnnotationChecker]: L145 has no Hoare annotation [2022-04-28 14:50:25,728 WARN L170 areAnnotationChecker]: L148 has no Hoare annotation [2022-04-28 14:50:25,728 WARN L170 areAnnotationChecker]: L148 has no Hoare annotation [2022-04-28 14:50:25,728 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-04-28 14:50:25,728 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-04-28 14:50:25,728 WARN L170 areAnnotationChecker]: L154 has no Hoare annotation [2022-04-28 14:50:25,728 WARN L170 areAnnotationChecker]: L154 has no Hoare annotation [2022-04-28 14:50:25,728 WARN L170 areAnnotationChecker]: L157 has no Hoare annotation [2022-04-28 14:50:25,728 WARN L170 areAnnotationChecker]: L157 has no Hoare annotation [2022-04-28 14:50:25,728 WARN L170 areAnnotationChecker]: L160 has no Hoare annotation [2022-04-28 14:50:25,728 WARN L170 areAnnotationChecker]: L160 has no Hoare annotation [2022-04-28 14:50:25,728 WARN L170 areAnnotationChecker]: L163 has no Hoare annotation [2022-04-28 14:50:25,728 WARN L170 areAnnotationChecker]: L163 has no Hoare annotation [2022-04-28 14:50:25,728 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2022-04-28 14:50:25,728 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2022-04-28 14:50:25,728 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-04-28 14:50:25,731 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.04 02:50:25 BoogieIcfgContainer [2022-04-28 14:50:25,731 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-04-28 14:50:25,732 INFO L158 Benchmark]: Toolchain (without parser) took 72708.41ms. Allocated memory was 187.7MB in the beginning and 374.3MB in the end (delta: 186.6MB). Free memory was 137.7MB in the beginning and 197.1MB in the end (delta: -59.4MB). Peak memory consumption was 128.3MB. Max. memory is 8.0GB. [2022-04-28 14:50:25,732 INFO L158 Benchmark]: CDTParser took 0.14ms. Allocated memory is still 187.7MB. Free memory was 154.6MB in the beginning and 154.5MB in the end (delta: 73.6kB). There was no memory consumed. Max. memory is 8.0GB. [2022-04-28 14:50:25,732 INFO L158 Benchmark]: CACSL2BoogieTranslator took 422.29ms. Allocated memory is still 187.7MB. Free memory was 137.5MB in the beginning and 154.4MB in the end (delta: -16.9MB). Peak memory consumption was 11.5MB. Max. memory is 8.0GB. [2022-04-28 14:50:25,732 INFO L158 Benchmark]: Boogie Preprocessor took 74.59ms. Allocated memory is still 187.7MB. Free memory was 154.4MB in the beginning and 151.2MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-04-28 14:50:25,732 INFO L158 Benchmark]: RCFGBuilder took 838.29ms. Allocated memory is still 187.7MB. Free memory was 151.2MB in the beginning and 107.2MB in the end (delta: 44.0MB). Peak memory consumption was 44.0MB. Max. memory is 8.0GB. [2022-04-28 14:50:25,732 INFO L158 Benchmark]: TraceAbstraction took 71367.41ms. Allocated memory was 187.7MB in the beginning and 374.3MB in the end (delta: 186.6MB). Free memory was 106.7MB in the beginning and 197.1MB in the end (delta: -90.5MB). Peak memory consumption was 97.2MB. Max. memory is 8.0GB. [2022-04-28 14:50:25,734 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14ms. Allocated memory is still 187.7MB. Free memory was 154.6MB in the beginning and 154.5MB in the end (delta: 73.6kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 422.29ms. Allocated memory is still 187.7MB. Free memory was 137.5MB in the beginning and 154.4MB in the end (delta: -16.9MB). Peak memory consumption was 11.5MB. Max. memory is 8.0GB. * Boogie Preprocessor took 74.59ms. Allocated memory is still 187.7MB. Free memory was 154.4MB in the beginning and 151.2MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 838.29ms. Allocated memory is still 187.7MB. Free memory was 151.2MB in the beginning and 107.2MB in the end (delta: 44.0MB). Peak memory consumption was 44.0MB. Max. memory is 8.0GB. * TraceAbstraction took 71367.41ms. Allocated memory was 187.7MB in the beginning and 374.3MB in the end (delta: 186.6MB). Free memory was 106.7MB in the beginning and 197.1MB in the end (delta: -90.5MB). Peak memory consumption was 97.2MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 1013]: a call to reach_error is reachable a call to reach_error is reachable We found a FailurePath: [L23] int KernelMode ; [L24] int Executive ; [L25] int DevicePowerState ; [L26] int s ; [L27] int UNLOADED ; [L28] int NP ; [L29] int DC ; [L30] int SKIP1 ; [L31] int SKIP2 ; [L32] int MPR1 ; [L33] int MPR3 ; [L34] int IPC ; [L35] int pended ; [L36] int compFptr ; [L37] int compRegistered ; [L38] int lowerDriverReturn ; [L39] int setEventCalled ; [L40] int customIrp ; [L41] int myStatus ; [L294] int status ; [L295] int irp = __VERIFIER_nondet_int() ; [L296] int pirp ; [L297] int pirp__IoStatus__Status ; [L298] int irp_choice = __VERIFIER_nondet_int() ; [L299] int devobj = __VERIFIER_nondet_int() ; [L300] int __cil_tmp8 ; [L302] KernelMode = 0 [L303] Executive = 0 [L304] DevicePowerState = 1 [L305] s = 0 [L306] UNLOADED = 0 [L307] NP = 0 [L308] DC = 0 [L309] SKIP1 = 0 [L310] SKIP2 = 0 [L311] MPR1 = 0 [L312] MPR3 = 0 [L313] IPC = 0 [L314] pended = 0 [L315] compFptr = 0 [L316] compRegistered = 0 [L317] lowerDriverReturn = 0 [L318] setEventCalled = 0 [L319] customIrp = 0 [L320] myStatus = 0 [L324] status = 0 [L325] pirp = irp [L326] CALL _BLAST_init() [L61] UNLOADED = 0 [L62] NP = 1 [L63] DC = 2 [L64] SKIP1 = 3 [L65] SKIP2 = 4 [L66] MPR1 = 5 [L67] MPR3 = 6 [L68] IPC = 7 [L69] s = UNLOADED [L70] pended = 0 [L71] compFptr = 0 [L72] compRegistered = 0 [L73] lowerDriverReturn = 0 [L74] setEventCalled = 0 [L75] customIrp = 0 [L326] RET _BLAST_init() [L328] COND TRUE status >= 0 [L329] s = NP [L330] customIrp = 0 [L331] setEventCalled = customIrp [L332] lowerDriverReturn = setEventCalled [L333] compRegistered = lowerDriverReturn [L334] pended = compRegistered [L335] pirp__IoStatus__Status = 0 [L336] myStatus = 0 [L337] COND FALSE !(irp_choice == 0) [L342] CALL stub_driver_init() [L47] s = NP [L48] pended = 0 [L49] compFptr = 0 [L50] compRegistered = 0 [L51] lowerDriverReturn = 0 [L52] setEventCalled = 0 [L53] customIrp = 0 [L342] RET stub_driver_init() [L345] COND FALSE !(status < 0) [L349] int tmp_ndt_1; [L350] tmp_ndt_1 = __VERIFIER_nondet_int() [L351] COND FALSE !(tmp_ndt_1 == 0) [L354] int tmp_ndt_2; [L355] tmp_ndt_2 = __VERIFIER_nondet_int() [L356] COND FALSE !(tmp_ndt_2 == 1) [L359] int tmp_ndt_3; [L360] tmp_ndt_3 = __VERIFIER_nondet_int() [L361] COND TRUE tmp_ndt_3 == 3 [L388] CALL, EXPR KbFilter_PnP(devobj, pirp) [L80] int devExt ; [L81] int irpStack ; [L82] int status ; [L83] int event = __VERIFIER_nondet_int() ; [L84] int DeviceObject__DeviceExtension = __VERIFIER_nondet_int() ; [L85] int Irp__Tail__Overlay__CurrentStackLocation = __VERIFIER_nondet_int() ; [L86] int irpStack__MinorFunction = __VERIFIER_nondet_int() ; [L87] int devExt__TopOfStack = __VERIFIER_nondet_int() ; [L88] int devExt__Started ; [L89] int devExt__Removed ; [L90] int devExt__SurpriseRemoved ; [L91] int Irp__IoStatus__Status ; [L92] int Irp__IoStatus__Information ; [L93] int Irp__CurrentLocation = __VERIFIER_nondet_int() ; [L94] int irpSp ; [L95] int nextIrpSp ; [L96] int nextIrpSp__Control ; [L97] int irpSp___0 ; [L98] int irpSp__Context ; [L99] int irpSp__Control ; [L100] long __cil_tmp23 ; [L103] status = 0 [L104] devExt = DeviceObject__DeviceExtension [L105] irpStack = Irp__Tail__Overlay__CurrentStackLocation [L106] COND FALSE !(irpStack__MinorFunction == 0) [L109] COND FALSE !(irpStack__MinorFunction == 23) [L112] COND TRUE irpStack__MinorFunction == 2 [L236] devExt__Removed = 1 [L237] COND TRUE s == NP [L238] s = SKIP1 [L245] Irp__CurrentLocation ++ [L246] Irp__Tail__Overlay__CurrentStackLocation ++ [L247] CALL IofCallDriver(devExt__TopOfStack, Irp) [L483] int returnVal2 ; [L484] int compRetStatus ; [L485] int lcontext = __VERIFIER_nondet_int() ; [L486] long long __cil_tmp7 ; [L489] COND FALSE !(\read(compRegistered)) [L502] int tmp_ndt_6; [L503] tmp_ndt_6 = __VERIFIER_nondet_int() [L504] COND FALSE !(tmp_ndt_6 == 0) [L507] int tmp_ndt_7; [L508] tmp_ndt_7 = __VERIFIER_nondet_int() [L509] COND TRUE tmp_ndt_7 == 1 [L518] returnVal2 = -1073741823 [L528] COND FALSE !(s == NP) [L532] COND FALSE !(s == MPR1) [L541] COND TRUE s == SKIP1 [L542] s = SKIP2 [L543] lowerDriverReturn = returnVal2 [L551] return (returnVal2); [L247] RET IofCallDriver(devExt__TopOfStack, Irp) [L248] status = 0 [L290] return (status); [L388] RET, EXPR KbFilter_PnP(devobj, pirp) [L388] status = KbFilter_PnP(devobj, pirp) [L412] COND FALSE !(pended == 1) [L420] COND FALSE !(pended == 1) [L428] COND TRUE s != UNLOADED [L429] COND TRUE status != -1 [L430] COND FALSE !(s != SKIP2) [L440] COND FALSE !(pended == 1) [L447] COND FALSE !(s == DC) [L452] COND TRUE status != lowerDriverReturn [L453] CALL errorFn() [L1013] reach_error() - StatisticsResult: Ultimate Automizer benchmark data CFG has 19 procedures, 243 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 71.3s, OverallIterations: 23, TraceHistogramMax: 1, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 52.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 10321 SdHoareTripleChecker+Valid, 15.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 10301 mSDsluCounter, 12823 SdHoareTripleChecker+Invalid, 14.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 7683 mSDsCounter, 1995 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 15378 IncrementalHoareTripleChecker+Invalid, 17373 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1995 mSolverCounterUnsat, 5140 mSDtfsCounter, 15378 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 468 GetRequests, 198 SyntacticMatches, 1 SemanticMatches, 269 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 447 ImplicationChecksByTransitivity, 3.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=344occurred in iteration=3, InterpolantAutomatonStates: 230, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 6.3s AutomataMinimizationTime, 22 MinimizatonAttempts, 227 StatesRemovedByMinimization, 13 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: No data available, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2022-04-28 14:50:25,763 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request...