/usr/bin/java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-1.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-fb4f59a-m [2022-04-27 15:02:47,234 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-04-27 15:02:47,236 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-04-27 15:02:47,307 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-04-27 15:02:47,307 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-04-27 15:02:47,309 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-04-27 15:02:47,311 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-04-27 15:02:47,313 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-04-27 15:02:47,315 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-04-27 15:02:47,319 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-04-27 15:02:47,319 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-04-27 15:02:47,321 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-04-27 15:02:47,321 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-04-27 15:02:47,323 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-04-27 15:02:47,324 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-04-27 15:02:47,326 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-04-27 15:02:47,327 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-04-27 15:02:47,328 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-04-27 15:02:47,329 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-04-27 15:02:47,334 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-04-27 15:02:47,336 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-04-27 15:02:47,337 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-04-27 15:02:47,337 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-04-27 15:02:47,338 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-04-27 15:02:47,339 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-04-27 15:02:47,345 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-04-27 15:02:47,345 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-04-27 15:02:47,346 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-04-27 15:02:47,346 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-04-27 15:02:47,346 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-04-27 15:02:47,347 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-04-27 15:02:47,348 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-04-27 15:02:47,349 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-04-27 15:02:47,349 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-04-27 15:02:47,350 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-04-27 15:02:47,351 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-04-27 15:02:47,351 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-04-27 15:02:47,351 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-04-27 15:02:47,351 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-04-27 15:02:47,352 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-04-27 15:02:47,352 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-04-27 15:02:47,354 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-04-27 15:02:47,355 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2022-04-27 15:02:47,384 INFO L113 SettingsManager]: Loading preferences was successful [2022-04-27 15:02:47,384 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-04-27 15:02:47,384 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-04-27 15:02:47,385 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-04-27 15:02:47,385 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-04-27 15:02:47,385 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-04-27 15:02:47,386 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-04-27 15:02:47,386 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-04-27 15:02:47,386 INFO L138 SettingsManager]: * Use SBE=true [2022-04-27 15:02:47,387 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-04-27 15:02:47,387 INFO L138 SettingsManager]: * sizeof long=4 [2022-04-27 15:02:47,387 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-04-27 15:02:47,387 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-04-27 15:02:47,387 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-04-27 15:02:47,387 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-04-27 15:02:47,388 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-04-27 15:02:47,388 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-04-27 15:02:47,389 INFO L138 SettingsManager]: * sizeof long double=12 [2022-04-27 15:02:47,389 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-04-27 15:02:47,389 INFO L138 SettingsManager]: * Use constant arrays=true [2022-04-27 15:02:47,389 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-04-27 15:02:47,389 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-04-27 15:02:47,389 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-04-27 15:02:47,389 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-04-27 15:02:47,390 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-27 15:02:47,390 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-04-27 15:02:47,390 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-04-27 15:02:47,390 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-04-27 15:02:47,390 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-04-27 15:02:47,390 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-04-27 15:02:47,390 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-04-27 15:02:47,391 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-04-27 15:02:47,391 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-04-27 15:02:47,391 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-04-27 15:02:47,604 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-04-27 15:02:47,640 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-04-27 15:02:47,642 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-04-27 15:02:47,643 INFO L271 PluginConnector]: Initializing CDTParser... [2022-04-27 15:02:47,644 INFO L275 PluginConnector]: CDTParser initialized [2022-04-27 15:02:47,645 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-1.c [2022-04-27 15:02:47,696 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2cc30cf91/156985e6f16f436aab3e167f22bca5e0/FLAG49410cb5a [2022-04-27 15:02:48,127 INFO L306 CDTParser]: Found 1 translation units. [2022-04-27 15:02:48,128 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-1.c [2022-04-27 15:02:48,137 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2cc30cf91/156985e6f16f436aab3e167f22bca5e0/FLAG49410cb5a [2022-04-27 15:02:48,490 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2cc30cf91/156985e6f16f436aab3e167f22bca5e0 [2022-04-27 15:02:48,492 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-04-27 15:02:48,493 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2022-04-27 15:02:48,495 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-04-27 15:02:48,495 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-04-27 15:02:48,498 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-04-27 15:02:48,499 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 27.04 03:02:48" (1/1) ... [2022-04-27 15:02:48,500 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7e9da8fd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:48, skipping insertion in model container [2022-04-27 15:02:48,500 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 27.04 03:02:48" (1/1) ... [2022-04-27 15:02:48,507 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-04-27 15:02:48,557 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-04-27 15:02:48,799 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-1.c[29620,29633] [2022-04-27 15:02:48,801 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-27 15:02:48,808 INFO L203 MainTranslator]: Completed pre-run [2022-04-27 15:02:48,900 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-1.c[29620,29633] [2022-04-27 15:02:48,901 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-27 15:02:48,923 INFO L208 MainTranslator]: Completed translation [2022-04-27 15:02:48,923 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:48 WrapperNode [2022-04-27 15:02:48,923 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-04-27 15:02:48,924 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-04-27 15:02:48,924 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-04-27 15:02:48,924 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-04-27 15:02:48,934 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:48" (1/1) ... [2022-04-27 15:02:48,934 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:48" (1/1) ... [2022-04-27 15:02:48,954 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:48" (1/1) ... [2022-04-27 15:02:48,954 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:48" (1/1) ... [2022-04-27 15:02:48,997 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:48" (1/1) ... [2022-04-27 15:02:49,017 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:48" (1/1) ... [2022-04-27 15:02:49,031 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:48" (1/1) ... [2022-04-27 15:02:49,040 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-04-27 15:02:49,041 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-04-27 15:02:49,041 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-04-27 15:02:49,042 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-04-27 15:02:49,047 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:48" (1/1) ... [2022-04-27 15:02:49,053 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-27 15:02:49,062 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-27 15:02:49,076 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-04-27 15:02:49,091 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-04-27 15:02:49,119 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2022-04-27 15:02:49,120 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-04-27 15:02:49,120 INFO L138 BoogieDeclarations]: Found implementation of procedure reach_error [2022-04-27 15:02:49,121 INFO L138 BoogieDeclarations]: Found implementation of procedure stub_driver_init [2022-04-27 15:02:49,122 INFO L138 BoogieDeclarations]: Found implementation of procedure _BLAST_init [2022-04-27 15:02:49,122 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_PnP [2022-04-27 15:02:49,122 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2022-04-27 15:02:49,123 INFO L138 BoogieDeclarations]: Found implementation of procedure stubMoreProcessingRequired [2022-04-27 15:02:49,123 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCallDriver [2022-04-27 15:02:49,123 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCompleteRequest [2022-04-27 15:02:49,123 INFO L138 BoogieDeclarations]: Found implementation of procedure KeSetEvent [2022-04-27 15:02:49,123 INFO L138 BoogieDeclarations]: Found implementation of procedure KeWaitForSingleObject [2022-04-27 15:02:49,123 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Complete [2022-04-27 15:02:49,123 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_CreateClose [2022-04-27 15:02:49,123 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_DispatchPassThrough [2022-04-27 15:02:49,123 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Power [2022-04-27 15:02:49,123 INFO L138 BoogieDeclarations]: Found implementation of procedure PoCallDriver [2022-04-27 15:02:49,124 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_InternIoCtl [2022-04-27 15:02:49,124 INFO L138 BoogieDeclarations]: Found implementation of procedure errorFn [2022-04-27 15:02:49,124 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2022-04-27 15:02:49,124 INFO L130 BoogieDeclarations]: Found specification of procedure __assert_fail [2022-04-27 15:02:49,124 INFO L130 BoogieDeclarations]: Found specification of procedure reach_error [2022-04-27 15:02:49,124 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-04-27 15:02:49,124 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_char [2022-04-27 15:02:49,124 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2022-04-27 15:02:49,124 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_long [2022-04-27 15:02:49,124 INFO L130 BoogieDeclarations]: Found specification of procedure PoCallDriver [2022-04-27 15:02:49,125 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_PnP [2022-04-27 15:02:49,125 INFO L130 BoogieDeclarations]: Found specification of procedure IofCallDriver [2022-04-27 15:02:49,125 INFO L130 BoogieDeclarations]: Found specification of procedure KeSetEvent [2022-04-27 15:02:49,125 INFO L130 BoogieDeclarations]: Found specification of procedure KeWaitForSingleObject [2022-04-27 15:02:49,125 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Complete [2022-04-27 15:02:49,125 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_CreateClose [2022-04-27 15:02:49,125 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_DispatchPassThrough [2022-04-27 15:02:49,125 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Power [2022-04-27 15:02:49,125 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_InternIoCtl [2022-04-27 15:02:49,126 INFO L130 BoogieDeclarations]: Found specification of procedure stub_driver_init [2022-04-27 15:02:49,126 INFO L130 BoogieDeclarations]: Found specification of procedure _BLAST_init [2022-04-27 15:02:49,126 INFO L130 BoogieDeclarations]: Found specification of procedure IofCompleteRequest [2022-04-27 15:02:49,126 INFO L130 BoogieDeclarations]: Found specification of procedure errorFn [2022-04-27 15:02:49,126 INFO L130 BoogieDeclarations]: Found specification of procedure main [2022-04-27 15:02:49,126 INFO L130 BoogieDeclarations]: Found specification of procedure stubMoreProcessingRequired [2022-04-27 15:02:49,126 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2022-04-27 15:02:49,126 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-04-27 15:02:49,126 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-04-27 15:02:49,126 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-04-27 15:02:49,127 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-04-27 15:02:49,127 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-04-27 15:02:49,295 INFO L234 CfgBuilder]: Building ICFG [2022-04-27 15:02:49,296 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-04-27 15:02:49,427 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-27 15:02:49,579 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##18: assume false; [2022-04-27 15:02:49,579 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##19: assume !false; [2022-04-27 15:02:49,588 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-27 15:02:49,641 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-27 15:02:49,641 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-27 15:02:49,775 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-27 15:02:49,791 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##16: assume !false; [2022-04-27 15:02:49,791 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##15: assume false; [2022-04-27 15:02:49,799 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-27 15:02:49,951 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##43: assume false; [2022-04-27 15:02:49,951 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##44: assume !false; [2022-04-27 15:02:49,956 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-27 15:02:49,993 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##10: assume !false; [2022-04-27 15:02:49,993 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##9: assume false; [2022-04-27 15:02:50,000 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-27 15:02:50,030 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-27 15:02:50,030 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-27 15:02:50,073 INFO L275 CfgBuilder]: Performing block encoding [2022-04-27 15:02:50,086 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-04-27 15:02:50,086 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-04-27 15:02:50,088 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 27.04 03:02:50 BoogieIcfgContainer [2022-04-27 15:02:50,088 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-04-27 15:02:50,089 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-04-27 15:02:50,089 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-04-27 15:02:50,096 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-04-27 15:02:50,096 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 27.04 03:02:48" (1/3) ... [2022-04-27 15:02:50,097 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@715dd5dd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 27.04 03:02:50, skipping insertion in model container [2022-04-27 15:02:50,097 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:48" (2/3) ... [2022-04-27 15:02:50,100 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@715dd5dd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 27.04 03:02:50, skipping insertion in model container [2022-04-27 15:02:50,101 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 27.04 03:02:50" (3/3) ... [2022-04-27 15:02:50,102 INFO L111 eAbstractionObserver]: Analyzing ICFG kbfiltr_simpl2.cil-1.c [2022-04-27 15:02:50,111 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-04-27 15:02:50,111 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-04-27 15:02:50,157 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-04-27 15:02:50,162 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@3b6afe1c, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@308041c7 [2022-04-27 15:02:50,162 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-04-27 15:02:50,172 INFO L276 IsEmpty]: Start isEmpty. Operand has 239 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 199 states have internal predecessors, (284), 38 states have call successors, (38), 17 states have call predecessors, (38), 17 states have return successors, (38), 37 states have call predecessors, (38), 38 states have call successors, (38) [2022-04-27 15:02:50,179 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-04-27 15:02:50,179 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:02:50,180 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:02:50,181 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:02:50,186 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:02:50,186 INFO L85 PathProgramCache]: Analyzing trace with hash 1606654013, now seen corresponding path program 1 times [2022-04-27 15:02:50,194 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:02:50,195 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2013685710] [2022-04-27 15:02:50,196 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:02:50,197 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:02:50,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:50,523 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:02:50,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:50,566 INFO L290 TraceCheckUtils]: 0: Hoare triple {251#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {242#true} is VALID [2022-04-27 15:02:50,567 INFO L290 TraceCheckUtils]: 1: Hoare triple {242#true} assume true; {242#true} is VALID [2022-04-27 15:02:50,567 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {242#true} {242#true} #780#return; {242#true} is VALID [2022-04-27 15:02:50,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:02:50,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:50,629 INFO L290 TraceCheckUtils]: 0: Hoare triple {252#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {242#true} is VALID [2022-04-27 15:02:50,630 INFO L290 TraceCheckUtils]: 1: Hoare triple {242#true} assume true; {242#true} is VALID [2022-04-27 15:02:50,631 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {242#true} {247#(= main_~status~1 0)} #714#return; {247#(= main_~status~1 0)} is VALID [2022-04-27 15:02:50,633 INFO L272 TraceCheckUtils]: 0: Hoare triple {242#true} call ULTIMATE.init(); {251#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:02:50,633 INFO L290 TraceCheckUtils]: 1: Hoare triple {251#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {242#true} is VALID [2022-04-27 15:02:50,633 INFO L290 TraceCheckUtils]: 2: Hoare triple {242#true} assume true; {242#true} is VALID [2022-04-27 15:02:50,633 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {242#true} {242#true} #780#return; {242#true} is VALID [2022-04-27 15:02:50,634 INFO L272 TraceCheckUtils]: 4: Hoare triple {242#true} call #t~ret83 := main(); {242#true} is VALID [2022-04-27 15:02:50,634 INFO L290 TraceCheckUtils]: 5: Hoare triple {242#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {247#(= main_~status~1 0)} is VALID [2022-04-27 15:02:50,636 INFO L272 TraceCheckUtils]: 6: Hoare triple {247#(= main_~status~1 0)} call _BLAST_init(); {252#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:02:50,637 INFO L290 TraceCheckUtils]: 7: Hoare triple {252#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {242#true} is VALID [2022-04-27 15:02:50,637 INFO L290 TraceCheckUtils]: 8: Hoare triple {242#true} assume true; {242#true} is VALID [2022-04-27 15:02:50,638 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {242#true} {247#(= main_~status~1 0)} #714#return; {247#(= main_~status~1 0)} is VALID [2022-04-27 15:02:50,638 INFO L290 TraceCheckUtils]: 10: Hoare triple {247#(= main_~status~1 0)} assume !(~status~1 >= 0); {243#false} is VALID [2022-04-27 15:02:50,639 INFO L290 TraceCheckUtils]: 11: Hoare triple {243#false} assume !(1 == ~pended~0); {243#false} is VALID [2022-04-27 15:02:50,639 INFO L290 TraceCheckUtils]: 12: Hoare triple {243#false} assume !(1 == ~pended~0); {243#false} is VALID [2022-04-27 15:02:50,639 INFO L290 TraceCheckUtils]: 13: Hoare triple {243#false} assume ~s~0 != ~UNLOADED~0; {243#false} is VALID [2022-04-27 15:02:50,639 INFO L290 TraceCheckUtils]: 14: Hoare triple {243#false} assume -1 != ~status~1; {243#false} is VALID [2022-04-27 15:02:50,639 INFO L290 TraceCheckUtils]: 15: Hoare triple {243#false} assume !(~s~0 != ~SKIP2~0); {243#false} is VALID [2022-04-27 15:02:50,640 INFO L290 TraceCheckUtils]: 16: Hoare triple {243#false} assume 1 == ~pended~0; {243#false} is VALID [2022-04-27 15:02:50,640 INFO L290 TraceCheckUtils]: 17: Hoare triple {243#false} assume 259 != ~status~1; {243#false} is VALID [2022-04-27 15:02:50,640 INFO L272 TraceCheckUtils]: 18: Hoare triple {243#false} call errorFn(); {243#false} is VALID [2022-04-27 15:02:50,641 INFO L290 TraceCheckUtils]: 19: Hoare triple {243#false} assume !false; {243#false} is VALID [2022-04-27 15:02:50,642 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:02:50,645 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:02:50,646 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2013685710] [2022-04-27 15:02:50,650 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2013685710] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:02:50,650 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:02:50,650 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-27 15:02:50,652 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1594984576] [2022-04-27 15:02:50,652 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:02:50,657 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-27 15:02:50,658 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:02:50,660 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-27 15:02:50,693 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:02:50,694 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-04-27 15:02:50,694 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:02:50,724 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-04-27 15:02:50,725 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-27 15:02:50,733 INFO L87 Difference]: Start difference. First operand has 239 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 199 states have internal predecessors, (284), 38 states have call successors, (38), 17 states have call predecessors, (38), 17 states have return successors, (38), 37 states have call predecessors, (38), 38 states have call successors, (38) Second operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-27 15:02:52,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:02:52,983 INFO L93 Difference]: Finished difference Result 415 states and 624 transitions. [2022-04-27 15:02:52,983 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-04-27 15:02:52,984 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-27 15:02:52,984 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:02:52,985 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-27 15:02:53,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 624 transitions. [2022-04-27 15:02:53,009 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-27 15:02:53,025 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 624 transitions. [2022-04-27 15:02:53,025 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 5 states and 624 transitions. [2022-04-27 15:02:53,685 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 624 edges. 624 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:02:53,709 INFO L225 Difference]: With dead ends: 415 [2022-04-27 15:02:53,709 INFO L226 Difference]: Without dead ends: 256 [2022-04-27 15:02:53,713 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-27 15:02:53,715 INFO L413 NwaCegarLoop]: 296 mSDtfsCounter, 173 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 583 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 179 SdHoareTripleChecker+Valid, 446 SdHoareTripleChecker+Invalid, 624 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 583 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-04-27 15:02:53,716 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [179 Valid, 446 Invalid, 624 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 583 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-04-27 15:02:53,730 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2022-04-27 15:02:53,759 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 228. [2022-04-27 15:02:53,760 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:02:53,761 INFO L82 GeneralOperation]: Start isEquivalent. First operand 256 states. Second operand has 228 states, 174 states have (on average 1.4942528735632183) internal successors, (260), 189 states have internal predecessors, (260), 38 states have call successors, (38), 17 states have call predecessors, (38), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-27 15:02:53,763 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand has 228 states, 174 states have (on average 1.4942528735632183) internal successors, (260), 189 states have internal predecessors, (260), 38 states have call successors, (38), 17 states have call predecessors, (38), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-27 15:02:53,764 INFO L87 Difference]: Start difference. First operand 256 states. Second operand has 228 states, 174 states have (on average 1.4942528735632183) internal successors, (260), 189 states have internal predecessors, (260), 38 states have call successors, (38), 17 states have call predecessors, (38), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-27 15:02:53,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:02:53,777 INFO L93 Difference]: Finished difference Result 256 states and 363 transitions. [2022-04-27 15:02:53,778 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 363 transitions. [2022-04-27 15:02:53,781 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:02:53,781 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:02:53,782 INFO L74 IsIncluded]: Start isIncluded. First operand has 228 states, 174 states have (on average 1.4942528735632183) internal successors, (260), 189 states have internal predecessors, (260), 38 states have call successors, (38), 17 states have call predecessors, (38), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 256 states. [2022-04-27 15:02:53,782 INFO L87 Difference]: Start difference. First operand has 228 states, 174 states have (on average 1.4942528735632183) internal successors, (260), 189 states have internal predecessors, (260), 38 states have call successors, (38), 17 states have call predecessors, (38), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 256 states. [2022-04-27 15:02:53,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:02:53,795 INFO L93 Difference]: Finished difference Result 256 states and 363 transitions. [2022-04-27 15:02:53,795 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 363 transitions. [2022-04-27 15:02:53,797 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:02:53,797 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:02:53,797 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:02:53,797 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:02:53,798 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 228 states, 174 states have (on average 1.4942528735632183) internal successors, (260), 189 states have internal predecessors, (260), 38 states have call successors, (38), 17 states have call predecessors, (38), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-27 15:02:53,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 228 states to 228 states and 322 transitions. [2022-04-27 15:02:53,810 INFO L78 Accepts]: Start accepts. Automaton has 228 states and 322 transitions. Word has length 20 [2022-04-27 15:02:53,811 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:02:53,811 INFO L495 AbstractCegarLoop]: Abstraction has 228 states and 322 transitions. [2022-04-27 15:02:53,811 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-27 15:02:53,811 INFO L276 IsEmpty]: Start isEmpty. Operand 228 states and 322 transitions. [2022-04-27 15:02:53,812 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-27 15:02:53,812 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:02:53,812 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:02:53,812 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-04-27 15:02:53,813 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:02:53,813 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:02:53,813 INFO L85 PathProgramCache]: Analyzing trace with hash -584418248, now seen corresponding path program 1 times [2022-04-27 15:02:53,813 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:02:53,813 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [766931448] [2022-04-27 15:02:53,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:02:53,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:02:53,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:53,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:02:53,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:53,914 INFO L290 TraceCheckUtils]: 0: Hoare triple {1653#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {1641#true} is VALID [2022-04-27 15:02:53,915 INFO L290 TraceCheckUtils]: 1: Hoare triple {1641#true} assume true; {1641#true} is VALID [2022-04-27 15:02:53,915 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1641#true} {1641#true} #780#return; {1641#true} is VALID [2022-04-27 15:02:53,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:02:53,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:53,944 INFO L290 TraceCheckUtils]: 0: Hoare triple {1654#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {1641#true} is VALID [2022-04-27 15:02:53,944 INFO L290 TraceCheckUtils]: 1: Hoare triple {1641#true} assume true; {1641#true} is VALID [2022-04-27 15:02:53,944 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1641#true} {1641#true} #714#return; {1641#true} is VALID [2022-04-27 15:02:53,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:02:53,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:53,963 INFO L290 TraceCheckUtils]: 0: Hoare triple {1655#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {1652#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:02:53,963 INFO L290 TraceCheckUtils]: 1: Hoare triple {1652#(= ~s~0 ~NP~0)} assume true; {1652#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:02:53,964 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1652#(= ~s~0 ~NP~0)} {1641#true} #716#return; {1652#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:02:53,965 INFO L272 TraceCheckUtils]: 0: Hoare triple {1641#true} call ULTIMATE.init(); {1653#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:02:53,965 INFO L290 TraceCheckUtils]: 1: Hoare triple {1653#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {1641#true} is VALID [2022-04-27 15:02:53,965 INFO L290 TraceCheckUtils]: 2: Hoare triple {1641#true} assume true; {1641#true} is VALID [2022-04-27 15:02:53,966 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {1641#true} {1641#true} #780#return; {1641#true} is VALID [2022-04-27 15:02:53,966 INFO L272 TraceCheckUtils]: 4: Hoare triple {1641#true} call #t~ret83 := main(); {1641#true} is VALID [2022-04-27 15:02:53,966 INFO L290 TraceCheckUtils]: 5: Hoare triple {1641#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {1641#true} is VALID [2022-04-27 15:02:53,967 INFO L272 TraceCheckUtils]: 6: Hoare triple {1641#true} call _BLAST_init(); {1654#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:02:53,967 INFO L290 TraceCheckUtils]: 7: Hoare triple {1654#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {1641#true} is VALID [2022-04-27 15:02:53,967 INFO L290 TraceCheckUtils]: 8: Hoare triple {1641#true} assume true; {1641#true} is VALID [2022-04-27 15:02:53,968 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {1641#true} {1641#true} #714#return; {1641#true} is VALID [2022-04-27 15:02:53,968 INFO L290 TraceCheckUtils]: 10: Hoare triple {1641#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {1641#true} is VALID [2022-04-27 15:02:53,968 INFO L290 TraceCheckUtils]: 11: Hoare triple {1641#true} assume !(0 == ~irp_choice~0); {1641#true} is VALID [2022-04-27 15:02:53,969 INFO L272 TraceCheckUtils]: 12: Hoare triple {1641#true} call stub_driver_init(); {1655#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:02:53,969 INFO L290 TraceCheckUtils]: 13: Hoare triple {1655#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {1652#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:02:53,975 INFO L290 TraceCheckUtils]: 14: Hoare triple {1652#(= ~s~0 ~NP~0)} assume true; {1652#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:02:53,976 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {1652#(= ~s~0 ~NP~0)} {1641#true} #716#return; {1652#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:02:53,977 INFO L290 TraceCheckUtils]: 16: Hoare triple {1652#(= ~s~0 ~NP~0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {1652#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:02:53,977 INFO L290 TraceCheckUtils]: 17: Hoare triple {1652#(= ~s~0 ~NP~0)} assume 0 == ~tmp_ndt_1~0; {1652#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:02:53,978 INFO L272 TraceCheckUtils]: 18: Hoare triple {1652#(= ~s~0 ~NP~0)} call #t~ret31 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {1652#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:02:53,978 INFO L290 TraceCheckUtils]: 19: Hoare triple {1652#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet43 && #t~nondet43 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet43;havoc #t~nondet43;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet44;havoc #t~nondet44;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {1652#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:02:53,979 INFO L290 TraceCheckUtils]: 20: Hoare triple {1652#(= ~s~0 ~NP~0)} assume 0 == ~irpStack__MajorFunction~0; {1652#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:02:53,979 INFO L290 TraceCheckUtils]: 21: Hoare triple {1652#(= ~s~0 ~NP~0)} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {1652#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:02:53,980 INFO L290 TraceCheckUtils]: 22: Hoare triple {1652#(= ~s~0 ~NP~0)} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {1652#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:02:53,982 INFO L272 TraceCheckUtils]: 23: Hoare triple {1652#(= ~s~0 ~NP~0)} call #t~ret45 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {1652#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:02:53,982 INFO L290 TraceCheckUtils]: 24: Hoare triple {1652#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet46;havoc #t~nondet46;assume -2147483648 <= #t~nondet47 && #t~nondet47 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet47;havoc #t~nondet47;assume -2147483648 <= #t~nondet48 && #t~nondet48 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet48;havoc #t~nondet48;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {1652#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:02:53,983 INFO L290 TraceCheckUtils]: 25: Hoare triple {1652#(= ~s~0 ~NP~0)} assume !(~s~0 == ~NP~0); {1642#false} is VALID [2022-04-27 15:02:53,983 INFO L272 TraceCheckUtils]: 26: Hoare triple {1642#false} call errorFn(); {1642#false} is VALID [2022-04-27 15:02:53,983 INFO L290 TraceCheckUtils]: 27: Hoare triple {1642#false} assume !false; {1642#false} is VALID [2022-04-27 15:02:53,985 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:02:53,985 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:02:53,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [766931448] [2022-04-27 15:02:53,985 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [766931448] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:02:53,985 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:02:53,986 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-27 15:02:53,986 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1878172551] [2022-04-27 15:02:53,987 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:02:53,988 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-27 15:02:53,988 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:02:53,989 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:02:54,012 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:02:54,012 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-27 15:02:54,012 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:02:54,013 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-27 15:02:54,013 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-27 15:02:54,013 INFO L87 Difference]: Start difference. First operand 228 states and 322 transitions. Second operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:02:56,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:02:56,614 INFO L93 Difference]: Finished difference Result 401 states and 553 transitions. [2022-04-27 15:02:56,614 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-27 15:02:56,615 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-27 15:02:56,615 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:02:56,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:02:56,623 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 553 transitions. [2022-04-27 15:02:56,623 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:02:56,632 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 553 transitions. [2022-04-27 15:02:56,632 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 553 transitions. [2022-04-27 15:02:57,186 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 553 edges. 553 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:02:57,199 INFO L225 Difference]: With dead ends: 401 [2022-04-27 15:02:57,199 INFO L226 Difference]: Without dead ends: 343 [2022-04-27 15:02:57,200 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-27 15:02:57,201 INFO L413 NwaCegarLoop]: 352 mSDtfsCounter, 380 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 812 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 380 SdHoareTripleChecker+Valid, 493 SdHoareTripleChecker+Invalid, 873 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 812 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-27 15:02:57,202 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [380 Valid, 493 Invalid, 873 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 812 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-27 15:02:57,203 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-04-27 15:02:57,227 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 301. [2022-04-27 15:02:57,227 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:02:57,234 INFO L82 GeneralOperation]: Start isEquivalent. First operand 343 states. Second operand has 301 states, 237 states have (on average 1.3924050632911393) internal successors, (330), 240 states have internal predecessors, (330), 37 states have call successors, (37), 23 states have call predecessors, (37), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-27 15:02:57,235 INFO L74 IsIncluded]: Start isIncluded. First operand 343 states. Second operand has 301 states, 237 states have (on average 1.3924050632911393) internal successors, (330), 240 states have internal predecessors, (330), 37 states have call successors, (37), 23 states have call predecessors, (37), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-27 15:02:57,237 INFO L87 Difference]: Start difference. First operand 343 states. Second operand has 301 states, 237 states have (on average 1.3924050632911393) internal successors, (330), 240 states have internal predecessors, (330), 37 states have call successors, (37), 23 states have call predecessors, (37), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-27 15:02:57,250 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:02:57,250 INFO L93 Difference]: Finished difference Result 343 states and 469 transitions. [2022-04-27 15:02:57,250 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 469 transitions. [2022-04-27 15:02:57,251 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:02:57,251 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:02:57,254 INFO L74 IsIncluded]: Start isIncluded. First operand has 301 states, 237 states have (on average 1.3924050632911393) internal successors, (330), 240 states have internal predecessors, (330), 37 states have call successors, (37), 23 states have call predecessors, (37), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 343 states. [2022-04-27 15:02:57,255 INFO L87 Difference]: Start difference. First operand has 301 states, 237 states have (on average 1.3924050632911393) internal successors, (330), 240 states have internal predecessors, (330), 37 states have call successors, (37), 23 states have call predecessors, (37), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 343 states. [2022-04-27 15:02:57,269 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:02:57,269 INFO L93 Difference]: Finished difference Result 343 states and 469 transitions. [2022-04-27 15:02:57,269 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 469 transitions. [2022-04-27 15:02:57,271 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:02:57,271 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:02:57,271 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:02:57,271 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:02:57,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 301 states, 237 states have (on average 1.3924050632911393) internal successors, (330), 240 states have internal predecessors, (330), 37 states have call successors, (37), 23 states have call predecessors, (37), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-27 15:02:57,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 301 states to 301 states and 411 transitions. [2022-04-27 15:02:57,285 INFO L78 Accepts]: Start accepts. Automaton has 301 states and 411 transitions. Word has length 28 [2022-04-27 15:02:57,286 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:02:57,286 INFO L495 AbstractCegarLoop]: Abstraction has 301 states and 411 transitions. [2022-04-27 15:02:57,286 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:02:57,287 INFO L276 IsEmpty]: Start isEmpty. Operand 301 states and 411 transitions. [2022-04-27 15:02:57,287 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-27 15:02:57,287 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:02:57,287 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:02:57,287 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-04-27 15:02:57,288 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:02:57,288 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:02:57,288 INFO L85 PathProgramCache]: Analyzing trace with hash 1124228951, now seen corresponding path program 1 times [2022-04-27 15:02:57,288 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:02:57,288 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1944524042] [2022-04-27 15:02:57,289 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:02:57,289 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:02:57,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:57,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:02:57,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:57,415 INFO L290 TraceCheckUtils]: 0: Hoare triple {3305#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {3293#true} is VALID [2022-04-27 15:02:57,415 INFO L290 TraceCheckUtils]: 1: Hoare triple {3293#true} assume true; {3293#true} is VALID [2022-04-27 15:02:57,415 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3293#true} {3293#true} #780#return; {3293#true} is VALID [2022-04-27 15:02:57,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:02:57,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:57,446 INFO L290 TraceCheckUtils]: 0: Hoare triple {3306#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {3293#true} is VALID [2022-04-27 15:02:57,446 INFO L290 TraceCheckUtils]: 1: Hoare triple {3293#true} assume true; {3293#true} is VALID [2022-04-27 15:02:57,446 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3293#true} {3293#true} #714#return; {3293#true} is VALID [2022-04-27 15:02:57,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:02:57,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:57,464 INFO L290 TraceCheckUtils]: 0: Hoare triple {3307#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {3304#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:02:57,464 INFO L290 TraceCheckUtils]: 1: Hoare triple {3304#(= ~compRegistered~0 0)} assume true; {3304#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:02:57,465 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3304#(= ~compRegistered~0 0)} {3293#true} #716#return; {3304#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:02:57,466 INFO L272 TraceCheckUtils]: 0: Hoare triple {3293#true} call ULTIMATE.init(); {3305#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:02:57,466 INFO L290 TraceCheckUtils]: 1: Hoare triple {3305#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {3293#true} is VALID [2022-04-27 15:02:57,466 INFO L290 TraceCheckUtils]: 2: Hoare triple {3293#true} assume true; {3293#true} is VALID [2022-04-27 15:02:57,467 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {3293#true} {3293#true} #780#return; {3293#true} is VALID [2022-04-27 15:02:57,467 INFO L272 TraceCheckUtils]: 4: Hoare triple {3293#true} call #t~ret83 := main(); {3293#true} is VALID [2022-04-27 15:02:57,467 INFO L290 TraceCheckUtils]: 5: Hoare triple {3293#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {3293#true} is VALID [2022-04-27 15:02:57,468 INFO L272 TraceCheckUtils]: 6: Hoare triple {3293#true} call _BLAST_init(); {3306#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:02:57,468 INFO L290 TraceCheckUtils]: 7: Hoare triple {3306#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {3293#true} is VALID [2022-04-27 15:02:57,468 INFO L290 TraceCheckUtils]: 8: Hoare triple {3293#true} assume true; {3293#true} is VALID [2022-04-27 15:02:57,468 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {3293#true} {3293#true} #714#return; {3293#true} is VALID [2022-04-27 15:02:57,469 INFO L290 TraceCheckUtils]: 10: Hoare triple {3293#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {3293#true} is VALID [2022-04-27 15:02:57,469 INFO L290 TraceCheckUtils]: 11: Hoare triple {3293#true} assume !(0 == ~irp_choice~0); {3293#true} is VALID [2022-04-27 15:02:57,469 INFO L272 TraceCheckUtils]: 12: Hoare triple {3293#true} call stub_driver_init(); {3307#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:02:57,470 INFO L290 TraceCheckUtils]: 13: Hoare triple {3307#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {3304#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:02:57,470 INFO L290 TraceCheckUtils]: 14: Hoare triple {3304#(= ~compRegistered~0 0)} assume true; {3304#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:02:57,471 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {3304#(= ~compRegistered~0 0)} {3293#true} #716#return; {3304#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:02:57,471 INFO L290 TraceCheckUtils]: 16: Hoare triple {3304#(= ~compRegistered~0 0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {3304#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:02:57,471 INFO L290 TraceCheckUtils]: 17: Hoare triple {3304#(= ~compRegistered~0 0)} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {3304#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:02:57,475 INFO L290 TraceCheckUtils]: 18: Hoare triple {3304#(= ~compRegistered~0 0)} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {3304#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:02:57,476 INFO L290 TraceCheckUtils]: 19: Hoare triple {3304#(= ~compRegistered~0 0)} assume 3 == ~tmp_ndt_3~0; {3304#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:02:57,476 INFO L272 TraceCheckUtils]: 20: Hoare triple {3304#(= ~compRegistered~0 0)} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {3304#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:02:57,477 INFO L290 TraceCheckUtils]: 21: Hoare triple {3304#(= ~compRegistered~0 0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {3304#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:02:57,477 INFO L290 TraceCheckUtils]: 22: Hoare triple {3304#(= ~compRegistered~0 0)} assume 0 == ~irpStack__MinorFunction~0; {3304#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:02:57,478 INFO L290 TraceCheckUtils]: 23: Hoare triple {3304#(= ~compRegistered~0 0)} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {3304#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:02:57,478 INFO L290 TraceCheckUtils]: 24: Hoare triple {3304#(= ~compRegistered~0 0)} assume !(~s~0 != ~NP~0); {3304#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:02:57,479 INFO L290 TraceCheckUtils]: 25: Hoare triple {3304#(= ~compRegistered~0 0)} assume 0 != ~compRegistered~0; {3294#false} is VALID [2022-04-27 15:02:57,479 INFO L272 TraceCheckUtils]: 26: Hoare triple {3294#false} call errorFn(); {3294#false} is VALID [2022-04-27 15:02:57,479 INFO L290 TraceCheckUtils]: 27: Hoare triple {3294#false} assume !false; {3294#false} is VALID [2022-04-27 15:02:57,479 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:02:57,479 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:02:57,480 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1944524042] [2022-04-27 15:02:57,480 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1944524042] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:02:57,480 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:02:57,480 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-27 15:02:57,480 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1890553757] [2022-04-27 15:02:57,480 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:02:57,481 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-27 15:02:57,481 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:02:57,481 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:02:57,502 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:02:57,503 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-27 15:02:57,503 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:02:57,503 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-27 15:02:57,503 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-27 15:02:57,504 INFO L87 Difference]: Start difference. First operand 301 states and 411 transitions. Second operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:02:59,045 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:02:59,045 INFO L93 Difference]: Finished difference Result 478 states and 635 transitions. [2022-04-27 15:02:59,045 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-27 15:02:59,046 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-27 15:02:59,046 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:02:59,046 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:02:59,052 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 503 transitions. [2022-04-27 15:02:59,052 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:02:59,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 503 transitions. [2022-04-27 15:02:59,059 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 503 transitions. [2022-04-27 15:02:59,484 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 503 edges. 503 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:02:59,495 INFO L225 Difference]: With dead ends: 478 [2022-04-27 15:02:59,495 INFO L226 Difference]: Without dead ends: 362 [2022-04-27 15:02:59,495 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-27 15:02:59,497 INFO L413 NwaCegarLoop]: 263 mSDtfsCounter, 568 mSDsluCounter, 115 mSDsCounter, 0 mSdLazyCounter, 324 mSolverCounterSat, 97 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 568 SdHoareTripleChecker+Valid, 378 SdHoareTripleChecker+Invalid, 421 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 97 IncrementalHoareTripleChecker+Valid, 324 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-27 15:02:59,497 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [568 Valid, 378 Invalid, 421 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [97 Valid, 324 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-27 15:02:59,498 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 362 states. [2022-04-27 15:02:59,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 362 to 341. [2022-04-27 15:02:59,519 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:02:59,520 INFO L82 GeneralOperation]: Start isEquivalent. First operand 362 states. Second operand has 341 states, 278 states have (on average 1.3848920863309353) internal successors, (385), 279 states have internal predecessors, (385), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:02:59,521 INFO L74 IsIncluded]: Start isIncluded. First operand 362 states. Second operand has 341 states, 278 states have (on average 1.3848920863309353) internal successors, (385), 279 states have internal predecessors, (385), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:02:59,521 INFO L87 Difference]: Start difference. First operand 362 states. Second operand has 341 states, 278 states have (on average 1.3848920863309353) internal successors, (385), 279 states have internal predecessors, (385), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:02:59,533 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:02:59,534 INFO L93 Difference]: Finished difference Result 362 states and 486 transitions. [2022-04-27 15:02:59,534 INFO L276 IsEmpty]: Start isEmpty. Operand 362 states and 486 transitions. [2022-04-27 15:02:59,535 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:02:59,535 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:02:59,536 INFO L74 IsIncluded]: Start isIncluded. First operand has 341 states, 278 states have (on average 1.3848920863309353) internal successors, (385), 279 states have internal predecessors, (385), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 362 states. [2022-04-27 15:02:59,536 INFO L87 Difference]: Start difference. First operand has 341 states, 278 states have (on average 1.3848920863309353) internal successors, (385), 279 states have internal predecessors, (385), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 362 states. [2022-04-27 15:02:59,548 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:02:59,548 INFO L93 Difference]: Finished difference Result 362 states and 486 transitions. [2022-04-27 15:02:59,548 INFO L276 IsEmpty]: Start isEmpty. Operand 362 states and 486 transitions. [2022-04-27 15:02:59,549 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:02:59,549 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:02:59,550 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:02:59,550 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:02:59,550 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 341 states, 278 states have (on average 1.3848920863309353) internal successors, (385), 279 states have internal predecessors, (385), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:02:59,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 341 states to 341 states and 462 transitions. [2022-04-27 15:02:59,583 INFO L78 Accepts]: Start accepts. Automaton has 341 states and 462 transitions. Word has length 28 [2022-04-27 15:02:59,583 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:02:59,583 INFO L495 AbstractCegarLoop]: Abstraction has 341 states and 462 transitions. [2022-04-27 15:02:59,584 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:02:59,584 INFO L276 IsEmpty]: Start isEmpty. Operand 341 states and 462 transitions. [2022-04-27 15:02:59,585 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-04-27 15:02:59,585 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:02:59,585 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:02:59,585 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-04-27 15:02:59,585 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:02:59,586 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:02:59,586 INFO L85 PathProgramCache]: Analyzing trace with hash 512919532, now seen corresponding path program 1 times [2022-04-27 15:02:59,586 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:02:59,586 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1700053459] [2022-04-27 15:02:59,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:02:59,587 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:02:59,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:59,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:02:59,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:59,675 INFO L290 TraceCheckUtils]: 0: Hoare triple {5125#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {5113#true} is VALID [2022-04-27 15:02:59,678 INFO L290 TraceCheckUtils]: 1: Hoare triple {5113#true} assume true; {5113#true} is VALID [2022-04-27 15:02:59,678 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5113#true} {5113#true} #780#return; {5113#true} is VALID [2022-04-27 15:02:59,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:02:59,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:59,704 INFO L290 TraceCheckUtils]: 0: Hoare triple {5126#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {5113#true} is VALID [2022-04-27 15:02:59,705 INFO L290 TraceCheckUtils]: 1: Hoare triple {5113#true} assume true; {5113#true} is VALID [2022-04-27 15:02:59,705 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5113#true} {5113#true} #714#return; {5113#true} is VALID [2022-04-27 15:02:59,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:02:59,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:59,725 INFO L290 TraceCheckUtils]: 0: Hoare triple {5127#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {5113#true} is VALID [2022-04-27 15:02:59,726 INFO L290 TraceCheckUtils]: 1: Hoare triple {5113#true} assume true; {5113#true} is VALID [2022-04-27 15:02:59,726 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5113#true} {5113#true} #716#return; {5113#true} is VALID [2022-04-27 15:02:59,727 INFO L272 TraceCheckUtils]: 0: Hoare triple {5113#true} call ULTIMATE.init(); {5125#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:02:59,727 INFO L290 TraceCheckUtils]: 1: Hoare triple {5125#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {5113#true} is VALID [2022-04-27 15:02:59,728 INFO L290 TraceCheckUtils]: 2: Hoare triple {5113#true} assume true; {5113#true} is VALID [2022-04-27 15:02:59,728 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {5113#true} {5113#true} #780#return; {5113#true} is VALID [2022-04-27 15:02:59,728 INFO L272 TraceCheckUtils]: 4: Hoare triple {5113#true} call #t~ret83 := main(); {5113#true} is VALID [2022-04-27 15:02:59,728 INFO L290 TraceCheckUtils]: 5: Hoare triple {5113#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {5113#true} is VALID [2022-04-27 15:02:59,729 INFO L272 TraceCheckUtils]: 6: Hoare triple {5113#true} call _BLAST_init(); {5126#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:02:59,729 INFO L290 TraceCheckUtils]: 7: Hoare triple {5126#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {5113#true} is VALID [2022-04-27 15:02:59,729 INFO L290 TraceCheckUtils]: 8: Hoare triple {5113#true} assume true; {5113#true} is VALID [2022-04-27 15:02:59,729 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {5113#true} {5113#true} #714#return; {5113#true} is VALID [2022-04-27 15:02:59,730 INFO L290 TraceCheckUtils]: 10: Hoare triple {5113#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {5113#true} is VALID [2022-04-27 15:02:59,730 INFO L290 TraceCheckUtils]: 11: Hoare triple {5113#true} assume !(0 == ~irp_choice~0); {5113#true} is VALID [2022-04-27 15:02:59,731 INFO L272 TraceCheckUtils]: 12: Hoare triple {5113#true} call stub_driver_init(); {5127#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:02:59,731 INFO L290 TraceCheckUtils]: 13: Hoare triple {5127#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {5113#true} is VALID [2022-04-27 15:02:59,731 INFO L290 TraceCheckUtils]: 14: Hoare triple {5113#true} assume true; {5113#true} is VALID [2022-04-27 15:02:59,731 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {5113#true} {5113#true} #716#return; {5113#true} is VALID [2022-04-27 15:02:59,732 INFO L290 TraceCheckUtils]: 16: Hoare triple {5113#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {5113#true} is VALID [2022-04-27 15:02:59,732 INFO L290 TraceCheckUtils]: 17: Hoare triple {5113#true} assume 0 == ~tmp_ndt_1~0; {5113#true} is VALID [2022-04-27 15:02:59,732 INFO L272 TraceCheckUtils]: 18: Hoare triple {5113#true} call #t~ret31 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {5113#true} is VALID [2022-04-27 15:02:59,732 INFO L290 TraceCheckUtils]: 19: Hoare triple {5113#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet43 && #t~nondet43 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet43;havoc #t~nondet43;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet44;havoc #t~nondet44;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {5113#true} is VALID [2022-04-27 15:02:59,732 INFO L290 TraceCheckUtils]: 20: Hoare triple {5113#true} assume 0 == ~irpStack__MajorFunction~0; {5113#true} is VALID [2022-04-27 15:02:59,732 INFO L290 TraceCheckUtils]: 21: Hoare triple {5113#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {5113#true} is VALID [2022-04-27 15:02:59,732 INFO L290 TraceCheckUtils]: 22: Hoare triple {5113#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {5113#true} is VALID [2022-04-27 15:02:59,732 INFO L272 TraceCheckUtils]: 23: Hoare triple {5113#true} call #t~ret45 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {5113#true} is VALID [2022-04-27 15:02:59,733 INFO L290 TraceCheckUtils]: 24: Hoare triple {5113#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet46;havoc #t~nondet46;assume -2147483648 <= #t~nondet47 && #t~nondet47 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet47;havoc #t~nondet47;assume -2147483648 <= #t~nondet48 && #t~nondet48 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet48;havoc #t~nondet48;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {5113#true} is VALID [2022-04-27 15:02:59,735 INFO L290 TraceCheckUtils]: 25: Hoare triple {5113#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {5124#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:02:59,736 INFO L290 TraceCheckUtils]: 26: Hoare triple {5124#(= ~SKIP1~0 ~s~0)} #t~post49 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post49;havoc #t~post49;#t~post50 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post50;havoc #t~post50; {5124#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:02:59,736 INFO L272 TraceCheckUtils]: 27: Hoare triple {5124#(= ~SKIP1~0 ~s~0)} call #t~ret51 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {5124#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:02:59,737 INFO L290 TraceCheckUtils]: 28: Hoare triple {5124#(= ~SKIP1~0 ~s~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {5124#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:02:59,737 INFO L290 TraceCheckUtils]: 29: Hoare triple {5124#(= ~SKIP1~0 ~s~0)} assume !(0 != ~compRegistered~0); {5124#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:02:59,738 INFO L290 TraceCheckUtils]: 30: Hoare triple {5124#(= ~SKIP1~0 ~s~0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {5124#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:02:59,738 INFO L290 TraceCheckUtils]: 31: Hoare triple {5124#(= ~SKIP1~0 ~s~0)} assume 0 == ~tmp_ndt_6~0; {5124#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:02:59,738 INFO L290 TraceCheckUtils]: 32: Hoare triple {5124#(= ~SKIP1~0 ~s~0)} ~returnVal2~0 := 0; {5124#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:02:59,739 INFO L290 TraceCheckUtils]: 33: Hoare triple {5124#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~NP~0); {5124#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:02:59,739 INFO L290 TraceCheckUtils]: 34: Hoare triple {5124#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~MPR1~0); {5124#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:02:59,740 INFO L290 TraceCheckUtils]: 35: Hoare triple {5124#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~SKIP1~0); {5114#false} is VALID [2022-04-27 15:02:59,740 INFO L272 TraceCheckUtils]: 36: Hoare triple {5114#false} call errorFn(); {5114#false} is VALID [2022-04-27 15:02:59,740 INFO L290 TraceCheckUtils]: 37: Hoare triple {5114#false} assume !false; {5114#false} is VALID [2022-04-27 15:02:59,740 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:02:59,740 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:02:59,741 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1700053459] [2022-04-27 15:02:59,741 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1700053459] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:02:59,741 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:02:59,741 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-27 15:02:59,741 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [972812891] [2022-04-27 15:02:59,741 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:02:59,741 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-27 15:02:59,742 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:02:59,742 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:02:59,767 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 38 edges. 38 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:02:59,767 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-27 15:02:59,767 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:02:59,767 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-27 15:02:59,768 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-27 15:02:59,768 INFO L87 Difference]: Start difference. First operand 341 states and 462 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:01,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:01,109 INFO L93 Difference]: Finished difference Result 344 states and 464 transitions. [2022-04-27 15:03:01,109 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-27 15:03:01,109 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-27 15:03:01,109 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:01,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:01,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 334 transitions. [2022-04-27 15:03:01,114 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:01,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 334 transitions. [2022-04-27 15:03:01,117 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 334 transitions. [2022-04-27 15:03:01,438 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 334 edges. 334 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:01,447 INFO L225 Difference]: With dead ends: 344 [2022-04-27 15:03:01,447 INFO L226 Difference]: Without dead ends: 340 [2022-04-27 15:03:01,448 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-04-27 15:03:01,449 INFO L413 NwaCegarLoop]: 264 mSDtfsCounter, 341 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 443 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 341 SdHoareTripleChecker+Valid, 413 SdHoareTripleChecker+Invalid, 503 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 443 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:01,449 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [341 Valid, 413 Invalid, 503 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 443 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-27 15:03:01,450 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 340 states. [2022-04-27 15:03:01,467 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 340 to 340. [2022-04-27 15:03:01,468 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:01,468 INFO L82 GeneralOperation]: Start isEquivalent. First operand 340 states. Second operand has 340 states, 278 states have (on average 1.3776978417266188) internal successors, (383), 278 states have internal predecessors, (383), 32 states have call successors, (32), 23 states have call predecessors, (32), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:03:01,469 INFO L74 IsIncluded]: Start isIncluded. First operand 340 states. Second operand has 340 states, 278 states have (on average 1.3776978417266188) internal successors, (383), 278 states have internal predecessors, (383), 32 states have call successors, (32), 23 states have call predecessors, (32), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:03:01,470 INFO L87 Difference]: Start difference. First operand 340 states. Second operand has 340 states, 278 states have (on average 1.3776978417266188) internal successors, (383), 278 states have internal predecessors, (383), 32 states have call successors, (32), 23 states have call predecessors, (32), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:03:01,480 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:01,480 INFO L93 Difference]: Finished difference Result 340 states and 459 transitions. [2022-04-27 15:03:01,480 INFO L276 IsEmpty]: Start isEmpty. Operand 340 states and 459 transitions. [2022-04-27 15:03:01,481 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:01,481 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:01,482 INFO L74 IsIncluded]: Start isIncluded. First operand has 340 states, 278 states have (on average 1.3776978417266188) internal successors, (383), 278 states have internal predecessors, (383), 32 states have call successors, (32), 23 states have call predecessors, (32), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 340 states. [2022-04-27 15:03:01,482 INFO L87 Difference]: Start difference. First operand has 340 states, 278 states have (on average 1.3776978417266188) internal successors, (383), 278 states have internal predecessors, (383), 32 states have call successors, (32), 23 states have call predecessors, (32), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 340 states. [2022-04-27 15:03:01,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:01,492 INFO L93 Difference]: Finished difference Result 340 states and 459 transitions. [2022-04-27 15:03:01,492 INFO L276 IsEmpty]: Start isEmpty. Operand 340 states and 459 transitions. [2022-04-27 15:03:01,493 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:01,493 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:01,493 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:01,493 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:01,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 340 states, 278 states have (on average 1.3776978417266188) internal successors, (383), 278 states have internal predecessors, (383), 32 states have call successors, (32), 23 states have call predecessors, (32), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:03:01,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 340 states to 340 states and 459 transitions. [2022-04-27 15:03:01,504 INFO L78 Accepts]: Start accepts. Automaton has 340 states and 459 transitions. Word has length 38 [2022-04-27 15:03:01,504 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:01,504 INFO L495 AbstractCegarLoop]: Abstraction has 340 states and 459 transitions. [2022-04-27 15:03:01,504 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:01,504 INFO L276 IsEmpty]: Start isEmpty. Operand 340 states and 459 transitions. [2022-04-27 15:03:01,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-27 15:03:01,505 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:01,506 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:01,506 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-04-27 15:03:01,506 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:01,506 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:01,506 INFO L85 PathProgramCache]: Analyzing trace with hash 708737618, now seen corresponding path program 1 times [2022-04-27 15:03:01,507 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:01,507 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [320582325] [2022-04-27 15:03:01,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:01,507 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:01,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:01,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:01,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:01,600 INFO L290 TraceCheckUtils]: 0: Hoare triple {6735#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6714#true} is VALID [2022-04-27 15:03:01,600 INFO L290 TraceCheckUtils]: 1: Hoare triple {6714#true} assume true; {6714#true} is VALID [2022-04-27 15:03:01,600 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6714#true} {6714#true} #780#return; {6714#true} is VALID [2022-04-27 15:03:01,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:01,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:01,627 INFO L290 TraceCheckUtils]: 0: Hoare triple {6736#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6714#true} is VALID [2022-04-27 15:03:01,627 INFO L290 TraceCheckUtils]: 1: Hoare triple {6714#true} assume true; {6714#true} is VALID [2022-04-27 15:03:01,627 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6714#true} {6714#true} #714#return; {6714#true} is VALID [2022-04-27 15:03:01,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:01,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:01,642 INFO L290 TraceCheckUtils]: 0: Hoare triple {6737#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6714#true} is VALID [2022-04-27 15:03:01,643 INFO L290 TraceCheckUtils]: 1: Hoare triple {6714#true} assume true; {6714#true} is VALID [2022-04-27 15:03:01,643 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6714#true} {6714#true} #716#return; {6714#true} is VALID [2022-04-27 15:03:01,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:01,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:01,667 INFO L290 TraceCheckUtils]: 0: Hoare triple {6738#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {6714#true} is VALID [2022-04-27 15:03:01,668 INFO L290 TraceCheckUtils]: 1: Hoare triple {6714#true} assume !(0 != ~compRegistered~0); {6739#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:01,668 INFO L290 TraceCheckUtils]: 2: Hoare triple {6739#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {6739#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:01,668 INFO L290 TraceCheckUtils]: 3: Hoare triple {6739#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {6739#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:01,669 INFO L290 TraceCheckUtils]: 4: Hoare triple {6739#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {6739#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:01,669 INFO L290 TraceCheckUtils]: 5: Hoare triple {6739#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {6739#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:01,669 INFO L290 TraceCheckUtils]: 6: Hoare triple {6739#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {6739#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:01,670 INFO L290 TraceCheckUtils]: 7: Hoare triple {6739#(<= ~compRegistered~0 0)} assume true; {6739#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:01,670 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {6739#(<= ~compRegistered~0 0)} {6725#(= ~compRegistered~0 1)} #752#return; {6715#false} is VALID [2022-04-27 15:03:01,672 INFO L272 TraceCheckUtils]: 0: Hoare triple {6714#true} call ULTIMATE.init(); {6735#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:01,672 INFO L290 TraceCheckUtils]: 1: Hoare triple {6735#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6714#true} is VALID [2022-04-27 15:03:01,672 INFO L290 TraceCheckUtils]: 2: Hoare triple {6714#true} assume true; {6714#true} is VALID [2022-04-27 15:03:01,672 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {6714#true} {6714#true} #780#return; {6714#true} is VALID [2022-04-27 15:03:01,673 INFO L272 TraceCheckUtils]: 4: Hoare triple {6714#true} call #t~ret83 := main(); {6714#true} is VALID [2022-04-27 15:03:01,673 INFO L290 TraceCheckUtils]: 5: Hoare triple {6714#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {6714#true} is VALID [2022-04-27 15:03:01,674 INFO L272 TraceCheckUtils]: 6: Hoare triple {6714#true} call _BLAST_init(); {6736#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:01,674 INFO L290 TraceCheckUtils]: 7: Hoare triple {6736#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6714#true} is VALID [2022-04-27 15:03:01,674 INFO L290 TraceCheckUtils]: 8: Hoare triple {6714#true} assume true; {6714#true} is VALID [2022-04-27 15:03:01,674 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {6714#true} {6714#true} #714#return; {6714#true} is VALID [2022-04-27 15:03:01,674 INFO L290 TraceCheckUtils]: 10: Hoare triple {6714#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {6714#true} is VALID [2022-04-27 15:03:01,674 INFO L290 TraceCheckUtils]: 11: Hoare triple {6714#true} assume !(0 == ~irp_choice~0); {6714#true} is VALID [2022-04-27 15:03:01,676 INFO L272 TraceCheckUtils]: 12: Hoare triple {6714#true} call stub_driver_init(); {6737#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:01,676 INFO L290 TraceCheckUtils]: 13: Hoare triple {6737#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6714#true} is VALID [2022-04-27 15:03:01,676 INFO L290 TraceCheckUtils]: 14: Hoare triple {6714#true} assume true; {6714#true} is VALID [2022-04-27 15:03:01,676 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {6714#true} {6714#true} #716#return; {6714#true} is VALID [2022-04-27 15:03:01,677 INFO L290 TraceCheckUtils]: 16: Hoare triple {6714#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {6714#true} is VALID [2022-04-27 15:03:01,677 INFO L290 TraceCheckUtils]: 17: Hoare triple {6714#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {6714#true} is VALID [2022-04-27 15:03:01,677 INFO L290 TraceCheckUtils]: 18: Hoare triple {6714#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {6714#true} is VALID [2022-04-27 15:03:01,678 INFO L290 TraceCheckUtils]: 19: Hoare triple {6714#true} assume 3 == ~tmp_ndt_3~0; {6714#true} is VALID [2022-04-27 15:03:01,678 INFO L272 TraceCheckUtils]: 20: Hoare triple {6714#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {6714#true} is VALID [2022-04-27 15:03:01,679 INFO L290 TraceCheckUtils]: 21: Hoare triple {6714#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {6714#true} is VALID [2022-04-27 15:03:01,682 INFO L290 TraceCheckUtils]: 22: Hoare triple {6714#true} assume 0 == ~irpStack__MinorFunction~0; {6714#true} is VALID [2022-04-27 15:03:01,682 INFO L290 TraceCheckUtils]: 23: Hoare triple {6714#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {6714#true} is VALID [2022-04-27 15:03:01,682 INFO L290 TraceCheckUtils]: 24: Hoare triple {6714#true} assume !(~s~0 != ~NP~0); {6714#true} is VALID [2022-04-27 15:03:01,683 INFO L290 TraceCheckUtils]: 25: Hoare triple {6714#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {6725#(= ~compRegistered~0 1)} is VALID [2022-04-27 15:03:01,684 INFO L290 TraceCheckUtils]: 26: Hoare triple {6725#(= ~compRegistered~0 1)} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {6725#(= ~compRegistered~0 1)} is VALID [2022-04-27 15:03:01,685 INFO L272 TraceCheckUtils]: 27: Hoare triple {6725#(= ~compRegistered~0 1)} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {6738#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:01,685 INFO L290 TraceCheckUtils]: 28: Hoare triple {6738#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {6714#true} is VALID [2022-04-27 15:03:01,685 INFO L290 TraceCheckUtils]: 29: Hoare triple {6714#true} assume !(0 != ~compRegistered~0); {6739#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:01,686 INFO L290 TraceCheckUtils]: 30: Hoare triple {6739#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {6739#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:01,686 INFO L290 TraceCheckUtils]: 31: Hoare triple {6739#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {6739#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:01,686 INFO L290 TraceCheckUtils]: 32: Hoare triple {6739#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {6739#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:01,690 INFO L290 TraceCheckUtils]: 33: Hoare triple {6739#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {6739#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:01,691 INFO L290 TraceCheckUtils]: 34: Hoare triple {6739#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {6739#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:01,691 INFO L290 TraceCheckUtils]: 35: Hoare triple {6739#(<= ~compRegistered~0 0)} assume true; {6739#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:01,692 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {6739#(<= ~compRegistered~0 0)} {6725#(= ~compRegistered~0 1)} #752#return; {6715#false} is VALID [2022-04-27 15:03:01,692 INFO L290 TraceCheckUtils]: 37: Hoare triple {6715#false} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {6715#false} is VALID [2022-04-27 15:03:01,692 INFO L290 TraceCheckUtils]: 38: Hoare triple {6715#false} assume 259 == ~__cil_tmp23~0; {6715#false} is VALID [2022-04-27 15:03:01,692 INFO L272 TraceCheckUtils]: 39: Hoare triple {6715#false} call #t~ret13 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {6715#false} is VALID [2022-04-27 15:03:01,692 INFO L290 TraceCheckUtils]: 40: Hoare triple {6715#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {6715#false} is VALID [2022-04-27 15:03:01,693 INFO L290 TraceCheckUtils]: 41: Hoare triple {6715#false} assume !(~s~0 == ~MPR3~0); {6715#false} is VALID [2022-04-27 15:03:01,693 INFO L290 TraceCheckUtils]: 42: Hoare triple {6715#false} assume !(1 == ~customIrp~0); {6715#false} is VALID [2022-04-27 15:03:01,693 INFO L290 TraceCheckUtils]: 43: Hoare triple {6715#false} assume ~s~0 == ~MPR3~0; {6715#false} is VALID [2022-04-27 15:03:01,693 INFO L272 TraceCheckUtils]: 44: Hoare triple {6715#false} call errorFn(); {6715#false} is VALID [2022-04-27 15:03:01,693 INFO L290 TraceCheckUtils]: 45: Hoare triple {6715#false} assume !false; {6715#false} is VALID [2022-04-27 15:03:01,693 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:01,694 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:01,694 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [320582325] [2022-04-27 15:03:01,694 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [320582325] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:01,694 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:01,694 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-27 15:03:01,695 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [33777010] [2022-04-27 15:03:01,695 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:01,696 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-27 15:03:01,696 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:01,696 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-27 15:03:01,728 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:01,729 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-27 15:03:01,729 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:01,729 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-27 15:03:01,730 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-04-27 15:03:01,730 INFO L87 Difference]: Start difference. First operand 340 states and 459 transitions. Second operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-27 15:03:03,585 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:03,585 INFO L93 Difference]: Finished difference Result 385 states and 508 transitions. [2022-04-27 15:03:03,585 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-27 15:03:03,585 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-27 15:03:03,587 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:03,587 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-27 15:03:03,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 413 transitions. [2022-04-27 15:03:03,593 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-27 15:03:03,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 413 transitions. [2022-04-27 15:03:03,597 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 413 transitions. [2022-04-27 15:03:03,967 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 413 edges. 413 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:03,975 INFO L225 Difference]: With dead ends: 385 [2022-04-27 15:03:03,975 INFO L226 Difference]: Without dead ends: 319 [2022-04-27 15:03:03,976 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:03,977 INFO L413 NwaCegarLoop]: 298 mSDtfsCounter, 450 mSDsluCounter, 246 mSDsCounter, 0 mSdLazyCounter, 651 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 450 SdHoareTripleChecker+Valid, 544 SdHoareTripleChecker+Invalid, 712 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 651 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:03,977 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [450 Valid, 544 Invalid, 712 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 651 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-27 15:03:03,978 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 319 states. [2022-04-27 15:03:04,028 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 319 to 301. [2022-04-27 15:03:04,028 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:04,029 INFO L82 GeneralOperation]: Start isEquivalent. First operand 319 states. Second operand has 301 states, 244 states have (on average 1.3688524590163935) internal successors, (334), 244 states have internal predecessors, (334), 29 states have call successors, (29), 21 states have call predecessors, (29), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-27 15:03:04,030 INFO L74 IsIncluded]: Start isIncluded. First operand 319 states. Second operand has 301 states, 244 states have (on average 1.3688524590163935) internal successors, (334), 244 states have internal predecessors, (334), 29 states have call successors, (29), 21 states have call predecessors, (29), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-27 15:03:04,030 INFO L87 Difference]: Start difference. First operand 319 states. Second operand has 301 states, 244 states have (on average 1.3688524590163935) internal successors, (334), 244 states have internal predecessors, (334), 29 states have call successors, (29), 21 states have call predecessors, (29), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-27 15:03:04,040 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:04,040 INFO L93 Difference]: Finished difference Result 319 states and 423 transitions. [2022-04-27 15:03:04,040 INFO L276 IsEmpty]: Start isEmpty. Operand 319 states and 423 transitions. [2022-04-27 15:03:04,041 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:04,041 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:04,042 INFO L74 IsIncluded]: Start isIncluded. First operand has 301 states, 244 states have (on average 1.3688524590163935) internal successors, (334), 244 states have internal predecessors, (334), 29 states have call successors, (29), 21 states have call predecessors, (29), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 319 states. [2022-04-27 15:03:04,043 INFO L87 Difference]: Start difference. First operand has 301 states, 244 states have (on average 1.3688524590163935) internal successors, (334), 244 states have internal predecessors, (334), 29 states have call successors, (29), 21 states have call predecessors, (29), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 319 states. [2022-04-27 15:03:04,051 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:04,051 INFO L93 Difference]: Finished difference Result 319 states and 423 transitions. [2022-04-27 15:03:04,051 INFO L276 IsEmpty]: Start isEmpty. Operand 319 states and 423 transitions. [2022-04-27 15:03:04,052 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:04,052 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:04,052 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:04,052 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:04,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 301 states, 244 states have (on average 1.3688524590163935) internal successors, (334), 244 states have internal predecessors, (334), 29 states have call successors, (29), 21 states have call predecessors, (29), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-27 15:03:04,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 301 states to 301 states and 402 transitions. [2022-04-27 15:03:04,061 INFO L78 Accepts]: Start accepts. Automaton has 301 states and 402 transitions. Word has length 46 [2022-04-27 15:03:04,062 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:04,062 INFO L495 AbstractCegarLoop]: Abstraction has 301 states and 402 transitions. [2022-04-27 15:03:04,062 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-27 15:03:04,062 INFO L276 IsEmpty]: Start isEmpty. Operand 301 states and 402 transitions. [2022-04-27 15:03:04,064 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-04-27 15:03:04,064 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:04,065 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:04,065 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-04-27 15:03:04,065 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:04,065 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:04,065 INFO L85 PathProgramCache]: Analyzing trace with hash -1153649594, now seen corresponding path program 1 times [2022-04-27 15:03:04,066 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:04,066 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1354182597] [2022-04-27 15:03:04,066 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:04,066 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:04,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:04,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:04,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:04,233 INFO L290 TraceCheckUtils]: 0: Hoare triple {8318#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8293#true} is VALID [2022-04-27 15:03:04,233 INFO L290 TraceCheckUtils]: 1: Hoare triple {8293#true} assume true; {8293#true} is VALID [2022-04-27 15:03:04,233 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8293#true} {8293#true} #780#return; {8293#true} is VALID [2022-04-27 15:03:04,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:04,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:04,285 INFO L290 TraceCheckUtils]: 0: Hoare triple {8319#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8320#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-27 15:03:04,285 INFO L290 TraceCheckUtils]: 1: Hoare triple {8320#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {8320#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-27 15:03:04,286 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8320#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {8293#true} #714#return; {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:04,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:04,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:04,306 INFO L290 TraceCheckUtils]: 0: Hoare triple {8321#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8293#true} is VALID [2022-04-27 15:03:04,306 INFO L290 TraceCheckUtils]: 1: Hoare triple {8293#true} assume true; {8293#true} is VALID [2022-04-27 15:03:04,306 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8293#true} {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #716#return; {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:04,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-27 15:03:04,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:04,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-27 15:03:04,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:04,408 INFO L290 TraceCheckUtils]: 0: Hoare triple {8328#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {8293#true} is VALID [2022-04-27 15:03:04,408 INFO L290 TraceCheckUtils]: 1: Hoare triple {8293#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {8329#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:04,409 INFO L290 TraceCheckUtils]: 2: Hoare triple {8329#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {8329#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:04,410 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {8329#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {8293#true} #740#return; {8327#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:04,410 INFO L290 TraceCheckUtils]: 0: Hoare triple {8322#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet70;havoc #t~nondet70;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet71;havoc #t~nondet71;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet72;havoc #t~nondet72;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp20~0 := #t~nondet73;havoc #t~nondet73;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp24~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp28~0 := #t~nondet75;havoc #t~nondet75;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp29~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp32~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp35~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp38~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet80 && #t~nondet80 <= 2147483647;~__cil_tmp41~0 := #t~nondet80;havoc #t~nondet80;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet81 && #t~nondet81 <= 2147483647;~__cil_tmp44~0 := #t~nondet81;havoc #t~nondet81;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {8293#true} is VALID [2022-04-27 15:03:04,410 INFO L290 TraceCheckUtils]: 1: Hoare triple {8293#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {8293#true} is VALID [2022-04-27 15:03:04,410 INFO L290 TraceCheckUtils]: 2: Hoare triple {8293#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {8293#true} is VALID [2022-04-27 15:03:04,411 INFO L290 TraceCheckUtils]: 3: Hoare triple {8293#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {8293#true} is VALID [2022-04-27 15:03:04,411 INFO L272 TraceCheckUtils]: 4: Hoare triple {8293#true} call IofCompleteRequest(~Irp, 0); {8328#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:04,411 INFO L290 TraceCheckUtils]: 5: Hoare triple {8328#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {8293#true} is VALID [2022-04-27 15:03:04,412 INFO L290 TraceCheckUtils]: 6: Hoare triple {8293#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {8329#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:04,412 INFO L290 TraceCheckUtils]: 7: Hoare triple {8329#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {8329#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:04,413 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {8329#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {8293#true} #740#return; {8327#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:04,413 INFO L290 TraceCheckUtils]: 9: Hoare triple {8327#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {8327#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:04,414 INFO L290 TraceCheckUtils]: 10: Hoare triple {8327#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {8327#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:04,415 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {8327#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #726#return; {8317#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-27 15:03:04,417 INFO L272 TraceCheckUtils]: 0: Hoare triple {8293#true} call ULTIMATE.init(); {8318#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:04,417 INFO L290 TraceCheckUtils]: 1: Hoare triple {8318#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8293#true} is VALID [2022-04-27 15:03:04,417 INFO L290 TraceCheckUtils]: 2: Hoare triple {8293#true} assume true; {8293#true} is VALID [2022-04-27 15:03:04,417 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {8293#true} {8293#true} #780#return; {8293#true} is VALID [2022-04-27 15:03:04,417 INFO L272 TraceCheckUtils]: 4: Hoare triple {8293#true} call #t~ret83 := main(); {8293#true} is VALID [2022-04-27 15:03:04,418 INFO L290 TraceCheckUtils]: 5: Hoare triple {8293#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {8293#true} is VALID [2022-04-27 15:03:04,419 INFO L272 TraceCheckUtils]: 6: Hoare triple {8293#true} call _BLAST_init(); {8319#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:04,419 INFO L290 TraceCheckUtils]: 7: Hoare triple {8319#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8320#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-27 15:03:04,420 INFO L290 TraceCheckUtils]: 8: Hoare triple {8320#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {8320#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-27 15:03:04,420 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {8320#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {8293#true} #714#return; {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:04,421 INFO L290 TraceCheckUtils]: 10: Hoare triple {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:04,421 INFO L290 TraceCheckUtils]: 11: Hoare triple {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~irp_choice~0); {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:04,422 INFO L272 TraceCheckUtils]: 12: Hoare triple {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call stub_driver_init(); {8321#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:04,425 INFO L290 TraceCheckUtils]: 13: Hoare triple {8321#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8293#true} is VALID [2022-04-27 15:03:04,426 INFO L290 TraceCheckUtils]: 14: Hoare triple {8293#true} assume true; {8293#true} is VALID [2022-04-27 15:03:04,432 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {8293#true} {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #716#return; {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:04,433 INFO L290 TraceCheckUtils]: 16: Hoare triple {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:04,434 INFO L290 TraceCheckUtils]: 17: Hoare triple {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:04,434 INFO L290 TraceCheckUtils]: 18: Hoare triple {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:04,437 INFO L290 TraceCheckUtils]: 19: Hoare triple {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647;~tmp_ndt_4~0 := #t~nondet29;havoc #t~nondet29; {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:04,438 INFO L290 TraceCheckUtils]: 20: Hoare triple {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647;~tmp_ndt_5~0 := #t~nondet30;havoc #t~nondet30; {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:04,439 INFO L290 TraceCheckUtils]: 21: Hoare triple {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume 8 == ~tmp_ndt_5~0; {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:04,440 INFO L272 TraceCheckUtils]: 22: Hoare triple {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call #t~ret35 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {8322#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:04,440 INFO L290 TraceCheckUtils]: 23: Hoare triple {8322#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet70;havoc #t~nondet70;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet71;havoc #t~nondet71;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet72;havoc #t~nondet72;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp20~0 := #t~nondet73;havoc #t~nondet73;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp24~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp28~0 := #t~nondet75;havoc #t~nondet75;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp29~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp32~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp35~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp38~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet80 && #t~nondet80 <= 2147483647;~__cil_tmp41~0 := #t~nondet80;havoc #t~nondet80;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet81 && #t~nondet81 <= 2147483647;~__cil_tmp44~0 := #t~nondet81;havoc #t~nondet81;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {8293#true} is VALID [2022-04-27 15:03:04,440 INFO L290 TraceCheckUtils]: 24: Hoare triple {8293#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {8293#true} is VALID [2022-04-27 15:03:04,440 INFO L290 TraceCheckUtils]: 25: Hoare triple {8293#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {8293#true} is VALID [2022-04-27 15:03:04,440 INFO L290 TraceCheckUtils]: 26: Hoare triple {8293#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {8293#true} is VALID [2022-04-27 15:03:04,441 INFO L272 TraceCheckUtils]: 27: Hoare triple {8293#true} call IofCompleteRequest(~Irp, 0); {8328#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:04,441 INFO L290 TraceCheckUtils]: 28: Hoare triple {8328#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {8293#true} is VALID [2022-04-27 15:03:04,442 INFO L290 TraceCheckUtils]: 29: Hoare triple {8293#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {8329#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:04,442 INFO L290 TraceCheckUtils]: 30: Hoare triple {8329#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {8329#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:04,443 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {8329#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {8293#true} #740#return; {8327#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:04,443 INFO L290 TraceCheckUtils]: 32: Hoare triple {8327#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {8327#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:04,444 INFO L290 TraceCheckUtils]: 33: Hoare triple {8327#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {8327#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:04,445 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {8327#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {8301#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #726#return; {8317#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-27 15:03:04,450 INFO L290 TraceCheckUtils]: 35: Hoare triple {8317#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~status~1 := #t~ret35;havoc #t~ret35; {8317#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-27 15:03:04,450 INFO L290 TraceCheckUtils]: 36: Hoare triple {8317#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {8317#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-27 15:03:04,451 INFO L290 TraceCheckUtils]: 37: Hoare triple {8317#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {8317#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-27 15:03:04,451 INFO L290 TraceCheckUtils]: 38: Hoare triple {8317#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume ~s~0 != ~UNLOADED~0; {8317#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-27 15:03:04,452 INFO L290 TraceCheckUtils]: 39: Hoare triple {8317#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -1 != ~status~1; {8317#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-27 15:03:04,452 INFO L290 TraceCheckUtils]: 40: Hoare triple {8317#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(~s~0 != ~SKIP2~0); {8294#false} is VALID [2022-04-27 15:03:04,452 INFO L290 TraceCheckUtils]: 41: Hoare triple {8294#false} assume 1 == ~pended~0; {8294#false} is VALID [2022-04-27 15:03:04,452 INFO L290 TraceCheckUtils]: 42: Hoare triple {8294#false} assume 259 != ~status~1; {8294#false} is VALID [2022-04-27 15:03:04,452 INFO L272 TraceCheckUtils]: 43: Hoare triple {8294#false} call errorFn(); {8294#false} is VALID [2022-04-27 15:03:04,453 INFO L290 TraceCheckUtils]: 44: Hoare triple {8294#false} assume !false; {8294#false} is VALID [2022-04-27 15:03:04,453 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:04,453 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:04,453 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1354182597] [2022-04-27 15:03:04,453 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1354182597] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:04,453 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:04,454 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-27 15:03:04,454 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2144017162] [2022-04-27 15:03:04,454 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:04,454 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-27 15:03:04,454 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:04,455 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:04,492 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:04,492 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-27 15:03:04,493 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:04,496 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-27 15:03:04,496 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:04,496 INFO L87 Difference]: Start difference. First operand 301 states and 402 transitions. Second operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:07,509 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:07,509 INFO L93 Difference]: Finished difference Result 327 states and 430 transitions. [2022-04-27 15:03:07,509 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-27 15:03:07,509 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-27 15:03:07,510 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:07,510 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:07,513 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 355 transitions. [2022-04-27 15:03:07,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:07,516 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 355 transitions. [2022-04-27 15:03:07,516 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 355 transitions. [2022-04-27 15:03:07,927 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 355 edges. 355 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:07,935 INFO L225 Difference]: With dead ends: 327 [2022-04-27 15:03:07,935 INFO L226 Difference]: Without dead ends: 322 [2022-04-27 15:03:07,936 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-27 15:03:07,937 INFO L413 NwaCegarLoop]: 252 mSDtfsCounter, 647 mSDsluCounter, 324 mSDsCounter, 0 mSdLazyCounter, 943 mSolverCounterSat, 108 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 649 SdHoareTripleChecker+Valid, 576 SdHoareTripleChecker+Invalid, 1051 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 108 IncrementalHoareTripleChecker+Valid, 943 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:07,937 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [649 Valid, 576 Invalid, 1051 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [108 Valid, 943 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-27 15:03:07,938 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 322 states. [2022-04-27 15:03:08,044 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 322 to 315. [2022-04-27 15:03:08,044 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:08,045 INFO L82 GeneralOperation]: Start isEquivalent. First operand 322 states. Second operand has 315 states, 256 states have (on average 1.359375) internal successors, (348), 255 states have internal predecessors, (348), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:08,046 INFO L74 IsIncluded]: Start isIncluded. First operand 322 states. Second operand has 315 states, 256 states have (on average 1.359375) internal successors, (348), 255 states have internal predecessors, (348), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:08,046 INFO L87 Difference]: Start difference. First operand 322 states. Second operand has 315 states, 256 states have (on average 1.359375) internal successors, (348), 255 states have internal predecessors, (348), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:08,055 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:08,055 INFO L93 Difference]: Finished difference Result 322 states and 425 transitions. [2022-04-27 15:03:08,055 INFO L276 IsEmpty]: Start isEmpty. Operand 322 states and 425 transitions. [2022-04-27 15:03:08,056 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:08,056 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:08,057 INFO L74 IsIncluded]: Start isIncluded. First operand has 315 states, 256 states have (on average 1.359375) internal successors, (348), 255 states have internal predecessors, (348), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 322 states. [2022-04-27 15:03:08,057 INFO L87 Difference]: Start difference. First operand has 315 states, 256 states have (on average 1.359375) internal successors, (348), 255 states have internal predecessors, (348), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 322 states. [2022-04-27 15:03:08,067 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:08,067 INFO L93 Difference]: Finished difference Result 322 states and 425 transitions. [2022-04-27 15:03:08,067 INFO L276 IsEmpty]: Start isEmpty. Operand 322 states and 425 transitions. [2022-04-27 15:03:08,067 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:08,067 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:08,068 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:08,068 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:08,068 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 315 states, 256 states have (on average 1.359375) internal successors, (348), 255 states have internal predecessors, (348), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:08,077 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 315 states to 315 states and 418 transitions. [2022-04-27 15:03:08,077 INFO L78 Accepts]: Start accepts. Automaton has 315 states and 418 transitions. Word has length 45 [2022-04-27 15:03:08,077 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:08,077 INFO L495 AbstractCegarLoop]: Abstraction has 315 states and 418 transitions. [2022-04-27 15:03:08,078 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:08,078 INFO L276 IsEmpty]: Start isEmpty. Operand 315 states and 418 transitions. [2022-04-27 15:03:08,079 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-27 15:03:08,079 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:08,079 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:08,079 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-04-27 15:03:08,079 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:08,079 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:08,080 INFO L85 PathProgramCache]: Analyzing trace with hash -1782707845, now seen corresponding path program 1 times [2022-04-27 15:03:08,080 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:08,080 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2058494813] [2022-04-27 15:03:08,080 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:08,080 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:08,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:08,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:08,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:08,189 INFO L290 TraceCheckUtils]: 0: Hoare triple {9860#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {9835#true} is VALID [2022-04-27 15:03:08,189 INFO L290 TraceCheckUtils]: 1: Hoare triple {9835#true} assume true; {9835#true} is VALID [2022-04-27 15:03:08,189 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9835#true} {9835#true} #780#return; {9835#true} is VALID [2022-04-27 15:03:08,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:08,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:08,231 INFO L290 TraceCheckUtils]: 0: Hoare triple {9861#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9862#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-27 15:03:08,232 INFO L290 TraceCheckUtils]: 1: Hoare triple {9862#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {9862#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-27 15:03:08,232 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9862#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {9835#true} #714#return; {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:08,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:08,251 INFO L290 TraceCheckUtils]: 0: Hoare triple {9863#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9835#true} is VALID [2022-04-27 15:03:08,251 INFO L290 TraceCheckUtils]: 1: Hoare triple {9835#true} assume true; {9835#true} is VALID [2022-04-27 15:03:08,252 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9835#true} {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #716#return; {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-27 15:03:08,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:08,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-27 15:03:08,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:08,333 INFO L290 TraceCheckUtils]: 0: Hoare triple {9870#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {9835#true} is VALID [2022-04-27 15:03:08,334 INFO L290 TraceCheckUtils]: 1: Hoare triple {9835#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {9871#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:08,334 INFO L290 TraceCheckUtils]: 2: Hoare triple {9871#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {9871#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:08,335 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {9871#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {9835#true} #740#return; {9869#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:08,335 INFO L290 TraceCheckUtils]: 0: Hoare triple {9864#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet70;havoc #t~nondet70;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet71;havoc #t~nondet71;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet72;havoc #t~nondet72;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp20~0 := #t~nondet73;havoc #t~nondet73;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp24~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp28~0 := #t~nondet75;havoc #t~nondet75;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp29~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp32~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp35~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp38~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet80 && #t~nondet80 <= 2147483647;~__cil_tmp41~0 := #t~nondet80;havoc #t~nondet80;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet81 && #t~nondet81 <= 2147483647;~__cil_tmp44~0 := #t~nondet81;havoc #t~nondet81;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {9835#true} is VALID [2022-04-27 15:03:08,335 INFO L290 TraceCheckUtils]: 1: Hoare triple {9835#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {9835#true} is VALID [2022-04-27 15:03:08,335 INFO L290 TraceCheckUtils]: 2: Hoare triple {9835#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {9835#true} is VALID [2022-04-27 15:03:08,336 INFO L290 TraceCheckUtils]: 3: Hoare triple {9835#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {9835#true} is VALID [2022-04-27 15:03:08,336 INFO L272 TraceCheckUtils]: 4: Hoare triple {9835#true} call IofCompleteRequest(~Irp, 0); {9870#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:08,336 INFO L290 TraceCheckUtils]: 5: Hoare triple {9870#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {9835#true} is VALID [2022-04-27 15:03:08,337 INFO L290 TraceCheckUtils]: 6: Hoare triple {9835#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {9871#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:08,337 INFO L290 TraceCheckUtils]: 7: Hoare triple {9871#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {9871#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:08,338 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {9871#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {9835#true} #740#return; {9869#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:08,338 INFO L290 TraceCheckUtils]: 9: Hoare triple {9869#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {9869#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:08,339 INFO L290 TraceCheckUtils]: 10: Hoare triple {9869#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {9869#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:08,340 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {9869#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #726#return; {9859#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,342 INFO L272 TraceCheckUtils]: 0: Hoare triple {9835#true} call ULTIMATE.init(); {9860#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:08,342 INFO L290 TraceCheckUtils]: 1: Hoare triple {9860#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {9835#true} is VALID [2022-04-27 15:03:08,342 INFO L290 TraceCheckUtils]: 2: Hoare triple {9835#true} assume true; {9835#true} is VALID [2022-04-27 15:03:08,342 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {9835#true} {9835#true} #780#return; {9835#true} is VALID [2022-04-27 15:03:08,342 INFO L272 TraceCheckUtils]: 4: Hoare triple {9835#true} call #t~ret83 := main(); {9835#true} is VALID [2022-04-27 15:03:08,342 INFO L290 TraceCheckUtils]: 5: Hoare triple {9835#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {9835#true} is VALID [2022-04-27 15:03:08,344 INFO L272 TraceCheckUtils]: 6: Hoare triple {9835#true} call _BLAST_init(); {9861#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:08,344 INFO L290 TraceCheckUtils]: 7: Hoare triple {9861#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9862#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-27 15:03:08,345 INFO L290 TraceCheckUtils]: 8: Hoare triple {9862#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {9862#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-27 15:03:08,345 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {9862#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {9835#true} #714#return; {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,346 INFO L290 TraceCheckUtils]: 10: Hoare triple {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,346 INFO L290 TraceCheckUtils]: 11: Hoare triple {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~irp_choice~0); {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,347 INFO L272 TraceCheckUtils]: 12: Hoare triple {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call stub_driver_init(); {9863#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:08,347 INFO L290 TraceCheckUtils]: 13: Hoare triple {9863#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9835#true} is VALID [2022-04-27 15:03:08,347 INFO L290 TraceCheckUtils]: 14: Hoare triple {9835#true} assume true; {9835#true} is VALID [2022-04-27 15:03:08,347 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {9835#true} {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #716#return; {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,348 INFO L290 TraceCheckUtils]: 16: Hoare triple {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,348 INFO L290 TraceCheckUtils]: 17: Hoare triple {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,349 INFO L290 TraceCheckUtils]: 18: Hoare triple {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,349 INFO L290 TraceCheckUtils]: 19: Hoare triple {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647;~tmp_ndt_4~0 := #t~nondet29;havoc #t~nondet29; {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,350 INFO L290 TraceCheckUtils]: 20: Hoare triple {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647;~tmp_ndt_5~0 := #t~nondet30;havoc #t~nondet30; {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,350 INFO L290 TraceCheckUtils]: 21: Hoare triple {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume 8 == ~tmp_ndt_5~0; {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,351 INFO L272 TraceCheckUtils]: 22: Hoare triple {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call #t~ret35 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {9864#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:08,351 INFO L290 TraceCheckUtils]: 23: Hoare triple {9864#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet70;havoc #t~nondet70;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet71;havoc #t~nondet71;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet72;havoc #t~nondet72;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp20~0 := #t~nondet73;havoc #t~nondet73;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp24~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp28~0 := #t~nondet75;havoc #t~nondet75;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp29~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp32~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp35~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp38~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet80 && #t~nondet80 <= 2147483647;~__cil_tmp41~0 := #t~nondet80;havoc #t~nondet80;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet81 && #t~nondet81 <= 2147483647;~__cil_tmp44~0 := #t~nondet81;havoc #t~nondet81;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {9835#true} is VALID [2022-04-27 15:03:08,351 INFO L290 TraceCheckUtils]: 24: Hoare triple {9835#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {9835#true} is VALID [2022-04-27 15:03:08,351 INFO L290 TraceCheckUtils]: 25: Hoare triple {9835#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {9835#true} is VALID [2022-04-27 15:03:08,351 INFO L290 TraceCheckUtils]: 26: Hoare triple {9835#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {9835#true} is VALID [2022-04-27 15:03:08,352 INFO L272 TraceCheckUtils]: 27: Hoare triple {9835#true} call IofCompleteRequest(~Irp, 0); {9870#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:08,352 INFO L290 TraceCheckUtils]: 28: Hoare triple {9870#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {9835#true} is VALID [2022-04-27 15:03:08,352 INFO L290 TraceCheckUtils]: 29: Hoare triple {9835#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {9871#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:08,353 INFO L290 TraceCheckUtils]: 30: Hoare triple {9871#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {9871#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:08,353 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {9871#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {9835#true} #740#return; {9869#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:08,354 INFO L290 TraceCheckUtils]: 32: Hoare triple {9869#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {9869#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:08,354 INFO L290 TraceCheckUtils]: 33: Hoare triple {9869#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {9869#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:08,355 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {9869#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {9843#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #726#return; {9859#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,356 INFO L290 TraceCheckUtils]: 35: Hoare triple {9859#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~status~1 := #t~ret35;havoc #t~ret35; {9859#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,356 INFO L290 TraceCheckUtils]: 36: Hoare triple {9859#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {9859#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,356 INFO L290 TraceCheckUtils]: 37: Hoare triple {9859#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {9859#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,357 INFO L290 TraceCheckUtils]: 38: Hoare triple {9859#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~UNLOADED~0; {9859#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,357 INFO L290 TraceCheckUtils]: 39: Hoare triple {9859#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -1 != ~status~1; {9859#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,358 INFO L290 TraceCheckUtils]: 40: Hoare triple {9859#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~SKIP2~0; {9859#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:08,358 INFO L290 TraceCheckUtils]: 41: Hoare triple {9859#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(~s~0 != ~IPC~0); {9836#false} is VALID [2022-04-27 15:03:08,358 INFO L290 TraceCheckUtils]: 42: Hoare triple {9836#false} assume 1 == ~pended~0; {9836#false} is VALID [2022-04-27 15:03:08,358 INFO L290 TraceCheckUtils]: 43: Hoare triple {9836#false} assume 259 != ~status~1; {9836#false} is VALID [2022-04-27 15:03:08,358 INFO L272 TraceCheckUtils]: 44: Hoare triple {9836#false} call errorFn(); {9836#false} is VALID [2022-04-27 15:03:08,358 INFO L290 TraceCheckUtils]: 45: Hoare triple {9836#false} assume !false; {9836#false} is VALID [2022-04-27 15:03:08,359 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:08,359 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:08,359 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2058494813] [2022-04-27 15:03:08,359 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2058494813] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:08,359 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:08,359 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-27 15:03:08,359 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1141274008] [2022-04-27 15:03:08,359 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:08,360 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-27 15:03:08,360 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:08,360 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:08,402 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:08,402 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-27 15:03:08,402 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:08,403 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-27 15:03:08,403 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:08,403 INFO L87 Difference]: Start difference. First operand 315 states and 418 transitions. Second operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:11,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:11,417 INFO L93 Difference]: Finished difference Result 327 states and 429 transitions. [2022-04-27 15:03:11,418 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-27 15:03:11,418 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-27 15:03:11,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:11,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:11,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 354 transitions. [2022-04-27 15:03:11,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:11,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 354 transitions. [2022-04-27 15:03:11,425 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 354 transitions. [2022-04-27 15:03:11,815 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 354 edges. 354 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:11,823 INFO L225 Difference]: With dead ends: 327 [2022-04-27 15:03:11,823 INFO L226 Difference]: Without dead ends: 322 [2022-04-27 15:03:11,824 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-27 15:03:11,824 INFO L413 NwaCegarLoop]: 253 mSDtfsCounter, 644 mSDsluCounter, 387 mSDsCounter, 0 mSdLazyCounter, 986 mSolverCounterSat, 107 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 646 SdHoareTripleChecker+Valid, 640 SdHoareTripleChecker+Invalid, 1093 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 107 IncrementalHoareTripleChecker+Valid, 986 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:11,825 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [646 Valid, 640 Invalid, 1093 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [107 Valid, 986 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-27 15:03:11,825 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 322 states. [2022-04-27 15:03:11,955 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 322 to 316. [2022-04-27 15:03:11,955 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:11,956 INFO L82 GeneralOperation]: Start isEquivalent. First operand 322 states. Second operand has 316 states, 257 states have (on average 1.3579766536964981) internal successors, (349), 256 states have internal predecessors, (349), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:11,957 INFO L74 IsIncluded]: Start isIncluded. First operand 322 states. Second operand has 316 states, 257 states have (on average 1.3579766536964981) internal successors, (349), 256 states have internal predecessors, (349), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:11,957 INFO L87 Difference]: Start difference. First operand 322 states. Second operand has 316 states, 257 states have (on average 1.3579766536964981) internal successors, (349), 256 states have internal predecessors, (349), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:11,967 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:11,967 INFO L93 Difference]: Finished difference Result 322 states and 424 transitions. [2022-04-27 15:03:11,967 INFO L276 IsEmpty]: Start isEmpty. Operand 322 states and 424 transitions. [2022-04-27 15:03:11,968 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:11,968 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:11,968 INFO L74 IsIncluded]: Start isIncluded. First operand has 316 states, 257 states have (on average 1.3579766536964981) internal successors, (349), 256 states have internal predecessors, (349), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 322 states. [2022-04-27 15:03:11,969 INFO L87 Difference]: Start difference. First operand has 316 states, 257 states have (on average 1.3579766536964981) internal successors, (349), 256 states have internal predecessors, (349), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 322 states. [2022-04-27 15:03:11,978 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:11,978 INFO L93 Difference]: Finished difference Result 322 states and 424 transitions. [2022-04-27 15:03:11,978 INFO L276 IsEmpty]: Start isEmpty. Operand 322 states and 424 transitions. [2022-04-27 15:03:11,979 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:11,979 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:11,979 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:11,979 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:11,980 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 316 states, 257 states have (on average 1.3579766536964981) internal successors, (349), 256 states have internal predecessors, (349), 29 states have call successors, (29), 21 states have call predecessors, (29), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:11,989 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 419 transitions. [2022-04-27 15:03:11,989 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 419 transitions. Word has length 46 [2022-04-27 15:03:11,989 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:11,989 INFO L495 AbstractCegarLoop]: Abstraction has 316 states and 419 transitions. [2022-04-27 15:03:11,989 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:11,990 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 419 transitions. [2022-04-27 15:03:11,991 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-04-27 15:03:11,991 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:11,991 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:11,992 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-04-27 15:03:11,992 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:11,992 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:11,992 INFO L85 PathProgramCache]: Analyzing trace with hash 359403676, now seen corresponding path program 1 times [2022-04-27 15:03:11,992 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:11,992 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1005099749] [2022-04-27 15:03:11,993 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:11,993 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:12,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:12,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:12,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:12,086 INFO L290 TraceCheckUtils]: 0: Hoare triple {11402#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {11378#true} is VALID [2022-04-27 15:03:12,086 INFO L290 TraceCheckUtils]: 1: Hoare triple {11378#true} assume true; {11378#true} is VALID [2022-04-27 15:03:12,087 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11378#true} {11378#true} #780#return; {11378#true} is VALID [2022-04-27 15:03:12,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:12,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:12,111 INFO L290 TraceCheckUtils]: 0: Hoare triple {11403#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11378#true} is VALID [2022-04-27 15:03:12,111 INFO L290 TraceCheckUtils]: 1: Hoare triple {11378#true} assume true; {11378#true} is VALID [2022-04-27 15:03:12,111 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11378#true} {11378#true} #714#return; {11378#true} is VALID [2022-04-27 15:03:12,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:12,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:12,126 INFO L290 TraceCheckUtils]: 0: Hoare triple {11404#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11378#true} is VALID [2022-04-27 15:03:12,126 INFO L290 TraceCheckUtils]: 1: Hoare triple {11378#true} assume true; {11378#true} is VALID [2022-04-27 15:03:12,126 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11378#true} {11378#true} #716#return; {11378#true} is VALID [2022-04-27 15:03:12,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-27 15:03:12,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:12,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-27 15:03:12,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:12,162 INFO L290 TraceCheckUtils]: 0: Hoare triple {11410#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {11378#true} is VALID [2022-04-27 15:03:12,162 INFO L290 TraceCheckUtils]: 1: Hoare triple {11378#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {11378#true} is VALID [2022-04-27 15:03:12,162 INFO L290 TraceCheckUtils]: 2: Hoare triple {11378#true} assume true; {11378#true} is VALID [2022-04-27 15:03:12,162 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {11378#true} {11378#true} #740#return; {11378#true} is VALID [2022-04-27 15:03:12,162 INFO L290 TraceCheckUtils]: 0: Hoare triple {11405#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet70;havoc #t~nondet70;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet71;havoc #t~nondet71;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet72;havoc #t~nondet72;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp20~0 := #t~nondet73;havoc #t~nondet73;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp24~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp28~0 := #t~nondet75;havoc #t~nondet75;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp29~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp32~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp35~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp38~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet80 && #t~nondet80 <= 2147483647;~__cil_tmp41~0 := #t~nondet80;havoc #t~nondet80;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet81 && #t~nondet81 <= 2147483647;~__cil_tmp44~0 := #t~nondet81;havoc #t~nondet81;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {11378#true} is VALID [2022-04-27 15:03:12,163 INFO L290 TraceCheckUtils]: 1: Hoare triple {11378#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {11378#true} is VALID [2022-04-27 15:03:12,163 INFO L290 TraceCheckUtils]: 2: Hoare triple {11378#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {11378#true} is VALID [2022-04-27 15:03:12,163 INFO L290 TraceCheckUtils]: 3: Hoare triple {11378#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {11378#true} is VALID [2022-04-27 15:03:12,163 INFO L272 TraceCheckUtils]: 4: Hoare triple {11378#true} call IofCompleteRequest(~Irp, 0); {11410#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:12,163 INFO L290 TraceCheckUtils]: 5: Hoare triple {11410#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {11378#true} is VALID [2022-04-27 15:03:12,164 INFO L290 TraceCheckUtils]: 6: Hoare triple {11378#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {11378#true} is VALID [2022-04-27 15:03:12,164 INFO L290 TraceCheckUtils]: 7: Hoare triple {11378#true} assume true; {11378#true} is VALID [2022-04-27 15:03:12,164 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {11378#true} {11378#true} #740#return; {11378#true} is VALID [2022-04-27 15:03:12,164 INFO L290 TraceCheckUtils]: 9: Hoare triple {11378#true} #res := ~status~3; {11378#true} is VALID [2022-04-27 15:03:12,164 INFO L290 TraceCheckUtils]: 10: Hoare triple {11378#true} assume true; {11378#true} is VALID [2022-04-27 15:03:12,166 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {11378#true} {11378#true} #726#return; {11378#true} is VALID [2022-04-27 15:03:12,168 INFO L272 TraceCheckUtils]: 0: Hoare triple {11378#true} call ULTIMATE.init(); {11402#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:12,169 INFO L290 TraceCheckUtils]: 1: Hoare triple {11402#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {11378#true} is VALID [2022-04-27 15:03:12,169 INFO L290 TraceCheckUtils]: 2: Hoare triple {11378#true} assume true; {11378#true} is VALID [2022-04-27 15:03:12,169 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {11378#true} {11378#true} #780#return; {11378#true} is VALID [2022-04-27 15:03:12,170 INFO L272 TraceCheckUtils]: 4: Hoare triple {11378#true} call #t~ret83 := main(); {11378#true} is VALID [2022-04-27 15:03:12,170 INFO L290 TraceCheckUtils]: 5: Hoare triple {11378#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {11378#true} is VALID [2022-04-27 15:03:12,171 INFO L272 TraceCheckUtils]: 6: Hoare triple {11378#true} call _BLAST_init(); {11403#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:12,171 INFO L290 TraceCheckUtils]: 7: Hoare triple {11403#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11378#true} is VALID [2022-04-27 15:03:12,171 INFO L290 TraceCheckUtils]: 8: Hoare triple {11378#true} assume true; {11378#true} is VALID [2022-04-27 15:03:12,171 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {11378#true} {11378#true} #714#return; {11378#true} is VALID [2022-04-27 15:03:12,171 INFO L290 TraceCheckUtils]: 10: Hoare triple {11378#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {11378#true} is VALID [2022-04-27 15:03:12,171 INFO L290 TraceCheckUtils]: 11: Hoare triple {11378#true} assume !(0 == ~irp_choice~0); {11378#true} is VALID [2022-04-27 15:03:12,173 INFO L272 TraceCheckUtils]: 12: Hoare triple {11378#true} call stub_driver_init(); {11404#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:12,173 INFO L290 TraceCheckUtils]: 13: Hoare triple {11404#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11378#true} is VALID [2022-04-27 15:03:12,173 INFO L290 TraceCheckUtils]: 14: Hoare triple {11378#true} assume true; {11378#true} is VALID [2022-04-27 15:03:12,173 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {11378#true} {11378#true} #716#return; {11378#true} is VALID [2022-04-27 15:03:12,173 INFO L290 TraceCheckUtils]: 16: Hoare triple {11378#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {11378#true} is VALID [2022-04-27 15:03:12,173 INFO L290 TraceCheckUtils]: 17: Hoare triple {11378#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {11378#true} is VALID [2022-04-27 15:03:12,173 INFO L290 TraceCheckUtils]: 18: Hoare triple {11378#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {11378#true} is VALID [2022-04-27 15:03:12,174 INFO L290 TraceCheckUtils]: 19: Hoare triple {11378#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647;~tmp_ndt_4~0 := #t~nondet29;havoc #t~nondet29; {11378#true} is VALID [2022-04-27 15:03:12,174 INFO L290 TraceCheckUtils]: 20: Hoare triple {11378#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647;~tmp_ndt_5~0 := #t~nondet30;havoc #t~nondet30; {11378#true} is VALID [2022-04-27 15:03:12,174 INFO L290 TraceCheckUtils]: 21: Hoare triple {11378#true} assume 8 == ~tmp_ndt_5~0; {11378#true} is VALID [2022-04-27 15:03:12,174 INFO L272 TraceCheckUtils]: 22: Hoare triple {11378#true} call #t~ret35 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {11405#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:12,175 INFO L290 TraceCheckUtils]: 23: Hoare triple {11405#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet70;havoc #t~nondet70;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet71;havoc #t~nondet71;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet72;havoc #t~nondet72;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp20~0 := #t~nondet73;havoc #t~nondet73;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp24~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp28~0 := #t~nondet75;havoc #t~nondet75;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp29~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp32~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp35~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp38~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet80 && #t~nondet80 <= 2147483647;~__cil_tmp41~0 := #t~nondet80;havoc #t~nondet80;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet81 && #t~nondet81 <= 2147483647;~__cil_tmp44~0 := #t~nondet81;havoc #t~nondet81;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {11378#true} is VALID [2022-04-27 15:03:12,175 INFO L290 TraceCheckUtils]: 24: Hoare triple {11378#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {11378#true} is VALID [2022-04-27 15:03:12,175 INFO L290 TraceCheckUtils]: 25: Hoare triple {11378#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {11378#true} is VALID [2022-04-27 15:03:12,175 INFO L290 TraceCheckUtils]: 26: Hoare triple {11378#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {11378#true} is VALID [2022-04-27 15:03:12,175 INFO L272 TraceCheckUtils]: 27: Hoare triple {11378#true} call IofCompleteRequest(~Irp, 0); {11410#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:12,175 INFO L290 TraceCheckUtils]: 28: Hoare triple {11410#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {11378#true} is VALID [2022-04-27 15:03:12,175 INFO L290 TraceCheckUtils]: 29: Hoare triple {11378#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {11378#true} is VALID [2022-04-27 15:03:12,176 INFO L290 TraceCheckUtils]: 30: Hoare triple {11378#true} assume true; {11378#true} is VALID [2022-04-27 15:03:12,176 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {11378#true} {11378#true} #740#return; {11378#true} is VALID [2022-04-27 15:03:12,176 INFO L290 TraceCheckUtils]: 32: Hoare triple {11378#true} #res := ~status~3; {11378#true} is VALID [2022-04-27 15:03:12,176 INFO L290 TraceCheckUtils]: 33: Hoare triple {11378#true} assume true; {11378#true} is VALID [2022-04-27 15:03:12,176 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {11378#true} {11378#true} #726#return; {11378#true} is VALID [2022-04-27 15:03:12,176 INFO L290 TraceCheckUtils]: 35: Hoare triple {11378#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~status~1 := #t~ret35;havoc #t~ret35; {11378#true} is VALID [2022-04-27 15:03:12,176 INFO L290 TraceCheckUtils]: 36: Hoare triple {11378#true} assume !(1 == ~pended~0); {11401#(not (= ~pended~0 1))} is VALID [2022-04-27 15:03:12,177 INFO L290 TraceCheckUtils]: 37: Hoare triple {11401#(not (= ~pended~0 1))} assume !(1 == ~pended~0); {11401#(not (= ~pended~0 1))} is VALID [2022-04-27 15:03:12,177 INFO L290 TraceCheckUtils]: 38: Hoare triple {11401#(not (= ~pended~0 1))} assume ~s~0 != ~UNLOADED~0; {11401#(not (= ~pended~0 1))} is VALID [2022-04-27 15:03:12,177 INFO L290 TraceCheckUtils]: 39: Hoare triple {11401#(not (= ~pended~0 1))} assume -1 != ~status~1; {11401#(not (= ~pended~0 1))} is VALID [2022-04-27 15:03:12,177 INFO L290 TraceCheckUtils]: 40: Hoare triple {11401#(not (= ~pended~0 1))} assume ~s~0 != ~SKIP2~0; {11401#(not (= ~pended~0 1))} is VALID [2022-04-27 15:03:12,178 INFO L290 TraceCheckUtils]: 41: Hoare triple {11401#(not (= ~pended~0 1))} assume ~s~0 != ~IPC~0; {11401#(not (= ~pended~0 1))} is VALID [2022-04-27 15:03:12,178 INFO L290 TraceCheckUtils]: 42: Hoare triple {11401#(not (= ~pended~0 1))} assume ~s~0 == ~DC~0; {11401#(not (= ~pended~0 1))} is VALID [2022-04-27 15:03:12,178 INFO L290 TraceCheckUtils]: 43: Hoare triple {11401#(not (= ~pended~0 1))} assume 1 == ~pended~0; {11379#false} is VALID [2022-04-27 15:03:12,178 INFO L290 TraceCheckUtils]: 44: Hoare triple {11379#false} assume 259 != ~status~1; {11379#false} is VALID [2022-04-27 15:03:12,179 INFO L272 TraceCheckUtils]: 45: Hoare triple {11379#false} call errorFn(); {11379#false} is VALID [2022-04-27 15:03:12,179 INFO L290 TraceCheckUtils]: 46: Hoare triple {11379#false} assume !false; {11379#false} is VALID [2022-04-27 15:03:12,179 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:12,179 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:12,179 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1005099749] [2022-04-27 15:03:12,179 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1005099749] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:12,180 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:12,180 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-27 15:03:12,180 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2009128930] [2022-04-27 15:03:12,180 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:12,181 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-27 15:03:12,181 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:12,181 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:12,213 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 47 edges. 47 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:12,214 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-27 15:03:12,214 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:12,215 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-27 15:03:12,215 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-04-27 15:03:12,215 INFO L87 Difference]: Start difference. First operand 316 states and 419 transitions. Second operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:13,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:13,496 INFO L93 Difference]: Finished difference Result 330 states and 436 transitions. [2022-04-27 15:03:13,496 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-27 15:03:13,496 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-27 15:03:13,497 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:13,497 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:13,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 338 transitions. [2022-04-27 15:03:13,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:13,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 338 transitions. [2022-04-27 15:03:13,503 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 338 transitions. [2022-04-27 15:03:13,879 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 338 edges. 338 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:13,881 INFO L225 Difference]: With dead ends: 330 [2022-04-27 15:03:13,882 INFO L226 Difference]: Without dead ends: 102 [2022-04-27 15:03:13,882 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=49, Invalid=83, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:13,883 INFO L413 NwaCegarLoop]: 247 mSDtfsCounter, 578 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 290 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 578 SdHoareTripleChecker+Valid, 403 SdHoareTripleChecker+Invalid, 382 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 290 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:13,883 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [578 Valid, 403 Invalid, 382 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 290 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-27 15:03:13,884 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102 states. [2022-04-27 15:03:13,937 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102 to 102. [2022-04-27 15:03:13,937 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:13,938 INFO L82 GeneralOperation]: Start isEquivalent. First operand 102 states. Second operand has 102 states, 77 states have (on average 1.2207792207792207) internal successors, (94), 79 states have internal predecessors, (94), 15 states have call successors, (15), 13 states have call predecessors, (15), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:13,938 INFO L74 IsIncluded]: Start isIncluded. First operand 102 states. Second operand has 102 states, 77 states have (on average 1.2207792207792207) internal successors, (94), 79 states have internal predecessors, (94), 15 states have call successors, (15), 13 states have call predecessors, (15), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:13,939 INFO L87 Difference]: Start difference. First operand 102 states. Second operand has 102 states, 77 states have (on average 1.2207792207792207) internal successors, (94), 79 states have internal predecessors, (94), 15 states have call successors, (15), 13 states have call predecessors, (15), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:13,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:13,941 INFO L93 Difference]: Finished difference Result 102 states and 118 transitions. [2022-04-27 15:03:13,941 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 118 transitions. [2022-04-27 15:03:13,941 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:13,941 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:13,942 INFO L74 IsIncluded]: Start isIncluded. First operand has 102 states, 77 states have (on average 1.2207792207792207) internal successors, (94), 79 states have internal predecessors, (94), 15 states have call successors, (15), 13 states have call predecessors, (15), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 102 states. [2022-04-27 15:03:13,942 INFO L87 Difference]: Start difference. First operand has 102 states, 77 states have (on average 1.2207792207792207) internal successors, (94), 79 states have internal predecessors, (94), 15 states have call successors, (15), 13 states have call predecessors, (15), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 102 states. [2022-04-27 15:03:13,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:13,944 INFO L93 Difference]: Finished difference Result 102 states and 118 transitions. [2022-04-27 15:03:13,944 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 118 transitions. [2022-04-27 15:03:13,944 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:13,944 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:13,944 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:13,944 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:13,944 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 102 states, 77 states have (on average 1.2207792207792207) internal successors, (94), 79 states have internal predecessors, (94), 15 states have call successors, (15), 13 states have call predecessors, (15), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:13,946 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102 states to 102 states and 118 transitions. [2022-04-27 15:03:13,946 INFO L78 Accepts]: Start accepts. Automaton has 102 states and 118 transitions. Word has length 47 [2022-04-27 15:03:13,946 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:13,946 INFO L495 AbstractCegarLoop]: Abstraction has 102 states and 118 transitions. [2022-04-27 15:03:13,946 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:13,947 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 118 transitions. [2022-04-27 15:03:13,947 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-27 15:03:13,947 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:13,947 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:13,947 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-04-27 15:03:13,947 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:13,948 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:13,948 INFO L85 PathProgramCache]: Analyzing trace with hash -803867800, now seen corresponding path program 1 times [2022-04-27 15:03:13,948 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:13,948 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1903131130] [2022-04-27 15:03:13,948 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:13,949 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:13,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:14,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,026 INFO L290 TraceCheckUtils]: 0: Hoare triple {12226#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12203#true} is VALID [2022-04-27 15:03:14,026 INFO L290 TraceCheckUtils]: 1: Hoare triple {12203#true} assume true; {12203#true} is VALID [2022-04-27 15:03:14,027 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12203#true} {12203#true} #780#return; {12203#true} is VALID [2022-04-27 15:03:14,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:14,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,055 INFO L290 TraceCheckUtils]: 0: Hoare triple {12227#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12203#true} is VALID [2022-04-27 15:03:14,055 INFO L290 TraceCheckUtils]: 1: Hoare triple {12203#true} assume true; {12203#true} is VALID [2022-04-27 15:03:14,055 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12203#true} {12203#true} #714#return; {12203#true} is VALID [2022-04-27 15:03:14,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:14,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,071 INFO L290 TraceCheckUtils]: 0: Hoare triple {12228#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12203#true} is VALID [2022-04-27 15:03:14,071 INFO L290 TraceCheckUtils]: 1: Hoare triple {12203#true} assume true; {12203#true} is VALID [2022-04-27 15:03:14,071 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12203#true} {12203#true} #716#return; {12203#true} is VALID [2022-04-27 15:03:14,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-04-27 15:03:14,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:14,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,084 INFO L290 TraceCheckUtils]: 0: Hoare triple {12229#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {12203#true} is VALID [2022-04-27 15:03:14,085 INFO L290 TraceCheckUtils]: 1: Hoare triple {12203#true} assume true; {12203#true} is VALID [2022-04-27 15:03:14,085 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12203#true} {12203#true} #712#return; {12203#true} is VALID [2022-04-27 15:03:14,085 INFO L290 TraceCheckUtils]: 0: Hoare triple {12229#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {12203#true} is VALID [2022-04-27 15:03:14,086 INFO L272 TraceCheckUtils]: 1: Hoare triple {12203#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {12229#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:14,086 INFO L290 TraceCheckUtils]: 2: Hoare triple {12229#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {12203#true} is VALID [2022-04-27 15:03:14,086 INFO L290 TraceCheckUtils]: 3: Hoare triple {12203#true} assume true; {12203#true} is VALID [2022-04-27 15:03:14,086 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {12203#true} {12203#true} #712#return; {12203#true} is VALID [2022-04-27 15:03:14,086 INFO L290 TraceCheckUtils]: 5: Hoare triple {12203#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {12203#true} is VALID [2022-04-27 15:03:14,086 INFO L290 TraceCheckUtils]: 6: Hoare triple {12203#true} assume true; {12203#true} is VALID [2022-04-27 15:03:14,086 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {12203#true} {12203#true} #774#return; {12203#true} is VALID [2022-04-27 15:03:14,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-04-27 15:03:14,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,096 INFO L290 TraceCheckUtils]: 0: Hoare triple {12233#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:14,096 INFO L290 TraceCheckUtils]: 1: Hoare triple {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:14,096 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {12203#true} #776#return; {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:14,098 INFO L272 TraceCheckUtils]: 0: Hoare triple {12203#true} call ULTIMATE.init(); {12226#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:14,098 INFO L290 TraceCheckUtils]: 1: Hoare triple {12226#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12203#true} is VALID [2022-04-27 15:03:14,098 INFO L290 TraceCheckUtils]: 2: Hoare triple {12203#true} assume true; {12203#true} is VALID [2022-04-27 15:03:14,098 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12203#true} {12203#true} #780#return; {12203#true} is VALID [2022-04-27 15:03:14,099 INFO L272 TraceCheckUtils]: 4: Hoare triple {12203#true} call #t~ret83 := main(); {12203#true} is VALID [2022-04-27 15:03:14,099 INFO L290 TraceCheckUtils]: 5: Hoare triple {12203#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {12203#true} is VALID [2022-04-27 15:03:14,100 INFO L272 TraceCheckUtils]: 6: Hoare triple {12203#true} call _BLAST_init(); {12227#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:14,100 INFO L290 TraceCheckUtils]: 7: Hoare triple {12227#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12203#true} is VALID [2022-04-27 15:03:14,100 INFO L290 TraceCheckUtils]: 8: Hoare triple {12203#true} assume true; {12203#true} is VALID [2022-04-27 15:03:14,100 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {12203#true} {12203#true} #714#return; {12203#true} is VALID [2022-04-27 15:03:14,100 INFO L290 TraceCheckUtils]: 10: Hoare triple {12203#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {12203#true} is VALID [2022-04-27 15:03:14,100 INFO L290 TraceCheckUtils]: 11: Hoare triple {12203#true} assume !(0 == ~irp_choice~0); {12203#true} is VALID [2022-04-27 15:03:14,101 INFO L272 TraceCheckUtils]: 12: Hoare triple {12203#true} call stub_driver_init(); {12228#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:14,101 INFO L290 TraceCheckUtils]: 13: Hoare triple {12228#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12203#true} is VALID [2022-04-27 15:03:14,101 INFO L290 TraceCheckUtils]: 14: Hoare triple {12203#true} assume true; {12203#true} is VALID [2022-04-27 15:03:14,101 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {12203#true} {12203#true} #716#return; {12203#true} is VALID [2022-04-27 15:03:14,101 INFO L290 TraceCheckUtils]: 16: Hoare triple {12203#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {12203#true} is VALID [2022-04-27 15:03:14,101 INFO L290 TraceCheckUtils]: 17: Hoare triple {12203#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {12203#true} is VALID [2022-04-27 15:03:14,101 INFO L290 TraceCheckUtils]: 18: Hoare triple {12203#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {12203#true} is VALID [2022-04-27 15:03:14,102 INFO L290 TraceCheckUtils]: 19: Hoare triple {12203#true} assume 3 == ~tmp_ndt_3~0; {12203#true} is VALID [2022-04-27 15:03:14,102 INFO L272 TraceCheckUtils]: 20: Hoare triple {12203#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {12203#true} is VALID [2022-04-27 15:03:14,102 INFO L290 TraceCheckUtils]: 21: Hoare triple {12203#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {12203#true} is VALID [2022-04-27 15:03:14,102 INFO L290 TraceCheckUtils]: 22: Hoare triple {12203#true} assume 0 == ~irpStack__MinorFunction~0; {12203#true} is VALID [2022-04-27 15:03:14,102 INFO L290 TraceCheckUtils]: 23: Hoare triple {12203#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {12203#true} is VALID [2022-04-27 15:03:14,102 INFO L290 TraceCheckUtils]: 24: Hoare triple {12203#true} assume !(~s~0 != ~NP~0); {12203#true} is VALID [2022-04-27 15:03:14,102 INFO L290 TraceCheckUtils]: 25: Hoare triple {12203#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {12203#true} is VALID [2022-04-27 15:03:14,102 INFO L290 TraceCheckUtils]: 26: Hoare triple {12203#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {12203#true} is VALID [2022-04-27 15:03:14,102 INFO L272 TraceCheckUtils]: 27: Hoare triple {12203#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {12203#true} is VALID [2022-04-27 15:03:14,102 INFO L290 TraceCheckUtils]: 28: Hoare triple {12203#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {12203#true} is VALID [2022-04-27 15:03:14,102 INFO L290 TraceCheckUtils]: 29: Hoare triple {12203#true} assume 0 != ~compRegistered~0; {12203#true} is VALID [2022-04-27 15:03:14,103 INFO L272 TraceCheckUtils]: 30: Hoare triple {12203#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {12229#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:14,103 INFO L290 TraceCheckUtils]: 31: Hoare triple {12229#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {12203#true} is VALID [2022-04-27 15:03:14,104 INFO L272 TraceCheckUtils]: 32: Hoare triple {12203#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {12229#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:14,104 INFO L290 TraceCheckUtils]: 33: Hoare triple {12229#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {12203#true} is VALID [2022-04-27 15:03:14,104 INFO L290 TraceCheckUtils]: 34: Hoare triple {12203#true} assume true; {12203#true} is VALID [2022-04-27 15:03:14,104 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {12203#true} {12203#true} #712#return; {12203#true} is VALID [2022-04-27 15:03:14,104 INFO L290 TraceCheckUtils]: 36: Hoare triple {12203#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {12203#true} is VALID [2022-04-27 15:03:14,104 INFO L290 TraceCheckUtils]: 37: Hoare triple {12203#true} assume true; {12203#true} is VALID [2022-04-27 15:03:14,104 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {12203#true} {12203#true} #774#return; {12203#true} is VALID [2022-04-27 15:03:14,105 INFO L290 TraceCheckUtils]: 39: Hoare triple {12203#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {12203#true} is VALID [2022-04-27 15:03:14,105 INFO L290 TraceCheckUtils]: 40: Hoare triple {12203#true} assume -1073741802 == ~__cil_tmp7~0; {12203#true} is VALID [2022-04-27 15:03:14,105 INFO L272 TraceCheckUtils]: 41: Hoare triple {12203#true} call stubMoreProcessingRequired(); {12233#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:14,105 INFO L290 TraceCheckUtils]: 42: Hoare triple {12233#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:14,106 INFO L290 TraceCheckUtils]: 43: Hoare triple {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:14,106 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {12203#true} #776#return; {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:14,107 INFO L290 TraceCheckUtils]: 45: Hoare triple {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:14,107 INFO L290 TraceCheckUtils]: 46: Hoare triple {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume 0 == ~tmp_ndt_6~0; {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:14,107 INFO L290 TraceCheckUtils]: 47: Hoare triple {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} ~returnVal2~0 := 0; {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:14,108 INFO L290 TraceCheckUtils]: 48: Hoare triple {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~NP~0); {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:14,108 INFO L290 TraceCheckUtils]: 49: Hoare triple {12225#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~MPR1~0); {12204#false} is VALID [2022-04-27 15:03:14,108 INFO L290 TraceCheckUtils]: 50: Hoare triple {12204#false} assume !(~s~0 == ~SKIP1~0); {12204#false} is VALID [2022-04-27 15:03:14,108 INFO L272 TraceCheckUtils]: 51: Hoare triple {12204#false} call errorFn(); {12204#false} is VALID [2022-04-27 15:03:14,108 INFO L290 TraceCheckUtils]: 52: Hoare triple {12204#false} assume !false; {12204#false} is VALID [2022-04-27 15:03:14,109 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:14,109 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:14,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1903131130] [2022-04-27 15:03:14,109 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1903131130] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:14,109 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:14,109 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-27 15:03:14,109 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1408057532] [2022-04-27 15:03:14,109 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:14,111 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-27 15:03:14,111 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:14,111 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:14,146 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:14,146 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-27 15:03:14,146 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:14,146 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-27 15:03:14,147 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-04-27 15:03:14,147 INFO L87 Difference]: Start difference. First operand 102 states and 118 transitions. Second operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:14,637 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:14,637 INFO L93 Difference]: Finished difference Result 130 states and 151 transitions. [2022-04-27 15:03:14,637 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-27 15:03:14,637 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-27 15:03:14,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:14,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:14,639 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 139 transitions. [2022-04-27 15:03:14,639 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:14,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 139 transitions. [2022-04-27 15:03:14,640 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 139 transitions. [2022-04-27 15:03:14,754 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 139 edges. 139 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:14,755 INFO L225 Difference]: With dead ends: 130 [2022-04-27 15:03:14,755 INFO L226 Difference]: Without dead ends: 100 [2022-04-27 15:03:14,756 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=67, Unknown=0, NotChecked=0, Total=110 [2022-04-27 15:03:14,756 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 97 mSDsluCounter, 113 mSDsCounter, 0 mSdLazyCounter, 103 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 97 SdHoareTripleChecker+Valid, 197 SdHoareTripleChecker+Invalid, 147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 103 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:14,756 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [97 Valid, 197 Invalid, 147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 103 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-04-27 15:03:14,757 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2022-04-27 15:03:14,811 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 100. [2022-04-27 15:03:14,812 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:14,813 INFO L82 GeneralOperation]: Start isEquivalent. First operand 100 states. Second operand has 100 states, 76 states have (on average 1.1973684210526316) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:14,813 INFO L74 IsIncluded]: Start isIncluded. First operand 100 states. Second operand has 100 states, 76 states have (on average 1.1973684210526316) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:14,813 INFO L87 Difference]: Start difference. First operand 100 states. Second operand has 100 states, 76 states have (on average 1.1973684210526316) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:14,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:14,815 INFO L93 Difference]: Finished difference Result 100 states and 114 transitions. [2022-04-27 15:03:14,815 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 114 transitions. [2022-04-27 15:03:14,815 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:14,815 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:14,815 INFO L74 IsIncluded]: Start isIncluded. First operand has 100 states, 76 states have (on average 1.1973684210526316) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 100 states. [2022-04-27 15:03:14,816 INFO L87 Difference]: Start difference. First operand has 100 states, 76 states have (on average 1.1973684210526316) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 100 states. [2022-04-27 15:03:14,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:14,817 INFO L93 Difference]: Finished difference Result 100 states and 114 transitions. [2022-04-27 15:03:14,817 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 114 transitions. [2022-04-27 15:03:14,817 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:14,818 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:14,818 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:14,818 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:14,818 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 76 states have (on average 1.1973684210526316) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:14,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 114 transitions. [2022-04-27 15:03:14,820 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 114 transitions. Word has length 53 [2022-04-27 15:03:14,820 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:14,820 INFO L495 AbstractCegarLoop]: Abstraction has 100 states and 114 transitions. [2022-04-27 15:03:14,820 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:14,820 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 114 transitions. [2022-04-27 15:03:14,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-27 15:03:14,821 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:14,821 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:14,821 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-04-27 15:03:14,821 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:14,821 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:14,821 INFO L85 PathProgramCache]: Analyzing trace with hash -1055877385, now seen corresponding path program 1 times [2022-04-27 15:03:14,821 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:14,822 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1591638721] [2022-04-27 15:03:14,822 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:14,822 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:14,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:14,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,916 INFO L290 TraceCheckUtils]: 0: Hoare triple {12797#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12764#true} is VALID [2022-04-27 15:03:14,916 INFO L290 TraceCheckUtils]: 1: Hoare triple {12764#true} assume true; {12764#true} is VALID [2022-04-27 15:03:14,916 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12764#true} {12764#true} #780#return; {12764#true} is VALID [2022-04-27 15:03:14,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:14,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,943 INFO L290 TraceCheckUtils]: 0: Hoare triple {12798#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12764#true} is VALID [2022-04-27 15:03:14,943 INFO L290 TraceCheckUtils]: 1: Hoare triple {12764#true} assume true; {12764#true} is VALID [2022-04-27 15:03:14,943 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12764#true} {12764#true} #714#return; {12764#true} is VALID [2022-04-27 15:03:14,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:14,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,961 INFO L290 TraceCheckUtils]: 0: Hoare triple {12799#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12764#true} is VALID [2022-04-27 15:03:14,961 INFO L290 TraceCheckUtils]: 1: Hoare triple {12764#true} assume true; {12764#true} is VALID [2022-04-27 15:03:14,961 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12764#true} {12764#true} #716#return; {12764#true} is VALID [2022-04-27 15:03:14,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:14,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:15,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-27 15:03:15,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:15,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:15,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:15,048 INFO L290 TraceCheckUtils]: 0: Hoare triple {12811#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {12764#true} is VALID [2022-04-27 15:03:15,048 INFO L290 TraceCheckUtils]: 1: Hoare triple {12764#true} assume true; {12764#true} is VALID [2022-04-27 15:03:15,048 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12764#true} {12764#true} #712#return; {12764#true} is VALID [2022-04-27 15:03:15,048 INFO L290 TraceCheckUtils]: 0: Hoare triple {12811#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {12764#true} is VALID [2022-04-27 15:03:15,049 INFO L272 TraceCheckUtils]: 1: Hoare triple {12764#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {12811#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:15,049 INFO L290 TraceCheckUtils]: 2: Hoare triple {12811#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {12764#true} is VALID [2022-04-27 15:03:15,049 INFO L290 TraceCheckUtils]: 3: Hoare triple {12764#true} assume true; {12764#true} is VALID [2022-04-27 15:03:15,049 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {12764#true} {12764#true} #712#return; {12764#true} is VALID [2022-04-27 15:03:15,049 INFO L290 TraceCheckUtils]: 5: Hoare triple {12764#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {12764#true} is VALID [2022-04-27 15:03:15,049 INFO L290 TraceCheckUtils]: 6: Hoare triple {12764#true} assume true; {12764#true} is VALID [2022-04-27 15:03:15,049 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {12764#true} {12764#true} #774#return; {12764#true} is VALID [2022-04-27 15:03:15,049 INFO L290 TraceCheckUtils]: 0: Hoare triple {12800#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {12764#true} is VALID [2022-04-27 15:03:15,049 INFO L290 TraceCheckUtils]: 1: Hoare triple {12764#true} assume 0 != ~compRegistered~0; {12764#true} is VALID [2022-04-27 15:03:15,050 INFO L272 TraceCheckUtils]: 2: Hoare triple {12764#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {12811#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:15,050 INFO L290 TraceCheckUtils]: 3: Hoare triple {12811#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {12764#true} is VALID [2022-04-27 15:03:15,051 INFO L272 TraceCheckUtils]: 4: Hoare triple {12764#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {12811#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:15,051 INFO L290 TraceCheckUtils]: 5: Hoare triple {12811#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {12764#true} is VALID [2022-04-27 15:03:15,051 INFO L290 TraceCheckUtils]: 6: Hoare triple {12764#true} assume true; {12764#true} is VALID [2022-04-27 15:03:15,051 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {12764#true} {12764#true} #712#return; {12764#true} is VALID [2022-04-27 15:03:15,051 INFO L290 TraceCheckUtils]: 8: Hoare triple {12764#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {12764#true} is VALID [2022-04-27 15:03:15,051 INFO L290 TraceCheckUtils]: 9: Hoare triple {12764#true} assume true; {12764#true} is VALID [2022-04-27 15:03:15,051 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {12764#true} {12764#true} #774#return; {12764#true} is VALID [2022-04-27 15:03:15,051 INFO L290 TraceCheckUtils]: 11: Hoare triple {12764#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {12764#true} is VALID [2022-04-27 15:03:15,051 INFO L290 TraceCheckUtils]: 12: Hoare triple {12764#true} assume !(-1073741802 == ~__cil_tmp7~0); {12764#true} is VALID [2022-04-27 15:03:15,051 INFO L290 TraceCheckUtils]: 13: Hoare triple {12764#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {12764#true} is VALID [2022-04-27 15:03:15,052 INFO L290 TraceCheckUtils]: 14: Hoare triple {12764#true} assume 0 == ~tmp_ndt_6~0; {12764#true} is VALID [2022-04-27 15:03:15,052 INFO L290 TraceCheckUtils]: 15: Hoare triple {12764#true} ~returnVal2~0 := 0; {12809#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:15,053 INFO L290 TraceCheckUtils]: 16: Hoare triple {12809#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {12809#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:15,054 INFO L290 TraceCheckUtils]: 17: Hoare triple {12809#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {12810#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:15,054 INFO L290 TraceCheckUtils]: 18: Hoare triple {12810#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {12810#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:15,055 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {12810#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {12764#true} #752#return; {12795#(= |KbFilter_PnP_#t~ret12| 0)} is VALID [2022-04-27 15:03:15,056 INFO L272 TraceCheckUtils]: 0: Hoare triple {12764#true} call ULTIMATE.init(); {12797#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:15,057 INFO L290 TraceCheckUtils]: 1: Hoare triple {12797#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12764#true} is VALID [2022-04-27 15:03:15,057 INFO L290 TraceCheckUtils]: 2: Hoare triple {12764#true} assume true; {12764#true} is VALID [2022-04-27 15:03:15,057 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12764#true} {12764#true} #780#return; {12764#true} is VALID [2022-04-27 15:03:15,057 INFO L272 TraceCheckUtils]: 4: Hoare triple {12764#true} call #t~ret83 := main(); {12764#true} is VALID [2022-04-27 15:03:15,057 INFO L290 TraceCheckUtils]: 5: Hoare triple {12764#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {12764#true} is VALID [2022-04-27 15:03:15,058 INFO L272 TraceCheckUtils]: 6: Hoare triple {12764#true} call _BLAST_init(); {12798#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:15,058 INFO L290 TraceCheckUtils]: 7: Hoare triple {12798#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12764#true} is VALID [2022-04-27 15:03:15,058 INFO L290 TraceCheckUtils]: 8: Hoare triple {12764#true} assume true; {12764#true} is VALID [2022-04-27 15:03:15,058 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {12764#true} {12764#true} #714#return; {12764#true} is VALID [2022-04-27 15:03:15,058 INFO L290 TraceCheckUtils]: 10: Hoare triple {12764#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {12764#true} is VALID [2022-04-27 15:03:15,058 INFO L290 TraceCheckUtils]: 11: Hoare triple {12764#true} assume !(0 == ~irp_choice~0); {12764#true} is VALID [2022-04-27 15:03:15,059 INFO L272 TraceCheckUtils]: 12: Hoare triple {12764#true} call stub_driver_init(); {12799#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:15,059 INFO L290 TraceCheckUtils]: 13: Hoare triple {12799#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12764#true} is VALID [2022-04-27 15:03:15,059 INFO L290 TraceCheckUtils]: 14: Hoare triple {12764#true} assume true; {12764#true} is VALID [2022-04-27 15:03:15,059 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {12764#true} {12764#true} #716#return; {12764#true} is VALID [2022-04-27 15:03:15,059 INFO L290 TraceCheckUtils]: 16: Hoare triple {12764#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {12764#true} is VALID [2022-04-27 15:03:15,060 INFO L290 TraceCheckUtils]: 17: Hoare triple {12764#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {12764#true} is VALID [2022-04-27 15:03:15,060 INFO L290 TraceCheckUtils]: 18: Hoare triple {12764#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {12764#true} is VALID [2022-04-27 15:03:15,060 INFO L290 TraceCheckUtils]: 19: Hoare triple {12764#true} assume 3 == ~tmp_ndt_3~0; {12764#true} is VALID [2022-04-27 15:03:15,060 INFO L272 TraceCheckUtils]: 20: Hoare triple {12764#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {12764#true} is VALID [2022-04-27 15:03:15,060 INFO L290 TraceCheckUtils]: 21: Hoare triple {12764#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {12764#true} is VALID [2022-04-27 15:03:15,060 INFO L290 TraceCheckUtils]: 22: Hoare triple {12764#true} assume 0 == ~irpStack__MinorFunction~0; {12764#true} is VALID [2022-04-27 15:03:15,060 INFO L290 TraceCheckUtils]: 23: Hoare triple {12764#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {12764#true} is VALID [2022-04-27 15:03:15,060 INFO L290 TraceCheckUtils]: 24: Hoare triple {12764#true} assume !(~s~0 != ~NP~0); {12764#true} is VALID [2022-04-27 15:03:15,060 INFO L290 TraceCheckUtils]: 25: Hoare triple {12764#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {12764#true} is VALID [2022-04-27 15:03:15,060 INFO L290 TraceCheckUtils]: 26: Hoare triple {12764#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {12764#true} is VALID [2022-04-27 15:03:15,061 INFO L272 TraceCheckUtils]: 27: Hoare triple {12764#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {12800#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:15,061 INFO L290 TraceCheckUtils]: 28: Hoare triple {12800#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {12764#true} is VALID [2022-04-27 15:03:15,061 INFO L290 TraceCheckUtils]: 29: Hoare triple {12764#true} assume 0 != ~compRegistered~0; {12764#true} is VALID [2022-04-27 15:03:15,062 INFO L272 TraceCheckUtils]: 30: Hoare triple {12764#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {12811#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:15,062 INFO L290 TraceCheckUtils]: 31: Hoare triple {12811#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {12764#true} is VALID [2022-04-27 15:03:15,062 INFO L272 TraceCheckUtils]: 32: Hoare triple {12764#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {12811#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:15,062 INFO L290 TraceCheckUtils]: 33: Hoare triple {12811#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {12764#true} is VALID [2022-04-27 15:03:15,062 INFO L290 TraceCheckUtils]: 34: Hoare triple {12764#true} assume true; {12764#true} is VALID [2022-04-27 15:03:15,063 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {12764#true} {12764#true} #712#return; {12764#true} is VALID [2022-04-27 15:03:15,063 INFO L290 TraceCheckUtils]: 36: Hoare triple {12764#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {12764#true} is VALID [2022-04-27 15:03:15,063 INFO L290 TraceCheckUtils]: 37: Hoare triple {12764#true} assume true; {12764#true} is VALID [2022-04-27 15:03:15,063 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {12764#true} {12764#true} #774#return; {12764#true} is VALID [2022-04-27 15:03:15,063 INFO L290 TraceCheckUtils]: 39: Hoare triple {12764#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {12764#true} is VALID [2022-04-27 15:03:15,063 INFO L290 TraceCheckUtils]: 40: Hoare triple {12764#true} assume !(-1073741802 == ~__cil_tmp7~0); {12764#true} is VALID [2022-04-27 15:03:15,063 INFO L290 TraceCheckUtils]: 41: Hoare triple {12764#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {12764#true} is VALID [2022-04-27 15:03:15,063 INFO L290 TraceCheckUtils]: 42: Hoare triple {12764#true} assume 0 == ~tmp_ndt_6~0; {12764#true} is VALID [2022-04-27 15:03:15,064 INFO L290 TraceCheckUtils]: 43: Hoare triple {12764#true} ~returnVal2~0 := 0; {12809#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:15,064 INFO L290 TraceCheckUtils]: 44: Hoare triple {12809#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {12809#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:15,064 INFO L290 TraceCheckUtils]: 45: Hoare triple {12809#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {12810#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:15,065 INFO L290 TraceCheckUtils]: 46: Hoare triple {12810#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {12810#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:15,065 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {12810#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {12764#true} #752#return; {12795#(= |KbFilter_PnP_#t~ret12| 0)} is VALID [2022-04-27 15:03:15,066 INFO L290 TraceCheckUtils]: 48: Hoare triple {12795#(= |KbFilter_PnP_#t~ret12| 0)} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {12796#(= KbFilter_PnP_~__cil_tmp23~0 0)} is VALID [2022-04-27 15:03:15,066 INFO L290 TraceCheckUtils]: 49: Hoare triple {12796#(= KbFilter_PnP_~__cil_tmp23~0 0)} assume 259 == ~__cil_tmp23~0; {12765#false} is VALID [2022-04-27 15:03:15,066 INFO L272 TraceCheckUtils]: 50: Hoare triple {12765#false} call #t~ret13 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {12765#false} is VALID [2022-04-27 15:03:15,066 INFO L290 TraceCheckUtils]: 51: Hoare triple {12765#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {12765#false} is VALID [2022-04-27 15:03:15,066 INFO L290 TraceCheckUtils]: 52: Hoare triple {12765#false} assume !(~s~0 == ~MPR3~0); {12765#false} is VALID [2022-04-27 15:03:15,066 INFO L290 TraceCheckUtils]: 53: Hoare triple {12765#false} assume !(1 == ~customIrp~0); {12765#false} is VALID [2022-04-27 15:03:15,066 INFO L290 TraceCheckUtils]: 54: Hoare triple {12765#false} assume ~s~0 == ~MPR3~0; {12765#false} is VALID [2022-04-27 15:03:15,067 INFO L272 TraceCheckUtils]: 55: Hoare triple {12765#false} call errorFn(); {12765#false} is VALID [2022-04-27 15:03:15,067 INFO L290 TraceCheckUtils]: 56: Hoare triple {12765#false} assume !false; {12765#false} is VALID [2022-04-27 15:03:15,067 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:15,067 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:15,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1591638721] [2022-04-27 15:03:15,067 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1591638721] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:15,067 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:15,067 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-27 15:03:15,068 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [696005150] [2022-04-27 15:03:15,068 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:15,068 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-27 15:03:15,068 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:15,068 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:15,107 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:15,107 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-27 15:03:15,107 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:15,108 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-27 15:03:15,108 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-27 15:03:15,108 INFO L87 Difference]: Start difference. First operand 100 states and 114 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:15,973 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:15,974 INFO L93 Difference]: Finished difference Result 152 states and 177 transitions. [2022-04-27 15:03:15,974 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-27 15:03:15,974 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-27 15:03:15,974 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:15,974 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:15,976 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 143 transitions. [2022-04-27 15:03:15,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:15,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 143 transitions. [2022-04-27 15:03:15,977 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 143 transitions. [2022-04-27 15:03:16,113 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 143 edges. 143 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:16,114 INFO L225 Difference]: With dead ends: 152 [2022-04-27 15:03:16,114 INFO L226 Difference]: Without dead ends: 111 [2022-04-27 15:03:16,115 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=99, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:16,116 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 59 mSDsluCounter, 274 mSDsCounter, 0 mSdLazyCounter, 279 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 350 SdHoareTripleChecker+Invalid, 310 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 279 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:16,116 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 350 Invalid, 310 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 279 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-27 15:03:16,116 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 111 states. [2022-04-27 15:03:16,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 111 to 105. [2022-04-27 15:03:16,175 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:16,175 INFO L82 GeneralOperation]: Start isEquivalent. First operand 111 states. Second operand has 105 states, 80 states have (on average 1.1875) internal successors, (95), 81 states have internal predecessors, (95), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-27 15:03:16,175 INFO L74 IsIncluded]: Start isIncluded. First operand 111 states. Second operand has 105 states, 80 states have (on average 1.1875) internal successors, (95), 81 states have internal predecessors, (95), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-27 15:03:16,176 INFO L87 Difference]: Start difference. First operand 111 states. Second operand has 105 states, 80 states have (on average 1.1875) internal successors, (95), 81 states have internal predecessors, (95), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-27 15:03:16,177 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:16,177 INFO L93 Difference]: Finished difference Result 111 states and 127 transitions. [2022-04-27 15:03:16,177 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 127 transitions. [2022-04-27 15:03:16,178 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:16,178 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:16,178 INFO L74 IsIncluded]: Start isIncluded. First operand has 105 states, 80 states have (on average 1.1875) internal successors, (95), 81 states have internal predecessors, (95), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) Second operand 111 states. [2022-04-27 15:03:16,179 INFO L87 Difference]: Start difference. First operand has 105 states, 80 states have (on average 1.1875) internal successors, (95), 81 states have internal predecessors, (95), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) Second operand 111 states. [2022-04-27 15:03:16,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:16,180 INFO L93 Difference]: Finished difference Result 111 states and 127 transitions. [2022-04-27 15:03:16,180 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 127 transitions. [2022-04-27 15:03:16,181 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:16,181 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:16,181 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:16,181 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:16,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 80 states have (on average 1.1875) internal successors, (95), 81 states have internal predecessors, (95), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-27 15:03:16,183 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 119 transitions. [2022-04-27 15:03:16,183 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 119 transitions. Word has length 57 [2022-04-27 15:03:16,183 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:16,183 INFO L495 AbstractCegarLoop]: Abstraction has 105 states and 119 transitions. [2022-04-27 15:03:16,183 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:16,183 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 119 transitions. [2022-04-27 15:03:16,184 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-27 15:03:16,184 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:16,184 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:16,184 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-04-27 15:03:16,184 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:16,185 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:16,185 INFO L85 PathProgramCache]: Analyzing trace with hash 1324274632, now seen corresponding path program 1 times [2022-04-27 15:03:16,185 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:16,185 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [943167133] [2022-04-27 15:03:16,185 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:16,185 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:16,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:16,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:16,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:16,265 INFO L290 TraceCheckUtils]: 0: Hoare triple {13427#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {13394#true} is VALID [2022-04-27 15:03:16,265 INFO L290 TraceCheckUtils]: 1: Hoare triple {13394#true} assume true; {13394#true} is VALID [2022-04-27 15:03:16,265 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13394#true} {13394#true} #780#return; {13394#true} is VALID [2022-04-27 15:03:16,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:16,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:16,290 INFO L290 TraceCheckUtils]: 0: Hoare triple {13428#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13394#true} is VALID [2022-04-27 15:03:16,290 INFO L290 TraceCheckUtils]: 1: Hoare triple {13394#true} assume true; {13394#true} is VALID [2022-04-27 15:03:16,290 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13394#true} {13394#true} #714#return; {13394#true} is VALID [2022-04-27 15:03:16,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:16,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:16,304 INFO L290 TraceCheckUtils]: 0: Hoare triple {13429#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13394#true} is VALID [2022-04-27 15:03:16,304 INFO L290 TraceCheckUtils]: 1: Hoare triple {13394#true} assume true; {13394#true} is VALID [2022-04-27 15:03:16,305 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13394#true} {13394#true} #716#return; {13394#true} is VALID [2022-04-27 15:03:16,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:16,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:16,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-27 15:03:16,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:16,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:16,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:16,370 INFO L290 TraceCheckUtils]: 0: Hoare triple {13441#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {13394#true} is VALID [2022-04-27 15:03:16,370 INFO L290 TraceCheckUtils]: 1: Hoare triple {13394#true} assume true; {13394#true} is VALID [2022-04-27 15:03:16,370 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13394#true} {13394#true} #712#return; {13394#true} is VALID [2022-04-27 15:03:16,371 INFO L290 TraceCheckUtils]: 0: Hoare triple {13441#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {13394#true} is VALID [2022-04-27 15:03:16,371 INFO L272 TraceCheckUtils]: 1: Hoare triple {13394#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {13441#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:16,371 INFO L290 TraceCheckUtils]: 2: Hoare triple {13441#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {13394#true} is VALID [2022-04-27 15:03:16,372 INFO L290 TraceCheckUtils]: 3: Hoare triple {13394#true} assume true; {13394#true} is VALID [2022-04-27 15:03:16,372 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {13394#true} {13394#true} #712#return; {13394#true} is VALID [2022-04-27 15:03:16,372 INFO L290 TraceCheckUtils]: 5: Hoare triple {13394#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {13394#true} is VALID [2022-04-27 15:03:16,372 INFO L290 TraceCheckUtils]: 6: Hoare triple {13394#true} assume true; {13394#true} is VALID [2022-04-27 15:03:16,372 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {13394#true} {13394#true} #774#return; {13394#true} is VALID [2022-04-27 15:03:16,372 INFO L290 TraceCheckUtils]: 0: Hoare triple {13430#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {13394#true} is VALID [2022-04-27 15:03:16,372 INFO L290 TraceCheckUtils]: 1: Hoare triple {13394#true} assume 0 != ~compRegistered~0; {13394#true} is VALID [2022-04-27 15:03:16,373 INFO L272 TraceCheckUtils]: 2: Hoare triple {13394#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {13441#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:16,373 INFO L290 TraceCheckUtils]: 3: Hoare triple {13441#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {13394#true} is VALID [2022-04-27 15:03:16,374 INFO L272 TraceCheckUtils]: 4: Hoare triple {13394#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {13441#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:16,374 INFO L290 TraceCheckUtils]: 5: Hoare triple {13441#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {13394#true} is VALID [2022-04-27 15:03:16,374 INFO L290 TraceCheckUtils]: 6: Hoare triple {13394#true} assume true; {13394#true} is VALID [2022-04-27 15:03:16,374 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {13394#true} {13394#true} #712#return; {13394#true} is VALID [2022-04-27 15:03:16,374 INFO L290 TraceCheckUtils]: 8: Hoare triple {13394#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {13394#true} is VALID [2022-04-27 15:03:16,374 INFO L290 TraceCheckUtils]: 9: Hoare triple {13394#true} assume true; {13394#true} is VALID [2022-04-27 15:03:16,374 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {13394#true} {13394#true} #774#return; {13394#true} is VALID [2022-04-27 15:03:16,374 INFO L290 TraceCheckUtils]: 11: Hoare triple {13394#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {13394#true} is VALID [2022-04-27 15:03:16,374 INFO L290 TraceCheckUtils]: 12: Hoare triple {13394#true} assume !(-1073741802 == ~__cil_tmp7~0); {13394#true} is VALID [2022-04-27 15:03:16,374 INFO L290 TraceCheckUtils]: 13: Hoare triple {13394#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {13394#true} is VALID [2022-04-27 15:03:16,374 INFO L290 TraceCheckUtils]: 14: Hoare triple {13394#true} assume 0 == ~tmp_ndt_6~0; {13394#true} is VALID [2022-04-27 15:03:16,375 INFO L290 TraceCheckUtils]: 15: Hoare triple {13394#true} ~returnVal2~0 := 0; {13439#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:16,375 INFO L290 TraceCheckUtils]: 16: Hoare triple {13439#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {13439#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:16,376 INFO L290 TraceCheckUtils]: 17: Hoare triple {13439#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {13440#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:16,376 INFO L290 TraceCheckUtils]: 18: Hoare triple {13440#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {13440#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:16,377 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {13440#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {13394#true} #752#return; {13425#(= |KbFilter_PnP_#t~ret12| 0)} is VALID [2022-04-27 15:03:16,379 INFO L272 TraceCheckUtils]: 0: Hoare triple {13394#true} call ULTIMATE.init(); {13427#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:16,379 INFO L290 TraceCheckUtils]: 1: Hoare triple {13427#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {13394#true} is VALID [2022-04-27 15:03:16,379 INFO L290 TraceCheckUtils]: 2: Hoare triple {13394#true} assume true; {13394#true} is VALID [2022-04-27 15:03:16,379 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {13394#true} {13394#true} #780#return; {13394#true} is VALID [2022-04-27 15:03:16,379 INFO L272 TraceCheckUtils]: 4: Hoare triple {13394#true} call #t~ret83 := main(); {13394#true} is VALID [2022-04-27 15:03:16,379 INFO L290 TraceCheckUtils]: 5: Hoare triple {13394#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {13394#true} is VALID [2022-04-27 15:03:16,380 INFO L272 TraceCheckUtils]: 6: Hoare triple {13394#true} call _BLAST_init(); {13428#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:16,381 INFO L290 TraceCheckUtils]: 7: Hoare triple {13428#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13394#true} is VALID [2022-04-27 15:03:16,381 INFO L290 TraceCheckUtils]: 8: Hoare triple {13394#true} assume true; {13394#true} is VALID [2022-04-27 15:03:16,381 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {13394#true} {13394#true} #714#return; {13394#true} is VALID [2022-04-27 15:03:16,381 INFO L290 TraceCheckUtils]: 10: Hoare triple {13394#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {13394#true} is VALID [2022-04-27 15:03:16,381 INFO L290 TraceCheckUtils]: 11: Hoare triple {13394#true} assume !(0 == ~irp_choice~0); {13394#true} is VALID [2022-04-27 15:03:16,382 INFO L272 TraceCheckUtils]: 12: Hoare triple {13394#true} call stub_driver_init(); {13429#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:16,382 INFO L290 TraceCheckUtils]: 13: Hoare triple {13429#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13394#true} is VALID [2022-04-27 15:03:16,382 INFO L290 TraceCheckUtils]: 14: Hoare triple {13394#true} assume true; {13394#true} is VALID [2022-04-27 15:03:16,382 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {13394#true} {13394#true} #716#return; {13394#true} is VALID [2022-04-27 15:03:16,382 INFO L290 TraceCheckUtils]: 16: Hoare triple {13394#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {13394#true} is VALID [2022-04-27 15:03:16,385 INFO L290 TraceCheckUtils]: 17: Hoare triple {13394#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {13394#true} is VALID [2022-04-27 15:03:16,385 INFO L290 TraceCheckUtils]: 18: Hoare triple {13394#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {13394#true} is VALID [2022-04-27 15:03:16,385 INFO L290 TraceCheckUtils]: 19: Hoare triple {13394#true} assume 3 == ~tmp_ndt_3~0; {13394#true} is VALID [2022-04-27 15:03:16,385 INFO L272 TraceCheckUtils]: 20: Hoare triple {13394#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {13394#true} is VALID [2022-04-27 15:03:16,385 INFO L290 TraceCheckUtils]: 21: Hoare triple {13394#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {13394#true} is VALID [2022-04-27 15:03:16,385 INFO L290 TraceCheckUtils]: 22: Hoare triple {13394#true} assume 0 == ~irpStack__MinorFunction~0; {13394#true} is VALID [2022-04-27 15:03:16,385 INFO L290 TraceCheckUtils]: 23: Hoare triple {13394#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {13394#true} is VALID [2022-04-27 15:03:16,385 INFO L290 TraceCheckUtils]: 24: Hoare triple {13394#true} assume !(~s~0 != ~NP~0); {13394#true} is VALID [2022-04-27 15:03:16,385 INFO L290 TraceCheckUtils]: 25: Hoare triple {13394#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {13394#true} is VALID [2022-04-27 15:03:16,385 INFO L290 TraceCheckUtils]: 26: Hoare triple {13394#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {13394#true} is VALID [2022-04-27 15:03:16,386 INFO L272 TraceCheckUtils]: 27: Hoare triple {13394#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {13430#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:16,386 INFO L290 TraceCheckUtils]: 28: Hoare triple {13430#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {13394#true} is VALID [2022-04-27 15:03:16,386 INFO L290 TraceCheckUtils]: 29: Hoare triple {13394#true} assume 0 != ~compRegistered~0; {13394#true} is VALID [2022-04-27 15:03:16,387 INFO L272 TraceCheckUtils]: 30: Hoare triple {13394#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {13441#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:16,387 INFO L290 TraceCheckUtils]: 31: Hoare triple {13441#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {13394#true} is VALID [2022-04-27 15:03:16,388 INFO L272 TraceCheckUtils]: 32: Hoare triple {13394#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {13441#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:16,388 INFO L290 TraceCheckUtils]: 33: Hoare triple {13441#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {13394#true} is VALID [2022-04-27 15:03:16,388 INFO L290 TraceCheckUtils]: 34: Hoare triple {13394#true} assume true; {13394#true} is VALID [2022-04-27 15:03:16,388 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {13394#true} {13394#true} #712#return; {13394#true} is VALID [2022-04-27 15:03:16,388 INFO L290 TraceCheckUtils]: 36: Hoare triple {13394#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {13394#true} is VALID [2022-04-27 15:03:16,388 INFO L290 TraceCheckUtils]: 37: Hoare triple {13394#true} assume true; {13394#true} is VALID [2022-04-27 15:03:16,388 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {13394#true} {13394#true} #774#return; {13394#true} is VALID [2022-04-27 15:03:16,388 INFO L290 TraceCheckUtils]: 39: Hoare triple {13394#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {13394#true} is VALID [2022-04-27 15:03:16,389 INFO L290 TraceCheckUtils]: 40: Hoare triple {13394#true} assume !(-1073741802 == ~__cil_tmp7~0); {13394#true} is VALID [2022-04-27 15:03:16,389 INFO L290 TraceCheckUtils]: 41: Hoare triple {13394#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {13394#true} is VALID [2022-04-27 15:03:16,389 INFO L290 TraceCheckUtils]: 42: Hoare triple {13394#true} assume 0 == ~tmp_ndt_6~0; {13394#true} is VALID [2022-04-27 15:03:16,389 INFO L290 TraceCheckUtils]: 43: Hoare triple {13394#true} ~returnVal2~0 := 0; {13439#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:16,389 INFO L290 TraceCheckUtils]: 44: Hoare triple {13439#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {13439#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:16,390 INFO L290 TraceCheckUtils]: 45: Hoare triple {13439#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {13440#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:16,390 INFO L290 TraceCheckUtils]: 46: Hoare triple {13440#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {13440#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:16,391 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {13440#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {13394#true} #752#return; {13425#(= |KbFilter_PnP_#t~ret12| 0)} is VALID [2022-04-27 15:03:16,391 INFO L290 TraceCheckUtils]: 48: Hoare triple {13425#(= |KbFilter_PnP_#t~ret12| 0)} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {13426#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-27 15:03:16,392 INFO L290 TraceCheckUtils]: 49: Hoare triple {13426#(= KbFilter_PnP_~status~0 0)} assume !(259 == ~__cil_tmp23~0); {13426#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-27 15:03:16,392 INFO L290 TraceCheckUtils]: 50: Hoare triple {13426#(= KbFilter_PnP_~status~0 0)} assume !(~status~0 >= 0); {13395#false} is VALID [2022-04-27 15:03:16,392 INFO L290 TraceCheckUtils]: 51: Hoare triple {13395#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {13395#false} is VALID [2022-04-27 15:03:16,392 INFO L272 TraceCheckUtils]: 52: Hoare triple {13395#false} call IofCompleteRequest(~Irp, 0); {13395#false} is VALID [2022-04-27 15:03:16,392 INFO L290 TraceCheckUtils]: 53: Hoare triple {13395#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {13395#false} is VALID [2022-04-27 15:03:16,392 INFO L290 TraceCheckUtils]: 54: Hoare triple {13395#false} assume !(~s~0 == ~NP~0); {13395#false} is VALID [2022-04-27 15:03:16,392 INFO L272 TraceCheckUtils]: 55: Hoare triple {13395#false} call errorFn(); {13395#false} is VALID [2022-04-27 15:03:16,393 INFO L290 TraceCheckUtils]: 56: Hoare triple {13395#false} assume !false; {13395#false} is VALID [2022-04-27 15:03:16,393 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:16,393 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:16,393 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [943167133] [2022-04-27 15:03:16,393 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [943167133] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:16,393 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:16,393 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-27 15:03:16,393 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1675512893] [2022-04-27 15:03:16,393 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:16,395 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-27 15:03:16,396 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:16,396 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:16,450 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:16,450 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-27 15:03:16,450 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:16,451 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-27 15:03:16,451 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-27 15:03:16,452 INFO L87 Difference]: Start difference. First operand 105 states and 119 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:17,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:17,219 INFO L93 Difference]: Finished difference Result 116 states and 131 transitions. [2022-04-27 15:03:17,219 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-04-27 15:03:17,219 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-27 15:03:17,220 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:17,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:17,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 111 transitions. [2022-04-27 15:03:17,221 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:17,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 111 transitions. [2022-04-27 15:03:17,222 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 10 states and 111 transitions. [2022-04-27 15:03:17,309 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 111 edges. 111 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:17,310 INFO L225 Difference]: With dead ends: 116 [2022-04-27 15:03:17,310 INFO L226 Difference]: Without dead ends: 109 [2022-04-27 15:03:17,310 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=51, Invalid=159, Unknown=0, NotChecked=0, Total=210 [2022-04-27 15:03:17,311 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 81 mSDsluCounter, 258 mSDsCounter, 0 mSdLazyCounter, 235 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 334 SdHoareTripleChecker+Invalid, 282 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 235 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:17,311 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 334 Invalid, 282 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 235 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-27 15:03:17,312 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109 states. [2022-04-27 15:03:17,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109 to 106. [2022-04-27 15:03:17,372 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:17,373 INFO L82 GeneralOperation]: Start isEquivalent. First operand 109 states. Second operand has 106 states, 81 states have (on average 1.1851851851851851) internal successors, (96), 82 states have internal predecessors, (96), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-27 15:03:17,373 INFO L74 IsIncluded]: Start isIncluded. First operand 109 states. Second operand has 106 states, 81 states have (on average 1.1851851851851851) internal successors, (96), 82 states have internal predecessors, (96), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-27 15:03:17,373 INFO L87 Difference]: Start difference. First operand 109 states. Second operand has 106 states, 81 states have (on average 1.1851851851851851) internal successors, (96), 82 states have internal predecessors, (96), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-27 15:03:17,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:17,375 INFO L93 Difference]: Finished difference Result 109 states and 124 transitions. [2022-04-27 15:03:17,375 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 124 transitions. [2022-04-27 15:03:17,375 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:17,375 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:17,376 INFO L74 IsIncluded]: Start isIncluded. First operand has 106 states, 81 states have (on average 1.1851851851851851) internal successors, (96), 82 states have internal predecessors, (96), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) Second operand 109 states. [2022-04-27 15:03:17,376 INFO L87 Difference]: Start difference. First operand has 106 states, 81 states have (on average 1.1851851851851851) internal successors, (96), 82 states have internal predecessors, (96), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) Second operand 109 states. [2022-04-27 15:03:17,377 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:17,377 INFO L93 Difference]: Finished difference Result 109 states and 124 transitions. [2022-04-27 15:03:17,378 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 124 transitions. [2022-04-27 15:03:17,378 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:17,378 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:17,378 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:17,378 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:17,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106 states, 81 states have (on average 1.1851851851851851) internal successors, (96), 82 states have internal predecessors, (96), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-27 15:03:17,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 120 transitions. [2022-04-27 15:03:17,380 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 120 transitions. Word has length 57 [2022-04-27 15:03:17,380 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:17,380 INFO L495 AbstractCegarLoop]: Abstraction has 106 states and 120 transitions. [2022-04-27 15:03:17,380 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:17,380 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 120 transitions. [2022-04-27 15:03:17,381 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-04-27 15:03:17,381 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:17,381 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:17,381 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-04-27 15:03:17,381 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:17,382 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:17,382 INFO L85 PathProgramCache]: Analyzing trace with hash -2097337179, now seen corresponding path program 1 times [2022-04-27 15:03:17,382 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:17,382 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1479846452] [2022-04-27 15:03:17,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:17,382 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:17,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:17,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:17,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:17,465 INFO L290 TraceCheckUtils]: 0: Hoare triple {14011#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {13980#true} is VALID [2022-04-27 15:03:17,465 INFO L290 TraceCheckUtils]: 1: Hoare triple {13980#true} assume true; {13980#true} is VALID [2022-04-27 15:03:17,465 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13980#true} {13980#true} #780#return; {13980#true} is VALID [2022-04-27 15:03:17,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:17,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:17,489 INFO L290 TraceCheckUtils]: 0: Hoare triple {14012#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13980#true} is VALID [2022-04-27 15:03:17,489 INFO L290 TraceCheckUtils]: 1: Hoare triple {13980#true} assume true; {13980#true} is VALID [2022-04-27 15:03:17,489 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13980#true} {13980#true} #714#return; {13980#true} is VALID [2022-04-27 15:03:17,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:17,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:17,503 INFO L290 TraceCheckUtils]: 0: Hoare triple {14013#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13980#true} is VALID [2022-04-27 15:03:17,503 INFO L290 TraceCheckUtils]: 1: Hoare triple {13980#true} assume true; {13980#true} is VALID [2022-04-27 15:03:17,503 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13980#true} {13980#true} #716#return; {13980#true} is VALID [2022-04-27 15:03:17,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:17,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:17,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-27 15:03:17,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:17,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:17,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:17,573 INFO L290 TraceCheckUtils]: 0: Hoare triple {14025#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {13980#true} is VALID [2022-04-27 15:03:17,573 INFO L290 TraceCheckUtils]: 1: Hoare triple {13980#true} assume true; {13980#true} is VALID [2022-04-27 15:03:17,573 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13980#true} {13980#true} #712#return; {13980#true} is VALID [2022-04-27 15:03:17,574 INFO L290 TraceCheckUtils]: 0: Hoare triple {14025#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {13980#true} is VALID [2022-04-27 15:03:17,574 INFO L272 TraceCheckUtils]: 1: Hoare triple {13980#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {14025#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:17,574 INFO L290 TraceCheckUtils]: 2: Hoare triple {14025#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {13980#true} is VALID [2022-04-27 15:03:17,574 INFO L290 TraceCheckUtils]: 3: Hoare triple {13980#true} assume true; {13980#true} is VALID [2022-04-27 15:03:17,575 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {13980#true} {13980#true} #712#return; {13980#true} is VALID [2022-04-27 15:03:17,575 INFO L290 TraceCheckUtils]: 5: Hoare triple {13980#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {14029#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-27 15:03:17,575 INFO L290 TraceCheckUtils]: 6: Hoare triple {14029#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {14029#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-27 15:03:17,576 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {14029#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {13980#true} #774#return; {14023#(= (+ |IofCallDriver_#t~ret37| 1073741802) 0)} is VALID [2022-04-27 15:03:17,577 INFO L290 TraceCheckUtils]: 0: Hoare triple {14014#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {13980#true} is VALID [2022-04-27 15:03:17,577 INFO L290 TraceCheckUtils]: 1: Hoare triple {13980#true} assume 0 != ~compRegistered~0; {13980#true} is VALID [2022-04-27 15:03:17,577 INFO L272 TraceCheckUtils]: 2: Hoare triple {13980#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {14025#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:17,577 INFO L290 TraceCheckUtils]: 3: Hoare triple {14025#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {13980#true} is VALID [2022-04-27 15:03:17,578 INFO L272 TraceCheckUtils]: 4: Hoare triple {13980#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {14025#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:17,578 INFO L290 TraceCheckUtils]: 5: Hoare triple {14025#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {13980#true} is VALID [2022-04-27 15:03:17,578 INFO L290 TraceCheckUtils]: 6: Hoare triple {13980#true} assume true; {13980#true} is VALID [2022-04-27 15:03:17,578 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {13980#true} {13980#true} #712#return; {13980#true} is VALID [2022-04-27 15:03:17,591 INFO L290 TraceCheckUtils]: 8: Hoare triple {13980#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {14029#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-27 15:03:17,591 INFO L290 TraceCheckUtils]: 9: Hoare triple {14029#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {14029#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-27 15:03:17,592 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {14029#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {13980#true} #774#return; {14023#(= (+ |IofCallDriver_#t~ret37| 1073741802) 0)} is VALID [2022-04-27 15:03:17,593 INFO L290 TraceCheckUtils]: 11: Hoare triple {14023#(= (+ |IofCallDriver_#t~ret37| 1073741802) 0)} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {14024#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-27 15:03:17,593 INFO L290 TraceCheckUtils]: 12: Hoare triple {14024#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {13981#false} is VALID [2022-04-27 15:03:17,593 INFO L290 TraceCheckUtils]: 13: Hoare triple {13981#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {13981#false} is VALID [2022-04-27 15:03:17,593 INFO L290 TraceCheckUtils]: 14: Hoare triple {13981#false} assume 0 == ~tmp_ndt_6~0; {13981#false} is VALID [2022-04-27 15:03:17,593 INFO L290 TraceCheckUtils]: 15: Hoare triple {13981#false} ~returnVal2~0 := 0; {13981#false} is VALID [2022-04-27 15:03:17,593 INFO L290 TraceCheckUtils]: 16: Hoare triple {13981#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {13981#false} is VALID [2022-04-27 15:03:17,593 INFO L290 TraceCheckUtils]: 17: Hoare triple {13981#false} #res := ~returnVal2~0; {13981#false} is VALID [2022-04-27 15:03:17,594 INFO L290 TraceCheckUtils]: 18: Hoare triple {13981#false} assume true; {13981#false} is VALID [2022-04-27 15:03:17,594 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {13981#false} {13980#true} #752#return; {13981#false} is VALID [2022-04-27 15:03:17,596 INFO L272 TraceCheckUtils]: 0: Hoare triple {13980#true} call ULTIMATE.init(); {14011#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:17,596 INFO L290 TraceCheckUtils]: 1: Hoare triple {14011#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {13980#true} is VALID [2022-04-27 15:03:17,596 INFO L290 TraceCheckUtils]: 2: Hoare triple {13980#true} assume true; {13980#true} is VALID [2022-04-27 15:03:17,596 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {13980#true} {13980#true} #780#return; {13980#true} is VALID [2022-04-27 15:03:17,596 INFO L272 TraceCheckUtils]: 4: Hoare triple {13980#true} call #t~ret83 := main(); {13980#true} is VALID [2022-04-27 15:03:17,596 INFO L290 TraceCheckUtils]: 5: Hoare triple {13980#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {13980#true} is VALID [2022-04-27 15:03:17,597 INFO L272 TraceCheckUtils]: 6: Hoare triple {13980#true} call _BLAST_init(); {14012#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:17,597 INFO L290 TraceCheckUtils]: 7: Hoare triple {14012#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13980#true} is VALID [2022-04-27 15:03:17,597 INFO L290 TraceCheckUtils]: 8: Hoare triple {13980#true} assume true; {13980#true} is VALID [2022-04-27 15:03:17,598 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {13980#true} {13980#true} #714#return; {13980#true} is VALID [2022-04-27 15:03:17,598 INFO L290 TraceCheckUtils]: 10: Hoare triple {13980#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {13980#true} is VALID [2022-04-27 15:03:17,598 INFO L290 TraceCheckUtils]: 11: Hoare triple {13980#true} assume !(0 == ~irp_choice~0); {13980#true} is VALID [2022-04-27 15:03:17,598 INFO L272 TraceCheckUtils]: 12: Hoare triple {13980#true} call stub_driver_init(); {14013#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:17,598 INFO L290 TraceCheckUtils]: 13: Hoare triple {14013#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13980#true} is VALID [2022-04-27 15:03:17,599 INFO L290 TraceCheckUtils]: 14: Hoare triple {13980#true} assume true; {13980#true} is VALID [2022-04-27 15:03:17,599 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {13980#true} {13980#true} #716#return; {13980#true} is VALID [2022-04-27 15:03:17,599 INFO L290 TraceCheckUtils]: 16: Hoare triple {13980#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {13980#true} is VALID [2022-04-27 15:03:17,599 INFO L290 TraceCheckUtils]: 17: Hoare triple {13980#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {13980#true} is VALID [2022-04-27 15:03:17,599 INFO L290 TraceCheckUtils]: 18: Hoare triple {13980#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {13980#true} is VALID [2022-04-27 15:03:17,599 INFO L290 TraceCheckUtils]: 19: Hoare triple {13980#true} assume 3 == ~tmp_ndt_3~0; {13980#true} is VALID [2022-04-27 15:03:17,599 INFO L272 TraceCheckUtils]: 20: Hoare triple {13980#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {13980#true} is VALID [2022-04-27 15:03:17,599 INFO L290 TraceCheckUtils]: 21: Hoare triple {13980#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {13980#true} is VALID [2022-04-27 15:03:17,599 INFO L290 TraceCheckUtils]: 22: Hoare triple {13980#true} assume 0 == ~irpStack__MinorFunction~0; {13980#true} is VALID [2022-04-27 15:03:17,599 INFO L290 TraceCheckUtils]: 23: Hoare triple {13980#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {13980#true} is VALID [2022-04-27 15:03:17,599 INFO L290 TraceCheckUtils]: 24: Hoare triple {13980#true} assume !(~s~0 != ~NP~0); {13980#true} is VALID [2022-04-27 15:03:17,600 INFO L290 TraceCheckUtils]: 25: Hoare triple {13980#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {13980#true} is VALID [2022-04-27 15:03:17,600 INFO L290 TraceCheckUtils]: 26: Hoare triple {13980#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {13980#true} is VALID [2022-04-27 15:03:17,600 INFO L272 TraceCheckUtils]: 27: Hoare triple {13980#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {14014#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:17,600 INFO L290 TraceCheckUtils]: 28: Hoare triple {14014#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {13980#true} is VALID [2022-04-27 15:03:17,600 INFO L290 TraceCheckUtils]: 29: Hoare triple {13980#true} assume 0 != ~compRegistered~0; {13980#true} is VALID [2022-04-27 15:03:17,601 INFO L272 TraceCheckUtils]: 30: Hoare triple {13980#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {14025#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:17,601 INFO L290 TraceCheckUtils]: 31: Hoare triple {14025#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {13980#true} is VALID [2022-04-27 15:03:17,602 INFO L272 TraceCheckUtils]: 32: Hoare triple {13980#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {14025#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:17,602 INFO L290 TraceCheckUtils]: 33: Hoare triple {14025#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {13980#true} is VALID [2022-04-27 15:03:17,602 INFO L290 TraceCheckUtils]: 34: Hoare triple {13980#true} assume true; {13980#true} is VALID [2022-04-27 15:03:17,602 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {13980#true} {13980#true} #712#return; {13980#true} is VALID [2022-04-27 15:03:17,603 INFO L290 TraceCheckUtils]: 36: Hoare triple {13980#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {14029#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-27 15:03:17,603 INFO L290 TraceCheckUtils]: 37: Hoare triple {14029#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {14029#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-27 15:03:17,604 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {14029#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {13980#true} #774#return; {14023#(= (+ |IofCallDriver_#t~ret37| 1073741802) 0)} is VALID [2022-04-27 15:03:17,604 INFO L290 TraceCheckUtils]: 39: Hoare triple {14023#(= (+ |IofCallDriver_#t~ret37| 1073741802) 0)} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {14024#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-27 15:03:17,604 INFO L290 TraceCheckUtils]: 40: Hoare triple {14024#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {13981#false} is VALID [2022-04-27 15:03:17,605 INFO L290 TraceCheckUtils]: 41: Hoare triple {13981#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {13981#false} is VALID [2022-04-27 15:03:17,605 INFO L290 TraceCheckUtils]: 42: Hoare triple {13981#false} assume 0 == ~tmp_ndt_6~0; {13981#false} is VALID [2022-04-27 15:03:17,605 INFO L290 TraceCheckUtils]: 43: Hoare triple {13981#false} ~returnVal2~0 := 0; {13981#false} is VALID [2022-04-27 15:03:17,605 INFO L290 TraceCheckUtils]: 44: Hoare triple {13981#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {13981#false} is VALID [2022-04-27 15:03:17,605 INFO L290 TraceCheckUtils]: 45: Hoare triple {13981#false} #res := ~returnVal2~0; {13981#false} is VALID [2022-04-27 15:03:17,605 INFO L290 TraceCheckUtils]: 46: Hoare triple {13981#false} assume true; {13981#false} is VALID [2022-04-27 15:03:17,605 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {13981#false} {13980#true} #752#return; {13981#false} is VALID [2022-04-27 15:03:17,605 INFO L290 TraceCheckUtils]: 48: Hoare triple {13981#false} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {13981#false} is VALID [2022-04-27 15:03:17,605 INFO L290 TraceCheckUtils]: 49: Hoare triple {13981#false} assume !(259 == ~__cil_tmp23~0); {13981#false} is VALID [2022-04-27 15:03:17,605 INFO L290 TraceCheckUtils]: 50: Hoare triple {13981#false} assume ~status~0 >= 0; {13981#false} is VALID [2022-04-27 15:03:17,605 INFO L290 TraceCheckUtils]: 51: Hoare triple {13981#false} assume ~myStatus~0 >= 0;~devExt__Started~0 := 1;~devExt__Removed~0 := 0;~devExt__SurpriseRemoved~0 := 0; {13981#false} is VALID [2022-04-27 15:03:17,606 INFO L290 TraceCheckUtils]: 52: Hoare triple {13981#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {13981#false} is VALID [2022-04-27 15:03:17,606 INFO L272 TraceCheckUtils]: 53: Hoare triple {13981#false} call IofCompleteRequest(~Irp, 0); {13981#false} is VALID [2022-04-27 15:03:17,606 INFO L290 TraceCheckUtils]: 54: Hoare triple {13981#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {13981#false} is VALID [2022-04-27 15:03:17,606 INFO L290 TraceCheckUtils]: 55: Hoare triple {13981#false} assume !(~s~0 == ~NP~0); {13981#false} is VALID [2022-04-27 15:03:17,606 INFO L272 TraceCheckUtils]: 56: Hoare triple {13981#false} call errorFn(); {13981#false} is VALID [2022-04-27 15:03:17,606 INFO L290 TraceCheckUtils]: 57: Hoare triple {13981#false} assume !false; {13981#false} is VALID [2022-04-27 15:03:17,606 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:17,606 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:17,606 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1479846452] [2022-04-27 15:03:17,607 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1479846452] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:17,607 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:17,607 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-27 15:03:17,607 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1947536415] [2022-04-27 15:03:17,607 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:17,607 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-27 15:03:17,608 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:17,608 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:17,648 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:17,648 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-27 15:03:17,648 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:17,649 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-27 15:03:17,649 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-27 15:03:17,649 INFO L87 Difference]: Start difference. First operand 106 states and 120 transitions. Second operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:18,308 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:18,309 INFO L93 Difference]: Finished difference Result 142 states and 161 transitions. [2022-04-27 15:03:18,309 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-27 15:03:18,309 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-27 15:03:18,309 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:18,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:18,310 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 135 transitions. [2022-04-27 15:03:18,310 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:18,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 135 transitions. [2022-04-27 15:03:18,311 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 135 transitions. [2022-04-27 15:03:18,422 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 135 edges. 135 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:18,423 INFO L225 Difference]: With dead ends: 142 [2022-04-27 15:03:18,423 INFO L226 Difference]: Without dead ends: 100 [2022-04-27 15:03:18,424 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-27 15:03:18,424 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 42 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 243 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 270 SdHoareTripleChecker+Invalid, 260 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 243 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:18,425 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 270 Invalid, 260 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 243 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-27 15:03:18,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2022-04-27 15:03:18,491 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 100. [2022-04-27 15:03:18,491 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:18,491 INFO L82 GeneralOperation]: Start isEquivalent. First operand 100 states. Second operand has 100 states, 75 states have (on average 1.16) internal successors, (87), 76 states have internal predecessors, (87), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-27 15:03:18,492 INFO L74 IsIncluded]: Start isIncluded. First operand 100 states. Second operand has 100 states, 75 states have (on average 1.16) internal successors, (87), 76 states have internal predecessors, (87), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-27 15:03:18,492 INFO L87 Difference]: Start difference. First operand 100 states. Second operand has 100 states, 75 states have (on average 1.16) internal successors, (87), 76 states have internal predecessors, (87), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-27 15:03:18,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:18,493 INFO L93 Difference]: Finished difference Result 100 states and 111 transitions. [2022-04-27 15:03:18,493 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 111 transitions. [2022-04-27 15:03:18,494 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:18,494 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:18,494 INFO L74 IsIncluded]: Start isIncluded. First operand has 100 states, 75 states have (on average 1.16) internal successors, (87), 76 states have internal predecessors, (87), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) Second operand 100 states. [2022-04-27 15:03:18,494 INFO L87 Difference]: Start difference. First operand has 100 states, 75 states have (on average 1.16) internal successors, (87), 76 states have internal predecessors, (87), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) Second operand 100 states. [2022-04-27 15:03:18,495 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:18,496 INFO L93 Difference]: Finished difference Result 100 states and 111 transitions. [2022-04-27 15:03:18,496 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 111 transitions. [2022-04-27 15:03:18,496 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:18,496 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:18,496 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:18,496 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:18,496 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 75 states have (on average 1.16) internal successors, (87), 76 states have internal predecessors, (87), 14 states have call successors, (14), 13 states have call predecessors, (14), 10 states have return successors, (10), 10 states have call predecessors, (10), 8 states have call successors, (10) [2022-04-27 15:03:18,498 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 111 transitions. [2022-04-27 15:03:18,498 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 111 transitions. Word has length 58 [2022-04-27 15:03:18,498 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:18,498 INFO L495 AbstractCegarLoop]: Abstraction has 100 states and 111 transitions. [2022-04-27 15:03:18,498 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:18,499 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 111 transitions. [2022-04-27 15:03:18,500 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-04-27 15:03:18,500 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:18,500 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:18,500 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-04-27 15:03:18,500 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:18,501 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:18,501 INFO L85 PathProgramCache]: Analyzing trace with hash 1424142412, now seen corresponding path program 1 times [2022-04-27 15:03:18,501 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:18,501 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1950266565] [2022-04-27 15:03:18,501 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:18,501 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:18,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:18,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:18,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:18,593 INFO L290 TraceCheckUtils]: 0: Hoare triple {14599#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14563#true} is VALID [2022-04-27 15:03:18,593 INFO L290 TraceCheckUtils]: 1: Hoare triple {14563#true} assume true; {14563#true} is VALID [2022-04-27 15:03:18,600 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14563#true} {14563#true} #780#return; {14563#true} is VALID [2022-04-27 15:03:18,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:18,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:18,634 INFO L290 TraceCheckUtils]: 0: Hoare triple {14600#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,634 INFO L290 TraceCheckUtils]: 1: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume true; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,635 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} {14563#true} #714#return; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:18,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:18,651 INFO L290 TraceCheckUtils]: 0: Hoare triple {14601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14563#true} is VALID [2022-04-27 15:03:18,651 INFO L290 TraceCheckUtils]: 1: Hoare triple {14563#true} assume true; {14563#true} is VALID [2022-04-27 15:03:18,651 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14563#true} {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #716#return; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:18,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:18,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-27 15:03:18,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:18,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:18,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:18,709 INFO L290 TraceCheckUtils]: 0: Hoare triple {14616#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {14563#true} is VALID [2022-04-27 15:03:18,709 INFO L290 TraceCheckUtils]: 1: Hoare triple {14563#true} assume true; {14563#true} is VALID [2022-04-27 15:03:18,709 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14563#true} {14563#true} #712#return; {14563#true} is VALID [2022-04-27 15:03:18,709 INFO L290 TraceCheckUtils]: 0: Hoare triple {14616#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {14563#true} is VALID [2022-04-27 15:03:18,710 INFO L272 TraceCheckUtils]: 1: Hoare triple {14563#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {14616#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:18,710 INFO L290 TraceCheckUtils]: 2: Hoare triple {14616#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {14563#true} is VALID [2022-04-27 15:03:18,710 INFO L290 TraceCheckUtils]: 3: Hoare triple {14563#true} assume true; {14563#true} is VALID [2022-04-27 15:03:18,710 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {14563#true} {14563#true} #712#return; {14563#true} is VALID [2022-04-27 15:03:18,710 INFO L290 TraceCheckUtils]: 5: Hoare triple {14563#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {14563#true} is VALID [2022-04-27 15:03:18,710 INFO L290 TraceCheckUtils]: 6: Hoare triple {14563#true} assume true; {14563#true} is VALID [2022-04-27 15:03:18,711 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {14563#true} {14563#true} #774#return; {14563#true} is VALID [2022-04-27 15:03:18,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-27 15:03:18,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:18,728 INFO L290 TraceCheckUtils]: 0: Hoare triple {14620#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {14621#(= ~MPR1~0 ~s~0)} is VALID [2022-04-27 15:03:18,728 INFO L290 TraceCheckUtils]: 1: Hoare triple {14621#(= ~MPR1~0 ~s~0)} assume true; {14621#(= ~MPR1~0 ~s~0)} is VALID [2022-04-27 15:03:18,729 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14621#(= ~MPR1~0 ~s~0)} {14563#true} #776#return; {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-27 15:03:18,729 INFO L290 TraceCheckUtils]: 0: Hoare triple {14602#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {14563#true} is VALID [2022-04-27 15:03:18,729 INFO L290 TraceCheckUtils]: 1: Hoare triple {14563#true} assume 0 != ~compRegistered~0; {14563#true} is VALID [2022-04-27 15:03:18,730 INFO L272 TraceCheckUtils]: 2: Hoare triple {14563#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {14616#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:18,730 INFO L290 TraceCheckUtils]: 3: Hoare triple {14616#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {14563#true} is VALID [2022-04-27 15:03:18,730 INFO L272 TraceCheckUtils]: 4: Hoare triple {14563#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {14616#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:18,730 INFO L290 TraceCheckUtils]: 5: Hoare triple {14616#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {14563#true} is VALID [2022-04-27 15:03:18,730 INFO L290 TraceCheckUtils]: 6: Hoare triple {14563#true} assume true; {14563#true} is VALID [2022-04-27 15:03:18,730 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {14563#true} {14563#true} #712#return; {14563#true} is VALID [2022-04-27 15:03:18,731 INFO L290 TraceCheckUtils]: 8: Hoare triple {14563#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {14563#true} is VALID [2022-04-27 15:03:18,731 INFO L290 TraceCheckUtils]: 9: Hoare triple {14563#true} assume true; {14563#true} is VALID [2022-04-27 15:03:18,731 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {14563#true} {14563#true} #774#return; {14563#true} is VALID [2022-04-27 15:03:18,731 INFO L290 TraceCheckUtils]: 11: Hoare triple {14563#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {14563#true} is VALID [2022-04-27 15:03:18,731 INFO L290 TraceCheckUtils]: 12: Hoare triple {14563#true} assume -1073741802 == ~__cil_tmp7~0; {14563#true} is VALID [2022-04-27 15:03:18,731 INFO L272 TraceCheckUtils]: 13: Hoare triple {14563#true} call stubMoreProcessingRequired(); {14620#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:18,732 INFO L290 TraceCheckUtils]: 14: Hoare triple {14620#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {14621#(= ~MPR1~0 ~s~0)} is VALID [2022-04-27 15:03:18,732 INFO L290 TraceCheckUtils]: 15: Hoare triple {14621#(= ~MPR1~0 ~s~0)} assume true; {14621#(= ~MPR1~0 ~s~0)} is VALID [2022-04-27 15:03:18,732 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {14621#(= ~MPR1~0 ~s~0)} {14563#true} #776#return; {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-27 15:03:18,733 INFO L290 TraceCheckUtils]: 17: Hoare triple {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-27 15:03:18,733 INFO L290 TraceCheckUtils]: 18: Hoare triple {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume 0 == ~tmp_ndt_6~0; {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-27 15:03:18,733 INFO L290 TraceCheckUtils]: 19: Hoare triple {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} ~returnVal2~0 := 0; {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-27 15:03:18,734 INFO L290 TraceCheckUtils]: 20: Hoare triple {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {14615#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-27 15:03:18,735 INFO L290 TraceCheckUtils]: 21: Hoare triple {14615#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} #res := ~returnVal2~0; {14615#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-27 15:03:18,739 INFO L290 TraceCheckUtils]: 22: Hoare triple {14615#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} assume true; {14615#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-27 15:03:18,740 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {14615#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #752#return; {14564#false} is VALID [2022-04-27 15:03:18,764 INFO L272 TraceCheckUtils]: 0: Hoare triple {14563#true} call ULTIMATE.init(); {14599#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:18,765 INFO L290 TraceCheckUtils]: 1: Hoare triple {14599#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14563#true} is VALID [2022-04-27 15:03:18,765 INFO L290 TraceCheckUtils]: 2: Hoare triple {14563#true} assume true; {14563#true} is VALID [2022-04-27 15:03:18,765 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14563#true} {14563#true} #780#return; {14563#true} is VALID [2022-04-27 15:03:18,765 INFO L272 TraceCheckUtils]: 4: Hoare triple {14563#true} call #t~ret83 := main(); {14563#true} is VALID [2022-04-27 15:03:18,765 INFO L290 TraceCheckUtils]: 5: Hoare triple {14563#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {14563#true} is VALID [2022-04-27 15:03:18,766 INFO L272 TraceCheckUtils]: 6: Hoare triple {14563#true} call _BLAST_init(); {14600#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:18,767 INFO L290 TraceCheckUtils]: 7: Hoare triple {14600#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,768 INFO L290 TraceCheckUtils]: 8: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume true; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,768 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} {14563#true} #714#return; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,768 INFO L290 TraceCheckUtils]: 10: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,769 INFO L290 TraceCheckUtils]: 11: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(0 == ~irp_choice~0); {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,769 INFO L272 TraceCheckUtils]: 12: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} call stub_driver_init(); {14601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:18,770 INFO L290 TraceCheckUtils]: 13: Hoare triple {14601#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14563#true} is VALID [2022-04-27 15:03:18,770 INFO L290 TraceCheckUtils]: 14: Hoare triple {14563#true} assume true; {14563#true} is VALID [2022-04-27 15:03:18,770 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {14563#true} {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #716#return; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,770 INFO L290 TraceCheckUtils]: 16: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,771 INFO L290 TraceCheckUtils]: 17: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,771 INFO L290 TraceCheckUtils]: 18: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,772 INFO L290 TraceCheckUtils]: 19: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume 3 == ~tmp_ndt_3~0; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,772 INFO L272 TraceCheckUtils]: 20: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,773 INFO L290 TraceCheckUtils]: 21: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,773 INFO L290 TraceCheckUtils]: 22: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume 0 == ~irpStack__MinorFunction~0; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,774 INFO L290 TraceCheckUtils]: 23: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,774 INFO L290 TraceCheckUtils]: 24: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(~s~0 != ~NP~0); {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,774 INFO L290 TraceCheckUtils]: 25: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,775 INFO L290 TraceCheckUtils]: 26: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-04-27 15:03:18,775 INFO L272 TraceCheckUtils]: 27: Hoare triple {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {14602#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:18,776 INFO L290 TraceCheckUtils]: 28: Hoare triple {14602#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {14563#true} is VALID [2022-04-27 15:03:18,776 INFO L290 TraceCheckUtils]: 29: Hoare triple {14563#true} assume 0 != ~compRegistered~0; {14563#true} is VALID [2022-04-27 15:03:18,776 INFO L272 TraceCheckUtils]: 30: Hoare triple {14563#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {14616#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:18,776 INFO L290 TraceCheckUtils]: 31: Hoare triple {14616#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {14563#true} is VALID [2022-04-27 15:03:18,777 INFO L272 TraceCheckUtils]: 32: Hoare triple {14563#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {14616#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:18,777 INFO L290 TraceCheckUtils]: 33: Hoare triple {14616#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {14563#true} is VALID [2022-04-27 15:03:18,777 INFO L290 TraceCheckUtils]: 34: Hoare triple {14563#true} assume true; {14563#true} is VALID [2022-04-27 15:03:18,777 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {14563#true} {14563#true} #712#return; {14563#true} is VALID [2022-04-27 15:03:18,777 INFO L290 TraceCheckUtils]: 36: Hoare triple {14563#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {14563#true} is VALID [2022-04-27 15:03:18,777 INFO L290 TraceCheckUtils]: 37: Hoare triple {14563#true} assume true; {14563#true} is VALID [2022-04-27 15:03:18,777 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {14563#true} {14563#true} #774#return; {14563#true} is VALID [2022-04-27 15:03:18,778 INFO L290 TraceCheckUtils]: 39: Hoare triple {14563#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {14563#true} is VALID [2022-04-27 15:03:18,778 INFO L290 TraceCheckUtils]: 40: Hoare triple {14563#true} assume -1073741802 == ~__cil_tmp7~0; {14563#true} is VALID [2022-04-27 15:03:18,778 INFO L272 TraceCheckUtils]: 41: Hoare triple {14563#true} call stubMoreProcessingRequired(); {14620#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:18,778 INFO L290 TraceCheckUtils]: 42: Hoare triple {14620#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {14621#(= ~MPR1~0 ~s~0)} is VALID [2022-04-27 15:03:18,778 INFO L290 TraceCheckUtils]: 43: Hoare triple {14621#(= ~MPR1~0 ~s~0)} assume true; {14621#(= ~MPR1~0 ~s~0)} is VALID [2022-04-27 15:03:18,779 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {14621#(= ~MPR1~0 ~s~0)} {14563#true} #776#return; {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-27 15:03:18,779 INFO L290 TraceCheckUtils]: 45: Hoare triple {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-27 15:03:18,780 INFO L290 TraceCheckUtils]: 46: Hoare triple {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume 0 == ~tmp_ndt_6~0; {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-27 15:03:18,780 INFO L290 TraceCheckUtils]: 47: Hoare triple {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} ~returnVal2~0 := 0; {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-04-27 15:03:18,780 INFO L290 TraceCheckUtils]: 48: Hoare triple {14614#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {14615#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-27 15:03:18,781 INFO L290 TraceCheckUtils]: 49: Hoare triple {14615#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} #res := ~returnVal2~0; {14615#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-27 15:03:18,781 INFO L290 TraceCheckUtils]: 50: Hoare triple {14615#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} assume true; {14615#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-04-27 15:03:18,782 INFO L284 TraceCheckUtils]: 51: Hoare quadruple {14615#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} {14571#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #752#return; {14564#false} is VALID [2022-04-27 15:03:18,782 INFO L290 TraceCheckUtils]: 52: Hoare triple {14564#false} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {14564#false} is VALID [2022-04-27 15:03:18,782 INFO L290 TraceCheckUtils]: 53: Hoare triple {14564#false} assume !(259 == ~__cil_tmp23~0); {14564#false} is VALID [2022-04-27 15:03:18,782 INFO L290 TraceCheckUtils]: 54: Hoare triple {14564#false} assume ~status~0 >= 0; {14564#false} is VALID [2022-04-27 15:03:18,782 INFO L290 TraceCheckUtils]: 55: Hoare triple {14564#false} assume ~myStatus~0 >= 0;~devExt__Started~0 := 1;~devExt__Removed~0 := 0;~devExt__SurpriseRemoved~0 := 0; {14564#false} is VALID [2022-04-27 15:03:18,782 INFO L290 TraceCheckUtils]: 56: Hoare triple {14564#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {14564#false} is VALID [2022-04-27 15:03:18,782 INFO L272 TraceCheckUtils]: 57: Hoare triple {14564#false} call IofCompleteRequest(~Irp, 0); {14564#false} is VALID [2022-04-27 15:03:18,782 INFO L290 TraceCheckUtils]: 58: Hoare triple {14564#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {14564#false} is VALID [2022-04-27 15:03:18,782 INFO L290 TraceCheckUtils]: 59: Hoare triple {14564#false} assume !(~s~0 == ~NP~0); {14564#false} is VALID [2022-04-27 15:03:18,783 INFO L272 TraceCheckUtils]: 60: Hoare triple {14564#false} call errorFn(); {14564#false} is VALID [2022-04-27 15:03:18,783 INFO L290 TraceCheckUtils]: 61: Hoare triple {14564#false} assume !false; {14564#false} is VALID [2022-04-27 15:03:18,783 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:18,783 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:18,783 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1950266565] [2022-04-27 15:03:18,783 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1950266565] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:18,783 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:18,783 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-27 15:03:18,784 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [785488176] [2022-04-27 15:03:18,784 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:18,784 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.6666666666666665) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (7), 4 states have call predecessors, (7), 2 states have call successors, (7) Word has length 62 [2022-04-27 15:03:18,784 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:18,788 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.6666666666666665) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (7), 4 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-27 15:03:18,833 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 62 edges. 62 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:18,833 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-27 15:03:18,833 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:18,834 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-27 15:03:18,834 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:18,834 INFO L87 Difference]: Start difference. First operand 100 states and 111 transitions. Second operand has 12 states, 12 states have (on average 3.6666666666666665) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (7), 4 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-27 15:03:19,887 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:19,888 INFO L93 Difference]: Finished difference Result 128 states and 144 transitions. [2022-04-27 15:03:19,888 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-04-27 15:03:19,888 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.6666666666666665) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (7), 4 states have call predecessors, (7), 2 states have call successors, (7) Word has length 62 [2022-04-27 15:03:19,888 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:19,888 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.6666666666666665) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (7), 4 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-27 15:03:19,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 125 transitions. [2022-04-27 15:03:19,889 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.6666666666666665) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (7), 4 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-27 15:03:19,890 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 125 transitions. [2022-04-27 15:03:19,890 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 11 states and 125 transitions. [2022-04-27 15:03:20,014 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 125 edges. 125 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:20,015 INFO L225 Difference]: With dead ends: 128 [2022-04-27 15:03:20,015 INFO L226 Difference]: Without dead ends: 92 [2022-04-27 15:03:20,016 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=87, Invalid=255, Unknown=0, NotChecked=0, Total=342 [2022-04-27 15:03:20,016 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 123 mSDsluCounter, 163 mSDsCounter, 0 mSdLazyCounter, 300 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 124 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 356 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 300 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:20,016 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [124 Valid, 233 Invalid, 356 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 300 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-27 15:03:20,017 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2022-04-27 15:03:20,087 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2022-04-27 15:03:20,087 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:20,087 INFO L82 GeneralOperation]: Start isEquivalent. First operand 92 states. Second operand has 92 states, 68 states have (on average 1.1470588235294117) internal successors, (78), 69 states have internal predecessors, (78), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:20,087 INFO L74 IsIncluded]: Start isIncluded. First operand 92 states. Second operand has 92 states, 68 states have (on average 1.1470588235294117) internal successors, (78), 69 states have internal predecessors, (78), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:20,087 INFO L87 Difference]: Start difference. First operand 92 states. Second operand has 92 states, 68 states have (on average 1.1470588235294117) internal successors, (78), 69 states have internal predecessors, (78), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:20,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:20,088 INFO L93 Difference]: Finished difference Result 92 states and 101 transitions. [2022-04-27 15:03:20,088 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 101 transitions. [2022-04-27 15:03:20,089 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:20,089 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:20,089 INFO L74 IsIncluded]: Start isIncluded. First operand has 92 states, 68 states have (on average 1.1470588235294117) internal successors, (78), 69 states have internal predecessors, (78), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 92 states. [2022-04-27 15:03:20,089 INFO L87 Difference]: Start difference. First operand has 92 states, 68 states have (on average 1.1470588235294117) internal successors, (78), 69 states have internal predecessors, (78), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 92 states. [2022-04-27 15:03:20,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:20,090 INFO L93 Difference]: Finished difference Result 92 states and 101 transitions. [2022-04-27 15:03:20,090 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 101 transitions. [2022-04-27 15:03:20,090 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:20,090 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:20,090 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:20,090 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:20,091 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 68 states have (on average 1.1470588235294117) internal successors, (78), 69 states have internal predecessors, (78), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:20,092 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 101 transitions. [2022-04-27 15:03:20,092 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 101 transitions. Word has length 62 [2022-04-27 15:03:20,092 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:20,092 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 101 transitions. [2022-04-27 15:03:20,092 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.6666666666666665) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (11), 9 states have call predecessors, (11), 4 states have return successors, (7), 4 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-27 15:03:20,092 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 101 transitions. [2022-04-27 15:03:20,093 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-04-27 15:03:20,093 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:20,093 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:20,093 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-04-27 15:03:20,093 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:20,093 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:20,093 INFO L85 PathProgramCache]: Analyzing trace with hash -119468725, now seen corresponding path program 1 times [2022-04-27 15:03:20,093 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:20,093 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2136890172] [2022-04-27 15:03:20,094 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:20,094 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:20,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:20,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:20,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:20,180 INFO L290 TraceCheckUtils]: 0: Hoare triple {15164#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {15126#true} is VALID [2022-04-27 15:03:20,180 INFO L290 TraceCheckUtils]: 1: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,180 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15126#true} {15126#true} #780#return; {15126#true} is VALID [2022-04-27 15:03:20,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:20,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:20,207 INFO L290 TraceCheckUtils]: 0: Hoare triple {15165#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15126#true} is VALID [2022-04-27 15:03:20,208 INFO L290 TraceCheckUtils]: 1: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,208 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15126#true} {15126#true} #714#return; {15126#true} is VALID [2022-04-27 15:03:20,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:20,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:20,224 INFO L290 TraceCheckUtils]: 0: Hoare triple {15166#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15126#true} is VALID [2022-04-27 15:03:20,224 INFO L290 TraceCheckUtils]: 1: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,224 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15126#true} {15126#true} #716#return; {15126#true} is VALID [2022-04-27 15:03:20,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:20,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:20,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-27 15:03:20,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:20,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:20,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:20,284 INFO L290 TraceCheckUtils]: 0: Hoare triple {15180#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {15126#true} is VALID [2022-04-27 15:03:20,284 INFO L290 TraceCheckUtils]: 1: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,284 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15126#true} {15126#true} #712#return; {15126#true} is VALID [2022-04-27 15:03:20,284 INFO L290 TraceCheckUtils]: 0: Hoare triple {15180#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {15126#true} is VALID [2022-04-27 15:03:20,285 INFO L272 TraceCheckUtils]: 1: Hoare triple {15126#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {15180#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:20,285 INFO L290 TraceCheckUtils]: 2: Hoare triple {15180#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {15126#true} is VALID [2022-04-27 15:03:20,285 INFO L290 TraceCheckUtils]: 3: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,285 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15126#true} {15126#true} #712#return; {15126#true} is VALID [2022-04-27 15:03:20,285 INFO L290 TraceCheckUtils]: 5: Hoare triple {15126#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {15126#true} is VALID [2022-04-27 15:03:20,285 INFO L290 TraceCheckUtils]: 6: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,285 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {15126#true} {15126#true} #774#return; {15126#true} is VALID [2022-04-27 15:03:20,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-27 15:03:20,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:20,295 INFO L290 TraceCheckUtils]: 0: Hoare triple {15184#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {15126#true} is VALID [2022-04-27 15:03:20,295 INFO L290 TraceCheckUtils]: 1: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,295 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15126#true} {15126#true} #776#return; {15126#true} is VALID [2022-04-27 15:03:20,295 INFO L290 TraceCheckUtils]: 0: Hoare triple {15167#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {15126#true} is VALID [2022-04-27 15:03:20,295 INFO L290 TraceCheckUtils]: 1: Hoare triple {15126#true} assume 0 != ~compRegistered~0; {15126#true} is VALID [2022-04-27 15:03:20,296 INFO L272 TraceCheckUtils]: 2: Hoare triple {15126#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {15180#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:20,296 INFO L290 TraceCheckUtils]: 3: Hoare triple {15180#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {15126#true} is VALID [2022-04-27 15:03:20,297 INFO L272 TraceCheckUtils]: 4: Hoare triple {15126#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {15180#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:20,297 INFO L290 TraceCheckUtils]: 5: Hoare triple {15180#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {15126#true} is VALID [2022-04-27 15:03:20,297 INFO L290 TraceCheckUtils]: 6: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,297 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {15126#true} {15126#true} #712#return; {15126#true} is VALID [2022-04-27 15:03:20,297 INFO L290 TraceCheckUtils]: 8: Hoare triple {15126#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {15126#true} is VALID [2022-04-27 15:03:20,297 INFO L290 TraceCheckUtils]: 9: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,297 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {15126#true} {15126#true} #774#return; {15126#true} is VALID [2022-04-27 15:03:20,297 INFO L290 TraceCheckUtils]: 11: Hoare triple {15126#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {15126#true} is VALID [2022-04-27 15:03:20,297 INFO L290 TraceCheckUtils]: 12: Hoare triple {15126#true} assume -1073741802 == ~__cil_tmp7~0; {15126#true} is VALID [2022-04-27 15:03:20,298 INFO L272 TraceCheckUtils]: 13: Hoare triple {15126#true} call stubMoreProcessingRequired(); {15184#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:20,298 INFO L290 TraceCheckUtils]: 14: Hoare triple {15184#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {15126#true} is VALID [2022-04-27 15:03:20,298 INFO L290 TraceCheckUtils]: 15: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,298 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {15126#true} {15126#true} #776#return; {15126#true} is VALID [2022-04-27 15:03:20,298 INFO L290 TraceCheckUtils]: 17: Hoare triple {15126#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {15126#true} is VALID [2022-04-27 15:03:20,298 INFO L290 TraceCheckUtils]: 18: Hoare triple {15126#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {15126#true} is VALID [2022-04-27 15:03:20,298 INFO L290 TraceCheckUtils]: 19: Hoare triple {15126#true} assume 1 == ~tmp_ndt_7~0; {15126#true} is VALID [2022-04-27 15:03:20,299 INFO L290 TraceCheckUtils]: 20: Hoare triple {15126#true} ~returnVal2~0 := -1073741823; {15179#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-27 15:03:20,299 INFO L290 TraceCheckUtils]: 21: Hoare triple {15179#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume !(~s~0 == ~NP~0); {15179#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-27 15:03:20,299 INFO L290 TraceCheckUtils]: 22: Hoare triple {15179#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume ~s~0 == ~MPR1~0; {15179#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-27 15:03:20,300 INFO L290 TraceCheckUtils]: 23: Hoare triple {15179#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {15127#false} is VALID [2022-04-27 15:03:20,300 INFO L290 TraceCheckUtils]: 24: Hoare triple {15127#false} #res := ~returnVal2~0; {15127#false} is VALID [2022-04-27 15:03:20,300 INFO L290 TraceCheckUtils]: 25: Hoare triple {15127#false} assume true; {15127#false} is VALID [2022-04-27 15:03:20,300 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {15127#false} {15126#true} #752#return; {15127#false} is VALID [2022-04-27 15:03:20,302 INFO L272 TraceCheckUtils]: 0: Hoare triple {15126#true} call ULTIMATE.init(); {15164#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:20,302 INFO L290 TraceCheckUtils]: 1: Hoare triple {15164#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {15126#true} is VALID [2022-04-27 15:03:20,302 INFO L290 TraceCheckUtils]: 2: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,302 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {15126#true} {15126#true} #780#return; {15126#true} is VALID [2022-04-27 15:03:20,302 INFO L272 TraceCheckUtils]: 4: Hoare triple {15126#true} call #t~ret83 := main(); {15126#true} is VALID [2022-04-27 15:03:20,302 INFO L290 TraceCheckUtils]: 5: Hoare triple {15126#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {15126#true} is VALID [2022-04-27 15:03:20,303 INFO L272 TraceCheckUtils]: 6: Hoare triple {15126#true} call _BLAST_init(); {15165#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:20,304 INFO L290 TraceCheckUtils]: 7: Hoare triple {15165#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15126#true} is VALID [2022-04-27 15:03:20,304 INFO L290 TraceCheckUtils]: 8: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,304 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {15126#true} {15126#true} #714#return; {15126#true} is VALID [2022-04-27 15:03:20,304 INFO L290 TraceCheckUtils]: 10: Hoare triple {15126#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {15126#true} is VALID [2022-04-27 15:03:20,304 INFO L290 TraceCheckUtils]: 11: Hoare triple {15126#true} assume !(0 == ~irp_choice~0); {15126#true} is VALID [2022-04-27 15:03:20,305 INFO L272 TraceCheckUtils]: 12: Hoare triple {15126#true} call stub_driver_init(); {15166#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:20,305 INFO L290 TraceCheckUtils]: 13: Hoare triple {15166#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15126#true} is VALID [2022-04-27 15:03:20,305 INFO L290 TraceCheckUtils]: 14: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,305 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {15126#true} {15126#true} #716#return; {15126#true} is VALID [2022-04-27 15:03:20,305 INFO L290 TraceCheckUtils]: 16: Hoare triple {15126#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {15126#true} is VALID [2022-04-27 15:03:20,305 INFO L290 TraceCheckUtils]: 17: Hoare triple {15126#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {15126#true} is VALID [2022-04-27 15:03:20,305 INFO L290 TraceCheckUtils]: 18: Hoare triple {15126#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {15126#true} is VALID [2022-04-27 15:03:20,305 INFO L290 TraceCheckUtils]: 19: Hoare triple {15126#true} assume 3 == ~tmp_ndt_3~0; {15126#true} is VALID [2022-04-27 15:03:20,305 INFO L272 TraceCheckUtils]: 20: Hoare triple {15126#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {15126#true} is VALID [2022-04-27 15:03:20,305 INFO L290 TraceCheckUtils]: 21: Hoare triple {15126#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {15126#true} is VALID [2022-04-27 15:03:20,305 INFO L290 TraceCheckUtils]: 22: Hoare triple {15126#true} assume 0 == ~irpStack__MinorFunction~0; {15126#true} is VALID [2022-04-27 15:03:20,305 INFO L290 TraceCheckUtils]: 23: Hoare triple {15126#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {15126#true} is VALID [2022-04-27 15:03:20,306 INFO L290 TraceCheckUtils]: 24: Hoare triple {15126#true} assume !(~s~0 != ~NP~0); {15126#true} is VALID [2022-04-27 15:03:20,306 INFO L290 TraceCheckUtils]: 25: Hoare triple {15126#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {15126#true} is VALID [2022-04-27 15:03:20,306 INFO L290 TraceCheckUtils]: 26: Hoare triple {15126#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {15126#true} is VALID [2022-04-27 15:03:20,306 INFO L272 TraceCheckUtils]: 27: Hoare triple {15126#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {15167#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:20,306 INFO L290 TraceCheckUtils]: 28: Hoare triple {15167#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {15126#true} is VALID [2022-04-27 15:03:20,307 INFO L290 TraceCheckUtils]: 29: Hoare triple {15126#true} assume 0 != ~compRegistered~0; {15126#true} is VALID [2022-04-27 15:03:20,307 INFO L272 TraceCheckUtils]: 30: Hoare triple {15126#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {15180#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:20,307 INFO L290 TraceCheckUtils]: 31: Hoare triple {15180#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {15126#true} is VALID [2022-04-27 15:03:20,308 INFO L272 TraceCheckUtils]: 32: Hoare triple {15126#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {15180#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:20,308 INFO L290 TraceCheckUtils]: 33: Hoare triple {15180#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {15126#true} is VALID [2022-04-27 15:03:20,308 INFO L290 TraceCheckUtils]: 34: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,308 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {15126#true} {15126#true} #712#return; {15126#true} is VALID [2022-04-27 15:03:20,308 INFO L290 TraceCheckUtils]: 36: Hoare triple {15126#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {15126#true} is VALID [2022-04-27 15:03:20,308 INFO L290 TraceCheckUtils]: 37: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,308 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {15126#true} {15126#true} #774#return; {15126#true} is VALID [2022-04-27 15:03:20,308 INFO L290 TraceCheckUtils]: 39: Hoare triple {15126#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {15126#true} is VALID [2022-04-27 15:03:20,308 INFO L290 TraceCheckUtils]: 40: Hoare triple {15126#true} assume -1073741802 == ~__cil_tmp7~0; {15126#true} is VALID [2022-04-27 15:03:20,309 INFO L272 TraceCheckUtils]: 41: Hoare triple {15126#true} call stubMoreProcessingRequired(); {15184#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:20,309 INFO L290 TraceCheckUtils]: 42: Hoare triple {15184#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {15126#true} is VALID [2022-04-27 15:03:20,309 INFO L290 TraceCheckUtils]: 43: Hoare triple {15126#true} assume true; {15126#true} is VALID [2022-04-27 15:03:20,309 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {15126#true} {15126#true} #776#return; {15126#true} is VALID [2022-04-27 15:03:20,309 INFO L290 TraceCheckUtils]: 45: Hoare triple {15126#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {15126#true} is VALID [2022-04-27 15:03:20,309 INFO L290 TraceCheckUtils]: 46: Hoare triple {15126#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {15126#true} is VALID [2022-04-27 15:03:20,309 INFO L290 TraceCheckUtils]: 47: Hoare triple {15126#true} assume 1 == ~tmp_ndt_7~0; {15126#true} is VALID [2022-04-27 15:03:20,310 INFO L290 TraceCheckUtils]: 48: Hoare triple {15126#true} ~returnVal2~0 := -1073741823; {15179#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-27 15:03:20,310 INFO L290 TraceCheckUtils]: 49: Hoare triple {15179#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume !(~s~0 == ~NP~0); {15179#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-27 15:03:20,310 INFO L290 TraceCheckUtils]: 50: Hoare triple {15179#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume ~s~0 == ~MPR1~0; {15179#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} is VALID [2022-04-27 15:03:20,311 INFO L290 TraceCheckUtils]: 51: Hoare triple {15179#(<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {15127#false} is VALID [2022-04-27 15:03:20,311 INFO L290 TraceCheckUtils]: 52: Hoare triple {15127#false} #res := ~returnVal2~0; {15127#false} is VALID [2022-04-27 15:03:20,311 INFO L290 TraceCheckUtils]: 53: Hoare triple {15127#false} assume true; {15127#false} is VALID [2022-04-27 15:03:20,311 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {15127#false} {15126#true} #752#return; {15127#false} is VALID [2022-04-27 15:03:20,311 INFO L290 TraceCheckUtils]: 55: Hoare triple {15127#false} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {15127#false} is VALID [2022-04-27 15:03:20,311 INFO L290 TraceCheckUtils]: 56: Hoare triple {15127#false} assume 259 == ~__cil_tmp23~0; {15127#false} is VALID [2022-04-27 15:03:20,311 INFO L272 TraceCheckUtils]: 57: Hoare triple {15127#false} call #t~ret13 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {15127#false} is VALID [2022-04-27 15:03:20,311 INFO L290 TraceCheckUtils]: 58: Hoare triple {15127#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {15127#false} is VALID [2022-04-27 15:03:20,311 INFO L290 TraceCheckUtils]: 59: Hoare triple {15127#false} assume !(~s~0 == ~MPR3~0); {15127#false} is VALID [2022-04-27 15:03:20,311 INFO L290 TraceCheckUtils]: 60: Hoare triple {15127#false} assume !(1 == ~customIrp~0); {15127#false} is VALID [2022-04-27 15:03:20,311 INFO L290 TraceCheckUtils]: 61: Hoare triple {15127#false} assume ~s~0 == ~MPR3~0; {15127#false} is VALID [2022-04-27 15:03:20,312 INFO L272 TraceCheckUtils]: 62: Hoare triple {15127#false} call errorFn(); {15127#false} is VALID [2022-04-27 15:03:20,312 INFO L290 TraceCheckUtils]: 63: Hoare triple {15127#false} assume !false; {15127#false} is VALID [2022-04-27 15:03:20,312 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:20,312 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:20,312 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2136890172] [2022-04-27 15:03:20,312 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2136890172] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:20,312 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:20,312 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-04-27 15:03:20,312 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1476371645] [2022-04-27 15:03:20,313 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:20,313 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 64 [2022-04-27 15:03:20,313 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:20,313 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:20,357 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:20,357 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-04-27 15:03:20,357 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:20,358 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-04-27 15:03:20,358 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-04-27 15:03:20,358 INFO L87 Difference]: Start difference. First operand 92 states and 101 transitions. Second operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:20,854 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:20,854 INFO L93 Difference]: Finished difference Result 126 states and 141 transitions. [2022-04-27 15:03:20,854 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-04-27 15:03:20,855 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 64 [2022-04-27 15:03:20,855 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:20,855 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:20,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 129 transitions. [2022-04-27 15:03:20,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:20,858 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 129 transitions. [2022-04-27 15:03:20,858 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 7 states and 129 transitions. [2022-04-27 15:03:20,964 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 129 edges. 129 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:20,966 INFO L225 Difference]: With dead ends: 126 [2022-04-27 15:03:20,966 INFO L226 Difference]: Without dead ends: 98 [2022-04-27 15:03:20,966 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-04-27 15:03:20,967 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 58 mSDsluCounter, 115 mSDsCounter, 0 mSdLazyCounter, 138 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 167 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 138 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:20,967 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 188 Invalid, 167 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 138 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-04-27 15:03:20,968 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2022-04-27 15:03:21,024 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 95. [2022-04-27 15:03:21,025 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:21,025 INFO L82 GeneralOperation]: Start isEquivalent. First operand 98 states. Second operand has 95 states, 71 states have (on average 1.1408450704225352) internal successors, (81), 72 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:21,025 INFO L74 IsIncluded]: Start isIncluded. First operand 98 states. Second operand has 95 states, 71 states have (on average 1.1408450704225352) internal successors, (81), 72 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:21,025 INFO L87 Difference]: Start difference. First operand 98 states. Second operand has 95 states, 71 states have (on average 1.1408450704225352) internal successors, (81), 72 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:21,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:21,027 INFO L93 Difference]: Finished difference Result 98 states and 107 transitions. [2022-04-27 15:03:21,027 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 107 transitions. [2022-04-27 15:03:21,027 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:21,027 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:21,027 INFO L74 IsIncluded]: Start isIncluded. First operand has 95 states, 71 states have (on average 1.1408450704225352) internal successors, (81), 72 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 98 states. [2022-04-27 15:03:21,028 INFO L87 Difference]: Start difference. First operand has 95 states, 71 states have (on average 1.1408450704225352) internal successors, (81), 72 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 98 states. [2022-04-27 15:03:21,029 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:21,029 INFO L93 Difference]: Finished difference Result 98 states and 107 transitions. [2022-04-27 15:03:21,029 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 107 transitions. [2022-04-27 15:03:21,029 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:21,029 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:21,030 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:21,030 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:21,030 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95 states, 71 states have (on average 1.1408450704225352) internal successors, (81), 72 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:21,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 104 transitions. [2022-04-27 15:03:21,031 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 104 transitions. Word has length 64 [2022-04-27 15:03:21,031 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:21,031 INFO L495 AbstractCegarLoop]: Abstraction has 95 states and 104 transitions. [2022-04-27 15:03:21,032 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:21,032 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 104 transitions. [2022-04-27 15:03:21,032 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-04-27 15:03:21,032 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:21,032 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:21,032 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-04-27 15:03:21,033 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:21,033 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:21,033 INFO L85 PathProgramCache]: Analyzing trace with hash -706274739, now seen corresponding path program 1 times [2022-04-27 15:03:21,033 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:21,033 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [230172626] [2022-04-27 15:03:21,033 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:21,033 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:21,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:21,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:21,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:21,105 INFO L290 TraceCheckUtils]: 0: Hoare triple {15725#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {15686#true} is VALID [2022-04-27 15:03:21,106 INFO L290 TraceCheckUtils]: 1: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,106 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15686#true} {15686#true} #780#return; {15686#true} is VALID [2022-04-27 15:03:21,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:21,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:21,130 INFO L290 TraceCheckUtils]: 0: Hoare triple {15726#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15686#true} is VALID [2022-04-27 15:03:21,130 INFO L290 TraceCheckUtils]: 1: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,130 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15686#true} {15686#true} #714#return; {15686#true} is VALID [2022-04-27 15:03:21,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:21,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:21,144 INFO L290 TraceCheckUtils]: 0: Hoare triple {15727#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15686#true} is VALID [2022-04-27 15:03:21,144 INFO L290 TraceCheckUtils]: 1: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,144 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15686#true} {15686#true} #716#return; {15686#true} is VALID [2022-04-27 15:03:21,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:21,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:21,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-27 15:03:21,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:21,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:21,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:21,173 INFO L290 TraceCheckUtils]: 0: Hoare triple {15740#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {15686#true} is VALID [2022-04-27 15:03:21,174 INFO L290 TraceCheckUtils]: 1: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,174 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15686#true} {15686#true} #712#return; {15686#true} is VALID [2022-04-27 15:03:21,174 INFO L290 TraceCheckUtils]: 0: Hoare triple {15740#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {15686#true} is VALID [2022-04-27 15:03:21,174 INFO L272 TraceCheckUtils]: 1: Hoare triple {15686#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {15740#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:21,175 INFO L290 TraceCheckUtils]: 2: Hoare triple {15740#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {15686#true} is VALID [2022-04-27 15:03:21,175 INFO L290 TraceCheckUtils]: 3: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,175 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15686#true} {15686#true} #712#return; {15686#true} is VALID [2022-04-27 15:03:21,175 INFO L290 TraceCheckUtils]: 5: Hoare triple {15686#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {15686#true} is VALID [2022-04-27 15:03:21,175 INFO L290 TraceCheckUtils]: 6: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,175 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {15686#true} {15686#true} #774#return; {15686#true} is VALID [2022-04-27 15:03:21,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-27 15:03:21,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:21,183 INFO L290 TraceCheckUtils]: 0: Hoare triple {15744#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {15686#true} is VALID [2022-04-27 15:03:21,183 INFO L290 TraceCheckUtils]: 1: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,183 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15686#true} {15686#true} #776#return; {15686#true} is VALID [2022-04-27 15:03:21,183 INFO L290 TraceCheckUtils]: 0: Hoare triple {15728#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {15686#true} is VALID [2022-04-27 15:03:21,183 INFO L290 TraceCheckUtils]: 1: Hoare triple {15686#true} assume 0 != ~compRegistered~0; {15686#true} is VALID [2022-04-27 15:03:21,184 INFO L272 TraceCheckUtils]: 2: Hoare triple {15686#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {15740#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:21,184 INFO L290 TraceCheckUtils]: 3: Hoare triple {15740#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {15686#true} is VALID [2022-04-27 15:03:21,185 INFO L272 TraceCheckUtils]: 4: Hoare triple {15686#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {15740#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:21,185 INFO L290 TraceCheckUtils]: 5: Hoare triple {15740#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {15686#true} is VALID [2022-04-27 15:03:21,185 INFO L290 TraceCheckUtils]: 6: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,185 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {15686#true} {15686#true} #712#return; {15686#true} is VALID [2022-04-27 15:03:21,185 INFO L290 TraceCheckUtils]: 8: Hoare triple {15686#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {15686#true} is VALID [2022-04-27 15:03:21,185 INFO L290 TraceCheckUtils]: 9: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,185 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {15686#true} {15686#true} #774#return; {15686#true} is VALID [2022-04-27 15:03:21,185 INFO L290 TraceCheckUtils]: 11: Hoare triple {15686#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {15686#true} is VALID [2022-04-27 15:03:21,185 INFO L290 TraceCheckUtils]: 12: Hoare triple {15686#true} assume -1073741802 == ~__cil_tmp7~0; {15686#true} is VALID [2022-04-27 15:03:21,186 INFO L272 TraceCheckUtils]: 13: Hoare triple {15686#true} call stubMoreProcessingRequired(); {15744#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,186 INFO L290 TraceCheckUtils]: 14: Hoare triple {15744#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {15686#true} is VALID [2022-04-27 15:03:21,186 INFO L290 TraceCheckUtils]: 15: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,186 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {15686#true} {15686#true} #776#return; {15686#true} is VALID [2022-04-27 15:03:21,186 INFO L290 TraceCheckUtils]: 17: Hoare triple {15686#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {15686#true} is VALID [2022-04-27 15:03:21,186 INFO L290 TraceCheckUtils]: 18: Hoare triple {15686#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {15686#true} is VALID [2022-04-27 15:03:21,186 INFO L290 TraceCheckUtils]: 19: Hoare triple {15686#true} assume 1 == ~tmp_ndt_7~0; {15686#true} is VALID [2022-04-27 15:03:21,186 INFO L290 TraceCheckUtils]: 20: Hoare triple {15686#true} ~returnVal2~0 := -1073741823; {15686#true} is VALID [2022-04-27 15:03:21,186 INFO L290 TraceCheckUtils]: 21: Hoare triple {15686#true} assume !(~s~0 == ~NP~0); {15686#true} is VALID [2022-04-27 15:03:21,186 INFO L290 TraceCheckUtils]: 22: Hoare triple {15686#true} assume ~s~0 == ~MPR1~0; {15686#true} is VALID [2022-04-27 15:03:21,186 INFO L290 TraceCheckUtils]: 23: Hoare triple {15686#true} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {15686#true} is VALID [2022-04-27 15:03:21,187 INFO L290 TraceCheckUtils]: 24: Hoare triple {15686#true} #res := ~returnVal2~0; {15686#true} is VALID [2022-04-27 15:03:21,187 INFO L290 TraceCheckUtils]: 25: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,187 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {15686#true} {15686#true} #752#return; {15686#true} is VALID [2022-04-27 15:03:21,188 INFO L272 TraceCheckUtils]: 0: Hoare triple {15686#true} call ULTIMATE.init(); {15725#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:21,188 INFO L290 TraceCheckUtils]: 1: Hoare triple {15725#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {15686#true} is VALID [2022-04-27 15:03:21,189 INFO L290 TraceCheckUtils]: 2: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,189 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {15686#true} {15686#true} #780#return; {15686#true} is VALID [2022-04-27 15:03:21,189 INFO L272 TraceCheckUtils]: 4: Hoare triple {15686#true} call #t~ret83 := main(); {15686#true} is VALID [2022-04-27 15:03:21,189 INFO L290 TraceCheckUtils]: 5: Hoare triple {15686#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {15686#true} is VALID [2022-04-27 15:03:21,190 INFO L272 TraceCheckUtils]: 6: Hoare triple {15686#true} call _BLAST_init(); {15726#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:21,190 INFO L290 TraceCheckUtils]: 7: Hoare triple {15726#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15686#true} is VALID [2022-04-27 15:03:21,190 INFO L290 TraceCheckUtils]: 8: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,190 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {15686#true} {15686#true} #714#return; {15686#true} is VALID [2022-04-27 15:03:21,190 INFO L290 TraceCheckUtils]: 10: Hoare triple {15686#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {15686#true} is VALID [2022-04-27 15:03:21,190 INFO L290 TraceCheckUtils]: 11: Hoare triple {15686#true} assume !(0 == ~irp_choice~0); {15686#true} is VALID [2022-04-27 15:03:21,191 INFO L272 TraceCheckUtils]: 12: Hoare triple {15686#true} call stub_driver_init(); {15727#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:21,191 INFO L290 TraceCheckUtils]: 13: Hoare triple {15727#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15686#true} is VALID [2022-04-27 15:03:21,191 INFO L290 TraceCheckUtils]: 14: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,191 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {15686#true} {15686#true} #716#return; {15686#true} is VALID [2022-04-27 15:03:21,191 INFO L290 TraceCheckUtils]: 16: Hoare triple {15686#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {15686#true} is VALID [2022-04-27 15:03:21,191 INFO L290 TraceCheckUtils]: 17: Hoare triple {15686#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {15686#true} is VALID [2022-04-27 15:03:21,191 INFO L290 TraceCheckUtils]: 18: Hoare triple {15686#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {15686#true} is VALID [2022-04-27 15:03:21,192 INFO L290 TraceCheckUtils]: 19: Hoare triple {15686#true} assume 3 == ~tmp_ndt_3~0; {15686#true} is VALID [2022-04-27 15:03:21,192 INFO L272 TraceCheckUtils]: 20: Hoare triple {15686#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {15686#true} is VALID [2022-04-27 15:03:21,192 INFO L290 TraceCheckUtils]: 21: Hoare triple {15686#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {15686#true} is VALID [2022-04-27 15:03:21,192 INFO L290 TraceCheckUtils]: 22: Hoare triple {15686#true} assume 0 == ~irpStack__MinorFunction~0; {15686#true} is VALID [2022-04-27 15:03:21,192 INFO L290 TraceCheckUtils]: 23: Hoare triple {15686#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {15686#true} is VALID [2022-04-27 15:03:21,192 INFO L290 TraceCheckUtils]: 24: Hoare triple {15686#true} assume !(~s~0 != ~NP~0); {15686#true} is VALID [2022-04-27 15:03:21,192 INFO L290 TraceCheckUtils]: 25: Hoare triple {15686#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {15686#true} is VALID [2022-04-27 15:03:21,192 INFO L290 TraceCheckUtils]: 26: Hoare triple {15686#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {15686#true} is VALID [2022-04-27 15:03:21,193 INFO L272 TraceCheckUtils]: 27: Hoare triple {15686#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {15728#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:21,193 INFO L290 TraceCheckUtils]: 28: Hoare triple {15728#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {15686#true} is VALID [2022-04-27 15:03:21,193 INFO L290 TraceCheckUtils]: 29: Hoare triple {15686#true} assume 0 != ~compRegistered~0; {15686#true} is VALID [2022-04-27 15:03:21,194 INFO L272 TraceCheckUtils]: 30: Hoare triple {15686#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {15740#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:21,194 INFO L290 TraceCheckUtils]: 31: Hoare triple {15740#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {15686#true} is VALID [2022-04-27 15:03:21,194 INFO L272 TraceCheckUtils]: 32: Hoare triple {15686#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {15740#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:21,194 INFO L290 TraceCheckUtils]: 33: Hoare triple {15740#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {15686#true} is VALID [2022-04-27 15:03:21,194 INFO L290 TraceCheckUtils]: 34: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,195 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {15686#true} {15686#true} #712#return; {15686#true} is VALID [2022-04-27 15:03:21,195 INFO L290 TraceCheckUtils]: 36: Hoare triple {15686#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {15686#true} is VALID [2022-04-27 15:03:21,195 INFO L290 TraceCheckUtils]: 37: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,195 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {15686#true} {15686#true} #774#return; {15686#true} is VALID [2022-04-27 15:03:21,195 INFO L290 TraceCheckUtils]: 39: Hoare triple {15686#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {15686#true} is VALID [2022-04-27 15:03:21,195 INFO L290 TraceCheckUtils]: 40: Hoare triple {15686#true} assume -1073741802 == ~__cil_tmp7~0; {15686#true} is VALID [2022-04-27 15:03:21,195 INFO L272 TraceCheckUtils]: 41: Hoare triple {15686#true} call stubMoreProcessingRequired(); {15744#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,195 INFO L290 TraceCheckUtils]: 42: Hoare triple {15744#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {15686#true} is VALID [2022-04-27 15:03:21,196 INFO L290 TraceCheckUtils]: 43: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,196 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {15686#true} {15686#true} #776#return; {15686#true} is VALID [2022-04-27 15:03:21,196 INFO L290 TraceCheckUtils]: 45: Hoare triple {15686#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {15686#true} is VALID [2022-04-27 15:03:21,196 INFO L290 TraceCheckUtils]: 46: Hoare triple {15686#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {15686#true} is VALID [2022-04-27 15:03:21,196 INFO L290 TraceCheckUtils]: 47: Hoare triple {15686#true} assume 1 == ~tmp_ndt_7~0; {15686#true} is VALID [2022-04-27 15:03:21,196 INFO L290 TraceCheckUtils]: 48: Hoare triple {15686#true} ~returnVal2~0 := -1073741823; {15686#true} is VALID [2022-04-27 15:03:21,196 INFO L290 TraceCheckUtils]: 49: Hoare triple {15686#true} assume !(~s~0 == ~NP~0); {15686#true} is VALID [2022-04-27 15:03:21,196 INFO L290 TraceCheckUtils]: 50: Hoare triple {15686#true} assume ~s~0 == ~MPR1~0; {15686#true} is VALID [2022-04-27 15:03:21,196 INFO L290 TraceCheckUtils]: 51: Hoare triple {15686#true} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {15686#true} is VALID [2022-04-27 15:03:21,196 INFO L290 TraceCheckUtils]: 52: Hoare triple {15686#true} #res := ~returnVal2~0; {15686#true} is VALID [2022-04-27 15:03:21,196 INFO L290 TraceCheckUtils]: 53: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-04-27 15:03:21,196 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {15686#true} {15686#true} #752#return; {15686#true} is VALID [2022-04-27 15:03:21,197 INFO L290 TraceCheckUtils]: 55: Hoare triple {15686#true} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {15686#true} is VALID [2022-04-27 15:03:21,197 INFO L290 TraceCheckUtils]: 56: Hoare triple {15686#true} assume 259 == ~__cil_tmp23~0; {15686#true} is VALID [2022-04-27 15:03:21,197 INFO L272 TraceCheckUtils]: 57: Hoare triple {15686#true} call #t~ret13 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {15686#true} is VALID [2022-04-27 15:03:21,197 INFO L290 TraceCheckUtils]: 58: Hoare triple {15686#true} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {15686#true} is VALID [2022-04-27 15:03:21,197 INFO L290 TraceCheckUtils]: 59: Hoare triple {15686#true} assume !(~s~0 == ~MPR3~0); {15724#(not (= ~MPR3~0 ~s~0))} is VALID [2022-04-27 15:03:21,197 INFO L290 TraceCheckUtils]: 60: Hoare triple {15724#(not (= ~MPR3~0 ~s~0))} assume !(1 == ~customIrp~0); {15724#(not (= ~MPR3~0 ~s~0))} is VALID [2022-04-27 15:03:21,198 INFO L290 TraceCheckUtils]: 61: Hoare triple {15724#(not (= ~MPR3~0 ~s~0))} assume ~s~0 == ~MPR3~0; {15687#false} is VALID [2022-04-27 15:03:21,198 INFO L272 TraceCheckUtils]: 62: Hoare triple {15687#false} call errorFn(); {15687#false} is VALID [2022-04-27 15:03:21,198 INFO L290 TraceCheckUtils]: 63: Hoare triple {15687#false} assume !false; {15687#false} is VALID [2022-04-27 15:03:21,198 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:21,198 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:21,198 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [230172626] [2022-04-27 15:03:21,199 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [230172626] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:21,199 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:21,199 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-04-27 15:03:21,199 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [489777378] [2022-04-27 15:03:21,199 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:21,199 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) Word has length 64 [2022-04-27 15:03:21,200 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:21,200 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:21,244 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:21,244 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-04-27 15:03:21,244 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:21,244 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-04-27 15:03:21,245 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-04-27 15:03:21,245 INFO L87 Difference]: Start difference. First operand 95 states and 104 transitions. Second operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:21,830 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:21,830 INFO L93 Difference]: Finished difference Result 111 states and 121 transitions. [2022-04-27 15:03:21,830 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-27 15:03:21,831 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) Word has length 64 [2022-04-27 15:03:21,831 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:21,831 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:21,832 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 104 transitions. [2022-04-27 15:03:21,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:21,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 104 transitions. [2022-04-27 15:03:21,833 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 104 transitions. [2022-04-27 15:03:21,921 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 104 edges. 104 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:21,922 INFO L225 Difference]: With dead ends: 111 [2022-04-27 15:03:21,922 INFO L226 Difference]: Without dead ends: 106 [2022-04-27 15:03:21,923 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=52, Unknown=0, NotChecked=0, Total=90 [2022-04-27 15:03:21,923 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 102 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 151 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 240 SdHoareTripleChecker+Invalid, 196 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 151 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:21,924 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [102 Valid, 240 Invalid, 196 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 151 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-04-27 15:03:21,924 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106 states. [2022-04-27 15:03:21,991 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106 to 97. [2022-04-27 15:03:21,991 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:21,992 INFO L82 GeneralOperation]: Start isEquivalent. First operand 106 states. Second operand has 97 states, 73 states have (on average 1.1232876712328768) internal successors, (82), 74 states have internal predecessors, (82), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:21,992 INFO L74 IsIncluded]: Start isIncluded. First operand 106 states. Second operand has 97 states, 73 states have (on average 1.1232876712328768) internal successors, (82), 74 states have internal predecessors, (82), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:21,992 INFO L87 Difference]: Start difference. First operand 106 states. Second operand has 97 states, 73 states have (on average 1.1232876712328768) internal successors, (82), 74 states have internal predecessors, (82), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:21,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:21,994 INFO L93 Difference]: Finished difference Result 106 states and 115 transitions. [2022-04-27 15:03:21,994 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 115 transitions. [2022-04-27 15:03:21,994 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:21,994 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:21,994 INFO L74 IsIncluded]: Start isIncluded. First operand has 97 states, 73 states have (on average 1.1232876712328768) internal successors, (82), 74 states have internal predecessors, (82), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 106 states. [2022-04-27 15:03:21,995 INFO L87 Difference]: Start difference. First operand has 97 states, 73 states have (on average 1.1232876712328768) internal successors, (82), 74 states have internal predecessors, (82), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 106 states. [2022-04-27 15:03:21,996 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:21,996 INFO L93 Difference]: Finished difference Result 106 states and 115 transitions. [2022-04-27 15:03:21,996 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 115 transitions. [2022-04-27 15:03:21,997 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:21,997 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:21,997 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:21,997 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:21,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 73 states have (on average 1.1232876712328768) internal successors, (82), 74 states have internal predecessors, (82), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:21,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 105 transitions. [2022-04-27 15:03:21,999 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 105 transitions. Word has length 64 [2022-04-27 15:03:21,999 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:21,999 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 105 transitions. [2022-04-27 15:03:21,999 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:21,999 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 105 transitions. [2022-04-27 15:03:22,000 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-04-27 15:03:22,000 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:22,000 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:22,000 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-04-27 15:03:22,000 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:22,000 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:22,000 INFO L85 PathProgramCache]: Analyzing trace with hash -348732964, now seen corresponding path program 1 times [2022-04-27 15:03:22,001 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:22,001 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [501011284] [2022-04-27 15:03:22,001 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:22,001 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:22,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:22,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:22,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:22,089 INFO L290 TraceCheckUtils]: 0: Hoare triple {16290#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16250#true} is VALID [2022-04-27 15:03:22,089 INFO L290 TraceCheckUtils]: 1: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,089 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16250#true} {16250#true} #780#return; {16250#true} is VALID [2022-04-27 15:03:22,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:22,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:22,120 INFO L290 TraceCheckUtils]: 0: Hoare triple {16291#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16250#true} is VALID [2022-04-27 15:03:22,120 INFO L290 TraceCheckUtils]: 1: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,120 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16250#true} {16250#true} #714#return; {16250#true} is VALID [2022-04-27 15:03:22,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:22,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:22,138 INFO L290 TraceCheckUtils]: 0: Hoare triple {16292#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16250#true} is VALID [2022-04-27 15:03:22,138 INFO L290 TraceCheckUtils]: 1: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,138 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16250#true} {16250#true} #716#return; {16250#true} is VALID [2022-04-27 15:03:22,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:22,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:22,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-27 15:03:22,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:22,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:22,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:22,191 INFO L290 TraceCheckUtils]: 0: Hoare triple {16307#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {16250#true} is VALID [2022-04-27 15:03:22,191 INFO L290 TraceCheckUtils]: 1: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,192 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16250#true} {16250#true} #712#return; {16250#true} is VALID [2022-04-27 15:03:22,192 INFO L290 TraceCheckUtils]: 0: Hoare triple {16307#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16250#true} is VALID [2022-04-27 15:03:22,192 INFO L272 TraceCheckUtils]: 1: Hoare triple {16250#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {16307#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:22,192 INFO L290 TraceCheckUtils]: 2: Hoare triple {16307#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {16250#true} is VALID [2022-04-27 15:03:22,193 INFO L290 TraceCheckUtils]: 3: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,193 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {16250#true} {16250#true} #712#return; {16250#true} is VALID [2022-04-27 15:03:22,193 INFO L290 TraceCheckUtils]: 5: Hoare triple {16250#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {16250#true} is VALID [2022-04-27 15:03:22,193 INFO L290 TraceCheckUtils]: 6: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,193 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {16250#true} {16250#true} #774#return; {16250#true} is VALID [2022-04-27 15:03:22,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-27 15:03:22,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:22,203 INFO L290 TraceCheckUtils]: 0: Hoare triple {16311#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16250#true} is VALID [2022-04-27 15:03:22,203 INFO L290 TraceCheckUtils]: 1: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,203 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16250#true} {16250#true} #776#return; {16250#true} is VALID [2022-04-27 15:03:22,203 INFO L290 TraceCheckUtils]: 0: Hoare triple {16293#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {16250#true} is VALID [2022-04-27 15:03:22,204 INFO L290 TraceCheckUtils]: 1: Hoare triple {16250#true} assume 0 != ~compRegistered~0; {16250#true} is VALID [2022-04-27 15:03:22,204 INFO L272 TraceCheckUtils]: 2: Hoare triple {16250#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {16307#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:22,204 INFO L290 TraceCheckUtils]: 3: Hoare triple {16307#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16250#true} is VALID [2022-04-27 15:03:22,205 INFO L272 TraceCheckUtils]: 4: Hoare triple {16250#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {16307#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:22,205 INFO L290 TraceCheckUtils]: 5: Hoare triple {16307#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {16250#true} is VALID [2022-04-27 15:03:22,205 INFO L290 TraceCheckUtils]: 6: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,205 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {16250#true} {16250#true} #712#return; {16250#true} is VALID [2022-04-27 15:03:22,205 INFO L290 TraceCheckUtils]: 8: Hoare triple {16250#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {16250#true} is VALID [2022-04-27 15:03:22,206 INFO L290 TraceCheckUtils]: 9: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,206 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {16250#true} {16250#true} #774#return; {16250#true} is VALID [2022-04-27 15:03:22,206 INFO L290 TraceCheckUtils]: 11: Hoare triple {16250#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {16250#true} is VALID [2022-04-27 15:03:22,206 INFO L290 TraceCheckUtils]: 12: Hoare triple {16250#true} assume -1073741802 == ~__cil_tmp7~0; {16250#true} is VALID [2022-04-27 15:03:22,206 INFO L272 TraceCheckUtils]: 13: Hoare triple {16250#true} call stubMoreProcessingRequired(); {16311#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:22,206 INFO L290 TraceCheckUtils]: 14: Hoare triple {16311#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16250#true} is VALID [2022-04-27 15:03:22,206 INFO L290 TraceCheckUtils]: 15: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,206 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {16250#true} {16250#true} #776#return; {16250#true} is VALID [2022-04-27 15:03:22,207 INFO L290 TraceCheckUtils]: 17: Hoare triple {16250#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {16250#true} is VALID [2022-04-27 15:03:22,207 INFO L290 TraceCheckUtils]: 18: Hoare triple {16250#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {16250#true} is VALID [2022-04-27 15:03:22,207 INFO L290 TraceCheckUtils]: 19: Hoare triple {16250#true} assume !(1 == ~tmp_ndt_7~0); {16250#true} is VALID [2022-04-27 15:03:22,207 INFO L290 TraceCheckUtils]: 20: Hoare triple {16250#true} ~returnVal2~0 := 259; {16305#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:22,207 INFO L290 TraceCheckUtils]: 21: Hoare triple {16305#(<= 259 IofCallDriver_~returnVal2~0)} assume !(~s~0 == ~NP~0); {16305#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:22,208 INFO L290 TraceCheckUtils]: 22: Hoare triple {16305#(<= 259 IofCallDriver_~returnVal2~0)} assume ~s~0 == ~MPR1~0; {16305#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:22,208 INFO L290 TraceCheckUtils]: 23: Hoare triple {16305#(<= 259 IofCallDriver_~returnVal2~0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {16305#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:22,208 INFO L290 TraceCheckUtils]: 24: Hoare triple {16305#(<= 259 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {16306#(<= 259 |IofCallDriver_#res|)} is VALID [2022-04-27 15:03:22,209 INFO L290 TraceCheckUtils]: 25: Hoare triple {16306#(<= 259 |IofCallDriver_#res|)} assume true; {16306#(<= 259 |IofCallDriver_#res|)} is VALID [2022-04-27 15:03:22,209 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {16306#(<= 259 |IofCallDriver_#res|)} {16250#true} #752#return; {16288#(<= 259 |KbFilter_PnP_#t~ret12|)} is VALID [2022-04-27 15:03:22,211 INFO L272 TraceCheckUtils]: 0: Hoare triple {16250#true} call ULTIMATE.init(); {16290#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:22,212 INFO L290 TraceCheckUtils]: 1: Hoare triple {16290#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16250#true} is VALID [2022-04-27 15:03:22,212 INFO L290 TraceCheckUtils]: 2: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,212 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {16250#true} {16250#true} #780#return; {16250#true} is VALID [2022-04-27 15:03:22,212 INFO L272 TraceCheckUtils]: 4: Hoare triple {16250#true} call #t~ret83 := main(); {16250#true} is VALID [2022-04-27 15:03:22,212 INFO L290 TraceCheckUtils]: 5: Hoare triple {16250#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {16250#true} is VALID [2022-04-27 15:03:22,213 INFO L272 TraceCheckUtils]: 6: Hoare triple {16250#true} call _BLAST_init(); {16291#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:22,213 INFO L290 TraceCheckUtils]: 7: Hoare triple {16291#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16250#true} is VALID [2022-04-27 15:03:22,213 INFO L290 TraceCheckUtils]: 8: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,213 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {16250#true} {16250#true} #714#return; {16250#true} is VALID [2022-04-27 15:03:22,213 INFO L290 TraceCheckUtils]: 10: Hoare triple {16250#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {16250#true} is VALID [2022-04-27 15:03:22,214 INFO L290 TraceCheckUtils]: 11: Hoare triple {16250#true} assume !(0 == ~irp_choice~0); {16250#true} is VALID [2022-04-27 15:03:22,214 INFO L272 TraceCheckUtils]: 12: Hoare triple {16250#true} call stub_driver_init(); {16292#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:22,214 INFO L290 TraceCheckUtils]: 13: Hoare triple {16292#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16250#true} is VALID [2022-04-27 15:03:22,214 INFO L290 TraceCheckUtils]: 14: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,215 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {16250#true} {16250#true} #716#return; {16250#true} is VALID [2022-04-27 15:03:22,215 INFO L290 TraceCheckUtils]: 16: Hoare triple {16250#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {16250#true} is VALID [2022-04-27 15:03:22,215 INFO L290 TraceCheckUtils]: 17: Hoare triple {16250#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {16250#true} is VALID [2022-04-27 15:03:22,215 INFO L290 TraceCheckUtils]: 18: Hoare triple {16250#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {16250#true} is VALID [2022-04-27 15:03:22,215 INFO L290 TraceCheckUtils]: 19: Hoare triple {16250#true} assume 3 == ~tmp_ndt_3~0; {16250#true} is VALID [2022-04-27 15:03:22,215 INFO L272 TraceCheckUtils]: 20: Hoare triple {16250#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {16250#true} is VALID [2022-04-27 15:03:22,215 INFO L290 TraceCheckUtils]: 21: Hoare triple {16250#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {16250#true} is VALID [2022-04-27 15:03:22,215 INFO L290 TraceCheckUtils]: 22: Hoare triple {16250#true} assume 0 == ~irpStack__MinorFunction~0; {16250#true} is VALID [2022-04-27 15:03:22,215 INFO L290 TraceCheckUtils]: 23: Hoare triple {16250#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {16250#true} is VALID [2022-04-27 15:03:22,215 INFO L290 TraceCheckUtils]: 24: Hoare triple {16250#true} assume !(~s~0 != ~NP~0); {16250#true} is VALID [2022-04-27 15:03:22,215 INFO L290 TraceCheckUtils]: 25: Hoare triple {16250#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {16250#true} is VALID [2022-04-27 15:03:22,215 INFO L290 TraceCheckUtils]: 26: Hoare triple {16250#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {16250#true} is VALID [2022-04-27 15:03:22,216 INFO L272 TraceCheckUtils]: 27: Hoare triple {16250#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {16293#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:22,216 INFO L290 TraceCheckUtils]: 28: Hoare triple {16293#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {16250#true} is VALID [2022-04-27 15:03:22,216 INFO L290 TraceCheckUtils]: 29: Hoare triple {16250#true} assume 0 != ~compRegistered~0; {16250#true} is VALID [2022-04-27 15:03:22,217 INFO L272 TraceCheckUtils]: 30: Hoare triple {16250#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {16307#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:22,217 INFO L290 TraceCheckUtils]: 31: Hoare triple {16307#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16250#true} is VALID [2022-04-27 15:03:22,218 INFO L272 TraceCheckUtils]: 32: Hoare triple {16250#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {16307#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:22,218 INFO L290 TraceCheckUtils]: 33: Hoare triple {16307#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {16250#true} is VALID [2022-04-27 15:03:22,218 INFO L290 TraceCheckUtils]: 34: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,218 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {16250#true} {16250#true} #712#return; {16250#true} is VALID [2022-04-27 15:03:22,218 INFO L290 TraceCheckUtils]: 36: Hoare triple {16250#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {16250#true} is VALID [2022-04-27 15:03:22,218 INFO L290 TraceCheckUtils]: 37: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,218 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {16250#true} {16250#true} #774#return; {16250#true} is VALID [2022-04-27 15:03:22,218 INFO L290 TraceCheckUtils]: 39: Hoare triple {16250#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {16250#true} is VALID [2022-04-27 15:03:22,219 INFO L290 TraceCheckUtils]: 40: Hoare triple {16250#true} assume -1073741802 == ~__cil_tmp7~0; {16250#true} is VALID [2022-04-27 15:03:22,219 INFO L272 TraceCheckUtils]: 41: Hoare triple {16250#true} call stubMoreProcessingRequired(); {16311#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:22,219 INFO L290 TraceCheckUtils]: 42: Hoare triple {16311#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16250#true} is VALID [2022-04-27 15:03:22,219 INFO L290 TraceCheckUtils]: 43: Hoare triple {16250#true} assume true; {16250#true} is VALID [2022-04-27 15:03:22,219 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {16250#true} {16250#true} #776#return; {16250#true} is VALID [2022-04-27 15:03:22,219 INFO L290 TraceCheckUtils]: 45: Hoare triple {16250#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {16250#true} is VALID [2022-04-27 15:03:22,219 INFO L290 TraceCheckUtils]: 46: Hoare triple {16250#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {16250#true} is VALID [2022-04-27 15:03:22,219 INFO L290 TraceCheckUtils]: 47: Hoare triple {16250#true} assume !(1 == ~tmp_ndt_7~0); {16250#true} is VALID [2022-04-27 15:03:22,220 INFO L290 TraceCheckUtils]: 48: Hoare triple {16250#true} ~returnVal2~0 := 259; {16305#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:22,220 INFO L290 TraceCheckUtils]: 49: Hoare triple {16305#(<= 259 IofCallDriver_~returnVal2~0)} assume !(~s~0 == ~NP~0); {16305#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:22,220 INFO L290 TraceCheckUtils]: 50: Hoare triple {16305#(<= 259 IofCallDriver_~returnVal2~0)} assume ~s~0 == ~MPR1~0; {16305#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:22,221 INFO L290 TraceCheckUtils]: 51: Hoare triple {16305#(<= 259 IofCallDriver_~returnVal2~0)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {16305#(<= 259 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:22,221 INFO L290 TraceCheckUtils]: 52: Hoare triple {16305#(<= 259 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {16306#(<= 259 |IofCallDriver_#res|)} is VALID [2022-04-27 15:03:22,221 INFO L290 TraceCheckUtils]: 53: Hoare triple {16306#(<= 259 |IofCallDriver_#res|)} assume true; {16306#(<= 259 |IofCallDriver_#res|)} is VALID [2022-04-27 15:03:22,222 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {16306#(<= 259 |IofCallDriver_#res|)} {16250#true} #752#return; {16288#(<= 259 |KbFilter_PnP_#t~ret12|)} is VALID [2022-04-27 15:03:22,223 INFO L290 TraceCheckUtils]: 55: Hoare triple {16288#(<= 259 |KbFilter_PnP_#t~ret12|)} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {16289#(<= 259 KbFilter_PnP_~status~0)} is VALID [2022-04-27 15:03:22,223 INFO L290 TraceCheckUtils]: 56: Hoare triple {16289#(<= 259 KbFilter_PnP_~status~0)} assume !(259 == ~__cil_tmp23~0); {16289#(<= 259 KbFilter_PnP_~status~0)} is VALID [2022-04-27 15:03:22,223 INFO L290 TraceCheckUtils]: 57: Hoare triple {16289#(<= 259 KbFilter_PnP_~status~0)} assume !(~status~0 >= 0); {16251#false} is VALID [2022-04-27 15:03:22,223 INFO L290 TraceCheckUtils]: 58: Hoare triple {16251#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {16251#false} is VALID [2022-04-27 15:03:22,223 INFO L272 TraceCheckUtils]: 59: Hoare triple {16251#false} call IofCompleteRequest(~Irp, 0); {16251#false} is VALID [2022-04-27 15:03:22,224 INFO L290 TraceCheckUtils]: 60: Hoare triple {16251#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {16251#false} is VALID [2022-04-27 15:03:22,224 INFO L290 TraceCheckUtils]: 61: Hoare triple {16251#false} assume !(~s~0 == ~NP~0); {16251#false} is VALID [2022-04-27 15:03:22,224 INFO L272 TraceCheckUtils]: 62: Hoare triple {16251#false} call errorFn(); {16251#false} is VALID [2022-04-27 15:03:22,224 INFO L290 TraceCheckUtils]: 63: Hoare triple {16251#false} assume !false; {16251#false} is VALID [2022-04-27 15:03:22,224 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:22,224 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:22,224 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [501011284] [2022-04-27 15:03:22,224 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [501011284] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:22,224 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:22,225 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-27 15:03:22,225 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1639547260] [2022-04-27 15:03:22,225 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:22,225 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 64 [2022-04-27 15:03:22,225 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:22,226 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:22,278 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:22,278 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-27 15:03:22,278 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:22,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-27 15:03:22,279 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:22,279 INFO L87 Difference]: Start difference. First operand 97 states and 105 transitions. Second operand has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:23,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:23,253 INFO L93 Difference]: Finished difference Result 110 states and 117 transitions. [2022-04-27 15:03:23,254 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-04-27 15:03:23,254 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 64 [2022-04-27 15:03:23,254 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:23,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:23,255 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 104 transitions. [2022-04-27 15:03:23,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:23,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 104 transitions. [2022-04-27 15:03:23,256 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 10 states and 104 transitions. [2022-04-27 15:03:23,346 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 104 edges. 104 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:23,347 INFO L225 Difference]: With dead ends: 110 [2022-04-27 15:03:23,348 INFO L226 Difference]: Without dead ends: 103 [2022-04-27 15:03:23,348 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=117, Unknown=0, NotChecked=0, Total=156 [2022-04-27 15:03:23,348 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 63 mSDsluCounter, 298 mSDsCounter, 0 mSdLazyCounter, 375 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 375 SdHoareTripleChecker+Invalid, 404 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 375 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:23,348 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 375 Invalid, 404 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 375 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-27 15:03:23,349 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103 states. [2022-04-27 15:03:23,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103 to 97. [2022-04-27 15:03:23,426 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:23,427 INFO L82 GeneralOperation]: Start isEquivalent. First operand 103 states. Second operand has 97 states, 73 states have (on average 1.1095890410958904) internal successors, (81), 74 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:23,427 INFO L74 IsIncluded]: Start isIncluded. First operand 103 states. Second operand has 97 states, 73 states have (on average 1.1095890410958904) internal successors, (81), 74 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:23,427 INFO L87 Difference]: Start difference. First operand 103 states. Second operand has 97 states, 73 states have (on average 1.1095890410958904) internal successors, (81), 74 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:23,428 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:23,428 INFO L93 Difference]: Finished difference Result 103 states and 110 transitions. [2022-04-27 15:03:23,429 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 110 transitions. [2022-04-27 15:03:23,429 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:23,429 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:23,429 INFO L74 IsIncluded]: Start isIncluded. First operand has 97 states, 73 states have (on average 1.1095890410958904) internal successors, (81), 74 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 103 states. [2022-04-27 15:03:23,429 INFO L87 Difference]: Start difference. First operand has 97 states, 73 states have (on average 1.1095890410958904) internal successors, (81), 74 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) Second operand 103 states. [2022-04-27 15:03:23,431 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:23,431 INFO L93 Difference]: Finished difference Result 103 states and 110 transitions. [2022-04-27 15:03:23,431 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 110 transitions. [2022-04-27 15:03:23,431 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:23,431 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:23,431 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:23,431 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:23,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 73 states have (on average 1.1095890410958904) internal successors, (81), 74 states have internal predecessors, (81), 14 states have call successors, (14), 13 states have call predecessors, (14), 9 states have return successors, (9), 9 states have call predecessors, (9), 8 states have call successors, (9) [2022-04-27 15:03:23,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 104 transitions. [2022-04-27 15:03:23,433 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 104 transitions. Word has length 64 [2022-04-27 15:03:23,433 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:23,433 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 104 transitions. [2022-04-27 15:03:23,433 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:23,433 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 104 transitions. [2022-04-27 15:03:23,434 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-04-27 15:03:23,434 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:23,434 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:23,434 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-04-27 15:03:23,434 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:23,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:23,435 INFO L85 PathProgramCache]: Analyzing trace with hash -657469950, now seen corresponding path program 1 times [2022-04-27 15:03:23,435 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:23,435 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1686614112] [2022-04-27 15:03:23,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:23,435 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:23,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:23,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:23,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:23,562 INFO L290 TraceCheckUtils]: 0: Hoare triple {16848#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16808#true} is VALID [2022-04-27 15:03:23,563 INFO L290 TraceCheckUtils]: 1: Hoare triple {16808#true} assume true; {16808#true} is VALID [2022-04-27 15:03:23,563 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16808#true} {16808#true} #780#return; {16808#true} is VALID [2022-04-27 15:03:23,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:23,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:23,608 INFO L290 TraceCheckUtils]: 0: Hoare triple {16849#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16850#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-27 15:03:23,609 INFO L290 TraceCheckUtils]: 1: Hoare triple {16850#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} assume true; {16850#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-27 15:03:23,609 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16850#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} {16808#true} #714#return; {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:23,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:23,628 INFO L290 TraceCheckUtils]: 0: Hoare triple {16851#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16808#true} is VALID [2022-04-27 15:03:23,629 INFO L290 TraceCheckUtils]: 1: Hoare triple {16808#true} assume true; {16808#true} is VALID [2022-04-27 15:03:23,629 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16808#true} {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #716#return; {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:23,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:23,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-27 15:03:23,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:23,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:23,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:23,677 INFO L290 TraceCheckUtils]: 0: Hoare triple {16865#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {16808#true} is VALID [2022-04-27 15:03:23,677 INFO L290 TraceCheckUtils]: 1: Hoare triple {16808#true} assume true; {16808#true} is VALID [2022-04-27 15:03:23,677 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16808#true} {16808#true} #712#return; {16808#true} is VALID [2022-04-27 15:03:23,677 INFO L290 TraceCheckUtils]: 0: Hoare triple {16865#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16808#true} is VALID [2022-04-27 15:03:23,678 INFO L272 TraceCheckUtils]: 1: Hoare triple {16808#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {16865#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:23,678 INFO L290 TraceCheckUtils]: 2: Hoare triple {16865#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {16808#true} is VALID [2022-04-27 15:03:23,678 INFO L290 TraceCheckUtils]: 3: Hoare triple {16808#true} assume true; {16808#true} is VALID [2022-04-27 15:03:23,678 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {16808#true} {16808#true} #712#return; {16808#true} is VALID [2022-04-27 15:03:23,678 INFO L290 TraceCheckUtils]: 5: Hoare triple {16808#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {16808#true} is VALID [2022-04-27 15:03:23,678 INFO L290 TraceCheckUtils]: 6: Hoare triple {16808#true} assume true; {16808#true} is VALID [2022-04-27 15:03:23,678 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {16808#true} {16808#true} #774#return; {16808#true} is VALID [2022-04-27 15:03:23,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-27 15:03:23,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:23,688 INFO L290 TraceCheckUtils]: 0: Hoare triple {16869#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16808#true} is VALID [2022-04-27 15:03:23,688 INFO L290 TraceCheckUtils]: 1: Hoare triple {16808#true} assume true; {16808#true} is VALID [2022-04-27 15:03:23,688 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16808#true} {16808#true} #776#return; {16808#true} is VALID [2022-04-27 15:03:23,688 INFO L290 TraceCheckUtils]: 0: Hoare triple {16852#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {16808#true} is VALID [2022-04-27 15:03:23,688 INFO L290 TraceCheckUtils]: 1: Hoare triple {16808#true} assume 0 != ~compRegistered~0; {16808#true} is VALID [2022-04-27 15:03:23,689 INFO L272 TraceCheckUtils]: 2: Hoare triple {16808#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {16865#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:23,689 INFO L290 TraceCheckUtils]: 3: Hoare triple {16865#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16808#true} is VALID [2022-04-27 15:03:23,689 INFO L272 TraceCheckUtils]: 4: Hoare triple {16808#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {16865#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:23,689 INFO L290 TraceCheckUtils]: 5: Hoare triple {16865#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {16808#true} is VALID [2022-04-27 15:03:23,690 INFO L290 TraceCheckUtils]: 6: Hoare triple {16808#true} assume true; {16808#true} is VALID [2022-04-27 15:03:23,690 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {16808#true} {16808#true} #712#return; {16808#true} is VALID [2022-04-27 15:03:23,690 INFO L290 TraceCheckUtils]: 8: Hoare triple {16808#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {16808#true} is VALID [2022-04-27 15:03:23,690 INFO L290 TraceCheckUtils]: 9: Hoare triple {16808#true} assume true; {16808#true} is VALID [2022-04-27 15:03:23,690 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {16808#true} {16808#true} #774#return; {16808#true} is VALID [2022-04-27 15:03:23,690 INFO L290 TraceCheckUtils]: 11: Hoare triple {16808#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {16808#true} is VALID [2022-04-27 15:03:23,690 INFO L290 TraceCheckUtils]: 12: Hoare triple {16808#true} assume -1073741802 == ~__cil_tmp7~0; {16808#true} is VALID [2022-04-27 15:03:23,691 INFO L272 TraceCheckUtils]: 13: Hoare triple {16808#true} call stubMoreProcessingRequired(); {16869#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:23,691 INFO L290 TraceCheckUtils]: 14: Hoare triple {16869#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16808#true} is VALID [2022-04-27 15:03:23,691 INFO L290 TraceCheckUtils]: 15: Hoare triple {16808#true} assume true; {16808#true} is VALID [2022-04-27 15:03:23,691 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {16808#true} {16808#true} #776#return; {16808#true} is VALID [2022-04-27 15:03:23,691 INFO L290 TraceCheckUtils]: 17: Hoare triple {16808#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {16808#true} is VALID [2022-04-27 15:03:23,691 INFO L290 TraceCheckUtils]: 18: Hoare triple {16808#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {16808#true} is VALID [2022-04-27 15:03:23,691 INFO L290 TraceCheckUtils]: 19: Hoare triple {16808#true} assume 1 == ~tmp_ndt_7~0; {16808#true} is VALID [2022-04-27 15:03:23,691 INFO L290 TraceCheckUtils]: 20: Hoare triple {16808#true} ~returnVal2~0 := -1073741823; {16808#true} is VALID [2022-04-27 15:03:23,691 INFO L290 TraceCheckUtils]: 21: Hoare triple {16808#true} assume !(~s~0 == ~NP~0); {16808#true} is VALID [2022-04-27 15:03:23,691 INFO L290 TraceCheckUtils]: 22: Hoare triple {16808#true} assume ~s~0 == ~MPR1~0; {16808#true} is VALID [2022-04-27 15:03:23,692 INFO L290 TraceCheckUtils]: 23: Hoare triple {16808#true} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {16864#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-27 15:03:23,692 INFO L290 TraceCheckUtils]: 24: Hoare triple {16864#(or (= ~s~0 1) (= ~s~0 ~NP~0))} #res := ~returnVal2~0; {16864#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-27 15:03:23,692 INFO L290 TraceCheckUtils]: 25: Hoare triple {16864#(or (= ~s~0 1) (= ~s~0 ~NP~0))} assume true; {16864#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-27 15:03:23,693 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {16864#(or (= ~s~0 1) (= ~s~0 ~NP~0))} {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #752#return; {16847#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,695 INFO L272 TraceCheckUtils]: 0: Hoare triple {16808#true} call ULTIMATE.init(); {16848#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:23,695 INFO L290 TraceCheckUtils]: 1: Hoare triple {16848#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16808#true} is VALID [2022-04-27 15:03:23,695 INFO L290 TraceCheckUtils]: 2: Hoare triple {16808#true} assume true; {16808#true} is VALID [2022-04-27 15:03:23,696 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {16808#true} {16808#true} #780#return; {16808#true} is VALID [2022-04-27 15:03:23,696 INFO L272 TraceCheckUtils]: 4: Hoare triple {16808#true} call #t~ret83 := main(); {16808#true} is VALID [2022-04-27 15:03:23,696 INFO L290 TraceCheckUtils]: 5: Hoare triple {16808#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {16808#true} is VALID [2022-04-27 15:03:23,697 INFO L272 TraceCheckUtils]: 6: Hoare triple {16808#true} call _BLAST_init(); {16849#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:23,698 INFO L290 TraceCheckUtils]: 7: Hoare triple {16849#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16850#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-27 15:03:23,698 INFO L290 TraceCheckUtils]: 8: Hoare triple {16850#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} assume true; {16850#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} is VALID [2022-04-27 15:03:23,698 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {16850#(and (<= 6 ~MPR3~0) (= (+ (- 1) ~NP~0) 0))} {16808#true} #714#return; {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,699 INFO L290 TraceCheckUtils]: 10: Hoare triple {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,699 INFO L290 TraceCheckUtils]: 11: Hoare triple {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(0 == ~irp_choice~0); {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,700 INFO L272 TraceCheckUtils]: 12: Hoare triple {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} call stub_driver_init(); {16851#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:23,700 INFO L290 TraceCheckUtils]: 13: Hoare triple {16851#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16808#true} is VALID [2022-04-27 15:03:23,700 INFO L290 TraceCheckUtils]: 14: Hoare triple {16808#true} assume true; {16808#true} is VALID [2022-04-27 15:03:23,701 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {16808#true} {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #716#return; {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,701 INFO L290 TraceCheckUtils]: 16: Hoare triple {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,701 INFO L290 TraceCheckUtils]: 17: Hoare triple {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,702 INFO L290 TraceCheckUtils]: 18: Hoare triple {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,702 INFO L290 TraceCheckUtils]: 19: Hoare triple {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume 3 == ~tmp_ndt_3~0; {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,703 INFO L272 TraceCheckUtils]: 20: Hoare triple {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,703 INFO L290 TraceCheckUtils]: 21: Hoare triple {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,704 INFO L290 TraceCheckUtils]: 22: Hoare triple {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume 0 == ~irpStack__MinorFunction~0; {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,704 INFO L290 TraceCheckUtils]: 23: Hoare triple {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,705 INFO L290 TraceCheckUtils]: 24: Hoare triple {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(~s~0 != ~NP~0); {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,705 INFO L290 TraceCheckUtils]: 25: Hoare triple {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,705 INFO L290 TraceCheckUtils]: 26: Hoare triple {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,706 INFO L272 TraceCheckUtils]: 27: Hoare triple {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {16852#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:23,706 INFO L290 TraceCheckUtils]: 28: Hoare triple {16852#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {16808#true} is VALID [2022-04-27 15:03:23,707 INFO L290 TraceCheckUtils]: 29: Hoare triple {16808#true} assume 0 != ~compRegistered~0; {16808#true} is VALID [2022-04-27 15:03:23,707 INFO L272 TraceCheckUtils]: 30: Hoare triple {16808#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {16865#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:23,707 INFO L290 TraceCheckUtils]: 31: Hoare triple {16865#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {16808#true} is VALID [2022-04-27 15:03:23,708 INFO L272 TraceCheckUtils]: 32: Hoare triple {16808#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {16865#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:23,708 INFO L290 TraceCheckUtils]: 33: Hoare triple {16865#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {16808#true} is VALID [2022-04-27 15:03:23,708 INFO L290 TraceCheckUtils]: 34: Hoare triple {16808#true} assume true; {16808#true} is VALID [2022-04-27 15:03:23,708 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {16808#true} {16808#true} #712#return; {16808#true} is VALID [2022-04-27 15:03:23,708 INFO L290 TraceCheckUtils]: 36: Hoare triple {16808#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {16808#true} is VALID [2022-04-27 15:03:23,708 INFO L290 TraceCheckUtils]: 37: Hoare triple {16808#true} assume true; {16808#true} is VALID [2022-04-27 15:03:23,708 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {16808#true} {16808#true} #774#return; {16808#true} is VALID [2022-04-27 15:03:23,709 INFO L290 TraceCheckUtils]: 39: Hoare triple {16808#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {16808#true} is VALID [2022-04-27 15:03:23,709 INFO L290 TraceCheckUtils]: 40: Hoare triple {16808#true} assume -1073741802 == ~__cil_tmp7~0; {16808#true} is VALID [2022-04-27 15:03:23,709 INFO L272 TraceCheckUtils]: 41: Hoare triple {16808#true} call stubMoreProcessingRequired(); {16869#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:23,709 INFO L290 TraceCheckUtils]: 42: Hoare triple {16869#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {16808#true} is VALID [2022-04-27 15:03:23,709 INFO L290 TraceCheckUtils]: 43: Hoare triple {16808#true} assume true; {16808#true} is VALID [2022-04-27 15:03:23,709 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {16808#true} {16808#true} #776#return; {16808#true} is VALID [2022-04-27 15:03:23,709 INFO L290 TraceCheckUtils]: 45: Hoare triple {16808#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {16808#true} is VALID [2022-04-27 15:03:23,709 INFO L290 TraceCheckUtils]: 46: Hoare triple {16808#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {16808#true} is VALID [2022-04-27 15:03:23,710 INFO L290 TraceCheckUtils]: 47: Hoare triple {16808#true} assume 1 == ~tmp_ndt_7~0; {16808#true} is VALID [2022-04-27 15:03:23,710 INFO L290 TraceCheckUtils]: 48: Hoare triple {16808#true} ~returnVal2~0 := -1073741823; {16808#true} is VALID [2022-04-27 15:03:23,710 INFO L290 TraceCheckUtils]: 49: Hoare triple {16808#true} assume !(~s~0 == ~NP~0); {16808#true} is VALID [2022-04-27 15:03:23,710 INFO L290 TraceCheckUtils]: 50: Hoare triple {16808#true} assume ~s~0 == ~MPR1~0; {16808#true} is VALID [2022-04-27 15:03:23,710 INFO L290 TraceCheckUtils]: 51: Hoare triple {16808#true} assume !(259 == ~returnVal2~0);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0; {16864#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-27 15:03:23,710 INFO L290 TraceCheckUtils]: 52: Hoare triple {16864#(or (= ~s~0 1) (= ~s~0 ~NP~0))} #res := ~returnVal2~0; {16864#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-27 15:03:23,711 INFO L290 TraceCheckUtils]: 53: Hoare triple {16864#(or (= ~s~0 1) (= ~s~0 ~NP~0))} assume true; {16864#(or (= ~s~0 1) (= ~s~0 ~NP~0))} is VALID [2022-04-27 15:03:23,712 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {16864#(or (= ~s~0 1) (= ~s~0 ~NP~0))} {16816#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} #752#return; {16847#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,712 INFO L290 TraceCheckUtils]: 55: Hoare triple {16847#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {16847#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,712 INFO L290 TraceCheckUtils]: 56: Hoare triple {16847#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume 259 == ~__cil_tmp23~0; {16847#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,713 INFO L272 TraceCheckUtils]: 57: Hoare triple {16847#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} call #t~ret13 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {16847#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,714 INFO L290 TraceCheckUtils]: 58: Hoare triple {16847#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {16847#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-04-27 15:03:23,714 INFO L290 TraceCheckUtils]: 59: Hoare triple {16847#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume ~s~0 == ~MPR3~0; {16809#false} is VALID [2022-04-27 15:03:23,714 INFO L290 TraceCheckUtils]: 60: Hoare triple {16809#false} assume !(1 == ~setEventCalled~0); {16809#false} is VALID [2022-04-27 15:03:23,714 INFO L290 TraceCheckUtils]: 61: Hoare triple {16809#false} assume !(1 == ~customIrp~0); {16809#false} is VALID [2022-04-27 15:03:23,714 INFO L290 TraceCheckUtils]: 62: Hoare triple {16809#false} assume ~s~0 == ~MPR3~0; {16809#false} is VALID [2022-04-27 15:03:23,714 INFO L272 TraceCheckUtils]: 63: Hoare triple {16809#false} call errorFn(); {16809#false} is VALID [2022-04-27 15:03:23,715 INFO L290 TraceCheckUtils]: 64: Hoare triple {16809#false} assume !false; {16809#false} is VALID [2022-04-27 15:03:23,715 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:23,715 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:23,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1686614112] [2022-04-27 15:03:23,715 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1686614112] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:23,715 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:23,715 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-27 15:03:23,716 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1316546639] [2022-04-27 15:03:23,716 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:23,716 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 6 states have internal predecessors, (47), 4 states have call successors, (11), 10 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 65 [2022-04-27 15:03:23,716 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:23,716 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 6 states have internal predecessors, (47), 4 states have call successors, (11), 10 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-27 15:03:23,768 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:23,769 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-27 15:03:23,769 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:23,769 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-27 15:03:23,769 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=95, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:23,770 INFO L87 Difference]: Start difference. First operand 97 states and 104 transitions. Second operand has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 6 states have internal predecessors, (47), 4 states have call successors, (11), 10 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-27 15:03:24,627 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:24,628 INFO L93 Difference]: Finished difference Result 100 states and 106 transitions. [2022-04-27 15:03:24,628 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-27 15:03:24,628 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 6 states have internal predecessors, (47), 4 states have call successors, (11), 10 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 65 [2022-04-27 15:03:24,628 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:24,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 6 states have internal predecessors, (47), 4 states have call successors, (11), 10 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-27 15:03:24,629 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 101 transitions. [2022-04-27 15:03:24,629 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 6 states have internal predecessors, (47), 4 states have call successors, (11), 10 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-27 15:03:24,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 101 transitions. [2022-04-27 15:03:24,630 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 101 transitions. [2022-04-27 15:03:24,721 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 101 edges. 101 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:24,722 INFO L225 Difference]: With dead ends: 100 [2022-04-27 15:03:24,722 INFO L226 Difference]: Without dead ends: 82 [2022-04-27 15:03:24,722 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-04-27 15:03:24,723 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 205 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 142 mSolverCounterSat, 94 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 206 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 236 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 94 IncrementalHoareTripleChecker+Valid, 142 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:24,723 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [206 Valid, 154 Invalid, 236 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [94 Valid, 142 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-04-27 15:03:24,723 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-04-27 15:03:24,804 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2022-04-27 15:03:24,805 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:24,805 INFO L82 GeneralOperation]: Start isEquivalent. First operand 82 states. Second operand has 82 states, 60 states have (on average 1.1) internal successors, (66), 61 states have internal predecessors, (66), 13 states have call successors, (13), 12 states have call predecessors, (13), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-27 15:03:24,805 INFO L74 IsIncluded]: Start isIncluded. First operand 82 states. Second operand has 82 states, 60 states have (on average 1.1) internal successors, (66), 61 states have internal predecessors, (66), 13 states have call successors, (13), 12 states have call predecessors, (13), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-27 15:03:24,805 INFO L87 Difference]: Start difference. First operand 82 states. Second operand has 82 states, 60 states have (on average 1.1) internal successors, (66), 61 states have internal predecessors, (66), 13 states have call successors, (13), 12 states have call predecessors, (13), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-27 15:03:24,806 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:24,806 INFO L93 Difference]: Finished difference Result 82 states and 87 transitions. [2022-04-27 15:03:24,806 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 87 transitions. [2022-04-27 15:03:24,806 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:24,806 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:24,807 INFO L74 IsIncluded]: Start isIncluded. First operand has 82 states, 60 states have (on average 1.1) internal successors, (66), 61 states have internal predecessors, (66), 13 states have call successors, (13), 12 states have call predecessors, (13), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) Second operand 82 states. [2022-04-27 15:03:24,807 INFO L87 Difference]: Start difference. First operand has 82 states, 60 states have (on average 1.1) internal successors, (66), 61 states have internal predecessors, (66), 13 states have call successors, (13), 12 states have call predecessors, (13), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) Second operand 82 states. [2022-04-27 15:03:24,808 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:24,808 INFO L93 Difference]: Finished difference Result 82 states and 87 transitions. [2022-04-27 15:03:24,808 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 87 transitions. [2022-04-27 15:03:24,808 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:24,808 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:24,809 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:24,809 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:24,809 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 60 states have (on average 1.1) internal successors, (66), 61 states have internal predecessors, (66), 13 states have call successors, (13), 12 states have call predecessors, (13), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-27 15:03:24,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 87 transitions. [2022-04-27 15:03:24,810 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 87 transitions. Word has length 65 [2022-04-27 15:03:24,810 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:24,810 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 87 transitions. [2022-04-27 15:03:24,810 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 6 states have internal predecessors, (47), 4 states have call successors, (11), 10 states have call predecessors, (11), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-27 15:03:24,810 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 87 transitions. [2022-04-27 15:03:24,811 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-04-27 15:03:24,811 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:24,811 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:24,811 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-04-27 15:03:24,811 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:24,812 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:24,812 INFO L85 PathProgramCache]: Analyzing trace with hash 1066121988, now seen corresponding path program 1 times [2022-04-27 15:03:24,812 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:24,812 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [735523838] [2022-04-27 15:03:24,812 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:24,812 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:24,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:24,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:24,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:24,901 INFO L290 TraceCheckUtils]: 0: Hoare triple {17345#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {17306#true} is VALID [2022-04-27 15:03:24,901 INFO L290 TraceCheckUtils]: 1: Hoare triple {17306#true} assume true; {17306#true} is VALID [2022-04-27 15:03:24,901 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17306#true} {17306#true} #780#return; {17306#true} is VALID [2022-04-27 15:03:24,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:24,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:24,927 INFO L290 TraceCheckUtils]: 0: Hoare triple {17346#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17306#true} is VALID [2022-04-27 15:03:24,927 INFO L290 TraceCheckUtils]: 1: Hoare triple {17306#true} assume true; {17306#true} is VALID [2022-04-27 15:03:24,927 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17306#true} {17306#true} #714#return; {17306#true} is VALID [2022-04-27 15:03:24,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:24,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:24,941 INFO L290 TraceCheckUtils]: 0: Hoare triple {17347#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17306#true} is VALID [2022-04-27 15:03:24,942 INFO L290 TraceCheckUtils]: 1: Hoare triple {17306#true} assume true; {17306#true} is VALID [2022-04-27 15:03:24,942 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17306#true} {17306#true} #716#return; {17306#true} is VALID [2022-04-27 15:03:24,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:24,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:24,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-27 15:03:24,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:24,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:24,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:24,985 INFO L290 TraceCheckUtils]: 0: Hoare triple {17360#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:24,985 INFO L290 TraceCheckUtils]: 1: Hoare triple {17344#(= ~setEventCalled~0 1)} assume true; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:24,986 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17344#(= ~setEventCalled~0 1)} {17306#true} #712#return; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:24,986 INFO L290 TraceCheckUtils]: 0: Hoare triple {17360#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {17306#true} is VALID [2022-04-27 15:03:24,987 INFO L272 TraceCheckUtils]: 1: Hoare triple {17306#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {17360#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:24,987 INFO L290 TraceCheckUtils]: 2: Hoare triple {17360#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:24,987 INFO L290 TraceCheckUtils]: 3: Hoare triple {17344#(= ~setEventCalled~0 1)} assume true; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:24,988 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {17344#(= ~setEventCalled~0 1)} {17306#true} #712#return; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:24,988 INFO L290 TraceCheckUtils]: 5: Hoare triple {17344#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:24,988 INFO L290 TraceCheckUtils]: 6: Hoare triple {17344#(= ~setEventCalled~0 1)} assume true; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:24,989 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {17344#(= ~setEventCalled~0 1)} {17306#true} #774#return; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:24,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-27 15:03:24,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:24,997 INFO L290 TraceCheckUtils]: 0: Hoare triple {17364#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {17306#true} is VALID [2022-04-27 15:03:24,998 INFO L290 TraceCheckUtils]: 1: Hoare triple {17306#true} assume true; {17306#true} is VALID [2022-04-27 15:03:24,998 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17306#true} {17344#(= ~setEventCalled~0 1)} #776#return; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:24,998 INFO L290 TraceCheckUtils]: 0: Hoare triple {17348#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {17306#true} is VALID [2022-04-27 15:03:24,998 INFO L290 TraceCheckUtils]: 1: Hoare triple {17306#true} assume 0 != ~compRegistered~0; {17306#true} is VALID [2022-04-27 15:03:24,999 INFO L272 TraceCheckUtils]: 2: Hoare triple {17306#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {17360#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:24,999 INFO L290 TraceCheckUtils]: 3: Hoare triple {17360#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {17306#true} is VALID [2022-04-27 15:03:24,999 INFO L272 TraceCheckUtils]: 4: Hoare triple {17306#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {17360#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:25,000 INFO L290 TraceCheckUtils]: 5: Hoare triple {17360#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,000 INFO L290 TraceCheckUtils]: 6: Hoare triple {17344#(= ~setEventCalled~0 1)} assume true; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,001 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {17344#(= ~setEventCalled~0 1)} {17306#true} #712#return; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,001 INFO L290 TraceCheckUtils]: 8: Hoare triple {17344#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,001 INFO L290 TraceCheckUtils]: 9: Hoare triple {17344#(= ~setEventCalled~0 1)} assume true; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,002 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {17344#(= ~setEventCalled~0 1)} {17306#true} #774#return; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,002 INFO L290 TraceCheckUtils]: 11: Hoare triple {17344#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,002 INFO L290 TraceCheckUtils]: 12: Hoare triple {17344#(= ~setEventCalled~0 1)} assume -1073741802 == ~__cil_tmp7~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,003 INFO L272 TraceCheckUtils]: 13: Hoare triple {17344#(= ~setEventCalled~0 1)} call stubMoreProcessingRequired(); {17364#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:25,003 INFO L290 TraceCheckUtils]: 14: Hoare triple {17364#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {17306#true} is VALID [2022-04-27 15:03:25,003 INFO L290 TraceCheckUtils]: 15: Hoare triple {17306#true} assume true; {17306#true} is VALID [2022-04-27 15:03:25,003 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {17306#true} {17344#(= ~setEventCalled~0 1)} #776#return; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,004 INFO L290 TraceCheckUtils]: 17: Hoare triple {17344#(= ~setEventCalled~0 1)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,004 INFO L290 TraceCheckUtils]: 18: Hoare triple {17344#(= ~setEventCalled~0 1)} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,004 INFO L290 TraceCheckUtils]: 19: Hoare triple {17344#(= ~setEventCalled~0 1)} assume !(1 == ~tmp_ndt_7~0); {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,005 INFO L290 TraceCheckUtils]: 20: Hoare triple {17344#(= ~setEventCalled~0 1)} ~returnVal2~0 := 259; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,005 INFO L290 TraceCheckUtils]: 21: Hoare triple {17344#(= ~setEventCalled~0 1)} assume !(~s~0 == ~NP~0); {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,005 INFO L290 TraceCheckUtils]: 22: Hoare triple {17344#(= ~setEventCalled~0 1)} assume ~s~0 == ~MPR1~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,005 INFO L290 TraceCheckUtils]: 23: Hoare triple {17344#(= ~setEventCalled~0 1)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,006 INFO L290 TraceCheckUtils]: 24: Hoare triple {17344#(= ~setEventCalled~0 1)} #res := ~returnVal2~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,006 INFO L290 TraceCheckUtils]: 25: Hoare triple {17344#(= ~setEventCalled~0 1)} assume true; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,007 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {17344#(= ~setEventCalled~0 1)} {17306#true} #752#return; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,008 INFO L272 TraceCheckUtils]: 0: Hoare triple {17306#true} call ULTIMATE.init(); {17345#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:25,008 INFO L290 TraceCheckUtils]: 1: Hoare triple {17345#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {17306#true} is VALID [2022-04-27 15:03:25,008 INFO L290 TraceCheckUtils]: 2: Hoare triple {17306#true} assume true; {17306#true} is VALID [2022-04-27 15:03:25,008 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {17306#true} {17306#true} #780#return; {17306#true} is VALID [2022-04-27 15:03:25,009 INFO L272 TraceCheckUtils]: 4: Hoare triple {17306#true} call #t~ret83 := main(); {17306#true} is VALID [2022-04-27 15:03:25,009 INFO L290 TraceCheckUtils]: 5: Hoare triple {17306#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {17306#true} is VALID [2022-04-27 15:03:25,010 INFO L272 TraceCheckUtils]: 6: Hoare triple {17306#true} call _BLAST_init(); {17346#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:25,010 INFO L290 TraceCheckUtils]: 7: Hoare triple {17346#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17306#true} is VALID [2022-04-27 15:03:25,010 INFO L290 TraceCheckUtils]: 8: Hoare triple {17306#true} assume true; {17306#true} is VALID [2022-04-27 15:03:25,010 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {17306#true} {17306#true} #714#return; {17306#true} is VALID [2022-04-27 15:03:25,010 INFO L290 TraceCheckUtils]: 10: Hoare triple {17306#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {17306#true} is VALID [2022-04-27 15:03:25,010 INFO L290 TraceCheckUtils]: 11: Hoare triple {17306#true} assume !(0 == ~irp_choice~0); {17306#true} is VALID [2022-04-27 15:03:25,011 INFO L272 TraceCheckUtils]: 12: Hoare triple {17306#true} call stub_driver_init(); {17347#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:25,011 INFO L290 TraceCheckUtils]: 13: Hoare triple {17347#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17306#true} is VALID [2022-04-27 15:03:25,011 INFO L290 TraceCheckUtils]: 14: Hoare triple {17306#true} assume true; {17306#true} is VALID [2022-04-27 15:03:25,011 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {17306#true} {17306#true} #716#return; {17306#true} is VALID [2022-04-27 15:03:25,011 INFO L290 TraceCheckUtils]: 16: Hoare triple {17306#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {17306#true} is VALID [2022-04-27 15:03:25,011 INFO L290 TraceCheckUtils]: 17: Hoare triple {17306#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {17306#true} is VALID [2022-04-27 15:03:25,011 INFO L290 TraceCheckUtils]: 18: Hoare triple {17306#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {17306#true} is VALID [2022-04-27 15:03:25,011 INFO L290 TraceCheckUtils]: 19: Hoare triple {17306#true} assume 3 == ~tmp_ndt_3~0; {17306#true} is VALID [2022-04-27 15:03:25,011 INFO L272 TraceCheckUtils]: 20: Hoare triple {17306#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {17306#true} is VALID [2022-04-27 15:03:25,011 INFO L290 TraceCheckUtils]: 21: Hoare triple {17306#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {17306#true} is VALID [2022-04-27 15:03:25,026 INFO L290 TraceCheckUtils]: 22: Hoare triple {17306#true} assume 0 == ~irpStack__MinorFunction~0; {17306#true} is VALID [2022-04-27 15:03:25,026 INFO L290 TraceCheckUtils]: 23: Hoare triple {17306#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {17306#true} is VALID [2022-04-27 15:03:25,026 INFO L290 TraceCheckUtils]: 24: Hoare triple {17306#true} assume !(~s~0 != ~NP~0); {17306#true} is VALID [2022-04-27 15:03:25,026 INFO L290 TraceCheckUtils]: 25: Hoare triple {17306#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {17306#true} is VALID [2022-04-27 15:03:25,026 INFO L290 TraceCheckUtils]: 26: Hoare triple {17306#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {17306#true} is VALID [2022-04-27 15:03:25,027 INFO L272 TraceCheckUtils]: 27: Hoare triple {17306#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {17348#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:25,027 INFO L290 TraceCheckUtils]: 28: Hoare triple {17348#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {17306#true} is VALID [2022-04-27 15:03:25,027 INFO L290 TraceCheckUtils]: 29: Hoare triple {17306#true} assume 0 != ~compRegistered~0; {17306#true} is VALID [2022-04-27 15:03:25,044 INFO L272 TraceCheckUtils]: 30: Hoare triple {17306#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {17360#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:25,044 INFO L290 TraceCheckUtils]: 31: Hoare triple {17360#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {17306#true} is VALID [2022-04-27 15:03:25,044 INFO L272 TraceCheckUtils]: 32: Hoare triple {17306#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {17360#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:25,045 INFO L290 TraceCheckUtils]: 33: Hoare triple {17360#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,045 INFO L290 TraceCheckUtils]: 34: Hoare triple {17344#(= ~setEventCalled~0 1)} assume true; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,046 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {17344#(= ~setEventCalled~0 1)} {17306#true} #712#return; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,046 INFO L290 TraceCheckUtils]: 36: Hoare triple {17344#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,046 INFO L290 TraceCheckUtils]: 37: Hoare triple {17344#(= ~setEventCalled~0 1)} assume true; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,047 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {17344#(= ~setEventCalled~0 1)} {17306#true} #774#return; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,047 INFO L290 TraceCheckUtils]: 39: Hoare triple {17344#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,048 INFO L290 TraceCheckUtils]: 40: Hoare triple {17344#(= ~setEventCalled~0 1)} assume -1073741802 == ~__cil_tmp7~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,048 INFO L272 TraceCheckUtils]: 41: Hoare triple {17344#(= ~setEventCalled~0 1)} call stubMoreProcessingRequired(); {17364#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:25,048 INFO L290 TraceCheckUtils]: 42: Hoare triple {17364#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {17306#true} is VALID [2022-04-27 15:03:25,048 INFO L290 TraceCheckUtils]: 43: Hoare triple {17306#true} assume true; {17306#true} is VALID [2022-04-27 15:03:25,049 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {17306#true} {17344#(= ~setEventCalled~0 1)} #776#return; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,049 INFO L290 TraceCheckUtils]: 45: Hoare triple {17344#(= ~setEventCalled~0 1)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,049 INFO L290 TraceCheckUtils]: 46: Hoare triple {17344#(= ~setEventCalled~0 1)} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,049 INFO L290 TraceCheckUtils]: 47: Hoare triple {17344#(= ~setEventCalled~0 1)} assume !(1 == ~tmp_ndt_7~0); {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,050 INFO L290 TraceCheckUtils]: 48: Hoare triple {17344#(= ~setEventCalled~0 1)} ~returnVal2~0 := 259; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,050 INFO L290 TraceCheckUtils]: 49: Hoare triple {17344#(= ~setEventCalled~0 1)} assume !(~s~0 == ~NP~0); {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,050 INFO L290 TraceCheckUtils]: 50: Hoare triple {17344#(= ~setEventCalled~0 1)} assume ~s~0 == ~MPR1~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,051 INFO L290 TraceCheckUtils]: 51: Hoare triple {17344#(= ~setEventCalled~0 1)} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,051 INFO L290 TraceCheckUtils]: 52: Hoare triple {17344#(= ~setEventCalled~0 1)} #res := ~returnVal2~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,051 INFO L290 TraceCheckUtils]: 53: Hoare triple {17344#(= ~setEventCalled~0 1)} assume true; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,052 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {17344#(= ~setEventCalled~0 1)} {17306#true} #752#return; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,052 INFO L290 TraceCheckUtils]: 55: Hoare triple {17344#(= ~setEventCalled~0 1)} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,052 INFO L290 TraceCheckUtils]: 56: Hoare triple {17344#(= ~setEventCalled~0 1)} assume 259 == ~__cil_tmp23~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,053 INFO L272 TraceCheckUtils]: 57: Hoare triple {17344#(= ~setEventCalled~0 1)} call #t~ret13 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,054 INFO L290 TraceCheckUtils]: 58: Hoare triple {17344#(= ~setEventCalled~0 1)} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,055 INFO L290 TraceCheckUtils]: 59: Hoare triple {17344#(= ~setEventCalled~0 1)} assume ~s~0 == ~MPR3~0; {17344#(= ~setEventCalled~0 1)} is VALID [2022-04-27 15:03:25,056 INFO L290 TraceCheckUtils]: 60: Hoare triple {17344#(= ~setEventCalled~0 1)} assume !(1 == ~setEventCalled~0); {17307#false} is VALID [2022-04-27 15:03:25,056 INFO L290 TraceCheckUtils]: 61: Hoare triple {17307#false} assume !(1 == ~customIrp~0); {17307#false} is VALID [2022-04-27 15:03:25,056 INFO L290 TraceCheckUtils]: 62: Hoare triple {17307#false} assume ~s~0 == ~MPR3~0; {17307#false} is VALID [2022-04-27 15:03:25,056 INFO L272 TraceCheckUtils]: 63: Hoare triple {17307#false} call errorFn(); {17307#false} is VALID [2022-04-27 15:03:25,056 INFO L290 TraceCheckUtils]: 64: Hoare triple {17307#false} assume !false; {17307#false} is VALID [2022-04-27 15:03:25,056 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:25,057 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:25,057 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [735523838] [2022-04-27 15:03:25,057 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [735523838] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:25,057 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:25,057 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-04-27 15:03:25,057 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1304513773] [2022-04-27 15:03:25,057 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:25,058 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 65 [2022-04-27 15:03:25,058 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:25,058 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-27 15:03:25,102 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:25,102 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-04-27 15:03:25,103 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:25,103 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-04-27 15:03:25,103 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-04-27 15:03:25,103 INFO L87 Difference]: Start difference. First operand 82 states and 87 transitions. Second operand has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-27 15:03:25,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:25,580 INFO L93 Difference]: Finished difference Result 98 states and 104 transitions. [2022-04-27 15:03:25,580 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-27 15:03:25,580 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 65 [2022-04-27 15:03:25,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:25,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-27 15:03:25,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 104 transitions. [2022-04-27 15:03:25,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-27 15:03:25,582 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 104 transitions. [2022-04-27 15:03:25,583 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 104 transitions. [2022-04-27 15:03:25,691 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 104 edges. 104 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:25,692 INFO L225 Difference]: With dead ends: 98 [2022-04-27 15:03:25,692 INFO L226 Difference]: Without dead ends: 78 [2022-04-27 15:03:25,692 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 10 SyntacticMatches, 3 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=84, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:25,693 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 71 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 99 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 131 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 99 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:25,693 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [71 Valid, 154 Invalid, 131 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 99 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-04-27 15:03:25,693 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-04-27 15:03:25,748 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-04-27 15:03:25,748 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:25,748 INFO L82 GeneralOperation]: Start isEquivalent. First operand 78 states. Second operand has 78 states, 57 states have (on average 1.0701754385964912) internal successors, (61), 57 states have internal predecessors, (61), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-27 15:03:25,748 INFO L74 IsIncluded]: Start isIncluded. First operand 78 states. Second operand has 78 states, 57 states have (on average 1.0701754385964912) internal successors, (61), 57 states have internal predecessors, (61), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-27 15:03:25,749 INFO L87 Difference]: Start difference. First operand 78 states. Second operand has 78 states, 57 states have (on average 1.0701754385964912) internal successors, (61), 57 states have internal predecessors, (61), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-27 15:03:25,750 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:25,750 INFO L93 Difference]: Finished difference Result 78 states and 81 transitions. [2022-04-27 15:03:25,750 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 81 transitions. [2022-04-27 15:03:25,750 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:25,750 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:25,750 INFO L74 IsIncluded]: Start isIncluded. First operand has 78 states, 57 states have (on average 1.0701754385964912) internal successors, (61), 57 states have internal predecessors, (61), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) Second operand 78 states. [2022-04-27 15:03:25,751 INFO L87 Difference]: Start difference. First operand has 78 states, 57 states have (on average 1.0701754385964912) internal successors, (61), 57 states have internal predecessors, (61), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) Second operand 78 states. [2022-04-27 15:03:25,752 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:25,752 INFO L93 Difference]: Finished difference Result 78 states and 81 transitions. [2022-04-27 15:03:25,752 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 81 transitions. [2022-04-27 15:03:25,752 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:25,752 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:25,752 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:25,752 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:25,752 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 57 states have (on average 1.0701754385964912) internal successors, (61), 57 states have internal predecessors, (61), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-27 15:03:25,753 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 81 transitions. [2022-04-27 15:03:25,753 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 81 transitions. Word has length 65 [2022-04-27 15:03:25,754 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:25,754 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 81 transitions. [2022-04-27 15:03:25,754 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (11), 9 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-04-27 15:03:25,754 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 81 transitions. [2022-04-27 15:03:25,754 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-04-27 15:03:25,754 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:25,755 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:25,755 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-04-27 15:03:25,755 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:25,755 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:25,755 INFO L85 PathProgramCache]: Analyzing trace with hash 1874002193, now seen corresponding path program 1 times [2022-04-27 15:03:25,755 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:25,755 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1117942700] [2022-04-27 15:03:25,755 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:25,756 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:25,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:25,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:25,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:25,844 INFO L290 TraceCheckUtils]: 0: Hoare triple {17813#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {17773#true} is VALID [2022-04-27 15:03:25,844 INFO L290 TraceCheckUtils]: 1: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,844 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17773#true} {17773#true} #780#return; {17773#true} is VALID [2022-04-27 15:03:25,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:25,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:25,877 INFO L290 TraceCheckUtils]: 0: Hoare triple {17814#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17773#true} is VALID [2022-04-27 15:03:25,877 INFO L290 TraceCheckUtils]: 1: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,877 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17773#true} {17773#true} #714#return; {17773#true} is VALID [2022-04-27 15:03:25,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:25,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:25,894 INFO L290 TraceCheckUtils]: 0: Hoare triple {17815#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17773#true} is VALID [2022-04-27 15:03:25,895 INFO L290 TraceCheckUtils]: 1: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,895 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17773#true} {17773#true} #716#return; {17773#true} is VALID [2022-04-27 15:03:25,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:25,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:25,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-27 15:03:25,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:25,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:25,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:25,956 INFO L290 TraceCheckUtils]: 0: Hoare triple {17830#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17773#true} is VALID [2022-04-27 15:03:25,956 INFO L290 TraceCheckUtils]: 1: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,956 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17773#true} {17773#true} #712#return; {17773#true} is VALID [2022-04-27 15:03:25,957 INFO L290 TraceCheckUtils]: 0: Hoare triple {17830#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {17773#true} is VALID [2022-04-27 15:03:25,957 INFO L272 TraceCheckUtils]: 1: Hoare triple {17773#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {17830#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:25,957 INFO L290 TraceCheckUtils]: 2: Hoare triple {17830#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17773#true} is VALID [2022-04-27 15:03:25,957 INFO L290 TraceCheckUtils]: 3: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,958 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {17773#true} {17773#true} #712#return; {17773#true} is VALID [2022-04-27 15:03:25,958 INFO L290 TraceCheckUtils]: 5: Hoare triple {17773#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {17773#true} is VALID [2022-04-27 15:03:25,958 INFO L290 TraceCheckUtils]: 6: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,958 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {17773#true} {17773#true} #774#return; {17773#true} is VALID [2022-04-27 15:03:25,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-27 15:03:25,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:25,970 INFO L290 TraceCheckUtils]: 0: Hoare triple {17834#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {17773#true} is VALID [2022-04-27 15:03:25,970 INFO L290 TraceCheckUtils]: 1: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,970 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17773#true} {17773#true} #776#return; {17773#true} is VALID [2022-04-27 15:03:25,970 INFO L290 TraceCheckUtils]: 0: Hoare triple {17816#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {17773#true} is VALID [2022-04-27 15:03:25,971 INFO L290 TraceCheckUtils]: 1: Hoare triple {17773#true} assume 0 != ~compRegistered~0; {17773#true} is VALID [2022-04-27 15:03:25,971 INFO L272 TraceCheckUtils]: 2: Hoare triple {17773#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {17830#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:25,971 INFO L290 TraceCheckUtils]: 3: Hoare triple {17830#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {17773#true} is VALID [2022-04-27 15:03:25,972 INFO L272 TraceCheckUtils]: 4: Hoare triple {17773#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {17830#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:25,972 INFO L290 TraceCheckUtils]: 5: Hoare triple {17830#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17773#true} is VALID [2022-04-27 15:03:25,972 INFO L290 TraceCheckUtils]: 6: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,972 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {17773#true} {17773#true} #712#return; {17773#true} is VALID [2022-04-27 15:03:25,972 INFO L290 TraceCheckUtils]: 8: Hoare triple {17773#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {17773#true} is VALID [2022-04-27 15:03:25,972 INFO L290 TraceCheckUtils]: 9: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,973 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {17773#true} {17773#true} #774#return; {17773#true} is VALID [2022-04-27 15:03:25,973 INFO L290 TraceCheckUtils]: 11: Hoare triple {17773#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {17773#true} is VALID [2022-04-27 15:03:25,973 INFO L290 TraceCheckUtils]: 12: Hoare triple {17773#true} assume -1073741802 == ~__cil_tmp7~0; {17773#true} is VALID [2022-04-27 15:03:25,973 INFO L272 TraceCheckUtils]: 13: Hoare triple {17773#true} call stubMoreProcessingRequired(); {17834#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:25,973 INFO L290 TraceCheckUtils]: 14: Hoare triple {17834#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {17773#true} is VALID [2022-04-27 15:03:25,973 INFO L290 TraceCheckUtils]: 15: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,973 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {17773#true} {17773#true} #776#return; {17773#true} is VALID [2022-04-27 15:03:25,973 INFO L290 TraceCheckUtils]: 17: Hoare triple {17773#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {17773#true} is VALID [2022-04-27 15:03:25,974 INFO L290 TraceCheckUtils]: 18: Hoare triple {17773#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {17773#true} is VALID [2022-04-27 15:03:25,974 INFO L290 TraceCheckUtils]: 19: Hoare triple {17773#true} assume !(1 == ~tmp_ndt_7~0); {17773#true} is VALID [2022-04-27 15:03:25,974 INFO L290 TraceCheckUtils]: 20: Hoare triple {17773#true} ~returnVal2~0 := 259; {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:25,974 INFO L290 TraceCheckUtils]: 21: Hoare triple {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:25,975 INFO L290 TraceCheckUtils]: 22: Hoare triple {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~MPR1~0; {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:25,975 INFO L290 TraceCheckUtils]: 23: Hoare triple {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:25,976 INFO L290 TraceCheckUtils]: 24: Hoare triple {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {17829#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2022-04-27 15:03:25,976 INFO L290 TraceCheckUtils]: 25: Hoare triple {17829#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} assume true; {17829#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2022-04-27 15:03:25,977 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {17829#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} {17773#true} #752#return; {17811#(and (<= |KbFilter_PnP_#t~ret12| 259) (< 258 |KbFilter_PnP_#t~ret12|))} is VALID [2022-04-27 15:03:25,978 INFO L272 TraceCheckUtils]: 0: Hoare triple {17773#true} call ULTIMATE.init(); {17813#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:25,978 INFO L290 TraceCheckUtils]: 1: Hoare triple {17813#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {17773#true} is VALID [2022-04-27 15:03:25,979 INFO L290 TraceCheckUtils]: 2: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,979 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {17773#true} {17773#true} #780#return; {17773#true} is VALID [2022-04-27 15:03:25,979 INFO L272 TraceCheckUtils]: 4: Hoare triple {17773#true} call #t~ret83 := main(); {17773#true} is VALID [2022-04-27 15:03:25,979 INFO L290 TraceCheckUtils]: 5: Hoare triple {17773#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {17773#true} is VALID [2022-04-27 15:03:25,980 INFO L272 TraceCheckUtils]: 6: Hoare triple {17773#true} call _BLAST_init(); {17814#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:25,980 INFO L290 TraceCheckUtils]: 7: Hoare triple {17814#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17773#true} is VALID [2022-04-27 15:03:25,980 INFO L290 TraceCheckUtils]: 8: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,980 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {17773#true} {17773#true} #714#return; {17773#true} is VALID [2022-04-27 15:03:25,980 INFO L290 TraceCheckUtils]: 10: Hoare triple {17773#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {17773#true} is VALID [2022-04-27 15:03:25,980 INFO L290 TraceCheckUtils]: 11: Hoare triple {17773#true} assume !(0 == ~irp_choice~0); {17773#true} is VALID [2022-04-27 15:03:25,981 INFO L272 TraceCheckUtils]: 12: Hoare triple {17773#true} call stub_driver_init(); {17815#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:25,981 INFO L290 TraceCheckUtils]: 13: Hoare triple {17815#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17773#true} is VALID [2022-04-27 15:03:25,981 INFO L290 TraceCheckUtils]: 14: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,981 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {17773#true} {17773#true} #716#return; {17773#true} is VALID [2022-04-27 15:03:25,981 INFO L290 TraceCheckUtils]: 16: Hoare triple {17773#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {17773#true} is VALID [2022-04-27 15:03:25,981 INFO L290 TraceCheckUtils]: 17: Hoare triple {17773#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {17773#true} is VALID [2022-04-27 15:03:25,981 INFO L290 TraceCheckUtils]: 18: Hoare triple {17773#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {17773#true} is VALID [2022-04-27 15:03:25,982 INFO L290 TraceCheckUtils]: 19: Hoare triple {17773#true} assume 3 == ~tmp_ndt_3~0; {17773#true} is VALID [2022-04-27 15:03:25,982 INFO L272 TraceCheckUtils]: 20: Hoare triple {17773#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {17773#true} is VALID [2022-04-27 15:03:25,982 INFO L290 TraceCheckUtils]: 21: Hoare triple {17773#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {17773#true} is VALID [2022-04-27 15:03:25,982 INFO L290 TraceCheckUtils]: 22: Hoare triple {17773#true} assume 0 == ~irpStack__MinorFunction~0; {17773#true} is VALID [2022-04-27 15:03:25,982 INFO L290 TraceCheckUtils]: 23: Hoare triple {17773#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {17773#true} is VALID [2022-04-27 15:03:25,982 INFO L290 TraceCheckUtils]: 24: Hoare triple {17773#true} assume !(~s~0 != ~NP~0); {17773#true} is VALID [2022-04-27 15:03:25,982 INFO L290 TraceCheckUtils]: 25: Hoare triple {17773#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {17773#true} is VALID [2022-04-27 15:03:25,982 INFO L290 TraceCheckUtils]: 26: Hoare triple {17773#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {17773#true} is VALID [2022-04-27 15:03:25,983 INFO L272 TraceCheckUtils]: 27: Hoare triple {17773#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {17816#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:25,983 INFO L290 TraceCheckUtils]: 28: Hoare triple {17816#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {17773#true} is VALID [2022-04-27 15:03:25,983 INFO L290 TraceCheckUtils]: 29: Hoare triple {17773#true} assume 0 != ~compRegistered~0; {17773#true} is VALID [2022-04-27 15:03:25,984 INFO L272 TraceCheckUtils]: 30: Hoare triple {17773#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {17830#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:25,984 INFO L290 TraceCheckUtils]: 31: Hoare triple {17830#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {17773#true} is VALID [2022-04-27 15:03:25,984 INFO L272 TraceCheckUtils]: 32: Hoare triple {17773#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {17830#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:25,984 INFO L290 TraceCheckUtils]: 33: Hoare triple {17830#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {17773#true} is VALID [2022-04-27 15:03:25,984 INFO L290 TraceCheckUtils]: 34: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,985 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {17773#true} {17773#true} #712#return; {17773#true} is VALID [2022-04-27 15:03:25,985 INFO L290 TraceCheckUtils]: 36: Hoare triple {17773#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {17773#true} is VALID [2022-04-27 15:03:25,985 INFO L290 TraceCheckUtils]: 37: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,985 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {17773#true} {17773#true} #774#return; {17773#true} is VALID [2022-04-27 15:03:25,985 INFO L290 TraceCheckUtils]: 39: Hoare triple {17773#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {17773#true} is VALID [2022-04-27 15:03:25,985 INFO L290 TraceCheckUtils]: 40: Hoare triple {17773#true} assume -1073741802 == ~__cil_tmp7~0; {17773#true} is VALID [2022-04-27 15:03:25,985 INFO L272 TraceCheckUtils]: 41: Hoare triple {17773#true} call stubMoreProcessingRequired(); {17834#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:25,985 INFO L290 TraceCheckUtils]: 42: Hoare triple {17834#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {17773#true} is VALID [2022-04-27 15:03:25,986 INFO L290 TraceCheckUtils]: 43: Hoare triple {17773#true} assume true; {17773#true} is VALID [2022-04-27 15:03:25,986 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {17773#true} {17773#true} #776#return; {17773#true} is VALID [2022-04-27 15:03:25,986 INFO L290 TraceCheckUtils]: 45: Hoare triple {17773#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {17773#true} is VALID [2022-04-27 15:03:25,986 INFO L290 TraceCheckUtils]: 46: Hoare triple {17773#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {17773#true} is VALID [2022-04-27 15:03:25,986 INFO L290 TraceCheckUtils]: 47: Hoare triple {17773#true} assume !(1 == ~tmp_ndt_7~0); {17773#true} is VALID [2022-04-27 15:03:25,986 INFO L290 TraceCheckUtils]: 48: Hoare triple {17773#true} ~returnVal2~0 := 259; {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:25,987 INFO L290 TraceCheckUtils]: 49: Hoare triple {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:25,987 INFO L290 TraceCheckUtils]: 50: Hoare triple {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~MPR1~0; {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:25,987 INFO L290 TraceCheckUtils]: 51: Hoare triple {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:25,988 INFO L290 TraceCheckUtils]: 52: Hoare triple {17828#(and (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {17829#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2022-04-27 15:03:25,988 INFO L290 TraceCheckUtils]: 53: Hoare triple {17829#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} assume true; {17829#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} is VALID [2022-04-27 15:03:25,989 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {17829#(and (<= 259 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 259))} {17773#true} #752#return; {17811#(and (<= |KbFilter_PnP_#t~ret12| 259) (< 258 |KbFilter_PnP_#t~ret12|))} is VALID [2022-04-27 15:03:25,989 INFO L290 TraceCheckUtils]: 55: Hoare triple {17811#(and (<= |KbFilter_PnP_#t~ret12| 259) (< 258 |KbFilter_PnP_#t~ret12|))} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {17812#(= KbFilter_PnP_~__cil_tmp23~0 259)} is VALID [2022-04-27 15:03:25,990 INFO L290 TraceCheckUtils]: 56: Hoare triple {17812#(= KbFilter_PnP_~__cil_tmp23~0 259)} assume !(259 == ~__cil_tmp23~0); {17774#false} is VALID [2022-04-27 15:03:25,990 INFO L290 TraceCheckUtils]: 57: Hoare triple {17774#false} assume ~status~0 >= 0; {17774#false} is VALID [2022-04-27 15:03:25,990 INFO L290 TraceCheckUtils]: 58: Hoare triple {17774#false} assume ~myStatus~0 >= 0;~devExt__Started~0 := 1;~devExt__Removed~0 := 0;~devExt__SurpriseRemoved~0 := 0; {17774#false} is VALID [2022-04-27 15:03:25,990 INFO L290 TraceCheckUtils]: 59: Hoare triple {17774#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {17774#false} is VALID [2022-04-27 15:03:25,990 INFO L272 TraceCheckUtils]: 60: Hoare triple {17774#false} call IofCompleteRequest(~Irp, 0); {17774#false} is VALID [2022-04-27 15:03:25,990 INFO L290 TraceCheckUtils]: 61: Hoare triple {17774#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {17774#false} is VALID [2022-04-27 15:03:25,990 INFO L290 TraceCheckUtils]: 62: Hoare triple {17774#false} assume !(~s~0 == ~NP~0); {17774#false} is VALID [2022-04-27 15:03:25,990 INFO L272 TraceCheckUtils]: 63: Hoare triple {17774#false} call errorFn(); {17774#false} is VALID [2022-04-27 15:03:25,990 INFO L290 TraceCheckUtils]: 64: Hoare triple {17774#false} assume !false; {17774#false} is VALID [2022-04-27 15:03:25,991 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:25,991 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:25,991 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1117942700] [2022-04-27 15:03:25,991 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1117942700] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:25,991 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:25,991 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-27 15:03:25,991 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1510338370] [2022-04-27 15:03:25,991 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:25,992 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 65 [2022-04-27 15:03:25,992 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:25,992 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:26,036 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:26,036 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-27 15:03:26,036 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:26,037 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-27 15:03:26,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:26,037 INFO L87 Difference]: Start difference. First operand 78 states and 81 transitions. Second operand has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:26,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:26,767 INFO L93 Difference]: Finished difference Result 87 states and 90 transitions. [2022-04-27 15:03:26,767 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-04-27 15:03:26,768 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 65 [2022-04-27 15:03:26,768 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:26,768 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:26,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 90 transitions. [2022-04-27 15:03:26,769 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:26,770 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 90 transitions. [2022-04-27 15:03:26,770 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 10 states and 90 transitions. [2022-04-27 15:03:26,858 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 90 edges. 90 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:26,859 INFO L225 Difference]: With dead ends: 87 [2022-04-27 15:03:26,859 INFO L226 Difference]: Without dead ends: 78 [2022-04-27 15:03:26,859 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=117, Unknown=0, NotChecked=0, Total=156 [2022-04-27 15:03:26,860 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 78 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 244 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 269 SdHoareTripleChecker+Invalid, 284 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 244 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:26,860 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 269 Invalid, 284 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 244 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-27 15:03:26,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-04-27 15:03:26,914 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-04-27 15:03:26,914 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:26,915 INFO L82 GeneralOperation]: Start isEquivalent. First operand 78 states. Second operand has 78 states, 57 states have (on average 1.0526315789473684) internal successors, (60), 57 states have internal predecessors, (60), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-27 15:03:26,915 INFO L74 IsIncluded]: Start isIncluded. First operand 78 states. Second operand has 78 states, 57 states have (on average 1.0526315789473684) internal successors, (60), 57 states have internal predecessors, (60), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-27 15:03:26,915 INFO L87 Difference]: Start difference. First operand 78 states. Second operand has 78 states, 57 states have (on average 1.0526315789473684) internal successors, (60), 57 states have internal predecessors, (60), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-27 15:03:26,916 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:26,916 INFO L93 Difference]: Finished difference Result 78 states and 80 transitions. [2022-04-27 15:03:26,916 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 80 transitions. [2022-04-27 15:03:26,916 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:26,916 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:26,917 INFO L74 IsIncluded]: Start isIncluded. First operand has 78 states, 57 states have (on average 1.0526315789473684) internal successors, (60), 57 states have internal predecessors, (60), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) Second operand 78 states. [2022-04-27 15:03:26,917 INFO L87 Difference]: Start difference. First operand has 78 states, 57 states have (on average 1.0526315789473684) internal successors, (60), 57 states have internal predecessors, (60), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) Second operand 78 states. [2022-04-27 15:03:26,918 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:26,918 INFO L93 Difference]: Finished difference Result 78 states and 80 transitions. [2022-04-27 15:03:26,918 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 80 transitions. [2022-04-27 15:03:26,918 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:26,918 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:26,918 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:26,918 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:26,919 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 57 states have (on average 1.0526315789473684) internal successors, (60), 57 states have internal predecessors, (60), 12 states have call successors, (12), 12 states have call predecessors, (12), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2022-04-27 15:03:26,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 80 transitions. [2022-04-27 15:03:26,920 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 80 transitions. Word has length 65 [2022-04-27 15:03:26,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:26,920 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 80 transitions. [2022-04-27 15:03:26,920 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (11), 8 states have call predecessors, (11), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-04-27 15:03:26,920 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 80 transitions. [2022-04-27 15:03:26,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2022-04-27 15:03:26,921 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:26,921 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:26,921 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-04-27 15:03:26,921 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:26,921 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:26,922 INFO L85 PathProgramCache]: Analyzing trace with hash 2045810187, now seen corresponding path program 1 times [2022-04-27 15:03:26,922 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:26,922 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1979464275] [2022-04-27 15:03:26,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:26,922 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:26,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:27,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:27,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:27,008 INFO L290 TraceCheckUtils]: 0: Hoare triple {18272#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18224#true} is VALID [2022-04-27 15:03:27,008 INFO L290 TraceCheckUtils]: 1: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,008 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18224#true} {18224#true} #780#return; {18224#true} is VALID [2022-04-27 15:03:27,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:27,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:27,034 INFO L290 TraceCheckUtils]: 0: Hoare triple {18273#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18224#true} is VALID [2022-04-27 15:03:27,035 INFO L290 TraceCheckUtils]: 1: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,035 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18224#true} {18224#true} #714#return; {18224#true} is VALID [2022-04-27 15:03:27,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:27,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:27,048 INFO L290 TraceCheckUtils]: 0: Hoare triple {18274#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18224#true} is VALID [2022-04-27 15:03:27,048 INFO L290 TraceCheckUtils]: 1: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,048 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18224#true} {18224#true} #716#return; {18224#true} is VALID [2022-04-27 15:03:27,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:27,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:27,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-27 15:03:27,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:27,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:27,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:27,081 INFO L290 TraceCheckUtils]: 0: Hoare triple {18287#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {18224#true} is VALID [2022-04-27 15:03:27,082 INFO L290 TraceCheckUtils]: 1: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,082 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18224#true} {18224#true} #712#return; {18224#true} is VALID [2022-04-27 15:03:27,082 INFO L290 TraceCheckUtils]: 0: Hoare triple {18287#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {18224#true} is VALID [2022-04-27 15:03:27,082 INFO L272 TraceCheckUtils]: 1: Hoare triple {18224#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {18287#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:27,082 INFO L290 TraceCheckUtils]: 2: Hoare triple {18287#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {18224#true} is VALID [2022-04-27 15:03:27,083 INFO L290 TraceCheckUtils]: 3: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,083 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {18224#true} {18224#true} #712#return; {18224#true} is VALID [2022-04-27 15:03:27,083 INFO L290 TraceCheckUtils]: 5: Hoare triple {18224#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {18224#true} is VALID [2022-04-27 15:03:27,083 INFO L290 TraceCheckUtils]: 6: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,083 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {18224#true} {18224#true} #774#return; {18224#true} is VALID [2022-04-27 15:03:27,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-04-27 15:03:27,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:27,090 INFO L290 TraceCheckUtils]: 0: Hoare triple {18291#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {18224#true} is VALID [2022-04-27 15:03:27,091 INFO L290 TraceCheckUtils]: 1: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,091 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18224#true} {18224#true} #776#return; {18224#true} is VALID [2022-04-27 15:03:27,091 INFO L290 TraceCheckUtils]: 0: Hoare triple {18275#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {18224#true} is VALID [2022-04-27 15:03:27,091 INFO L290 TraceCheckUtils]: 1: Hoare triple {18224#true} assume 0 != ~compRegistered~0; {18224#true} is VALID [2022-04-27 15:03:27,091 INFO L272 TraceCheckUtils]: 2: Hoare triple {18224#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {18287#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:27,092 INFO L290 TraceCheckUtils]: 3: Hoare triple {18287#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {18224#true} is VALID [2022-04-27 15:03:27,092 INFO L272 TraceCheckUtils]: 4: Hoare triple {18224#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {18287#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:27,092 INFO L290 TraceCheckUtils]: 5: Hoare triple {18287#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {18224#true} is VALID [2022-04-27 15:03:27,092 INFO L290 TraceCheckUtils]: 6: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,092 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {18224#true} {18224#true} #712#return; {18224#true} is VALID [2022-04-27 15:03:27,093 INFO L290 TraceCheckUtils]: 8: Hoare triple {18224#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {18224#true} is VALID [2022-04-27 15:03:27,093 INFO L290 TraceCheckUtils]: 9: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,093 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {18224#true} {18224#true} #774#return; {18224#true} is VALID [2022-04-27 15:03:27,093 INFO L290 TraceCheckUtils]: 11: Hoare triple {18224#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {18224#true} is VALID [2022-04-27 15:03:27,093 INFO L290 TraceCheckUtils]: 12: Hoare triple {18224#true} assume -1073741802 == ~__cil_tmp7~0; {18224#true} is VALID [2022-04-27 15:03:27,094 INFO L272 TraceCheckUtils]: 13: Hoare triple {18224#true} call stubMoreProcessingRequired(); {18291#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,094 INFO L290 TraceCheckUtils]: 14: Hoare triple {18291#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {18224#true} is VALID [2022-04-27 15:03:27,094 INFO L290 TraceCheckUtils]: 15: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,094 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {18224#true} {18224#true} #776#return; {18224#true} is VALID [2022-04-27 15:03:27,094 INFO L290 TraceCheckUtils]: 17: Hoare triple {18224#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {18224#true} is VALID [2022-04-27 15:03:27,094 INFO L290 TraceCheckUtils]: 18: Hoare triple {18224#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {18224#true} is VALID [2022-04-27 15:03:27,094 INFO L290 TraceCheckUtils]: 19: Hoare triple {18224#true} assume !(1 == ~tmp_ndt_7~0); {18224#true} is VALID [2022-04-27 15:03:27,094 INFO L290 TraceCheckUtils]: 20: Hoare triple {18224#true} ~returnVal2~0 := 259; {18224#true} is VALID [2022-04-27 15:03:27,094 INFO L290 TraceCheckUtils]: 21: Hoare triple {18224#true} assume !(~s~0 == ~NP~0); {18224#true} is VALID [2022-04-27 15:03:27,094 INFO L290 TraceCheckUtils]: 22: Hoare triple {18224#true} assume ~s~0 == ~MPR1~0; {18224#true} is VALID [2022-04-27 15:03:27,095 INFO L290 TraceCheckUtils]: 23: Hoare triple {18224#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {18262#(= ~MPR3~0 ~s~0)} is VALID [2022-04-27 15:03:27,095 INFO L290 TraceCheckUtils]: 24: Hoare triple {18262#(= ~MPR3~0 ~s~0)} #res := ~returnVal2~0; {18262#(= ~MPR3~0 ~s~0)} is VALID [2022-04-27 15:03:27,095 INFO L290 TraceCheckUtils]: 25: Hoare triple {18262#(= ~MPR3~0 ~s~0)} assume true; {18262#(= ~MPR3~0 ~s~0)} is VALID [2022-04-27 15:03:27,096 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {18262#(= ~MPR3~0 ~s~0)} {18224#true} #752#return; {18262#(= ~MPR3~0 ~s~0)} is VALID [2022-04-27 15:03:27,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2022-04-27 15:03:27,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:27,118 INFO L290 TraceCheckUtils]: 0: Hoare triple {18292#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {18291#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,118 INFO L290 TraceCheckUtils]: 1: Hoare triple {18291#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~MPR3~0); {18293#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,119 INFO L290 TraceCheckUtils]: 2: Hoare triple {18293#(not (= ~MPR3~0 |old(~s~0)|))} assume !(1 == ~customIrp~0); {18293#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,119 INFO L290 TraceCheckUtils]: 3: Hoare triple {18293#(not (= ~MPR3~0 |old(~s~0)|))} assume !(~s~0 == ~MPR3~0); {18293#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,119 INFO L290 TraceCheckUtils]: 4: Hoare triple {18293#(not (= ~MPR3~0 |old(~s~0)|))} havoc ~tmp_ndt_8~0;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~tmp_ndt_8~0 := #t~nondet41;havoc #t~nondet41; {18293#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,119 INFO L290 TraceCheckUtils]: 5: Hoare triple {18293#(not (= ~MPR3~0 |old(~s~0)|))} assume 0 == ~tmp_ndt_8~0; {18293#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,120 INFO L290 TraceCheckUtils]: 6: Hoare triple {18293#(not (= ~MPR3~0 |old(~s~0)|))} #res := 0; {18293#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,120 INFO L290 TraceCheckUtils]: 7: Hoare triple {18293#(not (= ~MPR3~0 |old(~s~0)|))} assume true; {18293#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,121 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {18293#(not (= ~MPR3~0 |old(~s~0)|))} {18262#(= ~MPR3~0 ~s~0)} #754#return; {18225#false} is VALID [2022-04-27 15:03:27,123 INFO L272 TraceCheckUtils]: 0: Hoare triple {18224#true} call ULTIMATE.init(); {18272#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:27,123 INFO L290 TraceCheckUtils]: 1: Hoare triple {18272#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18224#true} is VALID [2022-04-27 15:03:27,123 INFO L290 TraceCheckUtils]: 2: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,123 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {18224#true} {18224#true} #780#return; {18224#true} is VALID [2022-04-27 15:03:27,123 INFO L272 TraceCheckUtils]: 4: Hoare triple {18224#true} call #t~ret83 := main(); {18224#true} is VALID [2022-04-27 15:03:27,123 INFO L290 TraceCheckUtils]: 5: Hoare triple {18224#true} havoc ~status~1;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~irp~0 := #t~nondet23;havoc #t~nondet23;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~irp_choice~0 := #t~nondet24;havoc #t~nondet24;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~devobj~0 := #t~nondet25;havoc #t~nondet25;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {18224#true} is VALID [2022-04-27 15:03:27,124 INFO L272 TraceCheckUtils]: 6: Hoare triple {18224#true} call _BLAST_init(); {18273#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,124 INFO L290 TraceCheckUtils]: 7: Hoare triple {18273#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18224#true} is VALID [2022-04-27 15:03:27,124 INFO L290 TraceCheckUtils]: 8: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,124 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {18224#true} {18224#true} #714#return; {18224#true} is VALID [2022-04-27 15:03:27,125 INFO L290 TraceCheckUtils]: 10: Hoare triple {18224#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {18224#true} is VALID [2022-04-27 15:03:27,125 INFO L290 TraceCheckUtils]: 11: Hoare triple {18224#true} assume !(0 == ~irp_choice~0); {18224#true} is VALID [2022-04-27 15:03:27,125 INFO L272 TraceCheckUtils]: 12: Hoare triple {18224#true} call stub_driver_init(); {18274#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,125 INFO L290 TraceCheckUtils]: 13: Hoare triple {18274#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18224#true} is VALID [2022-04-27 15:03:27,125 INFO L290 TraceCheckUtils]: 14: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,126 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {18224#true} {18224#true} #716#return; {18224#true} is VALID [2022-04-27 15:03:27,126 INFO L290 TraceCheckUtils]: 16: Hoare triple {18224#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_1~0 := #t~nondet26;havoc #t~nondet26; {18224#true} is VALID [2022-04-27 15:03:27,126 INFO L290 TraceCheckUtils]: 17: Hoare triple {18224#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_2~0 := #t~nondet27;havoc #t~nondet27; {18224#true} is VALID [2022-04-27 15:03:27,126 INFO L290 TraceCheckUtils]: 18: Hoare triple {18224#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_3~0 := #t~nondet28;havoc #t~nondet28; {18224#true} is VALID [2022-04-27 15:03:27,126 INFO L290 TraceCheckUtils]: 19: Hoare triple {18224#true} assume 3 == ~tmp_ndt_3~0; {18224#true} is VALID [2022-04-27 15:03:27,126 INFO L272 TraceCheckUtils]: 20: Hoare triple {18224#true} call #t~ret33 := KbFilter_PnP(~devobj~0, ~pirp~0); {18224#true} is VALID [2022-04-27 15:03:27,126 INFO L290 TraceCheckUtils]: 21: Hoare triple {18224#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~event~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet10;havoc #t~nondet10;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet11;havoc #t~nondet11;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {18224#true} is VALID [2022-04-27 15:03:27,126 INFO L290 TraceCheckUtils]: 22: Hoare triple {18224#true} assume 0 == ~irpStack__MinorFunction~0; {18224#true} is VALID [2022-04-27 15:03:27,126 INFO L290 TraceCheckUtils]: 23: Hoare triple {18224#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {18224#true} is VALID [2022-04-27 15:03:27,126 INFO L290 TraceCheckUtils]: 24: Hoare triple {18224#true} assume !(~s~0 != ~NP~0); {18224#true} is VALID [2022-04-27 15:03:27,127 INFO L290 TraceCheckUtils]: 25: Hoare triple {18224#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {18224#true} is VALID [2022-04-27 15:03:27,127 INFO L290 TraceCheckUtils]: 26: Hoare triple {18224#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {18224#true} is VALID [2022-04-27 15:03:27,127 INFO L272 TraceCheckUtils]: 27: Hoare triple {18224#true} call #t~ret12 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {18275#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,127 INFO L290 TraceCheckUtils]: 28: Hoare triple {18275#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~lcontext~0 := #t~nondet36;havoc #t~nondet36;havoc ~__cil_tmp7~0; {18224#true} is VALID [2022-04-27 15:03:27,128 INFO L290 TraceCheckUtils]: 29: Hoare triple {18224#true} assume 0 != ~compRegistered~0; {18224#true} is VALID [2022-04-27 15:03:27,128 INFO L272 TraceCheckUtils]: 30: Hoare triple {18224#true} call #t~ret37 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {18287#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:27,128 INFO L290 TraceCheckUtils]: 31: Hoare triple {18287#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {18224#true} is VALID [2022-04-27 15:03:27,129 INFO L272 TraceCheckUtils]: 32: Hoare triple {18224#true} call #t~ret42 := KeSetEvent(~event~1, 0, 0); {18287#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:27,129 INFO L290 TraceCheckUtils]: 33: Hoare triple {18287#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet40 && #t~nondet40 <= 2147483647;~l~0 := #t~nondet40;havoc #t~nondet40;~setEventCalled~0 := 1;#res := ~l~0; {18224#true} is VALID [2022-04-27 15:03:27,129 INFO L290 TraceCheckUtils]: 34: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,129 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {18224#true} {18224#true} #712#return; {18224#true} is VALID [2022-04-27 15:03:27,129 INFO L290 TraceCheckUtils]: 36: Hoare triple {18224#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;havoc #t~ret42;#res := -1073741802; {18224#true} is VALID [2022-04-27 15:03:27,129 INFO L290 TraceCheckUtils]: 37: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,129 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {18224#true} {18224#true} #774#return; {18224#true} is VALID [2022-04-27 15:03:27,130 INFO L290 TraceCheckUtils]: 39: Hoare triple {18224#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~compRetStatus~0 := #t~ret37;havoc #t~ret37;~__cil_tmp7~0 := ~compRetStatus~0; {18224#true} is VALID [2022-04-27 15:03:27,130 INFO L290 TraceCheckUtils]: 40: Hoare triple {18224#true} assume -1073741802 == ~__cil_tmp7~0; {18224#true} is VALID [2022-04-27 15:03:27,130 INFO L272 TraceCheckUtils]: 41: Hoare triple {18224#true} call stubMoreProcessingRequired(); {18291#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,130 INFO L290 TraceCheckUtils]: 42: Hoare triple {18291#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {18224#true} is VALID [2022-04-27 15:03:27,130 INFO L290 TraceCheckUtils]: 43: Hoare triple {18224#true} assume true; {18224#true} is VALID [2022-04-27 15:03:27,130 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {18224#true} {18224#true} #776#return; {18224#true} is VALID [2022-04-27 15:03:27,130 INFO L290 TraceCheckUtils]: 45: Hoare triple {18224#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~tmp_ndt_6~0 := #t~nondet38;havoc #t~nondet38; {18224#true} is VALID [2022-04-27 15:03:27,130 INFO L290 TraceCheckUtils]: 46: Hoare triple {18224#true} assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet39 && #t~nondet39 <= 2147483647;~tmp_ndt_7~0 := #t~nondet39;havoc #t~nondet39; {18224#true} is VALID [2022-04-27 15:03:27,131 INFO L290 TraceCheckUtils]: 47: Hoare triple {18224#true} assume !(1 == ~tmp_ndt_7~0); {18224#true} is VALID [2022-04-27 15:03:27,131 INFO L290 TraceCheckUtils]: 48: Hoare triple {18224#true} ~returnVal2~0 := 259; {18224#true} is VALID [2022-04-27 15:03:27,131 INFO L290 TraceCheckUtils]: 49: Hoare triple {18224#true} assume !(~s~0 == ~NP~0); {18224#true} is VALID [2022-04-27 15:03:27,131 INFO L290 TraceCheckUtils]: 50: Hoare triple {18224#true} assume ~s~0 == ~MPR1~0; {18224#true} is VALID [2022-04-27 15:03:27,131 INFO L290 TraceCheckUtils]: 51: Hoare triple {18224#true} assume 259 == ~returnVal2~0;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0; {18262#(= ~MPR3~0 ~s~0)} is VALID [2022-04-27 15:03:27,131 INFO L290 TraceCheckUtils]: 52: Hoare triple {18262#(= ~MPR3~0 ~s~0)} #res := ~returnVal2~0; {18262#(= ~MPR3~0 ~s~0)} is VALID [2022-04-27 15:03:27,132 INFO L290 TraceCheckUtils]: 53: Hoare triple {18262#(= ~MPR3~0 ~s~0)} assume true; {18262#(= ~MPR3~0 ~s~0)} is VALID [2022-04-27 15:03:27,132 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {18262#(= ~MPR3~0 ~s~0)} {18224#true} #752#return; {18262#(= ~MPR3~0 ~s~0)} is VALID [2022-04-27 15:03:27,133 INFO L290 TraceCheckUtils]: 55: Hoare triple {18262#(= ~MPR3~0 ~s~0)} assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~status~0 := #t~ret12;havoc #t~ret12;~__cil_tmp23~0 := ~status~0; {18262#(= ~MPR3~0 ~s~0)} is VALID [2022-04-27 15:03:27,133 INFO L290 TraceCheckUtils]: 56: Hoare triple {18262#(= ~MPR3~0 ~s~0)} assume 259 == ~__cil_tmp23~0; {18262#(= ~MPR3~0 ~s~0)} is VALID [2022-04-27 15:03:27,134 INFO L272 TraceCheckUtils]: 57: Hoare triple {18262#(= ~MPR3~0 ~s~0)} call #t~ret13 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {18292#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,134 INFO L290 TraceCheckUtils]: 58: Hoare triple {18292#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {18291#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,135 INFO L290 TraceCheckUtils]: 59: Hoare triple {18291#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~MPR3~0); {18293#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,135 INFO L290 TraceCheckUtils]: 60: Hoare triple {18293#(not (= ~MPR3~0 |old(~s~0)|))} assume !(1 == ~customIrp~0); {18293#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,135 INFO L290 TraceCheckUtils]: 61: Hoare triple {18293#(not (= ~MPR3~0 |old(~s~0)|))} assume !(~s~0 == ~MPR3~0); {18293#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,135 INFO L290 TraceCheckUtils]: 62: Hoare triple {18293#(not (= ~MPR3~0 |old(~s~0)|))} havoc ~tmp_ndt_8~0;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~tmp_ndt_8~0 := #t~nondet41;havoc #t~nondet41; {18293#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,136 INFO L290 TraceCheckUtils]: 63: Hoare triple {18293#(not (= ~MPR3~0 |old(~s~0)|))} assume 0 == ~tmp_ndt_8~0; {18293#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,136 INFO L290 TraceCheckUtils]: 64: Hoare triple {18293#(not (= ~MPR3~0 |old(~s~0)|))} #res := 0; {18293#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,136 INFO L290 TraceCheckUtils]: 65: Hoare triple {18293#(not (= ~MPR3~0 |old(~s~0)|))} assume true; {18293#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,137 INFO L284 TraceCheckUtils]: 66: Hoare quadruple {18293#(not (= ~MPR3~0 |old(~s~0)|))} {18262#(= ~MPR3~0 ~s~0)} #754#return; {18225#false} is VALID [2022-04-27 15:03:27,137 INFO L290 TraceCheckUtils]: 67: Hoare triple {18225#false} assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647;havoc #t~ret13; {18225#false} is VALID [2022-04-27 15:03:27,137 INFO L290 TraceCheckUtils]: 68: Hoare triple {18225#false} assume ~status~0 >= 0; {18225#false} is VALID [2022-04-27 15:03:27,137 INFO L290 TraceCheckUtils]: 69: Hoare triple {18225#false} assume ~myStatus~0 >= 0;~devExt__Started~0 := 1;~devExt__Removed~0 := 0;~devExt__SurpriseRemoved~0 := 0; {18225#false} is VALID [2022-04-27 15:03:27,138 INFO L290 TraceCheckUtils]: 70: Hoare triple {18225#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {18225#false} is VALID [2022-04-27 15:03:27,138 INFO L272 TraceCheckUtils]: 71: Hoare triple {18225#false} call IofCompleteRequest(~Irp, 0); {18225#false} is VALID [2022-04-27 15:03:27,138 INFO L290 TraceCheckUtils]: 72: Hoare triple {18225#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {18225#false} is VALID [2022-04-27 15:03:27,138 INFO L290 TraceCheckUtils]: 73: Hoare triple {18225#false} assume !(~s~0 == ~NP~0); {18225#false} is VALID [2022-04-27 15:03:27,138 INFO L272 TraceCheckUtils]: 74: Hoare triple {18225#false} call errorFn(); {18225#false} is VALID [2022-04-27 15:03:27,138 INFO L290 TraceCheckUtils]: 75: Hoare triple {18225#false} assume !false; {18225#false} is VALID [2022-04-27 15:03:27,138 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:27,138 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:27,139 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1979464275] [2022-04-27 15:03:27,139 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1979464275] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:27,139 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:27,139 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-27 15:03:27,139 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1712092038] [2022-04-27 15:03:27,139 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:27,141 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 5.090909090909091) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (12), 9 states have call predecessors, (12), 3 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) Word has length 76 [2022-04-27 15:03:27,141 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:27,141 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 5.090909090909091) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (12), 9 states have call predecessors, (12), 3 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-04-27 15:03:27,192 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:27,192 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-27 15:03:27,192 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:27,192 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-27 15:03:27,192 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=72, Unknown=0, NotChecked=0, Total=110 [2022-04-27 15:03:27,193 INFO L87 Difference]: Start difference. First operand 78 states and 80 transitions. Second operand has 11 states, 11 states have (on average 5.090909090909091) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (12), 9 states have call predecessors, (12), 3 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-04-27 15:03:27,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:27,791 INFO L93 Difference]: Finished difference Result 78 states and 80 transitions. [2022-04-27 15:03:27,791 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-27 15:03:27,791 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 5.090909090909091) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (12), 9 states have call predecessors, (12), 3 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) Word has length 76 [2022-04-27 15:03:27,791 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:27,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 5.090909090909091) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (12), 9 states have call predecessors, (12), 3 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-04-27 15:03:27,792 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 80 transitions. [2022-04-27 15:03:27,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 5.090909090909091) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (12), 9 states have call predecessors, (12), 3 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-04-27 15:03:27,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 80 transitions. [2022-04-27 15:03:27,794 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 80 transitions. [2022-04-27 15:03:27,863 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:27,863 INFO L225 Difference]: With dead ends: 78 [2022-04-27 15:03:27,863 INFO L226 Difference]: Without dead ends: 0 [2022-04-27 15:03:27,864 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=58, Invalid=98, Unknown=0, NotChecked=0, Total=156 [2022-04-27 15:03:27,864 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 24 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 171 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 190 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 171 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:27,864 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 153 Invalid, 190 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 171 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-04-27 15:03:27,865 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-04-27 15:03:27,865 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-04-27 15:03:27,865 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:27,865 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-04-27 15:03:27,865 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-04-27 15:03:27,865 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-04-27 15:03:27,865 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:27,865 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-04-27 15:03:27,866 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-04-27 15:03:27,866 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:27,866 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:27,866 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-04-27 15:03:27,866 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-04-27 15:03:27,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:27,866 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-04-27 15:03:27,866 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-04-27 15:03:27,866 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:27,866 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:27,866 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:27,866 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:27,866 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-04-27 15:03:27,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-04-27 15:03:27,867 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 76 [2022-04-27 15:03:27,867 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:27,867 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-04-27 15:03:27,867 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 5.090909090909091) internal successors, (56), 5 states have internal predecessors, (56), 3 states have call successors, (12), 9 states have call predecessors, (12), 3 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-04-27 15:03:27,867 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-04-27 15:03:27,867 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:27,869 INFO L805 garLoopResultBuilder]: Registering result SAFE for location errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-04-27 15:03:27,870 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-04-27 15:03:27,871 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-04-27 15:03:33,182 INFO L899 garLoopResultBuilder]: For program point reach_errorEXIT(line 3) no Hoare annotation was computed. [2022-04-27 15:03:33,183 INFO L899 garLoopResultBuilder]: For program point reach_errorENTRY(line 3) no Hoare annotation was computed. [2022-04-27 15:03:33,183 INFO L899 garLoopResultBuilder]: For program point reach_errorFINAL(line 3) no Hoare annotation was computed. [2022-04-27 15:03:33,183 INFO L895 garLoopResultBuilder]: At program point L624(line 624) the Hoare annotation is: (or (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 1) (not (= ~s~0 ~NP~0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1)) (not (= ~s~0 1))) [2022-04-27 15:03:33,183 INFO L895 garLoopResultBuilder]: At program point KbFilter_CompleteENTRY(lines 618 628) the Hoare annotation is: (or (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 1) (not (= ~s~0 ~NP~0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1)) (not (= ~s~0 1))) [2022-04-27 15:03:33,183 INFO L899 garLoopResultBuilder]: For program point L624-1(line 624) no Hoare annotation was computed. [2022-04-27 15:03:33,183 INFO L899 garLoopResultBuilder]: For program point KbFilter_CompleteFINAL(lines 618 628) no Hoare annotation was computed. [2022-04-27 15:03:33,184 INFO L899 garLoopResultBuilder]: For program point KbFilter_CompleteEXIT(lines 618 628) no Hoare annotation was computed. [2022-04-27 15:03:33,184 INFO L899 garLoopResultBuilder]: For program point _BLAST_initFINAL(lines 57 78) no Hoare annotation was computed. [2022-04-27 15:03:33,184 INFO L895 garLoopResultBuilder]: At program point _BLAST_initENTRY(lines 57 78) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (<= ~s~0 ~DC~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~s~0 ~NP~0) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (<= ~DC~0 ~s~0) (= ~SKIP1~0 ~s~0) (= ~MPR1~0 ~s~0) (= ~compRegistered~0 0) (= ~MPR3~0 ~s~0) (= ~s~0 |old(~s~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-27 15:03:33,184 INFO L899 garLoopResultBuilder]: For program point _BLAST_initEXIT(lines 57 78) no Hoare annotation was computed. [2022-04-27 15:03:33,184 INFO L899 garLoopResultBuilder]: For program point L415(lines 415 419) no Hoare annotation was computed. [2022-04-27 15:03:33,184 INFO L899 garLoopResultBuilder]: For program point mainEXIT(lines 295 466) no Hoare annotation was computed. [2022-04-27 15:03:33,184 INFO L895 garLoopResultBuilder]: At program point L374(lines 373 408) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (and (= main_~status~1 0) (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-27 15:03:33,184 INFO L899 garLoopResultBuilder]: For program point L432(lines 432 459) no Hoare annotation was computed. [2022-04-27 15:03:33,184 INFO L899 garLoopResultBuilder]: For program point L358(lines 358 411) no Hoare annotation was computed. [2022-04-27 15:03:33,185 INFO L899 garLoopResultBuilder]: For program point L449(lines 449 457) no Hoare annotation was computed. [2022-04-27 15:03:33,185 INFO L895 garLoopResultBuilder]: At program point L441(lines 432 459) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (or (= ~compRegistered~0 1) (<= ~compRegistered~0 0)) (<= 4 ~SKIP2~0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-27 15:03:33,185 INFO L899 garLoopResultBuilder]: For program point L433(lines 433 439) no Hoare annotation was computed. [2022-04-27 15:03:33,185 INFO L899 garLoopResultBuilder]: For program point L400(line 400) no Hoare annotation was computed. [2022-04-27 15:03:33,185 INFO L895 garLoopResultBuilder]: At program point L359(lines 358 411) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (and (= main_~status~1 0) (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-27 15:03:33,185 INFO L899 garLoopResultBuilder]: For program point L450(lines 450 452) no Hoare annotation was computed. [2022-04-27 15:03:33,185 INFO L895 garLoopResultBuilder]: At program point L376(lines 375 408) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (= main_~status~1 0) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-27 15:03:33,185 INFO L899 garLoopResultBuilder]: For program point L434(lines 434 436) no Hoare annotation was computed. [2022-04-27 15:03:33,186 INFO L899 garLoopResultBuilder]: For program point L368(lines 368 409) no Hoare annotation was computed. [2022-04-27 15:03:33,186 INFO L899 garLoopResultBuilder]: For program point mainFINAL(lines 295 466) no Hoare annotation was computed. [2022-04-27 15:03:33,186 INFO L899 garLoopResultBuilder]: For program point L385(line 385) no Hoare annotation was computed. [2022-04-27 15:03:33,186 INFO L895 garLoopResultBuilder]: At program point mainENTRY(lines 295 466) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (and (= |old(~Executive~0)| ~Executive~0) (<= ~s~0 ~DC~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~s~0 ~NP~0) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (<= ~DC~0 ~s~0) (= ~SKIP1~0 ~s~0) (= ~MPR1~0 ~s~0) (= ~compRegistered~0 0) (= ~MPR3~0 ~s~0) (= ~s~0 |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-27 15:03:33,186 INFO L899 garLoopResultBuilder]: For program point L443(lines 443 447) no Hoare annotation was computed. [2022-04-27 15:03:33,186 INFO L899 garLoopResultBuilder]: For program point L344(lines 330 413) no Hoare annotation was computed. [2022-04-27 15:03:33,186 INFO L895 garLoopResultBuilder]: At program point L369(lines 368 409) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (and (= main_~status~1 0) (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-27 15:03:33,186 INFO L895 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (and (<= ~s~0 ~DC~0) (= main_~status~1 0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= ~DC~0 ~s~0) (= ~SKIP1~0 ~s~0) (= ~MPR1~0 ~s~0) (= ~compRegistered~0 0) (= ~MPR3~0 ~s~0)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-27 15:03:33,186 INFO L899 garLoopResultBuilder]: For program point L328-1(lines 324 465) no Hoare annotation was computed. [2022-04-27 15:03:33,187 INFO L899 garLoopResultBuilder]: For program point L353(lines 353 412) no Hoare annotation was computed. [2022-04-27 15:03:33,187 INFO L899 garLoopResultBuilder]: For program point L395(line 395) no Hoare annotation was computed. [2022-04-27 15:03:33,187 INFO L895 garLoopResultBuilder]: At program point L354(lines 353 412) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (and (= main_~status~1 0) (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-27 15:03:33,187 INFO L895 garLoopResultBuilder]: At program point L445(line 445) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-27 15:03:33,187 INFO L895 garLoopResultBuilder]: At program point L429(lines 422 462) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (or (= ~compRegistered~0 1) (<= ~compRegistered~0 0)) (<= 4 ~SKIP2~0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-27 15:03:33,187 INFO L899 garLoopResultBuilder]: For program point L363(lines 363 410) no Hoare annotation was computed. [2022-04-27 15:03:33,187 INFO L895 garLoopResultBuilder]: At program point L330(lines 324 465) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (or (= ~compRegistered~0 1) (<= ~compRegistered~0 0)) (<= 4 ~SKIP2~0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-27 15:03:33,187 INFO L899 garLoopResultBuilder]: For program point L454(lines 454 456) no Hoare annotation was computed. [2022-04-27 15:03:33,187 INFO L895 garLoopResultBuilder]: At program point L421(lines 414 463) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (and (<= 7 ~IPC~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (or (= ~compRegistered~0 1) (<= ~compRegistered~0 0)) (<= 4 ~SKIP2~0)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-27 15:03:33,188 INFO L899 garLoopResultBuilder]: For program point L380(line 380) no Hoare annotation was computed. [2022-04-27 15:03:33,188 INFO L899 garLoopResultBuilder]: For program point L339(lines 339 342) no Hoare annotation was computed. [2022-04-27 15:03:33,188 INFO L895 garLoopResultBuilder]: At program point L339-2(lines 339 342) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (and (<= 6 ~MPR3~0) (= main_~status~1 0) (<= 7 ~IPC~0) (<= 5 ~MPR1~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (= ~NP~0 1) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-27 15:03:33,188 INFO L899 garLoopResultBuilder]: For program point L430(lines 414 463) no Hoare annotation was computed. [2022-04-27 15:03:33,188 INFO L895 garLoopResultBuilder]: At program point L364(lines 363 410) the Hoare annotation is: (or (not (= |old(~SKIP1~0)| |old(~s~0)|)) (not (<= |old(~DC~0)| |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (= |old(~s~0)| |old(~NP~0)|)) (not (= |old(~s~0)| |old(~MPR1~0)|)) (and (<= 6 ~MPR3~0) (= main_~status~1 0) (<= 7 ~IPC~0) (<= 5 ~MPR1~0) (= 2 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (= ~NP~0 1) (<= 4 ~SKIP2~0) (= ~compRegistered~0 0)) (not (<= |old(~s~0)| |old(~DC~0)|)) (not (= |old(~s~0)| |old(~MPR3~0)|))) [2022-04-27 15:03:33,188 INFO L899 garLoopResultBuilder]: For program point L373(lines 373 408) no Hoare annotation was computed. [2022-04-27 15:03:33,188 INFO L899 garLoopResultBuilder]: For program point L431(lines 431 460) no Hoare annotation was computed. [2022-04-27 15:03:33,188 INFO L899 garLoopResultBuilder]: For program point L423(lines 423 427) no Hoare annotation was computed. [2022-04-27 15:03:33,188 INFO L899 garLoopResultBuilder]: For program point L390(line 390) no Hoare annotation was computed. [2022-04-27 15:03:33,188 INFO L895 garLoopResultBuilder]: At program point L475(line 475) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= ~setEventCalled~0 1)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1))) [2022-04-27 15:03:33,189 INFO L899 garLoopResultBuilder]: For program point L475-1(lines 467 480) no Hoare annotation was computed. [2022-04-27 15:03:33,189 INFO L895 garLoopResultBuilder]: At program point stubMoreProcessingRequiredENTRY(lines 467 480) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= ~setEventCalled~0 1)) (not (= 2 ~DC~0)) (= ~s~0 |old(~s~0)|) (not (= ~compRegistered~0 1))) [2022-04-27 15:03:33,189 INFO L899 garLoopResultBuilder]: For program point stubMoreProcessingRequiredEXIT(lines 467 480) no Hoare annotation was computed. [2022-04-27 15:03:33,189 INFO L895 garLoopResultBuilder]: At program point L762(line 762) the Hoare annotation is: (or (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,189 INFO L899 garLoopResultBuilder]: For program point PoCallDriverEXIT(lines 745 821) no Hoare annotation was computed. [2022-04-27 15:03:33,189 INFO L899 garLoopResultBuilder]: For program point L754(lines 754 766) no Hoare annotation was computed. [2022-04-27 15:03:33,189 INFO L899 garLoopResultBuilder]: For program point L754-1(lines 754 766) no Hoare annotation was computed. [2022-04-27 15:03:33,189 INFO L895 garLoopResultBuilder]: At program point L775(lines 774 791) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,189 INFO L899 garLoopResultBuilder]: For program point L800(lines 800 806) no Hoare annotation was computed. [2022-04-27 15:03:33,189 INFO L899 garLoopResultBuilder]: For program point PoCallDriverFINAL(lines 745 821) no Hoare annotation was computed. [2022-04-27 15:03:33,189 INFO L895 garLoopResultBuilder]: At program point PoCallDriverENTRY(lines 745 821) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,190 INFO L899 garLoopResultBuilder]: For program point L809(lines 809 816) no Hoare annotation was computed. [2022-04-27 15:03:33,190 INFO L899 garLoopResultBuilder]: For program point L797(lines 797 817) no Hoare annotation was computed. [2022-04-27 15:03:33,190 INFO L899 garLoopResultBuilder]: For program point L760(lines 760 764) no Hoare annotation was computed. [2022-04-27 15:03:33,190 INFO L895 garLoopResultBuilder]: At program point L789(lines 753 820) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,190 INFO L895 garLoopResultBuilder]: At program point L756(line 756) the Hoare annotation is: (or (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,190 INFO L899 garLoopResultBuilder]: For program point L756-1(line 756) no Hoare annotation was computed. [2022-04-27 15:03:33,190 INFO L895 garLoopResultBuilder]: At program point L814(line 814) the Hoare annotation is: (or (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,190 INFO L899 garLoopResultBuilder]: For program point L814-1(lines 793 818) no Hoare annotation was computed. [2022-04-27 15:03:33,190 INFO L895 garLoopResultBuilder]: At program point L777(lines 776 791) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,190 INFO L899 garLoopResultBuilder]: For program point L769(lines 769 792) no Hoare annotation was computed. [2022-04-27 15:03:33,190 INFO L899 garLoopResultBuilder]: For program point L774(lines 774 791) no Hoare annotation was computed. [2022-04-27 15:03:33,191 INFO L895 garLoopResultBuilder]: At program point L770(lines 769 792) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= ~SKIP1~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,191 INFO L899 garLoopResultBuilder]: For program point L638(lines 638 656) no Hoare annotation was computed. [2022-04-27 15:03:33,191 INFO L899 garLoopResultBuilder]: For program point KbFilter_CreateCloseEXIT(lines 629 664) no Hoare annotation was computed. [2022-04-27 15:03:33,191 INFO L895 garLoopResultBuilder]: At program point L653(lines 641 655) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,191 INFO L895 garLoopResultBuilder]: At program point L645(lines 638 656) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,191 INFO L899 garLoopResultBuilder]: For program point L641(lines 641 655) no Hoare annotation was computed. [2022-04-27 15:03:33,191 INFO L895 garLoopResultBuilder]: At program point KbFilter_CreateCloseENTRY(lines 629 664) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,191 INFO L895 garLoopResultBuilder]: At program point L660(line 660) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,191 INFO L899 garLoopResultBuilder]: For program point L660-1(line 660) no Hoare annotation was computed. [2022-04-27 15:03:33,191 INFO L899 garLoopResultBuilder]: For program point KbFilter_CreateCloseFINAL(lines 629 664) no Hoare annotation was computed. [2022-04-27 15:03:33,192 INFO L899 garLoopResultBuilder]: For program point L644(lines 644 654) no Hoare annotation was computed. [2022-04-27 15:03:33,192 INFO L899 garLoopResultBuilder]: For program point L956(lines 956 958) no Hoare annotation was computed. [2022-04-27 15:03:33,192 INFO L899 garLoopResultBuilder]: For program point L956-2(lines 934 971) no Hoare annotation was computed. [2022-04-27 15:03:33,192 INFO L899 garLoopResultBuilder]: For program point KbFilter_InternIoCtlEXIT(lines 822 1007) no Hoare annotation was computed. [2022-04-27 15:03:33,192 INFO L899 garLoopResultBuilder]: For program point L940(lines 940 943) no Hoare annotation was computed. [2022-04-27 15:03:33,192 INFO L899 garLoopResultBuilder]: For program point L903(lines 903 982) no Hoare annotation was computed. [2022-04-27 15:03:33,192 INFO L899 garLoopResultBuilder]: For program point L924(lines 924 976) no Hoare annotation was computed. [2022-04-27 15:03:33,192 INFO L899 garLoopResultBuilder]: For program point L891(lines 891 986) no Hoare annotation was computed. [2022-04-27 15:03:33,192 INFO L899 garLoopResultBuilder]: For program point L883(lines 883 988) no Hoare annotation was computed. [2022-04-27 15:03:33,192 INFO L899 garLoopResultBuilder]: For program point L875(lines 875 990) no Hoare annotation was computed. [2022-04-27 15:03:33,192 INFO L895 garLoopResultBuilder]: At program point L1003(line 1003) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,192 INFO L899 garLoopResultBuilder]: For program point L1003-1(line 1003) no Hoare annotation was computed. [2022-04-27 15:03:33,192 INFO L899 garLoopResultBuilder]: For program point L896(lines 896 984) no Hoare annotation was computed. [2022-04-27 15:03:33,192 INFO L895 garLoopResultBuilder]: At program point L892(lines 891 986) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,192 INFO L899 garLoopResultBuilder]: For program point L917(lines 917 978) no Hoare annotation was computed. [2022-04-27 15:03:33,192 INFO L895 garLoopResultBuilder]: At program point L884(lines 883 988) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,192 INFO L899 garLoopResultBuilder]: For program point L934(lines 934 973) no Hoare annotation was computed. [2022-04-27 15:03:33,192 INFO L899 garLoopResultBuilder]: For program point L959-1(lines 959 961) no Hoare annotation was computed. [2022-04-27 15:03:33,193 INFO L895 garLoopResultBuilder]: At program point KbFilter_InternIoCtlENTRY(lines 822 1007) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,193 INFO L899 garLoopResultBuilder]: For program point L910(lines 910 980) no Hoare annotation was computed. [2022-04-27 15:03:33,193 INFO L895 garLoopResultBuilder]: At program point L972(lines 867 1006) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,193 INFO L895 garLoopResultBuilder]: At program point L935(lines 875 990) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,193 INFO L895 garLoopResultBuilder]: At program point L997(line 997) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,193 INFO L899 garLoopResultBuilder]: For program point L997-1(line 997) no Hoare annotation was computed. [2022-04-27 15:03:33,193 INFO L899 garLoopResultBuilder]: For program point KbFilter_InternIoCtlFINAL(lines 822 1007) no Hoare annotation was computed. [2022-04-27 15:03:33,193 INFO L899 garLoopResultBuilder]: For program point L931(lines 931 974) no Hoare annotation was computed. [2022-04-27 15:03:33,193 INFO L899 garLoopResultBuilder]: For program point L603(lines 603 615) no Hoare annotation was computed. [2022-04-27 15:03:33,193 INFO L899 garLoopResultBuilder]: For program point KeWaitForSingleObjectEXIT(lines 576 617) no Hoare annotation was computed. [2022-04-27 15:03:33,193 INFO L895 garLoopResultBuilder]: At program point L589(lines 581 600) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 1))) (.cse1 (= ~pended~0 1)) (.cse2 (not (<= 5 ~MPR1~0))) (.cse3 (not (<= 7 ~IPC~0))) (.cse4 (not (<= 4 ~SKIP2~0))) (.cse5 (not (<= 6 ~MPR3~0))) (.cse6 (not (= 2 ~DC~0))) (.cse7 (not (= ~compRegistered~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= |old(~setEventCalled~0)| 1)) .cse6 .cse7 (not (= ~MPR3~0 |old(~s~0)|))) (or .cse0 (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7))) [2022-04-27 15:03:33,193 INFO L899 garLoopResultBuilder]: For program point L581(lines 581 600) no Hoare annotation was computed. [2022-04-27 15:03:33,193 INFO L895 garLoopResultBuilder]: At program point L606(lines 605 615) the Hoare annotation is: (let ((.cse9 (= 2 ~DC~0)) (.cse1 (= ~pended~0 1)) (.cse10 (<= 4 ~SKIP2~0)) (.cse11 (<= 7 ~IPC~0))) (let ((.cse0 (not (= ~NP~0 1))) (.cse2 (not (<= 5 ~MPR1~0))) (.cse3 (not .cse11)) (.cse4 (and .cse11 .cse9 (not .cse1) (= ~s~0 ~NP~0) .cse10)) (.cse5 (not .cse10)) (.cse6 (not (<= 6 ~MPR3~0))) (.cse7 (not .cse9)) (.cse8 (not (= ~compRegistered~0 1)))) (and (or .cse0 (not (= ~NP~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (= |old(~setEventCalled~0)| 1)) .cse7 .cse8 (not (= ~MPR3~0 |old(~s~0)|)))))) [2022-04-27 15:03:33,193 INFO L899 garLoopResultBuilder]: For program point KeWaitForSingleObjectFINAL(lines 576 617) no Hoare annotation was computed. [2022-04-27 15:03:33,193 INFO L895 garLoopResultBuilder]: At program point L604(lines 603 615) the Hoare annotation is: (let ((.cse9 (= 2 ~DC~0)) (.cse1 (= ~pended~0 1)) (.cse10 (<= 4 ~SKIP2~0)) (.cse11 (<= 7 ~IPC~0))) (let ((.cse0 (not (= ~NP~0 1))) (.cse2 (not (<= 5 ~MPR1~0))) (.cse3 (not .cse11)) (.cse4 (and .cse11 .cse9 (not .cse1) (= ~s~0 ~NP~0) .cse10)) (.cse5 (not .cse10)) (.cse6 (not (<= 6 ~MPR3~0))) (.cse7 (not .cse9)) (.cse8 (not (= ~compRegistered~0 1)))) (and (or .cse0 (not (= ~NP~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (= |old(~setEventCalled~0)| 1)) .cse7 .cse8 (not (= ~MPR3~0 |old(~s~0)|)))))) [2022-04-27 15:03:33,194 INFO L895 garLoopResultBuilder]: At program point L596(line 596) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 1))) (.cse1 (= ~pended~0 1)) (.cse2 (not (<= 5 ~MPR1~0))) (.cse3 (not (<= 7 ~IPC~0))) (.cse4 (not (<= 4 ~SKIP2~0))) (.cse5 (not (<= 6 ~MPR3~0))) (.cse6 (not (= 2 ~DC~0))) (.cse7 (not (= ~compRegistered~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= |old(~setEventCalled~0)| 1)) .cse6 .cse7 (not (= ~MPR3~0 |old(~s~0)|))) (or .cse0 (not (= ~NP~0 |old(~s~0)|)) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7))) [2022-04-27 15:03:33,194 INFO L899 garLoopResultBuilder]: For program point L594(lines 594 598) no Hoare annotation was computed. [2022-04-27 15:03:33,194 INFO L899 garLoopResultBuilder]: For program point L594-1(lines 581 600) no Hoare annotation was computed. [2022-04-27 15:03:33,194 INFO L895 garLoopResultBuilder]: At program point KeWaitForSingleObjectENTRY(lines 576 617) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 1))) (.cse1 (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))) (.cse2 (= ~pended~0 1)) (.cse3 (not (<= 5 ~MPR1~0))) (.cse4 (not (<= 7 ~IPC~0))) (.cse5 (not (<= 4 ~SKIP2~0))) (.cse6 (not (<= 6 ~MPR3~0))) (.cse7 (not (= 2 ~DC~0))) (.cse8 (not (= ~compRegistered~0 1)))) (and (or .cse0 .cse1 (not (= ~NP~0 |old(~s~0)|)) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (= |old(~setEventCalled~0)| 1)) .cse7 .cse8 (not (= ~MPR3~0 |old(~s~0)|))))) [2022-04-27 15:03:33,194 INFO L899 garLoopResultBuilder]: For program point L582(lines 582 587) no Hoare annotation was computed. [2022-04-27 15:03:33,194 INFO L899 garLoopResultBuilder]: For program point L562-1(lines 554 567) no Hoare annotation was computed. [2022-04-27 15:03:33,194 INFO L899 garLoopResultBuilder]: For program point L558(lines 558 564) no Hoare annotation was computed. [2022-04-27 15:03:33,194 INFO L895 garLoopResultBuilder]: At program point IofCompleteRequestENTRY(lines 554 567) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 |old(~s~0)|))) (.cse1 (= ~pended~0 1)) (.cse2 (not (<= 7 ~IPC~0))) (.cse3 (not (<= 4 ~SKIP2~0))) (.cse4 (not (= 2 ~DC~0))) (.cse5 (= ~s~0 |old(~s~0)|))) (and (or .cse0 (not (= ~compRegistered~0 0)) .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= ~compRegistered~0 1))))) [2022-04-27 15:03:33,194 INFO L899 garLoopResultBuilder]: For program point IofCompleteRequestEXIT(lines 554 567) no Hoare annotation was computed. [2022-04-27 15:03:33,194 INFO L895 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse0 (not (= ~NP~0 |old(~s~0)|))) (.cse1 (= ~pended~0 1)) (.cse2 (not (<= 7 ~IPC~0))) (.cse3 (not (<= 4 ~SKIP2~0))) (.cse4 (not (= 2 ~DC~0)))) (and (or .cse0 (not (= ~compRegistered~0 0)) .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~compRegistered~0 1))))) [2022-04-27 15:03:33,194 INFO L899 garLoopResultBuilder]: For program point L258-1(lines 254 260) no Hoare annotation was computed. [2022-04-27 15:03:33,194 INFO L899 garLoopResultBuilder]: For program point L159(lines 159 274) no Hoare annotation was computed. [2022-04-27 15:03:33,195 INFO L899 garLoopResultBuilder]: For program point L126(lines 126 285) no Hoare annotation was computed. [2022-04-27 15:03:33,195 INFO L895 garLoopResultBuilder]: At program point L184(line 184) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,195 INFO L895 garLoopResultBuilder]: At program point L201(lines 201 203) the Hoare annotation is: (let ((.cse0 (= ~compRegistered~0 1))) (or (not (= ~NP~0 1)) (and .cse0 (= ~setEventCalled~0 1) (= KbFilter_PnP_~__cil_tmp23~0 259) (<= 259 KbFilter_PnP_~status~0) (= ~MPR3~0 ~s~0)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (and .cse0 (= ~s~0 |old(~s~0)|)))) [2022-04-27 15:03:33,195 INFO L899 garLoopResultBuilder]: For program point L168(lines 168 271) no Hoare annotation was computed. [2022-04-27 15:03:33,195 INFO L899 garLoopResultBuilder]: For program point L201-1(lines 201 203) no Hoare annotation was computed. [2022-04-27 15:03:33,195 INFO L899 garLoopResultBuilder]: For program point L135(lines 135 282) no Hoare annotation was computed. [2022-04-27 15:03:33,195 INFO L895 garLoopResultBuilder]: At program point L218(line 218) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (and (= ~compRegistered~0 1) (= ~s~0 ~NP~0)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,195 INFO L895 garLoopResultBuilder]: At program point L243(line 243) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,195 INFO L899 garLoopResultBuilder]: For program point L243-1(lines 239 245) no Hoare annotation was computed. [2022-04-27 15:03:33,195 INFO L899 garLoopResultBuilder]: For program point L177(lines 177 189) no Hoare annotation was computed. [2022-04-27 15:03:33,195 INFO L899 garLoopResultBuilder]: For program point L144(lines 144 279) no Hoare annotation was computed. [2022-04-27 15:03:33,196 INFO L899 garLoopResultBuilder]: For program point L111(lines 111 290) no Hoare annotation was computed. [2022-04-27 15:03:33,196 INFO L895 garLoopResultBuilder]: At program point L227(line 227) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,196 INFO L895 garLoopResultBuilder]: At program point L194(lines 194 195) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (and (= ~compRegistered~0 1) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= KbFilter_PnP_~status~0 0) (= ~s~0 |old(~s~0)|))) [2022-04-27 15:03:33,196 INFO L899 garLoopResultBuilder]: For program point L227-1(lines 223 229) no Hoare annotation was computed. [2022-04-27 15:03:33,196 INFO L899 garLoopResultBuilder]: For program point L194-1(lines 194 195) no Hoare annotation was computed. [2022-04-27 15:03:33,196 INFO L899 garLoopResultBuilder]: For program point L153(lines 153 276) no Hoare annotation was computed. [2022-04-27 15:03:33,196 INFO L899 garLoopResultBuilder]: For program point L120(lines 120 287) no Hoare annotation was computed. [2022-04-27 15:03:33,196 INFO L899 garLoopResultBuilder]: For program point KbFilter_PnPEXIT(lines 81 294) no Hoare annotation was computed. [2022-04-27 15:03:33,196 INFO L895 garLoopResultBuilder]: At program point L112(lines 111 290) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,196 INFO L895 garLoopResultBuilder]: At program point L269(lines 172 270) the Hoare annotation is: (or (= ~compRegistered~0 1) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (<= ~compRegistered~0 0) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,196 INFO L899 garLoopResultBuilder]: For program point L162(lines 162 273) no Hoare annotation was computed. [2022-04-27 15:03:33,197 INFO L899 garLoopResultBuilder]: For program point L129(lines 129 284) no Hoare annotation was computed. [2022-04-27 15:03:33,197 INFO L895 garLoopResultBuilder]: At program point L179(line 179) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,197 INFO L895 garLoopResultBuilder]: At program point KbFilter_PnPENTRY(lines 81 294) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,197 INFO L895 garLoopResultBuilder]: At program point L171(lines 117 288) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,197 INFO L899 garLoopResultBuilder]: For program point L138(lines 138 281) no Hoare annotation was computed. [2022-04-27 15:03:33,197 INFO L899 garLoopResultBuilder]: For program point KbFilter_PnPFINAL(lines 81 294) no Hoare annotation was computed. [2022-04-27 15:03:33,197 INFO L899 garLoopResultBuilder]: For program point L147(lines 147 278) no Hoare annotation was computed. [2022-04-27 15:03:33,197 INFO L899 garLoopResultBuilder]: For program point L114(lines 114 289) no Hoare annotation was computed. [2022-04-27 15:03:33,197 INFO L899 garLoopResultBuilder]: For program point L156(lines 156 275) no Hoare annotation was computed. [2022-04-27 15:03:33,197 INFO L899 garLoopResultBuilder]: For program point L123(lines 123 286) no Hoare annotation was computed. [2022-04-27 15:03:33,197 INFO L895 garLoopResultBuilder]: At program point L115(lines 114 289) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,198 INFO L899 garLoopResultBuilder]: For program point L239(lines 239 245) no Hoare annotation was computed. [2022-04-27 15:03:33,198 INFO L895 garLoopResultBuilder]: At program point L264(lines 264 265) the Hoare annotation is: (or (and (= ~SKIP1~0 ~s~0) (= ~compRegistered~0 0)) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,198 INFO L899 garLoopResultBuilder]: For program point L264-1(lines 264 265) no Hoare annotation was computed. [2022-04-27 15:03:33,198 INFO L899 garLoopResultBuilder]: For program point L165(lines 165 272) no Hoare annotation was computed. [2022-04-27 15:03:33,198 INFO L899 garLoopResultBuilder]: For program point L132(lines 132 283) no Hoare annotation was computed. [2022-04-27 15:03:33,198 INFO L899 garLoopResultBuilder]: For program point L223(lines 223 229) no Hoare annotation was computed. [2022-04-27 15:03:33,198 INFO L899 garLoopResultBuilder]: For program point L182(lines 182 188) no Hoare annotation was computed. [2022-04-27 15:03:33,198 INFO L899 garLoopResultBuilder]: For program point L182-1(lines 177 189) no Hoare annotation was computed. [2022-04-27 15:03:33,198 INFO L899 garLoopResultBuilder]: For program point L207(lines 207 213) no Hoare annotation was computed. [2022-04-27 15:03:33,198 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 280) no Hoare annotation was computed. [2022-04-27 15:03:33,198 INFO L899 garLoopResultBuilder]: For program point L108(lines 108 291) no Hoare annotation was computed. [2022-04-27 15:03:33,198 INFO L899 garLoopResultBuilder]: For program point L199(lines 199 205) no Hoare annotation was computed. [2022-04-27 15:03:33,199 INFO L899 garLoopResultBuilder]: For program point L199-2(lines 172 268) no Hoare annotation was computed. [2022-04-27 15:03:33,199 INFO L895 garLoopResultBuilder]: At program point L249(line 249) the Hoare annotation is: (or (and (= ~SKIP1~0 ~s~0) (= ~compRegistered~0 0)) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,199 INFO L899 garLoopResultBuilder]: For program point L249-1(line 249) no Hoare annotation was computed. [2022-04-27 15:03:33,199 INFO L899 garLoopResultBuilder]: For program point L150(lines 150 277) no Hoare annotation was computed. [2022-04-27 15:03:33,199 INFO L899 garLoopResultBuilder]: For program point L117(lines 117 288) no Hoare annotation was computed. [2022-04-27 15:03:33,199 INFO L899 garLoopResultBuilder]: For program point L208(lines 208 212) no Hoare annotation was computed. [2022-04-27 15:03:33,199 INFO L895 garLoopResultBuilder]: At program point L109(lines 108 291) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= KbFilter_PnP_~status~0 0) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,199 INFO L895 garLoopResultBuilder]: At program point L233(lines 233 234) the Hoare annotation is: (or (and (= ~SKIP1~0 ~s~0) (= ~compRegistered~0 0)) (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,199 INFO L899 garLoopResultBuilder]: For program point L233-1(lines 233 234) no Hoare annotation was computed. [2022-04-27 15:03:33,199 INFO L895 garLoopResultBuilder]: At program point L258(line 258) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (= ~pended~0 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,199 INFO L895 garLoopResultBuilder]: At program point KeSetEventENTRY(lines 568 575) the Hoare annotation is: (or (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~pended~0 1) (not (= ~s~0 ~NP~0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0)) (not (= ~compRegistered~0 1)) (not (= ~s~0 1))) [2022-04-27 15:03:33,200 INFO L899 garLoopResultBuilder]: For program point KeSetEventFINAL(lines 568 575) no Hoare annotation was computed. [2022-04-27 15:03:33,200 INFO L899 garLoopResultBuilder]: For program point KeSetEventEXIT(lines 568 575) no Hoare annotation was computed. [2022-04-27 15:03:33,200 INFO L899 garLoopResultBuilder]: For program point L700(lines 700 729) no Hoare annotation was computed. [2022-04-27 15:03:33,200 INFO L899 garLoopResultBuilder]: For program point KbFilter_PowerEXIT(lines 689 744) no Hoare annotation was computed. [2022-04-27 15:03:33,200 INFO L899 garLoopResultBuilder]: For program point L709(lines 709 726) no Hoare annotation was computed. [2022-04-27 15:03:33,200 INFO L895 garLoopResultBuilder]: At program point L740(line 740) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (= ~SKIP1~0 ~s~0) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,200 INFO L895 garLoopResultBuilder]: At program point KbFilter_PowerENTRY(lines 689 744) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,200 INFO L899 garLoopResultBuilder]: For program point L740-1(line 740) no Hoare annotation was computed. [2022-04-27 15:03:33,200 INFO L899 garLoopResultBuilder]: For program point L703(lines 703 728) no Hoare annotation was computed. [2022-04-27 15:03:33,200 INFO L895 garLoopResultBuilder]: At program point L734(line 734) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,200 INFO L895 garLoopResultBuilder]: At program point L701(lines 700 729) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,200 INFO L899 garLoopResultBuilder]: For program point L734-1(lines 730 736) no Hoare annotation was computed. [2022-04-27 15:03:33,200 INFO L895 garLoopResultBuilder]: At program point L724(lines 699 743) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,201 INFO L899 garLoopResultBuilder]: For program point KbFilter_PowerFINAL(lines 689 744) no Hoare annotation was computed. [2022-04-27 15:03:33,201 INFO L899 garLoopResultBuilder]: For program point L706(lines 706 727) no Hoare annotation was computed. [2022-04-27 15:03:33,201 INFO L899 garLoopResultBuilder]: For program point stub_driver_initEXIT(lines 43 56) no Hoare annotation was computed. [2022-04-27 15:03:33,201 INFO L895 garLoopResultBuilder]: At program point stub_driver_initENTRY(lines 43 56) the Hoare annotation is: (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) (and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~compRegistered~0 0) (= ~s~0 |old(~s~0)|)) (= |old(~pended~0)| 1) (not (= |old(~compRegistered~0)| 0)) (not (<= 5 ~MPR1~0)) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (<= 6 ~MPR3~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,201 INFO L899 garLoopResultBuilder]: For program point stub_driver_initFINAL(lines 43 56) no Hoare annotation was computed. [2022-04-27 15:03:33,201 INFO L902 garLoopResultBuilder]: At program point errorFnENTRY(lines 1009 1016) the Hoare annotation is: true [2022-04-27 15:03:33,201 INFO L899 garLoopResultBuilder]: For program point errorFnFINAL(lines 1009 1016) no Hoare annotation was computed. [2022-04-27 15:03:33,201 INFO L899 garLoopResultBuilder]: For program point errorFnEXIT(lines 1009 1016) no Hoare annotation was computed. [2022-04-27 15:03:33,201 INFO L899 garLoopResultBuilder]: For program point errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1013) no Hoare annotation was computed. [2022-04-27 15:03:33,201 INFO L895 garLoopResultBuilder]: At program point L510(lines 509 526) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 (and (= ~MPR1~0 ~s~0) (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0)) .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))) (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3))) [2022-04-27 15:03:33,201 INFO L899 garLoopResultBuilder]: For program point L532(lines 532 549) no Hoare annotation was computed. [2022-04-27 15:03:33,202 INFO L895 garLoopResultBuilder]: At program point IofCallDriverENTRY(lines 481 553) the Hoare annotation is: (let ((.cse0 (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))) (.cse1 (= ~pended~0 1)) (.cse2 (not (<= 7 ~IPC~0))) (.cse3 (not (<= 4 ~SKIP2~0))) (.cse4 (not (= 2 ~DC~0)))) (and (or (not (= ~NP~0 1)) .cse0 (not (= ~NP~0 |old(~s~0)|)) .cse1 (not (<= 5 ~MPR1~0)) .cse2 .cse3 (not (<= 6 ~MPR3~0)) .cse4 (not (= ~compRegistered~0 1))) (or .cse0 (not (= ~compRegistered~0 0)) .cse1 .cse2 .cse3 (not (= ~SKIP1~0 |old(~s~0)|)) .cse4))) [2022-04-27 15:03:33,202 INFO L899 garLoopResultBuilder]: For program point L495(lines 495 499) no Hoare annotation was computed. [2022-04-27 15:03:33,202 INFO L895 garLoopResultBuilder]: At program point L524(lines 488 552) the Hoare annotation is: (let ((.cse2 (= ~pended~0 1)) (.cse3 (not (<= 7 ~IPC~0))) (.cse4 (not (<= 4 ~SKIP2~0))) (.cse5 (not (= 2 ~DC~0)))) (and (let ((.cse0 (= ~MPR1~0 ~s~0)) (.cse1 (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0))) (or (not (= ~NP~0 1)) (and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0) .cse0 .cse1) (and (<= (+ 1073741823 IofCallDriver_~returnVal2~0) 0) .cse0 .cse1) (not (= ~NP~0 |old(~s~0)|)) .cse2 (not (<= 5 ~MPR1~0)) .cse3 .cse4 (and (= ~setEventCalled~0 1) (<= IofCallDriver_~returnVal2~0 259) (<= 259 IofCallDriver_~returnVal2~0) .cse0 .cse1) (not (<= 6 ~MPR3~0)) .cse5 (not (= ~compRegistered~0 1)))) (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) .cse2 .cse3 .cse4 (not (= ~SKIP1~0 |old(~s~0)|)) .cse5))) [2022-04-27 15:03:33,202 INFO L895 garLoopResultBuilder]: At program point L491(line 491) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3) (or (not (= ~NP~0 1)) (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))))) [2022-04-27 15:03:33,202 INFO L899 garLoopResultBuilder]: For program point L491-1(line 491) no Hoare annotation was computed. [2022-04-27 15:03:33,202 INFO L899 garLoopResultBuilder]: For program point IofCallDriverFINAL(lines 481 553) no Hoare annotation was computed. [2022-04-27 15:03:33,202 INFO L895 garLoopResultBuilder]: At program point L512(lines 511 526) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3) (or (not (= ~NP~0 1)) (and (= ~setEventCalled~0 1) (= ~MPR1~0 ~s~0) (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))))) [2022-04-27 15:03:33,202 INFO L899 garLoopResultBuilder]: For program point L541(lines 541 548) no Hoare annotation was computed. [2022-04-27 15:03:33,202 INFO L899 garLoopResultBuilder]: For program point L504(lines 504 527) no Hoare annotation was computed. [2022-04-27 15:03:33,202 INFO L899 garLoopResultBuilder]: For program point IofCallDriverEXIT(lines 481 553) no Hoare annotation was computed. [2022-04-27 15:03:33,203 INFO L899 garLoopResultBuilder]: For program point L533(lines 533 539) no Hoare annotation was computed. [2022-04-27 15:03:33,203 INFO L895 garLoopResultBuilder]: At program point L546(line 546) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3) (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))))) [2022-04-27 15:03:33,203 INFO L899 garLoopResultBuilder]: For program point L546-1(lines 528 550) no Hoare annotation was computed. [2022-04-27 15:03:33,203 INFO L899 garLoopResultBuilder]: For program point L509(lines 509 526) no Hoare annotation was computed. [2022-04-27 15:03:33,203 INFO L895 garLoopResultBuilder]: At program point L505(lines 504 527) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (not (= ~NP~0 1)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 (and (= ~MPR1~0 ~s~0) (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0)) .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))) (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3))) [2022-04-27 15:03:33,203 INFO L895 garLoopResultBuilder]: At program point L497(line 497) the Hoare annotation is: (let ((.cse0 (= ~pended~0 1)) (.cse1 (not (<= 7 ~IPC~0))) (.cse2 (not (<= 4 ~SKIP2~0))) (.cse3 (not (= 2 ~DC~0)))) (and (or (not (= ~compRegistered~0 0)) .cse0 .cse1 .cse2 (not (= ~SKIP1~0 |old(~s~0)|)) .cse3) (or (not (= ~NP~0 1)) (and (= ~setEventCalled~0 1) (= ~s~0 |old(~s~0)|) (= (+ IofCallDriver_~__cil_tmp7~0 1073741802) 0)) (not (= ~NP~0 |old(~s~0)|)) .cse0 (not (<= 5 ~MPR1~0)) .cse1 .cse2 (not (<= 6 ~MPR3~0)) .cse3 (not (= ~compRegistered~0 1))))) [2022-04-27 15:03:33,203 INFO L899 garLoopResultBuilder]: For program point L489(lines 489 501) no Hoare annotation was computed. [2022-04-27 15:03:33,203 INFO L899 garLoopResultBuilder]: For program point L489-1(lines 489 501) no Hoare annotation was computed. [2022-04-27 15:03:33,203 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.initFINAL(line -1) no Hoare annotation was computed. [2022-04-27 15:03:33,203 INFO L895 garLoopResultBuilder]: At program point ULTIMATE.initENTRY(line -1) the Hoare annotation is: (and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|)) [2022-04-27 15:03:33,204 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.initEXIT(line -1) no Hoare annotation was computed. [2022-04-27 15:03:33,204 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-04-27 15:03:33,204 INFO L895 garLoopResultBuilder]: At program point L-1(line -1) the Hoare annotation is: (and (<= ~s~0 ~DC~0) (not (= ~pended~0 1)) (= ~s~0 ~NP~0) (<= ~DC~0 ~s~0) (= ~SKIP1~0 ~s~0) (= ~MPR1~0 ~s~0) (= ~compRegistered~0 0) (= ~MPR3~0 ~s~0)) [2022-04-27 15:03:33,204 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-04-27 15:03:33,204 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-04-27 15:03:33,204 INFO L895 garLoopResultBuilder]: At program point KbFilter_DispatchPassThroughENTRY(lines 665 688) the Hoare annotation is: (or (and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|)) (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,204 INFO L895 garLoopResultBuilder]: At program point L684(line 684) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (= ~SKIP1~0 ~s~0) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,204 INFO L899 garLoopResultBuilder]: For program point L684-1(line 684) no Hoare annotation was computed. [2022-04-27 15:03:33,204 INFO L899 garLoopResultBuilder]: For program point KbFilter_DispatchPassThroughFINAL(lines 665 688) no Hoare annotation was computed. [2022-04-27 15:03:33,204 INFO L895 garLoopResultBuilder]: At program point L678(line 678) the Hoare annotation is: (or (not (= ~NP~0 |old(~s~0)|)) (not (= ~compRegistered~0 0)) (= ~pended~0 1) (not (<= 7 ~IPC~0)) (not (<= 4 ~SKIP2~0)) (not (= 2 ~DC~0))) [2022-04-27 15:03:33,204 INFO L899 garLoopResultBuilder]: For program point L678-1(lines 674 680) no Hoare annotation was computed. [2022-04-27 15:03:33,204 INFO L899 garLoopResultBuilder]: For program point KbFilter_DispatchPassThroughEXIT(lines 665 688) no Hoare annotation was computed. [2022-04-27 15:03:33,204 INFO L899 garLoopResultBuilder]: For program point L674(lines 674 680) no Hoare annotation was computed. [2022-04-27 15:03:33,208 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:33,209 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-04-27 15:03:33,212 WARN L170 areAnnotationChecker]: reach_errorENTRY has no Hoare annotation [2022-04-27 15:03:33,212 WARN L170 areAnnotationChecker]: KeSetEventFINAL has no Hoare annotation [2022-04-27 15:03:33,214 WARN L170 areAnnotationChecker]: stub_driver_initFINAL has no Hoare annotation [2022-04-27 15:03:33,214 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-04-27 15:03:33,214 WARN L170 areAnnotationChecker]: _BLAST_initFINAL has no Hoare annotation [2022-04-27 15:03:33,214 WARN L170 areAnnotationChecker]: errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION has no Hoare annotation [2022-04-27 15:03:33,214 WARN L170 areAnnotationChecker]: errorFnFINAL has no Hoare annotation [2022-04-27 15:03:33,216 WARN L170 areAnnotationChecker]: L489 has no Hoare annotation [2022-04-27 15:03:33,216 WARN L170 areAnnotationChecker]: L475-1 has no Hoare annotation [2022-04-27 15:03:33,218 WARN L170 areAnnotationChecker]: L754 has no Hoare annotation [2022-04-27 15:03:33,218 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2022-04-27 15:03:33,218 WARN L170 areAnnotationChecker]: L638 has no Hoare annotation [2022-04-27 15:03:33,218 WARN L170 areAnnotationChecker]: L875 has no Hoare annotation [2022-04-27 15:03:33,218 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-04-27 15:03:33,218 WARN L170 areAnnotationChecker]: L558 has no Hoare annotation [2022-04-27 15:03:33,219 WARN L170 areAnnotationChecker]: L674 has no Hoare annotation [2022-04-27 15:03:33,219 WARN L170 areAnnotationChecker]: L108 has no Hoare annotation [2022-04-27 15:03:33,220 WARN L170 areAnnotationChecker]: reach_errorFINAL has no Hoare annotation [2022-04-27 15:03:33,220 WARN L170 areAnnotationChecker]: KeSetEventFINAL has no Hoare annotation [2022-04-27 15:03:33,220 WARN L170 areAnnotationChecker]: L624-1 has no Hoare annotation [2022-04-27 15:03:33,221 WARN L170 areAnnotationChecker]: stub_driver_initFINAL has no Hoare annotation [2022-04-27 15:03:33,221 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-04-27 15:03:33,221 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-04-27 15:03:33,221 WARN L170 areAnnotationChecker]: _BLAST_initFINAL has no Hoare annotation [2022-04-27 15:03:33,221 WARN L170 areAnnotationChecker]: errorFnFINAL has no Hoare annotation [2022-04-27 15:03:33,221 WARN L170 areAnnotationChecker]: L328-1 has no Hoare annotation [2022-04-27 15:03:33,223 WARN L170 areAnnotationChecker]: L489 has no Hoare annotation [2022-04-27 15:03:33,223 WARN L170 areAnnotationChecker]: L489 has no Hoare annotation [2022-04-27 15:03:33,223 WARN L170 areAnnotationChecker]: L475-1 has no Hoare annotation [2022-04-27 15:03:33,223 WARN L170 areAnnotationChecker]: L475-1 has no Hoare annotation [2022-04-27 15:03:33,223 WARN L170 areAnnotationChecker]: L754 has no Hoare annotation [2022-04-27 15:03:33,223 WARN L170 areAnnotationChecker]: L754 has no Hoare annotation [2022-04-27 15:03:33,223 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2022-04-27 15:03:33,223 WARN L170 areAnnotationChecker]: L638 has no Hoare annotation [2022-04-27 15:03:33,223 WARN L170 areAnnotationChecker]: L638 has no Hoare annotation [2022-04-27 15:03:33,223 WARN L170 areAnnotationChecker]: L875 has no Hoare annotation [2022-04-27 15:03:33,223 WARN L170 areAnnotationChecker]: L875 has no Hoare annotation [2022-04-27 15:03:33,223 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-04-27 15:03:33,223 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-04-27 15:03:33,223 WARN L170 areAnnotationChecker]: L558 has no Hoare annotation [2022-04-27 15:03:33,223 WARN L170 areAnnotationChecker]: L558 has no Hoare annotation [2022-04-27 15:03:33,224 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-04-27 15:03:33,225 WARN L170 areAnnotationChecker]: L674 has no Hoare annotation [2022-04-27 15:03:33,225 WARN L170 areAnnotationChecker]: L674 has no Hoare annotation [2022-04-27 15:03:33,225 WARN L170 areAnnotationChecker]: L108 has no Hoare annotation [2022-04-27 15:03:33,225 WARN L170 areAnnotationChecker]: L108 has no Hoare annotation [2022-04-27 15:03:33,225 WARN L170 areAnnotationChecker]: KeSetEventEXIT has no Hoare annotation [2022-04-27 15:03:33,225 WARN L170 areAnnotationChecker]: L624-1 has no Hoare annotation [2022-04-27 15:03:33,225 WARN L170 areAnnotationChecker]: stub_driver_initEXIT has no Hoare annotation [2022-04-27 15:03:33,227 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-04-27 15:03:33,227 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-04-27 15:03:33,227 WARN L170 areAnnotationChecker]: _BLAST_initEXIT has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: L328-1 has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: L328-1 has no Hoare annotation [2022-04-27 15:03:33,228 WARN L170 areAnnotationChecker]: L491-1 has no Hoare annotation [2022-04-27 15:03:33,230 WARN L170 areAnnotationChecker]: L489-1 has no Hoare annotation [2022-04-27 15:03:33,230 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredEXIT has no Hoare annotation [2022-04-27 15:03:33,230 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredEXIT has no Hoare annotation [2022-04-27 15:03:33,230 WARN L170 areAnnotationChecker]: L756-1 has no Hoare annotation [2022-04-27 15:03:33,231 WARN L170 areAnnotationChecker]: L754-1 has no Hoare annotation [2022-04-27 15:03:33,231 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2022-04-27 15:03:33,233 WARN L170 areAnnotationChecker]: L641 has no Hoare annotation [2022-04-27 15:03:33,233 WARN L170 areAnnotationChecker]: L641 has no Hoare annotation [2022-04-27 15:03:33,234 WARN L170 areAnnotationChecker]: L940 has no Hoare annotation [2022-04-27 15:03:33,234 WARN L170 areAnnotationChecker]: L883 has no Hoare annotation [2022-04-27 15:03:33,234 WARN L170 areAnnotationChecker]: L883 has no Hoare annotation [2022-04-27 15:03:33,234 WARN L170 areAnnotationChecker]: L582 has no Hoare annotation [2022-04-27 15:03:33,234 WARN L170 areAnnotationChecker]: L582 has no Hoare annotation [2022-04-27 15:03:33,234 WARN L170 areAnnotationChecker]: L594-1 has no Hoare annotation [2022-04-27 15:03:33,235 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2022-04-27 15:03:33,235 WARN L170 areAnnotationChecker]: L562-1 has no Hoare annotation [2022-04-27 15:03:33,235 WARN L170 areAnnotationChecker]: L562-1 has no Hoare annotation [2022-04-27 15:03:33,235 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-04-27 15:03:33,235 WARN L170 areAnnotationChecker]: L678-1 has no Hoare annotation [2022-04-27 15:03:33,235 WARN L170 areAnnotationChecker]: L678-1 has no Hoare annotation [2022-04-27 15:03:33,235 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-04-27 15:03:33,235 WARN L170 areAnnotationChecker]: L111 has no Hoare annotation [2022-04-27 15:03:33,235 WARN L170 areAnnotationChecker]: L111 has no Hoare annotation [2022-04-27 15:03:33,235 WARN L170 areAnnotationChecker]: KbFilter_CompleteFINAL has no Hoare annotation [2022-04-27 15:03:33,235 WARN L170 areAnnotationChecker]: L344 has no Hoare annotation [2022-04-27 15:03:33,235 WARN L170 areAnnotationChecker]: L344 has no Hoare annotation [2022-04-27 15:03:33,235 WARN L170 areAnnotationChecker]: L734-1 has no Hoare annotation [2022-04-27 15:03:33,236 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-04-27 15:03:33,236 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-04-27 15:03:33,236 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2022-04-27 15:03:33,236 WARN L170 areAnnotationChecker]: L814-1 has no Hoare annotation [2022-04-27 15:03:33,236 WARN L170 areAnnotationChecker]: L594-1 has no Hoare annotation [2022-04-27 15:03:33,236 WARN L170 areAnnotationChecker]: L182-1 has no Hoare annotation [2022-04-27 15:03:33,236 WARN L170 areAnnotationChecker]: L227-1 has no Hoare annotation [2022-04-27 15:03:33,237 WARN L170 areAnnotationChecker]: L243-1 has no Hoare annotation [2022-04-27 15:03:33,237 WARN L170 areAnnotationChecker]: L258-1 has no Hoare annotation [2022-04-27 15:03:33,237 WARN L170 areAnnotationChecker]: L734-1 has no Hoare annotation [2022-04-27 15:03:33,237 WARN L170 areAnnotationChecker]: L546-1 has no Hoare annotation [2022-04-27 15:03:33,237 WARN L170 areAnnotationChecker]: L339 has no Hoare annotation [2022-04-27 15:03:33,237 WARN L170 areAnnotationChecker]: L339 has no Hoare annotation [2022-04-27 15:03:33,237 WARN L170 areAnnotationChecker]: L415 has no Hoare annotation [2022-04-27 15:03:33,239 WARN L170 areAnnotationChecker]: L491-1 has no Hoare annotation [2022-04-27 15:03:33,239 WARN L170 areAnnotationChecker]: L504 has no Hoare annotation [2022-04-27 15:03:33,239 WARN L170 areAnnotationChecker]: L504 has no Hoare annotation [2022-04-27 15:03:33,239 WARN L170 areAnnotationChecker]: L756-1 has no Hoare annotation [2022-04-27 15:03:33,239 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-04-27 15:03:33,239 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-04-27 15:03:33,240 WARN L170 areAnnotationChecker]: L644 has no Hoare annotation [2022-04-27 15:03:33,240 WARN L170 areAnnotationChecker]: L644 has no Hoare annotation [2022-04-27 15:03:33,242 WARN L170 areAnnotationChecker]: L940 has no Hoare annotation [2022-04-27 15:03:33,242 WARN L170 areAnnotationChecker]: L940 has no Hoare annotation [2022-04-27 15:03:33,243 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2022-04-27 15:03:33,243 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2022-04-27 15:03:33,243 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2022-04-27 15:03:33,243 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2022-04-27 15:03:33,243 WARN L170 areAnnotationChecker]: IofCompleteRequestEXIT has no Hoare annotation [2022-04-27 15:03:33,243 WARN L170 areAnnotationChecker]: IofCompleteRequestEXIT has no Hoare annotation [2022-04-27 15:03:33,244 WARN L170 areAnnotationChecker]: L684-1 has no Hoare annotation [2022-04-27 15:03:33,245 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-04-27 15:03:33,245 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-04-27 15:03:33,245 WARN L170 areAnnotationChecker]: L223 has no Hoare annotation [2022-04-27 15:03:33,245 WARN L170 areAnnotationChecker]: L114 has no Hoare annotation [2022-04-27 15:03:33,245 WARN L170 areAnnotationChecker]: L114 has no Hoare annotation [2022-04-27 15:03:33,245 WARN L170 areAnnotationChecker]: KbFilter_CompleteEXIT has no Hoare annotation [2022-04-27 15:03:33,245 WARN L170 areAnnotationChecker]: KbFilter_CompleteEXIT has no Hoare annotation [2022-04-27 15:03:33,245 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2022-04-27 15:03:33,245 WARN L170 areAnnotationChecker]: L353 has no Hoare annotation [2022-04-27 15:03:33,246 WARN L170 areAnnotationChecker]: L353 has no Hoare annotation [2022-04-27 15:03:33,246 WARN L170 areAnnotationChecker]: L734-1 has no Hoare annotation [2022-04-27 15:03:33,246 WARN L170 areAnnotationChecker]: L709 has no Hoare annotation [2022-04-27 15:03:33,246 WARN L170 areAnnotationChecker]: L709 has no Hoare annotation [2022-04-27 15:03:33,246 WARN L170 areAnnotationChecker]: PoCallDriverFINAL has no Hoare annotation [2022-04-27 15:03:33,246 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-04-27 15:03:33,246 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-04-27 15:03:33,246 WARN L170 areAnnotationChecker]: L194-1 has no Hoare annotation [2022-04-27 15:03:33,247 WARN L170 areAnnotationChecker]: L233-1 has no Hoare annotation [2022-04-27 15:03:33,249 WARN L170 areAnnotationChecker]: L249-1 has no Hoare annotation [2022-04-27 15:03:33,250 WARN L170 areAnnotationChecker]: L264-1 has no Hoare annotation [2022-04-27 15:03:33,251 WARN L170 areAnnotationChecker]: L740-1 has no Hoare annotation [2022-04-27 15:03:33,252 WARN L170 areAnnotationChecker]: IofCallDriverFINAL has no Hoare annotation [2022-04-27 15:03:33,252 WARN L170 areAnnotationChecker]: L344 has no Hoare annotation [2022-04-27 15:03:33,253 WARN L170 areAnnotationChecker]: L415 has no Hoare annotation [2022-04-27 15:03:33,253 WARN L170 areAnnotationChecker]: L415 has no Hoare annotation [2022-04-27 15:03:33,253 WARN L170 areAnnotationChecker]: L423 has no Hoare annotation [2022-04-27 15:03:33,255 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2022-04-27 15:03:33,255 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2022-04-27 15:03:33,257 WARN L170 areAnnotationChecker]: L509 has no Hoare annotation [2022-04-27 15:03:33,257 WARN L170 areAnnotationChecker]: L509 has no Hoare annotation [2022-04-27 15:03:33,257 WARN L170 areAnnotationChecker]: L760 has no Hoare annotation [2022-04-27 15:03:33,257 WARN L170 areAnnotationChecker]: L760 has no Hoare annotation [2022-04-27 15:03:33,258 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2022-04-27 15:03:33,258 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2022-04-27 15:03:33,258 WARN L170 areAnnotationChecker]: L660-1 has no Hoare annotation [2022-04-27 15:03:33,259 WARN L170 areAnnotationChecker]: L997-1 has no Hoare annotation [2022-04-27 15:03:33,260 WARN L170 areAnnotationChecker]: L1003-1 has no Hoare annotation [2022-04-27 15:03:33,264 WARN L170 areAnnotationChecker]: L956 has no Hoare annotation [2022-04-27 15:03:33,264 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2022-04-27 15:03:33,264 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2022-04-27 15:03:33,264 WARN L170 areAnnotationChecker]: L594-1 has no Hoare annotation [2022-04-27 15:03:33,264 WARN L170 areAnnotationChecker]: L997-1 has no Hoare annotation [2022-04-27 15:03:33,264 WARN L170 areAnnotationChecker]: KbFilter_PnPFINAL has no Hoare annotation [2022-04-27 15:03:33,264 WARN L170 areAnnotationChecker]: L684-1 has no Hoare annotation [2022-04-27 15:03:33,264 WARN L170 areAnnotationChecker]: L182-1 has no Hoare annotation [2022-04-27 15:03:33,264 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-04-27 15:03:33,264 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-04-27 15:03:33,264 WARN L170 areAnnotationChecker]: L223 has no Hoare annotation [2022-04-27 15:03:33,264 WARN L170 areAnnotationChecker]: L223 has no Hoare annotation [2022-04-27 15:03:33,264 WARN L170 areAnnotationChecker]: L239 has no Hoare annotation [2022-04-27 15:03:33,264 WARN L170 areAnnotationChecker]: L117 has no Hoare annotation [2022-04-27 15:03:33,264 WARN L170 areAnnotationChecker]: L117 has no Hoare annotation [2022-04-27 15:03:33,265 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2022-04-27 15:03:33,265 WARN L170 areAnnotationChecker]: L380 has no Hoare annotation [2022-04-27 15:03:33,266 WARN L170 areAnnotationChecker]: L358 has no Hoare annotation [2022-04-27 15:03:33,266 WARN L170 areAnnotationChecker]: L358 has no Hoare annotation [2022-04-27 15:03:33,266 WARN L170 areAnnotationChecker]: PoCallDriverEXIT has no Hoare annotation [2022-04-27 15:03:33,266 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectFINAL has no Hoare annotation [2022-04-27 15:03:33,266 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectFINAL has no Hoare annotation [2022-04-27 15:03:33,266 WARN L170 areAnnotationChecker]: L194-1 has no Hoare annotation [2022-04-27 15:03:33,266 WARN L170 areAnnotationChecker]: L233-1 has no Hoare annotation [2022-04-27 15:03:33,266 WARN L170 areAnnotationChecker]: L249-1 has no Hoare annotation [2022-04-27 15:03:33,266 WARN L170 areAnnotationChecker]: L264-1 has no Hoare annotation [2022-04-27 15:03:33,266 WARN L170 areAnnotationChecker]: L740-1 has no Hoare annotation [2022-04-27 15:03:33,266 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-27 15:03:33,266 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-27 15:03:33,266 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-27 15:03:33,267 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-27 15:03:33,267 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-27 15:03:33,267 WARN L170 areAnnotationChecker]: L423 has no Hoare annotation [2022-04-27 15:03:33,267 WARN L170 areAnnotationChecker]: L423 has no Hoare annotation [2022-04-27 15:03:33,267 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-04-27 15:03:33,267 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2022-04-27 15:03:33,267 WARN L170 areAnnotationChecker]: L489-1 has no Hoare annotation [2022-04-27 15:03:33,268 WARN L170 areAnnotationChecker]: L546-1 has no Hoare annotation [2022-04-27 15:03:33,268 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-04-27 15:03:33,272 WARN L170 areAnnotationChecker]: L754-1 has no Hoare annotation [2022-04-27 15:03:33,273 WARN L170 areAnnotationChecker]: L814-1 has no Hoare annotation [2022-04-27 15:03:33,273 WARN L170 areAnnotationChecker]: L797 has no Hoare annotation [2022-04-27 15:03:33,275 WARN L170 areAnnotationChecker]: L660-1 has no Hoare annotation [2022-04-27 15:03:33,275 WARN L170 areAnnotationChecker]: L1003-1 has no Hoare annotation [2022-04-27 15:03:33,275 WARN L170 areAnnotationChecker]: L956 has no Hoare annotation [2022-04-27 15:03:33,275 WARN L170 areAnnotationChecker]: L956 has no Hoare annotation [2022-04-27 15:03:33,275 WARN L170 areAnnotationChecker]: L903 has no Hoare annotation [2022-04-27 15:03:33,275 WARN L170 areAnnotationChecker]: L903 has no Hoare annotation [2022-04-27 15:03:33,275 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlFINAL has no Hoare annotation [2022-04-27 15:03:33,275 WARN L170 areAnnotationChecker]: KbFilter_PnPFINAL has no Hoare annotation [2022-04-27 15:03:33,275 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughFINAL has no Hoare annotation [2022-04-27 15:03:33,275 WARN L170 areAnnotationChecker]: L182-1 has no Hoare annotation [2022-04-27 15:03:33,275 WARN L170 areAnnotationChecker]: L227-1 has no Hoare annotation [2022-04-27 15:03:33,275 WARN L170 areAnnotationChecker]: L239 has no Hoare annotation [2022-04-27 15:03:33,275 WARN L170 areAnnotationChecker]: L239 has no Hoare annotation [2022-04-27 15:03:33,275 WARN L170 areAnnotationChecker]: L258-1 has no Hoare annotation [2022-04-27 15:03:33,277 WARN L170 areAnnotationChecker]: L120 has no Hoare annotation [2022-04-27 15:03:33,277 WARN L170 areAnnotationChecker]: L120 has no Hoare annotation [2022-04-27 15:03:33,277 WARN L170 areAnnotationChecker]: L380 has no Hoare annotation [2022-04-27 15:03:33,277 WARN L170 areAnnotationChecker]: L385 has no Hoare annotation [2022-04-27 15:03:33,278 WARN L170 areAnnotationChecker]: L363 has no Hoare annotation [2022-04-27 15:03:33,278 WARN L170 areAnnotationChecker]: L363 has no Hoare annotation [2022-04-27 15:03:33,278 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectFINAL has no Hoare annotation [2022-04-27 15:03:33,278 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-04-27 15:03:33,278 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-04-27 15:03:33,278 WARN L170 areAnnotationChecker]: KbFilter_PowerFINAL has no Hoare annotation [2022-04-27 15:03:33,278 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-04-27 15:03:33,278 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: L797 has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: L797 has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseFINAL has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: L956-2 has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: L956-2 has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlEXIT has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: KbFilter_PnPEXIT has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughEXIT has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughEXIT has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: L243-1 has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: L258-1 has no Hoare annotation [2022-04-27 15:03:33,279 WARN L170 areAnnotationChecker]: L123 has no Hoare annotation [2022-04-27 15:03:33,280 WARN L170 areAnnotationChecker]: L123 has no Hoare annotation [2022-04-27 15:03:33,280 WARN L170 areAnnotationChecker]: L385 has no Hoare annotation [2022-04-27 15:03:33,280 WARN L170 areAnnotationChecker]: L390 has no Hoare annotation [2022-04-27 15:03:33,281 WARN L170 areAnnotationChecker]: L368 has no Hoare annotation [2022-04-27 15:03:33,281 WARN L170 areAnnotationChecker]: L368 has no Hoare annotation [2022-04-27 15:03:33,281 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectEXIT has no Hoare annotation [2022-04-27 15:03:33,281 WARN L170 areAnnotationChecker]: L201-1 has no Hoare annotation [2022-04-27 15:03:33,282 WARN L170 areAnnotationChecker]: L199-2 has no Hoare annotation [2022-04-27 15:03:33,283 WARN L170 areAnnotationChecker]: L199-2 has no Hoare annotation [2022-04-27 15:03:33,283 WARN L170 areAnnotationChecker]: KbFilter_PowerEXIT has no Hoare annotation [2022-04-27 15:03:33,283 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-04-27 15:03:33,283 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-04-27 15:03:33,283 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2022-04-27 15:03:33,283 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2022-04-27 15:03:33,283 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2022-04-27 15:03:33,283 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2022-04-27 15:03:33,283 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-04-27 15:03:33,283 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-04-27 15:03:33,283 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-04-27 15:03:33,283 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-04-27 15:03:33,283 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseEXIT has no Hoare annotation [2022-04-27 15:03:33,283 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseEXIT has no Hoare annotation [2022-04-27 15:03:33,283 WARN L170 areAnnotationChecker]: L959-1 has no Hoare annotation [2022-04-27 15:03:33,284 WARN L170 areAnnotationChecker]: L917 has no Hoare annotation [2022-04-27 15:03:33,284 WARN L170 areAnnotationChecker]: L917 has no Hoare annotation [2022-04-27 15:03:33,284 WARN L170 areAnnotationChecker]: L400 has no Hoare annotation [2022-04-27 15:03:33,284 WARN L170 areAnnotationChecker]: L390 has no Hoare annotation [2022-04-27 15:03:33,284 WARN L170 areAnnotationChecker]: L126 has no Hoare annotation [2022-04-27 15:03:33,284 WARN L170 areAnnotationChecker]: L126 has no Hoare annotation [2022-04-27 15:03:33,284 WARN L170 areAnnotationChecker]: L395 has no Hoare annotation [2022-04-27 15:03:33,285 WARN L170 areAnnotationChecker]: L373 has no Hoare annotation [2022-04-27 15:03:33,285 WARN L170 areAnnotationChecker]: L373 has no Hoare annotation [2022-04-27 15:03:33,285 WARN L170 areAnnotationChecker]: L201-1 has no Hoare annotation [2022-04-27 15:03:33,285 WARN L170 areAnnotationChecker]: L208 has no Hoare annotation [2022-04-27 15:03:33,285 WARN L170 areAnnotationChecker]: L208 has no Hoare annotation [2022-04-27 15:03:33,285 WARN L170 areAnnotationChecker]: L207 has no Hoare annotation [2022-04-27 15:03:33,285 WARN L170 areAnnotationChecker]: L395 has no Hoare annotation [2022-04-27 15:03:33,285 WARN L170 areAnnotationChecker]: L433 has no Hoare annotation [2022-04-27 15:03:33,285 WARN L170 areAnnotationChecker]: L433 has no Hoare annotation [2022-04-27 15:03:33,285 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2022-04-27 15:03:33,285 WARN L170 areAnnotationChecker]: L449 has no Hoare annotation [2022-04-27 15:03:33,286 WARN L170 areAnnotationChecker]: L546-1 has no Hoare annotation [2022-04-27 15:03:33,286 WARN L170 areAnnotationChecker]: L814-1 has no Hoare annotation [2022-04-27 15:03:33,286 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-04-27 15:03:33,286 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-04-27 15:03:33,286 WARN L170 areAnnotationChecker]: L129 has no Hoare annotation [2022-04-27 15:03:33,286 WARN L170 areAnnotationChecker]: L129 has no Hoare annotation [2022-04-27 15:03:33,286 WARN L170 areAnnotationChecker]: L400 has no Hoare annotation [2022-04-27 15:03:33,287 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2022-04-27 15:03:33,288 WARN L170 areAnnotationChecker]: L434 has no Hoare annotation [2022-04-27 15:03:33,288 WARN L170 areAnnotationChecker]: L434 has no Hoare annotation [2022-04-27 15:03:33,288 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2022-04-27 15:03:33,288 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2022-04-27 15:03:33,288 WARN L170 areAnnotationChecker]: L449 has no Hoare annotation [2022-04-27 15:03:33,288 WARN L170 areAnnotationChecker]: L449 has no Hoare annotation [2022-04-27 15:03:33,288 WARN L170 areAnnotationChecker]: L931 has no Hoare annotation [2022-04-27 15:03:33,288 WARN L170 areAnnotationChecker]: L931 has no Hoare annotation [2022-04-27 15:03:33,288 WARN L170 areAnnotationChecker]: L132 has no Hoare annotation [2022-04-27 15:03:33,288 WARN L170 areAnnotationChecker]: L132 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L450 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L450 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L454 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L454 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L135 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L135 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L138 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L138 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L141 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L141 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L144 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L144 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L147 has no Hoare annotation [2022-04-27 15:03:33,289 WARN L170 areAnnotationChecker]: L147 has no Hoare annotation [2022-04-27 15:03:33,290 WARN L170 areAnnotationChecker]: L150 has no Hoare annotation [2022-04-27 15:03:33,290 WARN L170 areAnnotationChecker]: L150 has no Hoare annotation [2022-04-27 15:03:33,290 WARN L170 areAnnotationChecker]: L153 has no Hoare annotation [2022-04-27 15:03:33,290 WARN L170 areAnnotationChecker]: L153 has no Hoare annotation [2022-04-27 15:03:33,290 WARN L170 areAnnotationChecker]: L156 has no Hoare annotation [2022-04-27 15:03:33,290 WARN L170 areAnnotationChecker]: L156 has no Hoare annotation [2022-04-27 15:03:33,290 WARN L170 areAnnotationChecker]: L159 has no Hoare annotation [2022-04-27 15:03:33,290 WARN L170 areAnnotationChecker]: L159 has no Hoare annotation [2022-04-27 15:03:33,290 WARN L170 areAnnotationChecker]: L162 has no Hoare annotation [2022-04-27 15:03:33,290 WARN L170 areAnnotationChecker]: L162 has no Hoare annotation [2022-04-27 15:03:33,290 WARN L170 areAnnotationChecker]: L165 has no Hoare annotation [2022-04-27 15:03:33,290 WARN L170 areAnnotationChecker]: L165 has no Hoare annotation [2022-04-27 15:03:33,290 WARN L170 areAnnotationChecker]: L168 has no Hoare annotation [2022-04-27 15:03:33,290 WARN L170 areAnnotationChecker]: L168 has no Hoare annotation [2022-04-27 15:03:33,290 INFO L163 areAnnotationChecker]: CFG has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-04-27 15:03:33,319 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 27.04 03:03:33 BoogieIcfgContainer [2022-04-27 15:03:33,319 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-04-27 15:03:33,320 INFO L158 Benchmark]: Toolchain (without parser) took 44826.47ms. Allocated memory was 191.9MB in the beginning and 470.8MB in the end (delta: 278.9MB). Free memory was 139.8MB in the beginning and 244.5MB in the end (delta: -104.7MB). Peak memory consumption was 257.5MB. Max. memory is 8.0GB. [2022-04-27 15:03:33,320 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 191.9MB. Free memory is still 156.9MB. There was no memory consumed. Max. memory is 8.0GB. [2022-04-27 15:03:33,320 INFO L158 Benchmark]: CACSL2BoogieTranslator took 428.93ms. Allocated memory was 191.9MB in the beginning and 271.6MB in the end (delta: 79.7MB). Free memory was 139.6MB in the beginning and 237.7MB in the end (delta: -98.1MB). Peak memory consumption was 12.3MB. Max. memory is 8.0GB. [2022-04-27 15:03:33,320 INFO L158 Benchmark]: Boogie Preprocessor took 116.31ms. Allocated memory is still 271.6MB. Free memory was 237.7MB in the beginning and 234.5MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-04-27 15:03:33,320 INFO L158 Benchmark]: RCFGBuilder took 1046.69ms. Allocated memory is still 271.6MB. Free memory was 234.5MB in the beginning and 189.5MB in the end (delta: 45.1MB). Peak memory consumption was 45.1MB. Max. memory is 8.0GB. [2022-04-27 15:03:33,321 INFO L158 Benchmark]: TraceAbstraction took 43229.51ms. Allocated memory was 271.6MB in the beginning and 470.8MB in the end (delta: 199.2MB). Free memory was 188.9MB in the beginning and 244.5MB in the end (delta: -55.6MB). Peak memory consumption was 226.7MB. Max. memory is 8.0GB. [2022-04-27 15:03:33,321 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 191.9MB. Free memory is still 156.9MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 428.93ms. Allocated memory was 191.9MB in the beginning and 271.6MB in the end (delta: 79.7MB). Free memory was 139.6MB in the beginning and 237.7MB in the end (delta: -98.1MB). Peak memory consumption was 12.3MB. Max. memory is 8.0GB. * Boogie Preprocessor took 116.31ms. Allocated memory is still 271.6MB. Free memory was 237.7MB in the beginning and 234.5MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 1046.69ms. Allocated memory is still 271.6MB. Free memory was 234.5MB in the beginning and 189.5MB in the end (delta: 45.1MB). Peak memory consumption was 45.1MB. Max. memory is 8.0GB. * TraceAbstraction took 43229.51ms. Allocated memory was 271.6MB in the beginning and 470.8MB in the end (delta: 199.2MB). Free memory was 188.9MB in the beginning and 244.5MB in the end (delta: -55.6MB). Peak memory consumption was 226.7MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1013]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 19 procedures, 242 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 43.1s, OverallIterations: 20, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 30.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4799 SdHoareTripleChecker+Valid, 9.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4784 mSDsluCounter, 6810 SdHoareTripleChecker+Invalid, 9.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3715 mSDsCounter, 1110 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 7512 IncrementalHoareTripleChecker+Invalid, 8622 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1110 mSolverCounterUnsat, 3095 mSDtfsCounter, 7512 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 399 GetRequests, 189 SyntacticMatches, 4 SemanticMatches, 206 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 216 ImplicationChecksByTransitivity, 3.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=341occurred in iteration=3, InterpolantAutomatonStates: 173, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.5s AutomataMinimizationTime, 20 MinimizatonAttempts, 149 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 84 LocationsWithAnnotation, 326 PreInvPairs, 404 NumberOfFragments, 4116 HoareAnnotationTreeSize, 326 FomulaSimplifications, 624 FormulaSimplificationTreeSizeReduction, 1.3s HoareSimplificationTime, 84 FomulaSimplificationsInter, 2833 FormulaSimplificationTreeSizeReductionInter, 3.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 4.0s InterpolantComputationTime, 1048 NumberOfCodeBlocks, 1048 NumberOfCodeBlocksAsserted, 20 NumberOfCheckSat, 1028 ConstructedInterpolants, 0 QuantifiedInterpolants, 4925 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 20 InterpolantComputations, 20 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && (compRegistered == 1 || compRegistered <= 0)) && 4 <= SKIP2)) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && (compRegistered == 1 || compRegistered <= 0)) && 4 <= SKIP2)) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 114]: Loop Invariant Derived loop invariant: ((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(\old(compRegistered) == 0)) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || (((((\old(customIrp) == customIrp && setEventCalled == \old(setEventCalled)) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && compRegistered == 0) && s == \old(s))) || !(6 <= MPR3)) || !(2 == DC) - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: (((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) && ((((((((((!(NP == 1) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(\old(setEventCalled) == 1)) || !(2 == DC)) || !(compRegistered == 1)) || !(MPR3 == \old(s))) - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: (((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(NP == \old(s))) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 641]: Loop Invariant Derived loop invariant: (((((!(NP == \old(s)) || !(compRegistered == 0)) || pended == 1) || (((setEventCalled == \old(setEventCalled) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s))) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 414]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && (compRegistered == 1 || compRegistered <= 0)) && 4 <= SKIP2)) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 108]: Loop Invariant Derived loop invariant: ((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(\old(compRegistered) == 0)) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || ((((((\old(customIrp) == customIrp && setEventCalled == \old(setEventCalled)) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && status == 0) && compRegistered == 0) && s == \old(s))) || !(2 == DC) - InvariantResult [Line: 509]: Loop Invariant Derived loop invariant: (((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || (MPR1 == s && __cil_tmp7 + 1073741802 == 0)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) && ((((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC)) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: (((((!(NP == \old(s)) || !(compRegistered == 0)) || pended == 1) || (((setEventCalled == \old(setEventCalled) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s))) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 769]: Loop Invariant Derived loop invariant: (((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC) - InvariantResult [Line: 581]: Loop Invariant Derived loop invariant: (((((((((!(NP == 1) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(\old(setEventCalled) == 1)) || !(2 == DC)) || !(compRegistered == 1)) || !(MPR3 == \old(s))) && (((((((((!(NP == 1) || ((\old(customIrp) == customIrp && setEventCalled == \old(setEventCalled)) && s == \old(s))) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: (((((((((((!(NP == 1) || (((returnVal2 <= 0 && 0 <= returnVal2) && MPR1 == s) && __cil_tmp7 + 1073741802 == 0)) || ((1073741823 + returnVal2 <= 0 && MPR1 == s) && __cil_tmp7 + 1073741802 == 0)) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || ((((setEventCalled == 1 && returnVal2 <= 259) && 259 <= returnVal2) && MPR1 == s) && __cil_tmp7 + 1073741802 == 0)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) && ((((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC)) - InvariantResult [Line: 358]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || ((((((status == 0 && 7 <= IPC) && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2) && compRegistered == 0)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: (((((((((compRegistered == 1 || !(NP == 1)) || !(NP == \old(s))) || pended == 1) || !(\old(compRegistered) == 0)) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || compRegistered <= 0) || !(6 <= MPR3)) || !(2 == DC) - InvariantResult [Line: 753]: Loop Invariant Derived loop invariant: (((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC) - InvariantResult [Line: 111]: Loop Invariant Derived loop invariant: ((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(\old(compRegistered) == 0)) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || (((((\old(customIrp) == customIrp && setEventCalled == \old(setEventCalled)) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && compRegistered == 0) && s == \old(s))) || !(6 <= MPR3)) || !(2 == DC) - InvariantResult [Line: 867]: Loop Invariant Derived loop invariant: (((((!(NP == \old(s)) || !(compRegistered == 0)) || pended == 1) || (((setEventCalled == \old(setEventCalled) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s))) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && (compRegistered == 1 || compRegistered <= 0)) && 4 <= SKIP2)) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 699]: Loop Invariant Derived loop invariant: (((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(NP == \old(s))) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 776]: Loop Invariant Derived loop invariant: (((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC) - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: (((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: ((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(\old(compRegistered) == 0)) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || (((((\old(customIrp) == customIrp && setEventCalled == \old(setEventCalled)) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && compRegistered == 0) && s == \old(s))) || !(6 <= MPR3)) || !(2 == DC) - InvariantResult [Line: 603]: Loop Invariant Derived loop invariant: (((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) && ((((((((((!(NP == 1) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || ((((7 <= IPC && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(\old(setEventCalled) == 1)) || !(2 == DC)) || !(compRegistered == 1)) || !(MPR3 == \old(s))) - InvariantResult [Line: 891]: Loop Invariant Derived loop invariant: (((((!(NP == \old(s)) || !(compRegistered == 0)) || pended == 1) || (((setEventCalled == \old(setEventCalled) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s))) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 638]: Loop Invariant Derived loop invariant: (((((!(NP == \old(s)) || !(compRegistered == 0)) || pended == 1) || (((setEventCalled == \old(setEventCalled) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s))) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 511]: Loop Invariant Derived loop invariant: ((((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC)) && (((((((((!(NP == 1) || ((setEventCalled == 1 && MPR1 == s) && __cil_tmp7 + 1073741802 == 0)) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) - InvariantResult [Line: 353]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || ((((((status == 0 && 7 <= IPC) && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2) && compRegistered == 0)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 875]: Loop Invariant Derived loop invariant: (((((!(NP == \old(s)) || !(compRegistered == 0)) || pended == 1) || (((setEventCalled == \old(setEventCalled) && myStatus == \old(myStatus)) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s))) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(2 == DC) - InvariantResult [Line: 375]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || status == 0) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 368]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || ((((((status == 0 && 7 <= IPC) && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2) && compRegistered == 0)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 504]: Loop Invariant Derived loop invariant: (((((((((!(NP == 1) || !(NP == \old(s))) || pended == 1) || !(5 <= MPR1)) || !(7 <= IPC)) || (MPR1 == s && __cil_tmp7 + 1073741802 == 0)) || !(4 <= SKIP2)) || !(6 <= MPR3)) || !(2 == DC)) || !(compRegistered == 1)) && ((((((((setEventCalled == \old(setEventCalled) && lowerDriverReturn == \old(lowerDriverReturn)) && s == \old(s)) || !(compRegistered == 0)) || pended == 1) || !(7 <= IPC)) || !(4 <= SKIP2)) || !(SKIP1 == \old(s))) || !(2 == DC)) - InvariantResult [Line: 373]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || ((((((status == 0 && 7 <= IPC) && 2 == DC) && !(pended == 1)) && s == NP) && 4 <= SKIP2) && compRegistered == 0)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || !(\old(s) == \old(MPR1))) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) - InvariantResult [Line: 363]: Loop Invariant Derived loop invariant: (((((((!(\old(SKIP1) == \old(s)) || !(\old(DC) <= \old(s))) || \old(pended) == 1) || !(\old(compRegistered) == 0)) || !(\old(s) == \old(NP))) || !(\old(s) == \old(MPR1))) || (((((((((6 <= MPR3 && status == 0) && 7 <= IPC) && 5 <= MPR1) && 2 == DC) && !(pended == 1)) && s == NP) && NP == 1) && 4 <= SKIP2) && compRegistered == 0)) || !(\old(s) <= \old(DC))) || !(\old(s) == \old(MPR3)) RESULT: Ultimate proved your program to be correct! [2022-04-27 15:03:33,367 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...