/usr/bin/java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-fb4f59a-m [2022-04-27 15:02:57,272 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-04-27 15:02:57,274 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-04-27 15:02:57,318 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-04-27 15:02:57,318 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-04-27 15:02:57,319 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-04-27 15:02:57,320 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-04-27 15:02:57,321 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-04-27 15:02:57,322 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-04-27 15:02:57,322 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-04-27 15:02:57,327 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-04-27 15:02:57,329 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-04-27 15:02:57,330 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-04-27 15:02:57,334 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-04-27 15:02:57,334 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-04-27 15:02:57,336 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-04-27 15:02:57,336 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-04-27 15:02:57,338 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-04-27 15:02:57,340 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-04-27 15:02:57,346 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-04-27 15:02:57,348 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-04-27 15:02:57,349 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-04-27 15:02:57,350 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-04-27 15:02:57,352 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-04-27 15:02:57,354 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-04-27 15:02:57,355 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-04-27 15:02:57,355 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-04-27 15:02:57,356 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-04-27 15:02:57,356 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-04-27 15:02:57,356 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-04-27 15:02:57,357 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-04-27 15:02:57,357 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-04-27 15:02:57,357 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-04-27 15:02:57,358 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-04-27 15:02:57,358 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-04-27 15:02:57,359 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-04-27 15:02:57,359 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-04-27 15:02:57,359 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-04-27 15:02:57,359 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-04-27 15:02:57,359 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-04-27 15:02:57,360 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-04-27 15:02:57,364 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-04-27 15:02:57,365 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2022-04-27 15:02:57,385 INFO L113 SettingsManager]: Loading preferences was successful [2022-04-27 15:02:57,386 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-04-27 15:02:57,386 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-04-27 15:02:57,386 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-04-27 15:02:57,386 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-04-27 15:02:57,386 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-04-27 15:02:57,387 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-04-27 15:02:57,387 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-04-27 15:02:57,388 INFO L138 SettingsManager]: * Use SBE=true [2022-04-27 15:02:57,389 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-04-27 15:02:57,389 INFO L138 SettingsManager]: * sizeof long=4 [2022-04-27 15:02:57,389 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-04-27 15:02:57,389 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-04-27 15:02:57,389 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-04-27 15:02:57,389 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-04-27 15:02:57,389 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-04-27 15:02:57,389 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-04-27 15:02:57,390 INFO L138 SettingsManager]: * sizeof long double=12 [2022-04-27 15:02:57,390 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-04-27 15:02:57,390 INFO L138 SettingsManager]: * Use constant arrays=true [2022-04-27 15:02:57,391 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-04-27 15:02:57,391 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-04-27 15:02:57,391 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-04-27 15:02:57,391 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-04-27 15:02:57,391 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-27 15:02:57,391 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-04-27 15:02:57,391 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-04-27 15:02:57,391 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-04-27 15:02:57,392 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-04-27 15:02:57,392 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-04-27 15:02:57,392 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-04-27 15:02:57,392 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-04-27 15:02:57,392 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-04-27 15:02:57,392 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-04-27 15:02:57,567 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-04-27 15:02:57,595 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-04-27 15:02:57,596 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-04-27 15:02:57,597 INFO L271 PluginConnector]: Initializing CDTParser... [2022-04-27 15:02:57,597 INFO L275 PluginConnector]: CDTParser initialized [2022-04-27 15:02:57,599 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c [2022-04-27 15:02:57,640 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8a0efa24f/47099760f09d4cb79b3f8ad8d13eb4a2/FLAGc744d628c [2022-04-27 15:02:58,076 INFO L306 CDTParser]: Found 1 translation units. [2022-04-27 15:02:58,077 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c [2022-04-27 15:02:58,091 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8a0efa24f/47099760f09d4cb79b3f8ad8d13eb4a2/FLAGc744d628c [2022-04-27 15:02:58,102 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8a0efa24f/47099760f09d4cb79b3f8ad8d13eb4a2 [2022-04-27 15:02:58,104 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-04-27 15:02:58,106 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2022-04-27 15:02:58,108 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-04-27 15:02:58,108 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-04-27 15:02:58,110 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-04-27 15:02:58,111 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 27.04 03:02:58" (1/1) ... [2022-04-27 15:02:58,111 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@52690e84 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:58, skipping insertion in model container [2022-04-27 15:02:58,111 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 27.04 03:02:58" (1/1) ... [2022-04-27 15:02:58,116 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-04-27 15:02:58,149 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-04-27 15:02:58,411 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c[29656,29669] [2022-04-27 15:02:58,413 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-27 15:02:58,418 INFO L203 MainTranslator]: Completed pre-run [2022-04-27 15:02:58,495 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/ntdrivers-simplified/kbfiltr_simpl2.cil-2.c[29656,29669] [2022-04-27 15:02:58,495 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-27 15:02:58,522 INFO L208 MainTranslator]: Completed translation [2022-04-27 15:02:58,522 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:58 WrapperNode [2022-04-27 15:02:58,522 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-04-27 15:02:58,523 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-04-27 15:02:58,523 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-04-27 15:02:58,523 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-04-27 15:02:58,530 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:58" (1/1) ... [2022-04-27 15:02:58,531 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:58" (1/1) ... [2022-04-27 15:02:58,540 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:58" (1/1) ... [2022-04-27 15:02:58,541 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:58" (1/1) ... [2022-04-27 15:02:58,556 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:58" (1/1) ... [2022-04-27 15:02:58,563 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:58" (1/1) ... [2022-04-27 15:02:58,565 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:58" (1/1) ... [2022-04-27 15:02:58,568 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-04-27 15:02:58,569 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-04-27 15:02:58,569 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-04-27 15:02:58,569 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-04-27 15:02:58,569 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:58" (1/1) ... [2022-04-27 15:02:58,574 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-27 15:02:58,582 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-27 15:02:58,591 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-04-27 15:02:58,593 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-04-27 15:02:58,638 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2022-04-27 15:02:58,638 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-04-27 15:02:58,638 INFO L138 BoogieDeclarations]: Found implementation of procedure reach_error [2022-04-27 15:02:58,639 INFO L138 BoogieDeclarations]: Found implementation of procedure stub_driver_init [2022-04-27 15:02:58,640 INFO L138 BoogieDeclarations]: Found implementation of procedure _BLAST_init [2022-04-27 15:02:58,640 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_PnP [2022-04-27 15:02:58,640 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2022-04-27 15:02:58,641 INFO L138 BoogieDeclarations]: Found implementation of procedure stubMoreProcessingRequired [2022-04-27 15:02:58,641 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCallDriver [2022-04-27 15:02:58,641 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCompleteRequest [2022-04-27 15:02:58,641 INFO L138 BoogieDeclarations]: Found implementation of procedure KeSetEvent [2022-04-27 15:02:58,641 INFO L138 BoogieDeclarations]: Found implementation of procedure KeWaitForSingleObject [2022-04-27 15:02:58,643 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Complete [2022-04-27 15:02:58,644 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_CreateClose [2022-04-27 15:02:58,644 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_DispatchPassThrough [2022-04-27 15:02:58,644 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Power [2022-04-27 15:02:58,644 INFO L138 BoogieDeclarations]: Found implementation of procedure PoCallDriver [2022-04-27 15:02:58,644 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_InternIoCtl [2022-04-27 15:02:58,644 INFO L138 BoogieDeclarations]: Found implementation of procedure errorFn [2022-04-27 15:02:58,644 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2022-04-27 15:02:58,644 INFO L130 BoogieDeclarations]: Found specification of procedure __assert_fail [2022-04-27 15:02:58,644 INFO L130 BoogieDeclarations]: Found specification of procedure reach_error [2022-04-27 15:02:58,644 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-04-27 15:02:58,644 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_char [2022-04-27 15:02:58,645 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2022-04-27 15:02:58,645 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_long [2022-04-27 15:02:58,645 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_PnP [2022-04-27 15:02:58,645 INFO L130 BoogieDeclarations]: Found specification of procedure IofCallDriver [2022-04-27 15:02:58,645 INFO L130 BoogieDeclarations]: Found specification of procedure KeSetEvent [2022-04-27 15:02:58,645 INFO L130 BoogieDeclarations]: Found specification of procedure KeWaitForSingleObject [2022-04-27 15:02:58,645 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Complete [2022-04-27 15:02:58,645 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_CreateClose [2022-04-27 15:02:58,645 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_DispatchPassThrough [2022-04-27 15:02:58,645 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Power [2022-04-27 15:02:58,645 INFO L130 BoogieDeclarations]: Found specification of procedure PoCallDriver [2022-04-27 15:02:58,645 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_InternIoCtl [2022-04-27 15:02:58,645 INFO L130 BoogieDeclarations]: Found specification of procedure errorFn [2022-04-27 15:02:58,646 INFO L130 BoogieDeclarations]: Found specification of procedure IofCompleteRequest [2022-04-27 15:02:58,646 INFO L130 BoogieDeclarations]: Found specification of procedure stub_driver_init [2022-04-27 15:02:58,646 INFO L130 BoogieDeclarations]: Found specification of procedure _BLAST_init [2022-04-27 15:02:58,646 INFO L130 BoogieDeclarations]: Found specification of procedure main [2022-04-27 15:02:58,646 INFO L130 BoogieDeclarations]: Found specification of procedure stubMoreProcessingRequired [2022-04-27 15:02:58,646 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2022-04-27 15:02:58,646 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-04-27 15:02:58,646 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-04-27 15:02:58,646 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-04-27 15:02:58,646 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-04-27 15:02:58,646 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-04-27 15:02:58,743 INFO L234 CfgBuilder]: Building ICFG [2022-04-27 15:02:58,744 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-04-27 15:02:58,802 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-27 15:02:58,915 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##18: assume false; [2022-04-27 15:02:58,915 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##19: assume !false; [2022-04-27 15:02:58,919 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-27 15:02:58,964 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-27 15:02:58,964 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-27 15:02:59,055 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-27 15:02:59,066 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##16: assume !false; [2022-04-27 15:02:59,067 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##15: assume false; [2022-04-27 15:02:59,072 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-27 15:02:59,168 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##43: assume false; [2022-04-27 15:02:59,168 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##44: assume !false; [2022-04-27 15:02:59,171 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-27 15:02:59,195 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##10: assume !false; [2022-04-27 15:02:59,196 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##9: assume false; [2022-04-27 15:02:59,199 WARN L811 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-04-27 15:02:59,218 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##12: assume !false; [2022-04-27 15:02:59,218 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume false; [2022-04-27 15:02:59,243 INFO L275 CfgBuilder]: Performing block encoding [2022-04-27 15:02:59,249 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-04-27 15:02:59,249 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-04-27 15:02:59,251 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 27.04 03:02:59 BoogieIcfgContainer [2022-04-27 15:02:59,251 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-04-27 15:02:59,252 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-04-27 15:02:59,252 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-04-27 15:02:59,255 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-04-27 15:02:59,255 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 27.04 03:02:58" (1/3) ... [2022-04-27 15:02:59,255 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6e304c67 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 27.04 03:02:59, skipping insertion in model container [2022-04-27 15:02:59,255 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 27.04 03:02:58" (2/3) ... [2022-04-27 15:02:59,256 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6e304c67 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 27.04 03:02:59, skipping insertion in model container [2022-04-27 15:02:59,256 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 27.04 03:02:59" (3/3) ... [2022-04-27 15:02:59,256 INFO L111 eAbstractionObserver]: Analyzing ICFG kbfiltr_simpl2.cil-2.c [2022-04-27 15:02:59,266 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-04-27 15:02:59,266 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-04-27 15:02:59,305 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-04-27 15:02:59,319 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@22432dc3, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@363df5a3 [2022-04-27 15:02:59,319 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-04-27 15:02:59,327 INFO L276 IsEmpty]: Start isEmpty. Operand has 240 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 200 states have internal predecessors, (284), 39 states have call successors, (39), 17 states have call predecessors, (39), 17 states have return successors, (39), 37 states have call predecessors, (39), 39 states have call successors, (39) [2022-04-27 15:02:59,332 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-04-27 15:02:59,332 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:02:59,333 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:02:59,333 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:02:59,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:02:59,336 INFO L85 PathProgramCache]: Analyzing trace with hash -1235546278, now seen corresponding path program 1 times [2022-04-27 15:02:59,342 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:02:59,342 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1088305608] [2022-04-27 15:02:59,343 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:02:59,343 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:02:59,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:59,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:02:59,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:59,605 INFO L290 TraceCheckUtils]: 0: Hoare triple {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {243#true} is VALID [2022-04-27 15:02:59,605 INFO L290 TraceCheckUtils]: 1: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-27 15:02:59,605 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {243#true} {243#true} #783#return; {243#true} is VALID [2022-04-27 15:02:59,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:02:59,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:02:59,658 INFO L290 TraceCheckUtils]: 0: Hoare triple {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {243#true} is VALID [2022-04-27 15:02:59,658 INFO L290 TraceCheckUtils]: 1: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-27 15:02:59,659 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {243#true} {248#(= main_~status~1 0)} #715#return; {248#(= main_~status~1 0)} is VALID [2022-04-27 15:02:59,661 INFO L272 TraceCheckUtils]: 0: Hoare triple {243#true} call ULTIMATE.init(); {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:02:59,661 INFO L290 TraceCheckUtils]: 1: Hoare triple {252#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {243#true} is VALID [2022-04-27 15:02:59,661 INFO L290 TraceCheckUtils]: 2: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-27 15:02:59,661 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {243#true} {243#true} #783#return; {243#true} is VALID [2022-04-27 15:02:59,661 INFO L272 TraceCheckUtils]: 4: Hoare triple {243#true} call #t~ret81 := main(); {243#true} is VALID [2022-04-27 15:02:59,662 INFO L290 TraceCheckUtils]: 5: Hoare triple {243#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {248#(= main_~status~1 0)} is VALID [2022-04-27 15:02:59,663 INFO L272 TraceCheckUtils]: 6: Hoare triple {248#(= main_~status~1 0)} call _BLAST_init(); {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:02:59,664 INFO L290 TraceCheckUtils]: 7: Hoare triple {253#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {243#true} is VALID [2022-04-27 15:02:59,664 INFO L290 TraceCheckUtils]: 8: Hoare triple {243#true} assume true; {243#true} is VALID [2022-04-27 15:02:59,664 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {243#true} {248#(= main_~status~1 0)} #715#return; {248#(= main_~status~1 0)} is VALID [2022-04-27 15:02:59,665 INFO L290 TraceCheckUtils]: 10: Hoare triple {248#(= main_~status~1 0)} assume !(~status~1 >= 0); {244#false} is VALID [2022-04-27 15:02:59,665 INFO L290 TraceCheckUtils]: 11: Hoare triple {244#false} assume !(1 == ~pended~0); {244#false} is VALID [2022-04-27 15:02:59,665 INFO L290 TraceCheckUtils]: 12: Hoare triple {244#false} assume !(1 == ~pended~0); {244#false} is VALID [2022-04-27 15:02:59,665 INFO L290 TraceCheckUtils]: 13: Hoare triple {244#false} assume ~s~0 != ~UNLOADED~0; {244#false} is VALID [2022-04-27 15:02:59,666 INFO L290 TraceCheckUtils]: 14: Hoare triple {244#false} assume -1 != ~status~1; {244#false} is VALID [2022-04-27 15:02:59,666 INFO L290 TraceCheckUtils]: 15: Hoare triple {244#false} assume !(~s~0 != ~SKIP2~0); {244#false} is VALID [2022-04-27 15:02:59,666 INFO L290 TraceCheckUtils]: 16: Hoare triple {244#false} assume 1 == ~pended~0; {244#false} is VALID [2022-04-27 15:02:59,666 INFO L290 TraceCheckUtils]: 17: Hoare triple {244#false} assume 259 != ~status~1; {244#false} is VALID [2022-04-27 15:02:59,667 INFO L272 TraceCheckUtils]: 18: Hoare triple {244#false} call errorFn(); {244#false} is VALID [2022-04-27 15:02:59,668 INFO L290 TraceCheckUtils]: 19: Hoare triple {244#false} assume !false; {244#false} is VALID [2022-04-27 15:02:59,668 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:02:59,671 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:02:59,671 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1088305608] [2022-04-27 15:02:59,676 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1088305608] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:02:59,676 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:02:59,676 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-27 15:02:59,678 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [230897986] [2022-04-27 15:02:59,678 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:02:59,682 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-27 15:02:59,683 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:02:59,685 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-27 15:02:59,707 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:02:59,708 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-04-27 15:02:59,708 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:02:59,725 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-04-27 15:02:59,726 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-27 15:02:59,732 INFO L87 Difference]: Start difference. First operand has 240 states, 182 states have (on average 1.5604395604395604) internal successors, (284), 200 states have internal predecessors, (284), 39 states have call successors, (39), 17 states have call predecessors, (39), 17 states have return successors, (39), 37 states have call predecessors, (39), 39 states have call successors, (39) Second operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-27 15:03:01,262 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:01,263 INFO L93 Difference]: Finished difference Result 417 states and 628 transitions. [2022-04-27 15:03:01,263 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-04-27 15:03:01,263 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2022-04-27 15:03:01,263 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:01,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-27 15:03:01,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 628 transitions. [2022-04-27 15:03:01,279 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-27 15:03:01,289 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 628 transitions. [2022-04-27 15:03:01,289 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 5 states and 628 transitions. [2022-04-27 15:03:01,842 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 628 edges. 628 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:01,856 INFO L225 Difference]: With dead ends: 417 [2022-04-27 15:03:01,856 INFO L226 Difference]: Without dead ends: 259 [2022-04-27 15:03:01,859 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-04-27 15:03:01,861 INFO L413 NwaCegarLoop]: 297 mSDtfsCounter, 328 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 410 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 334 SdHoareTripleChecker+Valid, 444 SdHoareTripleChecker+Invalid, 491 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 410 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:01,862 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [334 Valid, 444 Invalid, 491 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 410 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-27 15:03:01,873 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-04-27 15:03:01,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 231. [2022-04-27 15:03:01,895 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:01,897 INFO L82 GeneralOperation]: Start isEquivalent. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-27 15:03:01,897 INFO L74 IsIncluded]: Start isIncluded. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-27 15:03:01,898 INFO L87 Difference]: Start difference. First operand 259 states. Second operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-27 15:03:01,908 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:01,909 INFO L93 Difference]: Finished difference Result 259 states and 367 transitions. [2022-04-27 15:03:01,909 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 367 transitions. [2022-04-27 15:03:01,911 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:01,911 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:01,912 INFO L74 IsIncluded]: Start isIncluded. First operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 259 states. [2022-04-27 15:03:01,913 INFO L87 Difference]: Start difference. First operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) Second operand 259 states. [2022-04-27 15:03:01,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:01,922 INFO L93 Difference]: Finished difference Result 259 states and 367 transitions. [2022-04-27 15:03:01,922 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 367 transitions. [2022-04-27 15:03:01,924 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:01,924 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:01,924 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:01,924 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:01,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 176 states have (on average 1.4943181818181819) internal successors, (263), 192 states have internal predecessors, (263), 39 states have call successors, (39), 17 states have call predecessors, (39), 15 states have return successors, (24), 24 states have call predecessors, (24), 24 states have call successors, (24) [2022-04-27 15:03:01,933 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 326 transitions. [2022-04-27 15:03:01,934 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 326 transitions. Word has length 20 [2022-04-27 15:03:01,934 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:01,934 INFO L495 AbstractCegarLoop]: Abstraction has 231 states and 326 transitions. [2022-04-27 15:03:01,934 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.8) internal successors, (14), 3 states have internal predecessors, (14), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-04-27 15:03:01,935 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 326 transitions. [2022-04-27 15:03:01,935 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-27 15:03:01,935 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:01,935 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:01,935 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-04-27 15:03:01,936 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:01,936 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:01,936 INFO L85 PathProgramCache]: Analyzing trace with hash -225403307, now seen corresponding path program 1 times [2022-04-27 15:03:01,936 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:01,936 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [150896014] [2022-04-27 15:03:01,936 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:01,936 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:01,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:02,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:02,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:02,035 INFO L290 TraceCheckUtils]: 0: Hoare triple {1668#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {1656#true} is VALID [2022-04-27 15:03:02,035 INFO L290 TraceCheckUtils]: 1: Hoare triple {1656#true} assume true; {1656#true} is VALID [2022-04-27 15:03:02,035 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1656#true} {1656#true} #783#return; {1656#true} is VALID [2022-04-27 15:03:02,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:02,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:02,060 INFO L290 TraceCheckUtils]: 0: Hoare triple {1669#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {1656#true} is VALID [2022-04-27 15:03:02,061 INFO L290 TraceCheckUtils]: 1: Hoare triple {1656#true} assume true; {1656#true} is VALID [2022-04-27 15:03:02,061 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1656#true} {1656#true} #715#return; {1656#true} is VALID [2022-04-27 15:03:02,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:02,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:02,077 INFO L290 TraceCheckUtils]: 0: Hoare triple {1670#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {1667#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:03:02,077 INFO L290 TraceCheckUtils]: 1: Hoare triple {1667#(= ~s~0 ~NP~0)} assume true; {1667#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:03:02,078 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1667#(= ~s~0 ~NP~0)} {1656#true} #717#return; {1667#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:03:02,079 INFO L272 TraceCheckUtils]: 0: Hoare triple {1656#true} call ULTIMATE.init(); {1668#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:02,079 INFO L290 TraceCheckUtils]: 1: Hoare triple {1668#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {1656#true} is VALID [2022-04-27 15:03:02,079 INFO L290 TraceCheckUtils]: 2: Hoare triple {1656#true} assume true; {1656#true} is VALID [2022-04-27 15:03:02,080 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {1656#true} {1656#true} #783#return; {1656#true} is VALID [2022-04-27 15:03:02,080 INFO L272 TraceCheckUtils]: 4: Hoare triple {1656#true} call #t~ret81 := main(); {1656#true} is VALID [2022-04-27 15:03:02,080 INFO L290 TraceCheckUtils]: 5: Hoare triple {1656#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {1656#true} is VALID [2022-04-27 15:03:02,081 INFO L272 TraceCheckUtils]: 6: Hoare triple {1656#true} call _BLAST_init(); {1669#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:02,081 INFO L290 TraceCheckUtils]: 7: Hoare triple {1669#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {1656#true} is VALID [2022-04-27 15:03:02,081 INFO L290 TraceCheckUtils]: 8: Hoare triple {1656#true} assume true; {1656#true} is VALID [2022-04-27 15:03:02,081 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {1656#true} {1656#true} #715#return; {1656#true} is VALID [2022-04-27 15:03:02,081 INFO L290 TraceCheckUtils]: 10: Hoare triple {1656#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {1656#true} is VALID [2022-04-27 15:03:02,082 INFO L290 TraceCheckUtils]: 11: Hoare triple {1656#true} assume !(0 == ~irp_choice~0); {1656#true} is VALID [2022-04-27 15:03:02,082 INFO L272 TraceCheckUtils]: 12: Hoare triple {1656#true} call stub_driver_init(); {1670#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:02,083 INFO L290 TraceCheckUtils]: 13: Hoare triple {1670#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {1667#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:03:02,083 INFO L290 TraceCheckUtils]: 14: Hoare triple {1667#(= ~s~0 ~NP~0)} assume true; {1667#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:03:02,083 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {1667#(= ~s~0 ~NP~0)} {1656#true} #717#return; {1667#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:03:02,084 INFO L290 TraceCheckUtils]: 16: Hoare triple {1667#(= ~s~0 ~NP~0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {1667#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:03:02,084 INFO L290 TraceCheckUtils]: 17: Hoare triple {1667#(= ~s~0 ~NP~0)} assume 0 == ~tmp_ndt_1~0; {1667#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:03:02,085 INFO L272 TraceCheckUtils]: 18: Hoare triple {1667#(= ~s~0 ~NP~0)} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {1667#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:03:02,085 INFO L290 TraceCheckUtils]: 19: Hoare triple {1667#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {1667#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:03:02,085 INFO L290 TraceCheckUtils]: 20: Hoare triple {1667#(= ~s~0 ~NP~0)} assume 0 == ~irpStack__MajorFunction~0; {1667#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:03:02,086 INFO L290 TraceCheckUtils]: 21: Hoare triple {1667#(= ~s~0 ~NP~0)} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {1667#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:03:02,086 INFO L290 TraceCheckUtils]: 22: Hoare triple {1667#(= ~s~0 ~NP~0)} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {1667#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:03:02,087 INFO L272 TraceCheckUtils]: 23: Hoare triple {1667#(= ~s~0 ~NP~0)} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {1667#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:03:02,087 INFO L290 TraceCheckUtils]: 24: Hoare triple {1667#(= ~s~0 ~NP~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {1667#(= ~s~0 ~NP~0)} is VALID [2022-04-27 15:03:02,087 INFO L290 TraceCheckUtils]: 25: Hoare triple {1667#(= ~s~0 ~NP~0)} assume !(~s~0 == ~NP~0); {1657#false} is VALID [2022-04-27 15:03:02,087 INFO L272 TraceCheckUtils]: 26: Hoare triple {1657#false} call errorFn(); {1657#false} is VALID [2022-04-27 15:03:02,088 INFO L290 TraceCheckUtils]: 27: Hoare triple {1657#false} assume !false; {1657#false} is VALID [2022-04-27 15:03:02,088 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:02,088 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:02,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [150896014] [2022-04-27 15:03:02,088 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [150896014] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:02,089 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:02,089 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-27 15:03:02,089 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [700614810] [2022-04-27 15:03:02,089 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:02,090 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-27 15:03:02,090 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:02,090 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:02,110 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:02,110 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-27 15:03:02,110 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:02,111 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-27 15:03:02,111 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-27 15:03:02,111 INFO L87 Difference]: Start difference. First operand 231 states and 326 transitions. Second operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:03,915 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:03,915 INFO L93 Difference]: Finished difference Result 410 states and 565 transitions. [2022-04-27 15:03:03,915 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-27 15:03:03,916 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-27 15:03:03,916 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:03,916 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:03,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 565 transitions. [2022-04-27 15:03:03,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:03,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 565 transitions. [2022-04-27 15:03:03,928 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 565 transitions. [2022-04-27 15:03:04,409 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 565 edges. 565 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:04,416 INFO L225 Difference]: With dead ends: 410 [2022-04-27 15:03:04,416 INFO L226 Difference]: Without dead ends: 349 [2022-04-27 15:03:04,417 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-27 15:03:04,418 INFO L413 NwaCegarLoop]: 359 mSDtfsCounter, 386 mSDsluCounter, 113 mSDsCounter, 0 mSdLazyCounter, 620 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 386 SdHoareTripleChecker+Valid, 472 SdHoareTripleChecker+Invalid, 683 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 620 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:04,418 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [386 Valid, 472 Invalid, 683 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 620 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-27 15:03:04,419 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 349 states. [2022-04-27 15:03:04,434 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 349 to 304. [2022-04-27 15:03:04,434 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:04,435 INFO L82 GeneralOperation]: Start isEquivalent. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-27 15:03:04,436 INFO L74 IsIncluded]: Start isIncluded. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-27 15:03:04,436 INFO L87 Difference]: Start difference. First operand 349 states. Second operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-27 15:03:04,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:04,446 INFO L93 Difference]: Finished difference Result 349 states and 477 transitions. [2022-04-27 15:03:04,446 INFO L276 IsEmpty]: Start isEmpty. Operand 349 states and 477 transitions. [2022-04-27 15:03:04,447 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:04,447 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:04,448 INFO L74 IsIncluded]: Start isIncluded. First operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 349 states. [2022-04-27 15:03:04,449 INFO L87 Difference]: Start difference. First operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) Second operand 349 states. [2022-04-27 15:03:04,458 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:04,459 INFO L93 Difference]: Finished difference Result 349 states and 477 transitions. [2022-04-27 15:03:04,459 INFO L276 IsEmpty]: Start isEmpty. Operand 349 states and 477 transitions. [2022-04-27 15:03:04,460 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:04,460 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:04,460 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:04,460 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:04,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 239 states have (on average 1.393305439330544) internal successors, (333), 243 states have internal predecessors, (333), 38 states have call successors, (38), 23 states have call predecessors, (38), 26 states have return successors, (44), 40 states have call predecessors, (44), 29 states have call successors, (44) [2022-04-27 15:03:04,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 415 transitions. [2022-04-27 15:03:04,469 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 415 transitions. Word has length 28 [2022-04-27 15:03:04,469 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:04,469 INFO L495 AbstractCegarLoop]: Abstraction has 304 states and 415 transitions. [2022-04-27 15:03:04,470 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.0) internal successors, (18), 3 states have internal predecessors, (18), 3 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:04,470 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 415 transitions. [2022-04-27 15:03:04,470 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-04-27 15:03:04,470 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:04,470 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:04,470 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-04-27 15:03:04,471 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:04,471 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:04,471 INFO L85 PathProgramCache]: Analyzing trace with hash -809602478, now seen corresponding path program 1 times [2022-04-27 15:03:04,471 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:04,471 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1958574430] [2022-04-27 15:03:04,471 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:04,471 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:04,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:04,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:04,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:04,543 INFO L290 TraceCheckUtils]: 0: Hoare triple {3348#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {3336#true} is VALID [2022-04-27 15:03:04,543 INFO L290 TraceCheckUtils]: 1: Hoare triple {3336#true} assume true; {3336#true} is VALID [2022-04-27 15:03:04,543 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3336#true} {3336#true} #783#return; {3336#true} is VALID [2022-04-27 15:03:04,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:04,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:04,565 INFO L290 TraceCheckUtils]: 0: Hoare triple {3349#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {3336#true} is VALID [2022-04-27 15:03:04,566 INFO L290 TraceCheckUtils]: 1: Hoare triple {3336#true} assume true; {3336#true} is VALID [2022-04-27 15:03:04,566 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3336#true} {3336#true} #715#return; {3336#true} is VALID [2022-04-27 15:03:04,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:04,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:04,580 INFO L290 TraceCheckUtils]: 0: Hoare triple {3350#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {3347#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:04,580 INFO L290 TraceCheckUtils]: 1: Hoare triple {3347#(= ~compRegistered~0 0)} assume true; {3347#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:04,581 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3347#(= ~compRegistered~0 0)} {3336#true} #717#return; {3347#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:04,582 INFO L272 TraceCheckUtils]: 0: Hoare triple {3336#true} call ULTIMATE.init(); {3348#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:04,582 INFO L290 TraceCheckUtils]: 1: Hoare triple {3348#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {3336#true} is VALID [2022-04-27 15:03:04,582 INFO L290 TraceCheckUtils]: 2: Hoare triple {3336#true} assume true; {3336#true} is VALID [2022-04-27 15:03:04,582 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {3336#true} {3336#true} #783#return; {3336#true} is VALID [2022-04-27 15:03:04,582 INFO L272 TraceCheckUtils]: 4: Hoare triple {3336#true} call #t~ret81 := main(); {3336#true} is VALID [2022-04-27 15:03:04,583 INFO L290 TraceCheckUtils]: 5: Hoare triple {3336#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {3336#true} is VALID [2022-04-27 15:03:04,583 INFO L272 TraceCheckUtils]: 6: Hoare triple {3336#true} call _BLAST_init(); {3349#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:04,584 INFO L290 TraceCheckUtils]: 7: Hoare triple {3349#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {3336#true} is VALID [2022-04-27 15:03:04,584 INFO L290 TraceCheckUtils]: 8: Hoare triple {3336#true} assume true; {3336#true} is VALID [2022-04-27 15:03:04,584 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {3336#true} {3336#true} #715#return; {3336#true} is VALID [2022-04-27 15:03:04,584 INFO L290 TraceCheckUtils]: 10: Hoare triple {3336#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {3336#true} is VALID [2022-04-27 15:03:04,584 INFO L290 TraceCheckUtils]: 11: Hoare triple {3336#true} assume !(0 == ~irp_choice~0); {3336#true} is VALID [2022-04-27 15:03:04,585 INFO L272 TraceCheckUtils]: 12: Hoare triple {3336#true} call stub_driver_init(); {3350#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:04,585 INFO L290 TraceCheckUtils]: 13: Hoare triple {3350#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {3347#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:04,585 INFO L290 TraceCheckUtils]: 14: Hoare triple {3347#(= ~compRegistered~0 0)} assume true; {3347#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:04,585 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {3347#(= ~compRegistered~0 0)} {3336#true} #717#return; {3347#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:04,586 INFO L290 TraceCheckUtils]: 16: Hoare triple {3347#(= ~compRegistered~0 0)} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {3347#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:04,586 INFO L290 TraceCheckUtils]: 17: Hoare triple {3347#(= ~compRegistered~0 0)} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {3347#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:04,586 INFO L290 TraceCheckUtils]: 18: Hoare triple {3347#(= ~compRegistered~0 0)} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {3347#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:04,587 INFO L290 TraceCheckUtils]: 19: Hoare triple {3347#(= ~compRegistered~0 0)} assume 3 == ~tmp_ndt_3~0; {3347#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:04,587 INFO L272 TraceCheckUtils]: 20: Hoare triple {3347#(= ~compRegistered~0 0)} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {3347#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:04,588 INFO L290 TraceCheckUtils]: 21: Hoare triple {3347#(= ~compRegistered~0 0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {3347#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:04,588 INFO L290 TraceCheckUtils]: 22: Hoare triple {3347#(= ~compRegistered~0 0)} assume 0 == ~irpStack__MinorFunction~0; {3347#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:04,588 INFO L290 TraceCheckUtils]: 23: Hoare triple {3347#(= ~compRegistered~0 0)} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {3347#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:04,589 INFO L290 TraceCheckUtils]: 24: Hoare triple {3347#(= ~compRegistered~0 0)} assume !(~s~0 != ~NP~0); {3347#(= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:04,589 INFO L290 TraceCheckUtils]: 25: Hoare triple {3347#(= ~compRegistered~0 0)} assume 0 != ~compRegistered~0; {3337#false} is VALID [2022-04-27 15:03:04,589 INFO L272 TraceCheckUtils]: 26: Hoare triple {3337#false} call errorFn(); {3337#false} is VALID [2022-04-27 15:03:04,589 INFO L290 TraceCheckUtils]: 27: Hoare triple {3337#false} assume !false; {3337#false} is VALID [2022-04-27 15:03:04,589 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:04,589 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:04,589 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1958574430] [2022-04-27 15:03:04,590 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1958574430] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:04,590 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:04,590 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-27 15:03:04,590 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [339189075] [2022-04-27 15:03:04,590 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:04,590 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-27 15:03:04,590 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:04,591 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:04,609 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:04,610 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-27 15:03:04,610 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:04,610 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-27 15:03:04,610 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-27 15:03:04,610 INFO L87 Difference]: Start difference. First operand 304 states and 415 transitions. Second operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:06,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:06,034 INFO L93 Difference]: Finished difference Result 487 states and 647 transitions. [2022-04-27 15:03:06,034 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-27 15:03:06,034 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 28 [2022-04-27 15:03:06,034 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:06,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:06,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 515 transitions. [2022-04-27 15:03:06,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:06,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 515 transitions. [2022-04-27 15:03:06,044 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 515 transitions. [2022-04-27 15:03:06,449 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 515 edges. 515 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:06,456 INFO L225 Difference]: With dead ends: 487 [2022-04-27 15:03:06,456 INFO L226 Difference]: Without dead ends: 368 [2022-04-27 15:03:06,457 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2022-04-27 15:03:06,458 INFO L413 NwaCegarLoop]: 267 mSDtfsCounter, 408 mSDsluCounter, 120 mSDsCounter, 0 mSdLazyCounter, 476 mSolverCounterSat, 66 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 408 SdHoareTripleChecker+Valid, 387 SdHoareTripleChecker+Invalid, 542 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 66 IncrementalHoareTripleChecker+Valid, 476 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:06,458 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [408 Valid, 387 Invalid, 542 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [66 Valid, 476 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-27 15:03:06,459 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 368 states. [2022-04-27 15:03:06,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 368 to 344. [2022-04-27 15:03:06,476 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:06,477 INFO L82 GeneralOperation]: Start isEquivalent. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:03:06,478 INFO L74 IsIncluded]: Start isIncluded. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:03:06,478 INFO L87 Difference]: Start difference. First operand 368 states. Second operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:03:06,488 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:06,488 INFO L93 Difference]: Finished difference Result 368 states and 494 transitions. [2022-04-27 15:03:06,488 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 494 transitions. [2022-04-27 15:03:06,489 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:06,489 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:06,490 INFO L74 IsIncluded]: Start isIncluded. First operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 368 states. [2022-04-27 15:03:06,490 INFO L87 Difference]: Start difference. First operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 368 states. [2022-04-27 15:03:06,505 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:06,506 INFO L93 Difference]: Finished difference Result 368 states and 494 transitions. [2022-04-27 15:03:06,506 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 494 transitions. [2022-04-27 15:03:06,506 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:06,507 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:06,507 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:06,507 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:06,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 344 states, 280 states have (on average 1.3857142857142857) internal successors, (388), 282 states have internal predecessors, (388), 34 states have call successors, (34), 23 states have call predecessors, (34), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:03:06,522 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 344 states to 344 states and 466 transitions. [2022-04-27 15:03:06,523 INFO L78 Accepts]: Start accepts. Automaton has 344 states and 466 transitions. Word has length 28 [2022-04-27 15:03:06,523 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:06,523 INFO L495 AbstractCegarLoop]: Abstraction has 344 states and 466 transitions. [2022-04-27 15:03:06,523 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.1666666666666665) internal successors, (19), 3 states have internal predecessors, (19), 3 states have call successors, (6), 6 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:06,523 INFO L276 IsEmpty]: Start isEmpty. Operand 344 states and 466 transitions. [2022-04-27 15:03:06,525 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-04-27 15:03:06,525 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:06,525 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:06,525 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-04-27 15:03:06,525 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:06,526 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:06,526 INFO L85 PathProgramCache]: Analyzing trace with hash -1415760533, now seen corresponding path program 1 times [2022-04-27 15:03:06,526 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:06,526 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1005044416] [2022-04-27 15:03:06,526 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:06,526 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:06,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:06,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:06,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:06,620 INFO L290 TraceCheckUtils]: 0: Hoare triple {5196#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {5184#true} is VALID [2022-04-27 15:03:06,620 INFO L290 TraceCheckUtils]: 1: Hoare triple {5184#true} assume true; {5184#true} is VALID [2022-04-27 15:03:06,621 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5184#true} {5184#true} #783#return; {5184#true} is VALID [2022-04-27 15:03:06,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:06,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:06,644 INFO L290 TraceCheckUtils]: 0: Hoare triple {5197#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {5184#true} is VALID [2022-04-27 15:03:06,644 INFO L290 TraceCheckUtils]: 1: Hoare triple {5184#true} assume true; {5184#true} is VALID [2022-04-27 15:03:06,644 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5184#true} {5184#true} #715#return; {5184#true} is VALID [2022-04-27 15:03:06,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:06,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:06,657 INFO L290 TraceCheckUtils]: 0: Hoare triple {5198#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {5184#true} is VALID [2022-04-27 15:03:06,658 INFO L290 TraceCheckUtils]: 1: Hoare triple {5184#true} assume true; {5184#true} is VALID [2022-04-27 15:03:06,658 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5184#true} {5184#true} #717#return; {5184#true} is VALID [2022-04-27 15:03:06,659 INFO L272 TraceCheckUtils]: 0: Hoare triple {5184#true} call ULTIMATE.init(); {5196#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:06,659 INFO L290 TraceCheckUtils]: 1: Hoare triple {5196#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {5184#true} is VALID [2022-04-27 15:03:06,659 INFO L290 TraceCheckUtils]: 2: Hoare triple {5184#true} assume true; {5184#true} is VALID [2022-04-27 15:03:06,659 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {5184#true} {5184#true} #783#return; {5184#true} is VALID [2022-04-27 15:03:06,659 INFO L272 TraceCheckUtils]: 4: Hoare triple {5184#true} call #t~ret81 := main(); {5184#true} is VALID [2022-04-27 15:03:06,660 INFO L290 TraceCheckUtils]: 5: Hoare triple {5184#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {5184#true} is VALID [2022-04-27 15:03:06,661 INFO L272 TraceCheckUtils]: 6: Hoare triple {5184#true} call _BLAST_init(); {5197#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:06,661 INFO L290 TraceCheckUtils]: 7: Hoare triple {5197#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {5184#true} is VALID [2022-04-27 15:03:06,661 INFO L290 TraceCheckUtils]: 8: Hoare triple {5184#true} assume true; {5184#true} is VALID [2022-04-27 15:03:06,661 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {5184#true} {5184#true} #715#return; {5184#true} is VALID [2022-04-27 15:03:06,661 INFO L290 TraceCheckUtils]: 10: Hoare triple {5184#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {5184#true} is VALID [2022-04-27 15:03:06,661 INFO L290 TraceCheckUtils]: 11: Hoare triple {5184#true} assume !(0 == ~irp_choice~0); {5184#true} is VALID [2022-04-27 15:03:06,662 INFO L272 TraceCheckUtils]: 12: Hoare triple {5184#true} call stub_driver_init(); {5198#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:06,662 INFO L290 TraceCheckUtils]: 13: Hoare triple {5198#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {5184#true} is VALID [2022-04-27 15:03:06,662 INFO L290 TraceCheckUtils]: 14: Hoare triple {5184#true} assume true; {5184#true} is VALID [2022-04-27 15:03:06,662 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {5184#true} {5184#true} #717#return; {5184#true} is VALID [2022-04-27 15:03:06,662 INFO L290 TraceCheckUtils]: 16: Hoare triple {5184#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {5184#true} is VALID [2022-04-27 15:03:06,662 INFO L290 TraceCheckUtils]: 17: Hoare triple {5184#true} assume 0 == ~tmp_ndt_1~0; {5184#true} is VALID [2022-04-27 15:03:06,662 INFO L272 TraceCheckUtils]: 18: Hoare triple {5184#true} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {5184#true} is VALID [2022-04-27 15:03:06,662 INFO L290 TraceCheckUtils]: 19: Hoare triple {5184#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {5184#true} is VALID [2022-04-27 15:03:06,663 INFO L290 TraceCheckUtils]: 20: Hoare triple {5184#true} assume 0 == ~irpStack__MajorFunction~0; {5184#true} is VALID [2022-04-27 15:03:06,663 INFO L290 TraceCheckUtils]: 21: Hoare triple {5184#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {5184#true} is VALID [2022-04-27 15:03:06,663 INFO L290 TraceCheckUtils]: 22: Hoare triple {5184#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {5184#true} is VALID [2022-04-27 15:03:06,663 INFO L272 TraceCheckUtils]: 23: Hoare triple {5184#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {5184#true} is VALID [2022-04-27 15:03:06,663 INFO L290 TraceCheckUtils]: 24: Hoare triple {5184#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {5184#true} is VALID [2022-04-27 15:03:06,663 INFO L290 TraceCheckUtils]: 25: Hoare triple {5184#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {5195#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:06,664 INFO L290 TraceCheckUtils]: 26: Hoare triple {5195#(= ~SKIP1~0 ~s~0)} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {5195#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:06,664 INFO L272 TraceCheckUtils]: 27: Hoare triple {5195#(= ~SKIP1~0 ~s~0)} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {5195#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:06,665 INFO L290 TraceCheckUtils]: 28: Hoare triple {5195#(= ~SKIP1~0 ~s~0)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {5195#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:06,665 INFO L290 TraceCheckUtils]: 29: Hoare triple {5195#(= ~SKIP1~0 ~s~0)} assume !(0 != ~compRegistered~0); {5195#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:06,666 INFO L290 TraceCheckUtils]: 30: Hoare triple {5195#(= ~SKIP1~0 ~s~0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {5195#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:06,666 INFO L290 TraceCheckUtils]: 31: Hoare triple {5195#(= ~SKIP1~0 ~s~0)} assume 0 == ~tmp_ndt_6~0; {5195#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:06,666 INFO L290 TraceCheckUtils]: 32: Hoare triple {5195#(= ~SKIP1~0 ~s~0)} ~returnVal2~0 := 0; {5195#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:06,667 INFO L290 TraceCheckUtils]: 33: Hoare triple {5195#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~NP~0); {5195#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:06,667 INFO L290 TraceCheckUtils]: 34: Hoare triple {5195#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~MPR1~0); {5195#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:06,667 INFO L290 TraceCheckUtils]: 35: Hoare triple {5195#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~SKIP1~0); {5185#false} is VALID [2022-04-27 15:03:06,667 INFO L272 TraceCheckUtils]: 36: Hoare triple {5185#false} call errorFn(); {5185#false} is VALID [2022-04-27 15:03:06,668 INFO L290 TraceCheckUtils]: 37: Hoare triple {5185#false} assume !false; {5185#false} is VALID [2022-04-27 15:03:06,668 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:06,668 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:06,668 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1005044416] [2022-04-27 15:03:06,668 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1005044416] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:06,668 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:06,668 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-27 15:03:06,668 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1017158529] [2022-04-27 15:03:06,669 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:06,669 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-27 15:03:06,669 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:06,669 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:06,692 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 38 edges. 38 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:06,693 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-27 15:03:06,693 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:06,693 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-27 15:03:06,693 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-04-27 15:03:06,693 INFO L87 Difference]: Start difference. First operand 344 states and 466 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:07,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:07,699 INFO L93 Difference]: Finished difference Result 347 states and 468 transitions. [2022-04-27 15:03:07,699 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-27 15:03:07,699 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-04-27 15:03:07,700 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:07,700 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:07,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 338 transitions. [2022-04-27 15:03:07,702 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:07,704 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 338 transitions. [2022-04-27 15:03:07,704 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 338 transitions. [2022-04-27 15:03:07,990 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 338 edges. 338 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:07,996 INFO L225 Difference]: With dead ends: 347 [2022-04-27 15:03:07,997 INFO L226 Difference]: Without dead ends: 343 [2022-04-27 15:03:07,997 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-04-27 15:03:07,998 INFO L413 NwaCegarLoop]: 268 mSDtfsCounter, 343 mSDsluCounter, 124 mSDsCounter, 0 mSdLazyCounter, 334 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 343 SdHoareTripleChecker+Valid, 392 SdHoareTripleChecker+Invalid, 396 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 334 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:07,998 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [343 Valid, 392 Invalid, 396 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 334 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-27 15:03:07,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-04-27 15:03:08,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2022-04-27 15:03:08,010 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:08,010 INFO L82 GeneralOperation]: Start isEquivalent. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:03:08,011 INFO L74 IsIncluded]: Start isIncluded. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:03:08,012 INFO L87 Difference]: Start difference. First operand 343 states. Second operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:03:08,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:08,018 INFO L93 Difference]: Finished difference Result 343 states and 463 transitions. [2022-04-27 15:03:08,018 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-27 15:03:08,019 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:08,019 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:08,020 INFO L74 IsIncluded]: Start isIncluded. First operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 343 states. [2022-04-27 15:03:08,020 INFO L87 Difference]: Start difference. First operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) Second operand 343 states. [2022-04-27 15:03:08,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:08,027 INFO L93 Difference]: Finished difference Result 343 states and 463 transitions. [2022-04-27 15:03:08,027 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-27 15:03:08,028 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:08,028 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:08,028 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:08,028 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:08,029 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 280 states have (on average 1.3785714285714286) internal successors, (386), 281 states have internal predecessors, (386), 33 states have call successors, (33), 23 states have call predecessors, (33), 29 states have return successors, (44), 39 states have call predecessors, (44), 27 states have call successors, (44) [2022-04-27 15:03:08,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 463 transitions. [2022-04-27 15:03:08,036 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 463 transitions. Word has length 38 [2022-04-27 15:03:08,036 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:08,036 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 463 transitions. [2022-04-27 15:03:08,036 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (8), 6 states have call predecessors, (8), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-04-27 15:03:08,036 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 463 transitions. [2022-04-27 15:03:08,037 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-27 15:03:08,037 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:08,037 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:08,037 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-04-27 15:03:08,037 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:08,038 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:08,038 INFO L85 PathProgramCache]: Analyzing trace with hash 605107567, now seen corresponding path program 1 times [2022-04-27 15:03:08,038 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:08,038 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1919690815] [2022-04-27 15:03:08,038 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:08,038 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:08,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:08,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:08,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:08,107 INFO L290 TraceCheckUtils]: 0: Hoare triple {6820#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6799#true} is VALID [2022-04-27 15:03:08,107 INFO L290 TraceCheckUtils]: 1: Hoare triple {6799#true} assume true; {6799#true} is VALID [2022-04-27 15:03:08,107 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6799#true} {6799#true} #783#return; {6799#true} is VALID [2022-04-27 15:03:08,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:08,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:08,140 INFO L290 TraceCheckUtils]: 0: Hoare triple {6821#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6799#true} is VALID [2022-04-27 15:03:08,140 INFO L290 TraceCheckUtils]: 1: Hoare triple {6799#true} assume true; {6799#true} is VALID [2022-04-27 15:03:08,140 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6799#true} {6799#true} #715#return; {6799#true} is VALID [2022-04-27 15:03:08,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:08,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:08,154 INFO L290 TraceCheckUtils]: 0: Hoare triple {6822#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6799#true} is VALID [2022-04-27 15:03:08,154 INFO L290 TraceCheckUtils]: 1: Hoare triple {6799#true} assume true; {6799#true} is VALID [2022-04-27 15:03:08,155 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6799#true} {6799#true} #717#return; {6799#true} is VALID [2022-04-27 15:03:08,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:08,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:08,178 INFO L290 TraceCheckUtils]: 0: Hoare triple {6823#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {6799#true} is VALID [2022-04-27 15:03:08,178 INFO L290 TraceCheckUtils]: 1: Hoare triple {6799#true} assume !(0 != ~compRegistered~0); {6824#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:08,178 INFO L290 TraceCheckUtils]: 2: Hoare triple {6824#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {6824#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:08,179 INFO L290 TraceCheckUtils]: 3: Hoare triple {6824#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {6824#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:08,179 INFO L290 TraceCheckUtils]: 4: Hoare triple {6824#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {6824#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:08,179 INFO L290 TraceCheckUtils]: 5: Hoare triple {6824#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {6824#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:08,180 INFO L290 TraceCheckUtils]: 6: Hoare triple {6824#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {6824#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:08,180 INFO L290 TraceCheckUtils]: 7: Hoare triple {6824#(<= ~compRegistered~0 0)} assume true; {6824#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:08,181 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {6824#(<= ~compRegistered~0 0)} {6810#(= ~compRegistered~0 1)} #755#return; {6800#false} is VALID [2022-04-27 15:03:08,182 INFO L272 TraceCheckUtils]: 0: Hoare triple {6799#true} call ULTIMATE.init(); {6820#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:08,182 INFO L290 TraceCheckUtils]: 1: Hoare triple {6820#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {6799#true} is VALID [2022-04-27 15:03:08,182 INFO L290 TraceCheckUtils]: 2: Hoare triple {6799#true} assume true; {6799#true} is VALID [2022-04-27 15:03:08,182 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {6799#true} {6799#true} #783#return; {6799#true} is VALID [2022-04-27 15:03:08,182 INFO L272 TraceCheckUtils]: 4: Hoare triple {6799#true} call #t~ret81 := main(); {6799#true} is VALID [2022-04-27 15:03:08,182 INFO L290 TraceCheckUtils]: 5: Hoare triple {6799#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {6799#true} is VALID [2022-04-27 15:03:08,183 INFO L272 TraceCheckUtils]: 6: Hoare triple {6799#true} call _BLAST_init(); {6821#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:08,183 INFO L290 TraceCheckUtils]: 7: Hoare triple {6821#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6799#true} is VALID [2022-04-27 15:03:08,183 INFO L290 TraceCheckUtils]: 8: Hoare triple {6799#true} assume true; {6799#true} is VALID [2022-04-27 15:03:08,184 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {6799#true} {6799#true} #715#return; {6799#true} is VALID [2022-04-27 15:03:08,184 INFO L290 TraceCheckUtils]: 10: Hoare triple {6799#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {6799#true} is VALID [2022-04-27 15:03:08,184 INFO L290 TraceCheckUtils]: 11: Hoare triple {6799#true} assume !(0 == ~irp_choice~0); {6799#true} is VALID [2022-04-27 15:03:08,184 INFO L272 TraceCheckUtils]: 12: Hoare triple {6799#true} call stub_driver_init(); {6822#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:08,184 INFO L290 TraceCheckUtils]: 13: Hoare triple {6822#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {6799#true} is VALID [2022-04-27 15:03:08,184 INFO L290 TraceCheckUtils]: 14: Hoare triple {6799#true} assume true; {6799#true} is VALID [2022-04-27 15:03:08,185 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {6799#true} {6799#true} #717#return; {6799#true} is VALID [2022-04-27 15:03:08,185 INFO L290 TraceCheckUtils]: 16: Hoare triple {6799#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {6799#true} is VALID [2022-04-27 15:03:08,185 INFO L290 TraceCheckUtils]: 17: Hoare triple {6799#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {6799#true} is VALID [2022-04-27 15:03:08,185 INFO L290 TraceCheckUtils]: 18: Hoare triple {6799#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {6799#true} is VALID [2022-04-27 15:03:08,185 INFO L290 TraceCheckUtils]: 19: Hoare triple {6799#true} assume 3 == ~tmp_ndt_3~0; {6799#true} is VALID [2022-04-27 15:03:08,185 INFO L272 TraceCheckUtils]: 20: Hoare triple {6799#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {6799#true} is VALID [2022-04-27 15:03:08,185 INFO L290 TraceCheckUtils]: 21: Hoare triple {6799#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {6799#true} is VALID [2022-04-27 15:03:08,185 INFO L290 TraceCheckUtils]: 22: Hoare triple {6799#true} assume 0 == ~irpStack__MinorFunction~0; {6799#true} is VALID [2022-04-27 15:03:08,185 INFO L290 TraceCheckUtils]: 23: Hoare triple {6799#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {6799#true} is VALID [2022-04-27 15:03:08,185 INFO L290 TraceCheckUtils]: 24: Hoare triple {6799#true} assume !(~s~0 != ~NP~0); {6799#true} is VALID [2022-04-27 15:03:08,188 INFO L290 TraceCheckUtils]: 25: Hoare triple {6799#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {6810#(= ~compRegistered~0 1)} is VALID [2022-04-27 15:03:08,188 INFO L290 TraceCheckUtils]: 26: Hoare triple {6810#(= ~compRegistered~0 1)} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {6810#(= ~compRegistered~0 1)} is VALID [2022-04-27 15:03:08,190 INFO L272 TraceCheckUtils]: 27: Hoare triple {6810#(= ~compRegistered~0 1)} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {6823#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:08,190 INFO L290 TraceCheckUtils]: 28: Hoare triple {6823#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {6799#true} is VALID [2022-04-27 15:03:08,190 INFO L290 TraceCheckUtils]: 29: Hoare triple {6799#true} assume !(0 != ~compRegistered~0); {6824#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:08,190 INFO L290 TraceCheckUtils]: 30: Hoare triple {6824#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {6824#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:08,191 INFO L290 TraceCheckUtils]: 31: Hoare triple {6824#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_6~0; {6824#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:08,191 INFO L290 TraceCheckUtils]: 32: Hoare triple {6824#(<= ~compRegistered~0 0)} ~returnVal2~0 := 0; {6824#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:08,191 INFO L290 TraceCheckUtils]: 33: Hoare triple {6824#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {6824#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:08,194 INFO L290 TraceCheckUtils]: 34: Hoare triple {6824#(<= ~compRegistered~0 0)} #res := ~returnVal2~0; {6824#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:08,195 INFO L290 TraceCheckUtils]: 35: Hoare triple {6824#(<= ~compRegistered~0 0)} assume true; {6824#(<= ~compRegistered~0 0)} is VALID [2022-04-27 15:03:08,196 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {6824#(<= ~compRegistered~0 0)} {6810#(= ~compRegistered~0 1)} #755#return; {6800#false} is VALID [2022-04-27 15:03:08,196 INFO L290 TraceCheckUtils]: 37: Hoare triple {6800#false} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {6800#false} is VALID [2022-04-27 15:03:08,196 INFO L290 TraceCheckUtils]: 38: Hoare triple {6800#false} assume 259 == ~__cil_tmp23~0; {6800#false} is VALID [2022-04-27 15:03:08,196 INFO L272 TraceCheckUtils]: 39: Hoare triple {6800#false} call #t~ret11 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {6800#false} is VALID [2022-04-27 15:03:08,196 INFO L290 TraceCheckUtils]: 40: Hoare triple {6800#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {6800#false} is VALID [2022-04-27 15:03:08,196 INFO L290 TraceCheckUtils]: 41: Hoare triple {6800#false} assume !(~s~0 == ~MPR3~0); {6800#false} is VALID [2022-04-27 15:03:08,196 INFO L290 TraceCheckUtils]: 42: Hoare triple {6800#false} assume !(1 == ~customIrp~0); {6800#false} is VALID [2022-04-27 15:03:08,196 INFO L290 TraceCheckUtils]: 43: Hoare triple {6800#false} assume ~s~0 == ~MPR3~0; {6800#false} is VALID [2022-04-27 15:03:08,196 INFO L272 TraceCheckUtils]: 44: Hoare triple {6800#false} call errorFn(); {6800#false} is VALID [2022-04-27 15:03:08,196 INFO L290 TraceCheckUtils]: 45: Hoare triple {6800#false} assume !false; {6800#false} is VALID [2022-04-27 15:03:08,196 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:08,197 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:08,197 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1919690815] [2022-04-27 15:03:08,197 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1919690815] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:08,197 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:08,197 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-27 15:03:08,197 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [888396690] [2022-04-27 15:03:08,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:08,197 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-27 15:03:08,198 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:08,198 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-27 15:03:08,232 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:08,232 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-27 15:03:08,232 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:08,232 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-27 15:03:08,232 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-04-27 15:03:08,233 INFO L87 Difference]: Start difference. First operand 343 states and 463 transitions. Second operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-27 15:03:09,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:09,922 INFO L93 Difference]: Finished difference Result 394 states and 520 transitions. [2022-04-27 15:03:09,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-27 15:03:09,923 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 46 [2022-04-27 15:03:09,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:09,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-27 15:03:09,926 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 425 transitions. [2022-04-27 15:03:09,926 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-27 15:03:09,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 425 transitions. [2022-04-27 15:03:09,929 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 425 transitions. [2022-04-27 15:03:10,280 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 425 edges. 425 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:10,286 INFO L225 Difference]: With dead ends: 394 [2022-04-27 15:03:10,287 INFO L226 Difference]: Without dead ends: 325 [2022-04-27 15:03:10,287 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:10,287 INFO L413 NwaCegarLoop]: 306 mSDtfsCounter, 752 mSDsluCounter, 253 mSDsCounter, 0 mSdLazyCounter, 496 mSolverCounterSat, 119 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 752 SdHoareTripleChecker+Valid, 559 SdHoareTripleChecker+Invalid, 615 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 119 IncrementalHoareTripleChecker+Valid, 496 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:10,288 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [752 Valid, 559 Invalid, 615 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [119 Valid, 496 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-04-27 15:03:10,288 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-27 15:03:10,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 304. [2022-04-27 15:03:10,326 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:10,326 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-27 15:03:10,327 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-27 15:03:10,327 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-27 15:03:10,333 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:10,333 INFO L93 Difference]: Finished difference Result 325 states and 431 transitions. [2022-04-27 15:03:10,333 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 431 transitions. [2022-04-27 15:03:10,333 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:10,333 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:10,334 INFO L74 IsIncluded]: Start isIncluded. First operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 325 states. [2022-04-27 15:03:10,334 INFO L87 Difference]: Start difference. First operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) Second operand 325 states. [2022-04-27 15:03:10,340 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:10,340 INFO L93 Difference]: Finished difference Result 325 states and 431 transitions. [2022-04-27 15:03:10,340 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 431 transitions. [2022-04-27 15:03:10,340 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:10,340 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:10,341 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:10,341 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:10,341 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 246 states have (on average 1.3699186991869918) internal successors, (337), 247 states have internal predecessors, (337), 30 states have call successors, (30), 21 states have call predecessors, (30), 27 states have return successors, (39), 36 states have call predecessors, (39), 24 states have call successors, (39) [2022-04-27 15:03:10,346 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 406 transitions. [2022-04-27 15:03:10,347 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 406 transitions. Word has length 46 [2022-04-27 15:03:10,347 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:10,347 INFO L495 AbstractCegarLoop]: Abstraction has 304 states and 406 transitions. [2022-04-27 15:03:10,347 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-04-27 15:03:10,347 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 406 transitions. [2022-04-27 15:03:10,348 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-04-27 15:03:10,348 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:10,348 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:10,348 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-04-27 15:03:10,348 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:10,348 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:10,348 INFO L85 PathProgramCache]: Analyzing trace with hash -447308474, now seen corresponding path program 1 times [2022-04-27 15:03:10,348 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:10,348 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1577617671] [2022-04-27 15:03:10,348 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:10,348 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:10,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:10,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:10,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:10,439 INFO L290 TraceCheckUtils]: 0: Hoare triple {8431#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8406#true} is VALID [2022-04-27 15:03:10,439 INFO L290 TraceCheckUtils]: 1: Hoare triple {8406#true} assume true; {8406#true} is VALID [2022-04-27 15:03:10,439 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8406#true} {8406#true} #783#return; {8406#true} is VALID [2022-04-27 15:03:10,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:10,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:10,489 INFO L290 TraceCheckUtils]: 0: Hoare triple {8432#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8433#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-27 15:03:10,489 INFO L290 TraceCheckUtils]: 1: Hoare triple {8433#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {8433#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-27 15:03:10,489 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8433#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {8406#true} #715#return; {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:10,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:10,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:10,504 INFO L290 TraceCheckUtils]: 0: Hoare triple {8434#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8406#true} is VALID [2022-04-27 15:03:10,504 INFO L290 TraceCheckUtils]: 1: Hoare triple {8406#true} assume true; {8406#true} is VALID [2022-04-27 15:03:10,505 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8406#true} {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #717#return; {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:10,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-27 15:03:10,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:10,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-27 15:03:10,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:10,588 INFO L290 TraceCheckUtils]: 0: Hoare triple {8441#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {8406#true} is VALID [2022-04-27 15:03:10,589 INFO L290 TraceCheckUtils]: 1: Hoare triple {8406#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {8442#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:10,589 INFO L290 TraceCheckUtils]: 2: Hoare triple {8442#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {8442#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:10,590 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {8442#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {8406#true} #743#return; {8440#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:10,590 INFO L290 TraceCheckUtils]: 0: Hoare triple {8435#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {8406#true} is VALID [2022-04-27 15:03:10,590 INFO L290 TraceCheckUtils]: 1: Hoare triple {8406#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {8406#true} is VALID [2022-04-27 15:03:10,590 INFO L290 TraceCheckUtils]: 2: Hoare triple {8406#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {8406#true} is VALID [2022-04-27 15:03:10,590 INFO L290 TraceCheckUtils]: 3: Hoare triple {8406#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {8406#true} is VALID [2022-04-27 15:03:10,591 INFO L272 TraceCheckUtils]: 4: Hoare triple {8406#true} call IofCompleteRequest(~Irp, 0); {8441#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:10,591 INFO L290 TraceCheckUtils]: 5: Hoare triple {8441#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {8406#true} is VALID [2022-04-27 15:03:10,591 INFO L290 TraceCheckUtils]: 6: Hoare triple {8406#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {8442#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:10,591 INFO L290 TraceCheckUtils]: 7: Hoare triple {8442#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {8442#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:10,592 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {8442#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {8406#true} #743#return; {8440#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:10,593 INFO L290 TraceCheckUtils]: 9: Hoare triple {8440#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {8440#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:10,593 INFO L290 TraceCheckUtils]: 10: Hoare triple {8440#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {8440#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:10,594 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {8440#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #727#return; {8430#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-27 15:03:10,595 INFO L272 TraceCheckUtils]: 0: Hoare triple {8406#true} call ULTIMATE.init(); {8431#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:10,595 INFO L290 TraceCheckUtils]: 1: Hoare triple {8431#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {8406#true} is VALID [2022-04-27 15:03:10,595 INFO L290 TraceCheckUtils]: 2: Hoare triple {8406#true} assume true; {8406#true} is VALID [2022-04-27 15:03:10,595 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {8406#true} {8406#true} #783#return; {8406#true} is VALID [2022-04-27 15:03:10,595 INFO L272 TraceCheckUtils]: 4: Hoare triple {8406#true} call #t~ret81 := main(); {8406#true} is VALID [2022-04-27 15:03:10,595 INFO L290 TraceCheckUtils]: 5: Hoare triple {8406#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {8406#true} is VALID [2022-04-27 15:03:10,596 INFO L272 TraceCheckUtils]: 6: Hoare triple {8406#true} call _BLAST_init(); {8432#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:10,601 INFO L290 TraceCheckUtils]: 7: Hoare triple {8432#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8433#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-27 15:03:10,601 INFO L290 TraceCheckUtils]: 8: Hoare triple {8433#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} assume true; {8433#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} is VALID [2022-04-27 15:03:10,602 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {8433#(and (= (+ (- 2) ~DC~0) 0) (<= 4 ~SKIP2~0))} {8406#true} #715#return; {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:10,604 INFO L290 TraceCheckUtils]: 10: Hoare triple {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:10,606 INFO L290 TraceCheckUtils]: 11: Hoare triple {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~irp_choice~0); {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:10,606 INFO L272 TraceCheckUtils]: 12: Hoare triple {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call stub_driver_init(); {8434#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:10,607 INFO L290 TraceCheckUtils]: 13: Hoare triple {8434#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {8406#true} is VALID [2022-04-27 15:03:10,607 INFO L290 TraceCheckUtils]: 14: Hoare triple {8406#true} assume true; {8406#true} is VALID [2022-04-27 15:03:10,607 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {8406#true} {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #717#return; {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:10,608 INFO L290 TraceCheckUtils]: 16: Hoare triple {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:10,608 INFO L290 TraceCheckUtils]: 17: Hoare triple {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:10,609 INFO L290 TraceCheckUtils]: 18: Hoare triple {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:10,611 INFO L290 TraceCheckUtils]: 19: Hoare triple {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:10,612 INFO L290 TraceCheckUtils]: 20: Hoare triple {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:10,612 INFO L290 TraceCheckUtils]: 21: Hoare triple {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume 8 == ~tmp_ndt_5~0; {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-04-27 15:03:10,613 INFO L272 TraceCheckUtils]: 22: Hoare triple {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {8435#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:10,613 INFO L290 TraceCheckUtils]: 23: Hoare triple {8435#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {8406#true} is VALID [2022-04-27 15:03:10,613 INFO L290 TraceCheckUtils]: 24: Hoare triple {8406#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {8406#true} is VALID [2022-04-27 15:03:10,613 INFO L290 TraceCheckUtils]: 25: Hoare triple {8406#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {8406#true} is VALID [2022-04-27 15:03:10,613 INFO L290 TraceCheckUtils]: 26: Hoare triple {8406#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {8406#true} is VALID [2022-04-27 15:03:10,614 INFO L272 TraceCheckUtils]: 27: Hoare triple {8406#true} call IofCompleteRequest(~Irp, 0); {8441#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:10,614 INFO L290 TraceCheckUtils]: 28: Hoare triple {8441#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {8406#true} is VALID [2022-04-27 15:03:10,614 INFO L290 TraceCheckUtils]: 29: Hoare triple {8406#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {8442#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:10,615 INFO L290 TraceCheckUtils]: 30: Hoare triple {8442#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {8442#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:10,616 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {8442#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {8406#true} #743#return; {8440#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:10,616 INFO L290 TraceCheckUtils]: 32: Hoare triple {8440#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {8440#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:10,617 INFO L290 TraceCheckUtils]: 33: Hoare triple {8440#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {8440#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:10,618 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {8440#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {8414#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #727#return; {8430#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-27 15:03:10,618 INFO L290 TraceCheckUtils]: 35: Hoare triple {8430#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {8430#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-27 15:03:10,618 INFO L290 TraceCheckUtils]: 36: Hoare triple {8430#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {8430#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-27 15:03:10,619 INFO L290 TraceCheckUtils]: 37: Hoare triple {8430#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {8430#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-27 15:03:10,619 INFO L290 TraceCheckUtils]: 38: Hoare triple {8430#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume ~s~0 != ~UNLOADED~0; {8430#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-27 15:03:10,619 INFO L290 TraceCheckUtils]: 39: Hoare triple {8430#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -1 != ~status~1; {8430#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-04-27 15:03:10,619 INFO L290 TraceCheckUtils]: 40: Hoare triple {8430#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(~s~0 != ~SKIP2~0); {8407#false} is VALID [2022-04-27 15:03:10,620 INFO L290 TraceCheckUtils]: 41: Hoare triple {8407#false} assume 1 == ~pended~0; {8407#false} is VALID [2022-04-27 15:03:10,620 INFO L290 TraceCheckUtils]: 42: Hoare triple {8407#false} assume 259 != ~status~1; {8407#false} is VALID [2022-04-27 15:03:10,620 INFO L272 TraceCheckUtils]: 43: Hoare triple {8407#false} call errorFn(); {8407#false} is VALID [2022-04-27 15:03:10,620 INFO L290 TraceCheckUtils]: 44: Hoare triple {8407#false} assume !false; {8407#false} is VALID [2022-04-27 15:03:10,621 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:10,621 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:10,621 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1577617671] [2022-04-27 15:03:10,622 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1577617671] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:10,622 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:10,622 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-27 15:03:10,622 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1587296338] [2022-04-27 15:03:10,622 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:10,622 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-27 15:03:10,623 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:10,623 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:10,655 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:10,655 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-27 15:03:10,656 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:10,657 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-27 15:03:10,657 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:10,657 INFO L87 Difference]: Start difference. First operand 304 states and 406 transitions. Second operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:13,539 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:13,540 INFO L93 Difference]: Finished difference Result 334 states and 440 transitions. [2022-04-27 15:03:13,540 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-27 15:03:13,540 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-04-27 15:03:13,540 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:13,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:13,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 365 transitions. [2022-04-27 15:03:13,543 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:13,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 365 transitions. [2022-04-27 15:03:13,545 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 365 transitions. [2022-04-27 15:03:13,874 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:13,880 INFO L225 Difference]: With dead ends: 334 [2022-04-27 15:03:13,880 INFO L226 Difference]: Without dead ends: 325 [2022-04-27 15:03:13,880 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-27 15:03:13,881 INFO L413 NwaCegarLoop]: 255 mSDtfsCounter, 508 mSDsluCounter, 419 mSDsCounter, 0 mSdLazyCounter, 1273 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 510 SdHoareTripleChecker+Valid, 674 SdHoareTripleChecker+Invalid, 1355 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 1273 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:13,881 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [510 Valid, 674 Invalid, 1355 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 1273 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-27 15:03:13,881 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-27 15:03:13,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 320. [2022-04-27 15:03:13,987 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:13,988 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:13,989 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:13,989 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:13,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:13,995 INFO L93 Difference]: Finished difference Result 325 states and 429 transitions. [2022-04-27 15:03:13,995 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 429 transitions. [2022-04-27 15:03:13,996 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:13,996 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:13,997 INFO L74 IsIncluded]: Start isIncluded. First operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-27 15:03:13,997 INFO L87 Difference]: Start difference. First operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-27 15:03:14,003 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:14,004 INFO L93 Difference]: Finished difference Result 325 states and 429 transitions. [2022-04-27 15:03:14,004 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 429 transitions. [2022-04-27 15:03:14,004 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:14,004 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:14,004 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:14,004 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:14,005 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 260 states have (on average 1.3615384615384616) internal successors, (354), 260 states have internal predecessors, (354), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:14,012 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 425 transitions. [2022-04-27 15:03:14,012 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 425 transitions. Word has length 45 [2022-04-27 15:03:14,012 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:14,012 INFO L495 AbstractCegarLoop]: Abstraction has 320 states and 425 transitions. [2022-04-27 15:03:14,013 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.75) internal successors, (33), 7 states have internal predecessors, (33), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:14,013 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 425 transitions. [2022-04-27 15:03:14,013 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-04-27 15:03:14,013 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:14,013 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:14,014 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-04-27 15:03:14,014 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:14,014 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:14,014 INFO L85 PathProgramCache]: Analyzing trace with hash -1360970565, now seen corresponding path program 1 times [2022-04-27 15:03:14,014 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:14,014 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [356353914] [2022-04-27 15:03:14,014 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:14,014 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:14,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:14,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,111 INFO L290 TraceCheckUtils]: 0: Hoare triple {9995#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {9970#true} is VALID [2022-04-27 15:03:14,111 INFO L290 TraceCheckUtils]: 1: Hoare triple {9970#true} assume true; {9970#true} is VALID [2022-04-27 15:03:14,111 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9970#true} {9970#true} #783#return; {9970#true} is VALID [2022-04-27 15:03:14,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:14,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,149 INFO L290 TraceCheckUtils]: 0: Hoare triple {9996#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9997#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-27 15:03:14,150 INFO L290 TraceCheckUtils]: 1: Hoare triple {9997#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {9997#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-27 15:03:14,150 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9997#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {9970#true} #715#return; {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:14,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,179 INFO L290 TraceCheckUtils]: 0: Hoare triple {9998#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9970#true} is VALID [2022-04-27 15:03:14,179 INFO L290 TraceCheckUtils]: 1: Hoare triple {9970#true} assume true; {9970#true} is VALID [2022-04-27 15:03:14,179 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9970#true} {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #717#return; {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-27 15:03:14,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-27 15:03:14,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:14,263 INFO L290 TraceCheckUtils]: 0: Hoare triple {10005#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {9970#true} is VALID [2022-04-27 15:03:14,264 INFO L290 TraceCheckUtils]: 1: Hoare triple {9970#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10006#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:14,264 INFO L290 TraceCheckUtils]: 2: Hoare triple {10006#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10006#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:14,265 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10006#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {9970#true} #743#return; {10004#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:14,265 INFO L290 TraceCheckUtils]: 0: Hoare triple {9999#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {9970#true} is VALID [2022-04-27 15:03:14,265 INFO L290 TraceCheckUtils]: 1: Hoare triple {9970#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {9970#true} is VALID [2022-04-27 15:03:14,265 INFO L290 TraceCheckUtils]: 2: Hoare triple {9970#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {9970#true} is VALID [2022-04-27 15:03:14,265 INFO L290 TraceCheckUtils]: 3: Hoare triple {9970#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {9970#true} is VALID [2022-04-27 15:03:14,266 INFO L272 TraceCheckUtils]: 4: Hoare triple {9970#true} call IofCompleteRequest(~Irp, 0); {10005#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:14,266 INFO L290 TraceCheckUtils]: 5: Hoare triple {10005#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {9970#true} is VALID [2022-04-27 15:03:14,266 INFO L290 TraceCheckUtils]: 6: Hoare triple {9970#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10006#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:14,266 INFO L290 TraceCheckUtils]: 7: Hoare triple {10006#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10006#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:14,267 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {10006#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {9970#true} #743#return; {10004#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:14,267 INFO L290 TraceCheckUtils]: 9: Hoare triple {10004#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {10004#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:14,268 INFO L290 TraceCheckUtils]: 10: Hoare triple {10004#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {10004#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:14,270 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {10004#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #727#return; {9994#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,271 INFO L272 TraceCheckUtils]: 0: Hoare triple {9970#true} call ULTIMATE.init(); {9995#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:14,271 INFO L290 TraceCheckUtils]: 1: Hoare triple {9995#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {9970#true} is VALID [2022-04-27 15:03:14,271 INFO L290 TraceCheckUtils]: 2: Hoare triple {9970#true} assume true; {9970#true} is VALID [2022-04-27 15:03:14,271 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {9970#true} {9970#true} #783#return; {9970#true} is VALID [2022-04-27 15:03:14,271 INFO L272 TraceCheckUtils]: 4: Hoare triple {9970#true} call #t~ret81 := main(); {9970#true} is VALID [2022-04-27 15:03:14,271 INFO L290 TraceCheckUtils]: 5: Hoare triple {9970#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {9970#true} is VALID [2022-04-27 15:03:14,272 INFO L272 TraceCheckUtils]: 6: Hoare triple {9970#true} call _BLAST_init(); {9996#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:14,273 INFO L290 TraceCheckUtils]: 7: Hoare triple {9996#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9997#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-27 15:03:14,273 INFO L290 TraceCheckUtils]: 8: Hoare triple {9997#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} assume true; {9997#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} is VALID [2022-04-27 15:03:14,273 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {9997#(and (<= 7 ~IPC~0) (= (+ (- 2) ~DC~0) 0))} {9970#true} #715#return; {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,274 INFO L290 TraceCheckUtils]: 10: Hoare triple {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,274 INFO L290 TraceCheckUtils]: 11: Hoare triple {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~irp_choice~0); {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,275 INFO L272 TraceCheckUtils]: 12: Hoare triple {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call stub_driver_init(); {9998#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:14,275 INFO L290 TraceCheckUtils]: 13: Hoare triple {9998#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {9970#true} is VALID [2022-04-27 15:03:14,275 INFO L290 TraceCheckUtils]: 14: Hoare triple {9970#true} assume true; {9970#true} is VALID [2022-04-27 15:03:14,275 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {9970#true} {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #717#return; {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,276 INFO L290 TraceCheckUtils]: 16: Hoare triple {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,276 INFO L290 TraceCheckUtils]: 17: Hoare triple {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,276 INFO L290 TraceCheckUtils]: 18: Hoare triple {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,277 INFO L290 TraceCheckUtils]: 19: Hoare triple {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,277 INFO L290 TraceCheckUtils]: 20: Hoare triple {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,278 INFO L290 TraceCheckUtils]: 21: Hoare triple {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume 8 == ~tmp_ndt_5~0; {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,278 INFO L272 TraceCheckUtils]: 22: Hoare triple {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {9999#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:14,278 INFO L290 TraceCheckUtils]: 23: Hoare triple {9999#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {9970#true} is VALID [2022-04-27 15:03:14,278 INFO L290 TraceCheckUtils]: 24: Hoare triple {9970#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {9970#true} is VALID [2022-04-27 15:03:14,278 INFO L290 TraceCheckUtils]: 25: Hoare triple {9970#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {9970#true} is VALID [2022-04-27 15:03:14,279 INFO L290 TraceCheckUtils]: 26: Hoare triple {9970#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {9970#true} is VALID [2022-04-27 15:03:14,279 INFO L272 TraceCheckUtils]: 27: Hoare triple {9970#true} call IofCompleteRequest(~Irp, 0); {10005#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:14,279 INFO L290 TraceCheckUtils]: 28: Hoare triple {10005#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {9970#true} is VALID [2022-04-27 15:03:14,279 INFO L290 TraceCheckUtils]: 29: Hoare triple {9970#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {10006#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:14,280 INFO L290 TraceCheckUtils]: 30: Hoare triple {10006#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} assume true; {10006#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} is VALID [2022-04-27 15:03:14,280 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {10006#(and (<= ~s~0 ~DC~0) (<= ~DC~0 ~s~0))} {9970#true} #743#return; {10004#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:14,281 INFO L290 TraceCheckUtils]: 32: Hoare triple {10004#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} #res := ~status~3; {10004#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:14,281 INFO L290 TraceCheckUtils]: 33: Hoare triple {10004#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {10004#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-04-27 15:03:14,282 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {10004#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {9978#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #727#return; {9994#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,282 INFO L290 TraceCheckUtils]: 35: Hoare triple {9994#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {9994#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,283 INFO L290 TraceCheckUtils]: 36: Hoare triple {9994#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {9994#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,283 INFO L290 TraceCheckUtils]: 37: Hoare triple {9994#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {9994#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,284 INFO L290 TraceCheckUtils]: 38: Hoare triple {9994#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~UNLOADED~0; {9994#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,284 INFO L290 TraceCheckUtils]: 39: Hoare triple {9994#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -1 != ~status~1; {9994#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,284 INFO L290 TraceCheckUtils]: 40: Hoare triple {9994#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~SKIP2~0; {9994#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-04-27 15:03:14,289 INFO L290 TraceCheckUtils]: 41: Hoare triple {9994#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(~s~0 != ~IPC~0); {9971#false} is VALID [2022-04-27 15:03:14,289 INFO L290 TraceCheckUtils]: 42: Hoare triple {9971#false} assume 1 == ~pended~0; {9971#false} is VALID [2022-04-27 15:03:14,289 INFO L290 TraceCheckUtils]: 43: Hoare triple {9971#false} assume 259 != ~status~1; {9971#false} is VALID [2022-04-27 15:03:14,289 INFO L272 TraceCheckUtils]: 44: Hoare triple {9971#false} call errorFn(); {9971#false} is VALID [2022-04-27 15:03:14,289 INFO L290 TraceCheckUtils]: 45: Hoare triple {9971#false} assume !false; {9971#false} is VALID [2022-04-27 15:03:14,290 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:14,290 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:14,290 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [356353914] [2022-04-27 15:03:14,290 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [356353914] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:14,290 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:14,290 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-27 15:03:14,290 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [901393067] [2022-04-27 15:03:14,290 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:14,290 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-27 15:03:14,291 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:14,291 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:14,324 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:14,324 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-27 15:03:14,324 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:14,325 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-27 15:03:14,325 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:14,325 INFO L87 Difference]: Start difference. First operand 320 states and 425 transitions. Second operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:17,038 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:17,039 INFO L93 Difference]: Finished difference Result 330 states and 433 transitions. [2022-04-27 15:03:17,039 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-27 15:03:17,039 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 46 [2022-04-27 15:03:17,039 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:17,040 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:17,042 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 358 transitions. [2022-04-27 15:03:17,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:17,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 358 transitions. [2022-04-27 15:03:17,044 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 358 transitions. [2022-04-27 15:03:17,433 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 358 edges. 358 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:17,440 INFO L225 Difference]: With dead ends: 330 [2022-04-27 15:03:17,440 INFO L226 Difference]: Without dead ends: 325 [2022-04-27 15:03:17,440 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2022-04-27 15:03:17,442 INFO L413 NwaCegarLoop]: 256 mSDtfsCounter, 798 mSDsluCounter, 347 mSDsCounter, 0 mSdLazyCounter, 899 mSolverCounterSat, 142 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 800 SdHoareTripleChecker+Valid, 603 SdHoareTripleChecker+Invalid, 1041 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 142 IncrementalHoareTripleChecker+Valid, 899 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:17,442 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [800 Valid, 603 Invalid, 1041 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [142 Valid, 899 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-04-27 15:03:17,443 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-04-27 15:03:17,556 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 320. [2022-04-27 15:03:17,556 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:17,557 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:17,558 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:17,558 INFO L87 Difference]: Start difference. First operand 325 states. Second operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:17,565 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:17,565 INFO L93 Difference]: Finished difference Result 325 states and 428 transitions. [2022-04-27 15:03:17,565 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 428 transitions. [2022-04-27 15:03:17,565 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:17,565 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:17,566 INFO L74 IsIncluded]: Start isIncluded. First operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-27 15:03:17,567 INFO L87 Difference]: Start difference. First operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) Second operand 325 states. [2022-04-27 15:03:17,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:17,572 INFO L93 Difference]: Finished difference Result 325 states and 428 transitions. [2022-04-27 15:03:17,572 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 428 transitions. [2022-04-27 15:03:17,573 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:17,573 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:17,573 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:17,573 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:17,574 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 260 states have (on average 1.3576923076923078) internal successors, (353), 260 states have internal predecessors, (353), 30 states have call successors, (30), 21 states have call predecessors, (30), 29 states have return successors, (41), 38 states have call predecessors, (41), 24 states have call successors, (41) [2022-04-27 15:03:17,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 424 transitions. [2022-04-27 15:03:17,580 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 424 transitions. Word has length 46 [2022-04-27 15:03:17,580 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:17,580 INFO L495 AbstractCegarLoop]: Abstraction has 320 states and 424 transitions. [2022-04-27 15:03:17,580 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 2.8333333333333335) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (7), 7 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:17,580 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 424 transitions. [2022-04-27 15:03:17,581 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-04-27 15:03:17,581 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:17,582 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:17,582 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-04-27 15:03:17,582 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:17,582 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:17,582 INFO L85 PathProgramCache]: Analyzing trace with hash 548356508, now seen corresponding path program 1 times [2022-04-27 15:03:17,582 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:17,582 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [195393621] [2022-04-27 15:03:17,582 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:17,583 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:17,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:17,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:17,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:17,658 INFO L290 TraceCheckUtils]: 0: Hoare triple {11553#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {11529#true} is VALID [2022-04-27 15:03:17,659 INFO L290 TraceCheckUtils]: 1: Hoare triple {11529#true} assume true; {11529#true} is VALID [2022-04-27 15:03:17,659 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11529#true} {11529#true} #783#return; {11529#true} is VALID [2022-04-27 15:03:17,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:17,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:17,681 INFO L290 TraceCheckUtils]: 0: Hoare triple {11554#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11529#true} is VALID [2022-04-27 15:03:17,681 INFO L290 TraceCheckUtils]: 1: Hoare triple {11529#true} assume true; {11529#true} is VALID [2022-04-27 15:03:17,681 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11529#true} {11529#true} #715#return; {11529#true} is VALID [2022-04-27 15:03:17,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:17,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:17,694 INFO L290 TraceCheckUtils]: 0: Hoare triple {11555#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11529#true} is VALID [2022-04-27 15:03:17,694 INFO L290 TraceCheckUtils]: 1: Hoare triple {11529#true} assume true; {11529#true} is VALID [2022-04-27 15:03:17,694 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11529#true} {11529#true} #717#return; {11529#true} is VALID [2022-04-27 15:03:17,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-04-27 15:03:17,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:17,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-27 15:03:17,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:17,723 INFO L290 TraceCheckUtils]: 0: Hoare triple {11561#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {11529#true} is VALID [2022-04-27 15:03:17,723 INFO L290 TraceCheckUtils]: 1: Hoare triple {11529#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {11529#true} is VALID [2022-04-27 15:03:17,723 INFO L290 TraceCheckUtils]: 2: Hoare triple {11529#true} assume true; {11529#true} is VALID [2022-04-27 15:03:17,723 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {11529#true} {11529#true} #743#return; {11529#true} is VALID [2022-04-27 15:03:17,723 INFO L290 TraceCheckUtils]: 0: Hoare triple {11556#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {11529#true} is VALID [2022-04-27 15:03:17,723 INFO L290 TraceCheckUtils]: 1: Hoare triple {11529#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {11529#true} is VALID [2022-04-27 15:03:17,723 INFO L290 TraceCheckUtils]: 2: Hoare triple {11529#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {11529#true} is VALID [2022-04-27 15:03:17,723 INFO L290 TraceCheckUtils]: 3: Hoare triple {11529#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {11529#true} is VALID [2022-04-27 15:03:17,724 INFO L272 TraceCheckUtils]: 4: Hoare triple {11529#true} call IofCompleteRequest(~Irp, 0); {11561#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:17,724 INFO L290 TraceCheckUtils]: 5: Hoare triple {11561#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {11529#true} is VALID [2022-04-27 15:03:17,724 INFO L290 TraceCheckUtils]: 6: Hoare triple {11529#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {11529#true} is VALID [2022-04-27 15:03:17,724 INFO L290 TraceCheckUtils]: 7: Hoare triple {11529#true} assume true; {11529#true} is VALID [2022-04-27 15:03:17,724 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {11529#true} {11529#true} #743#return; {11529#true} is VALID [2022-04-27 15:03:17,724 INFO L290 TraceCheckUtils]: 9: Hoare triple {11529#true} #res := ~status~3; {11529#true} is VALID [2022-04-27 15:03:17,724 INFO L290 TraceCheckUtils]: 10: Hoare triple {11529#true} assume true; {11529#true} is VALID [2022-04-27 15:03:17,724 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {11529#true} {11529#true} #727#return; {11529#true} is VALID [2022-04-27 15:03:17,729 INFO L272 TraceCheckUtils]: 0: Hoare triple {11529#true} call ULTIMATE.init(); {11553#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:17,729 INFO L290 TraceCheckUtils]: 1: Hoare triple {11553#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {11529#true} is VALID [2022-04-27 15:03:17,729 INFO L290 TraceCheckUtils]: 2: Hoare triple {11529#true} assume true; {11529#true} is VALID [2022-04-27 15:03:17,729 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {11529#true} {11529#true} #783#return; {11529#true} is VALID [2022-04-27 15:03:17,729 INFO L272 TraceCheckUtils]: 4: Hoare triple {11529#true} call #t~ret81 := main(); {11529#true} is VALID [2022-04-27 15:03:17,729 INFO L290 TraceCheckUtils]: 5: Hoare triple {11529#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {11529#true} is VALID [2022-04-27 15:03:17,730 INFO L272 TraceCheckUtils]: 6: Hoare triple {11529#true} call _BLAST_init(); {11554#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:17,730 INFO L290 TraceCheckUtils]: 7: Hoare triple {11554#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11529#true} is VALID [2022-04-27 15:03:17,730 INFO L290 TraceCheckUtils]: 8: Hoare triple {11529#true} assume true; {11529#true} is VALID [2022-04-27 15:03:17,730 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {11529#true} {11529#true} #715#return; {11529#true} is VALID [2022-04-27 15:03:17,730 INFO L290 TraceCheckUtils]: 10: Hoare triple {11529#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {11529#true} is VALID [2022-04-27 15:03:17,730 INFO L290 TraceCheckUtils]: 11: Hoare triple {11529#true} assume !(0 == ~irp_choice~0); {11529#true} is VALID [2022-04-27 15:03:17,731 INFO L272 TraceCheckUtils]: 12: Hoare triple {11529#true} call stub_driver_init(); {11555#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:17,731 INFO L290 TraceCheckUtils]: 13: Hoare triple {11555#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {11529#true} is VALID [2022-04-27 15:03:17,731 INFO L290 TraceCheckUtils]: 14: Hoare triple {11529#true} assume true; {11529#true} is VALID [2022-04-27 15:03:17,731 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {11529#true} {11529#true} #717#return; {11529#true} is VALID [2022-04-27 15:03:17,731 INFO L290 TraceCheckUtils]: 16: Hoare triple {11529#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {11529#true} is VALID [2022-04-27 15:03:17,731 INFO L290 TraceCheckUtils]: 17: Hoare triple {11529#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {11529#true} is VALID [2022-04-27 15:03:17,731 INFO L290 TraceCheckUtils]: 18: Hoare triple {11529#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {11529#true} is VALID [2022-04-27 15:03:17,731 INFO L290 TraceCheckUtils]: 19: Hoare triple {11529#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {11529#true} is VALID [2022-04-27 15:03:17,731 INFO L290 TraceCheckUtils]: 20: Hoare triple {11529#true} assume !(4 == ~tmp_ndt_4~0);havoc ~tmp_ndt_5~0;assume -2147483648 <= #t~nondet28 && #t~nondet28 <= 2147483647;~tmp_ndt_5~0 := #t~nondet28;havoc #t~nondet28; {11529#true} is VALID [2022-04-27 15:03:17,731 INFO L290 TraceCheckUtils]: 21: Hoare triple {11529#true} assume 8 == ~tmp_ndt_5~0; {11529#true} is VALID [2022-04-27 15:03:17,732 INFO L272 TraceCheckUtils]: 22: Hoare triple {11529#true} call #t~ret33 := KbFilter_InternIoCtl(~devobj~0, ~pirp~0); {11556#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:17,732 INFO L290 TraceCheckUtils]: 23: Hoare triple {11556#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~Irp__IoStatus__Information~1;assume -2147483648 <= #t~nondet63 && #t~nondet63 <= 2147483647;~irpStack__Parameters__DeviceIoControl__IoControlCode~0 := #t~nondet63;havoc #t~nondet63;assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~devExt__UpperConnectData__ClassService~1 := #t~nondet64;havoc #t~nondet64;assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~irpStack__Parameters__DeviceIoControl__InputBufferLength~0 := #t~nondet65;havoc #t~nondet65;assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~sizeof__CONNECT_DATA~0 := #t~nondet66;havoc #t~nondet66;assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0 := #t~nondet67;havoc #t~nondet67;assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~sizeof__INTERNAL_I8042_HOOK_KEYBOARD~0 := #t~nondet68;havoc #t~nondet68;assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~hookKeyboard__InitializationRoutine~0 := #t~nondet69;havoc #t~nondet69;assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~hookKeyboard__IsrRoutine~0 := #t~nondet70;havoc #t~nondet70;havoc ~Irp__IoStatus__Status~2;havoc ~hookKeyboard~0;havoc ~connectData~0;havoc ~status~3;havoc ~tmp~3;havoc ~__cil_tmp17~0;havoc ~__cil_tmp18~0;havoc ~__cil_tmp19~0;assume -2147483648 <= #t~nondet71 && #t~nondet71 <= 2147483647;~__cil_tmp20~0 := #t~nondet71;havoc #t~nondet71;havoc ~__cil_tmp21~0;havoc ~__cil_tmp22~0;havoc ~__cil_tmp23~1;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~__cil_tmp24~0 := #t~nondet72;havoc #t~nondet72;havoc ~__cil_tmp25~0;havoc ~__cil_tmp26~0;havoc ~__cil_tmp27~0;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~__cil_tmp28~0 := #t~nondet73;havoc #t~nondet73;assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~__cil_tmp29~0 := #t~nondet74;havoc #t~nondet74;havoc ~__cil_tmp30~0;havoc ~__cil_tmp31~0;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~__cil_tmp32~0 := #t~nondet75;havoc #t~nondet75;havoc ~__cil_tmp33~0;havoc ~__cil_tmp34~0;assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~__cil_tmp35~0 := #t~nondet76;havoc #t~nondet76;havoc ~__cil_tmp36~0;havoc ~__cil_tmp37~0;assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~__cil_tmp38~0 := #t~nondet77;havoc #t~nondet77;havoc ~__cil_tmp39~0;havoc ~__cil_tmp40~0;assume -2147483648 <= #t~nondet78 && #t~nondet78 <= 2147483647;~__cil_tmp41~0 := #t~nondet78;havoc #t~nondet78;havoc ~__cil_tmp42~0;havoc ~__cil_tmp43~0;assume -2147483648 <= #t~nondet79 && #t~nondet79 <= 2147483647;~__cil_tmp44~0 := #t~nondet79;havoc #t~nondet79;havoc ~__cil_tmp45~0;~status~3 := 0;~Irp__IoStatus__Information~1 := 0; {11529#true} is VALID [2022-04-27 15:03:17,732 INFO L290 TraceCheckUtils]: 24: Hoare triple {11529#true} assume ~irpStack__Parameters__DeviceIoControl__IoControlCode~0 == ~__cil_tmp20~0; {11529#true} is VALID [2022-04-27 15:03:17,732 INFO L290 TraceCheckUtils]: 25: Hoare triple {11529#true} assume 0 != ~devExt__UpperConnectData__ClassService~1;~status~3 := -1073741757; {11529#true} is VALID [2022-04-27 15:03:17,732 INFO L290 TraceCheckUtils]: 26: Hoare triple {11529#true} assume ~status~3 < 0;~Irp__IoStatus__Status~2 := ~status~3;~myStatus~0 := ~status~3; {11529#true} is VALID [2022-04-27 15:03:17,733 INFO L272 TraceCheckUtils]: 27: Hoare triple {11529#true} call IofCompleteRequest(~Irp, 0); {11561#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:17,733 INFO L290 TraceCheckUtils]: 28: Hoare triple {11561#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {11529#true} is VALID [2022-04-27 15:03:17,733 INFO L290 TraceCheckUtils]: 29: Hoare triple {11529#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {11529#true} is VALID [2022-04-27 15:03:17,733 INFO L290 TraceCheckUtils]: 30: Hoare triple {11529#true} assume true; {11529#true} is VALID [2022-04-27 15:03:17,733 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {11529#true} {11529#true} #743#return; {11529#true} is VALID [2022-04-27 15:03:17,733 INFO L290 TraceCheckUtils]: 32: Hoare triple {11529#true} #res := ~status~3; {11529#true} is VALID [2022-04-27 15:03:17,733 INFO L290 TraceCheckUtils]: 33: Hoare triple {11529#true} assume true; {11529#true} is VALID [2022-04-27 15:03:17,733 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {11529#true} {11529#true} #727#return; {11529#true} is VALID [2022-04-27 15:03:17,733 INFO L290 TraceCheckUtils]: 35: Hoare triple {11529#true} assume -2147483648 <= #t~ret33 && #t~ret33 <= 2147483647;~status~1 := #t~ret33;havoc #t~ret33; {11529#true} is VALID [2022-04-27 15:03:17,733 INFO L290 TraceCheckUtils]: 36: Hoare triple {11529#true} assume !(1 == ~pended~0); {11552#(not (= ~pended~0 1))} is VALID [2022-04-27 15:03:17,734 INFO L290 TraceCheckUtils]: 37: Hoare triple {11552#(not (= ~pended~0 1))} assume !(1 == ~pended~0); {11552#(not (= ~pended~0 1))} is VALID [2022-04-27 15:03:17,734 INFO L290 TraceCheckUtils]: 38: Hoare triple {11552#(not (= ~pended~0 1))} assume ~s~0 != ~UNLOADED~0; {11552#(not (= ~pended~0 1))} is VALID [2022-04-27 15:03:17,734 INFO L290 TraceCheckUtils]: 39: Hoare triple {11552#(not (= ~pended~0 1))} assume -1 != ~status~1; {11552#(not (= ~pended~0 1))} is VALID [2022-04-27 15:03:17,734 INFO L290 TraceCheckUtils]: 40: Hoare triple {11552#(not (= ~pended~0 1))} assume ~s~0 != ~SKIP2~0; {11552#(not (= ~pended~0 1))} is VALID [2022-04-27 15:03:17,735 INFO L290 TraceCheckUtils]: 41: Hoare triple {11552#(not (= ~pended~0 1))} assume ~s~0 != ~IPC~0; {11552#(not (= ~pended~0 1))} is VALID [2022-04-27 15:03:17,735 INFO L290 TraceCheckUtils]: 42: Hoare triple {11552#(not (= ~pended~0 1))} assume ~s~0 == ~DC~0; {11552#(not (= ~pended~0 1))} is VALID [2022-04-27 15:03:17,735 INFO L290 TraceCheckUtils]: 43: Hoare triple {11552#(not (= ~pended~0 1))} assume 1 == ~pended~0; {11530#false} is VALID [2022-04-27 15:03:17,735 INFO L290 TraceCheckUtils]: 44: Hoare triple {11530#false} assume 259 != ~status~1; {11530#false} is VALID [2022-04-27 15:03:17,735 INFO L272 TraceCheckUtils]: 45: Hoare triple {11530#false} call errorFn(); {11530#false} is VALID [2022-04-27 15:03:17,735 INFO L290 TraceCheckUtils]: 46: Hoare triple {11530#false} assume !false; {11530#false} is VALID [2022-04-27 15:03:17,736 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:17,736 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:17,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [195393621] [2022-04-27 15:03:17,736 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [195393621] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:17,736 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:17,736 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-27 15:03:17,736 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [442939189] [2022-04-27 15:03:17,736 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:17,736 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-27 15:03:17,737 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:17,737 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:17,765 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 47 edges. 47 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:17,766 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-27 15:03:17,766 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:17,766 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-27 15:03:17,766 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2022-04-27 15:03:17,766 INFO L87 Difference]: Start difference. First operand 320 states and 424 transitions. Second operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:18,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:18,948 INFO L93 Difference]: Finished difference Result 338 states and 446 transitions. [2022-04-27 15:03:18,948 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-27 15:03:18,948 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 47 [2022-04-27 15:03:18,949 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:18,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:18,952 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 346 transitions. [2022-04-27 15:03:18,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:18,954 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 346 transitions. [2022-04-27 15:03:18,954 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 346 transitions. [2022-04-27 15:03:19,348 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 346 edges. 346 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:19,353 INFO L225 Difference]: With dead ends: 338 [2022-04-27 15:03:19,353 INFO L226 Difference]: Without dead ends: 272 [2022-04-27 15:03:19,353 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=49, Invalid=83, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:19,354 INFO L413 NwaCegarLoop]: 250 mSDtfsCounter, 581 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 250 mSolverCounterSat, 96 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 581 SdHoareTripleChecker+Valid, 356 SdHoareTripleChecker+Invalid, 346 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 250 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:19,354 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [581 Valid, 356 Invalid, 346 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 250 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-27 15:03:19,355 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2022-04-27 15:03:19,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 242. [2022-04-27 15:03:19,476 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:19,476 INFO L82 GeneralOperation]: Start isEquivalent. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:19,477 INFO L74 IsIncluded]: Start isIncluded. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:19,477 INFO L87 Difference]: Start difference. First operand 272 states. Second operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:19,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:19,481 INFO L93 Difference]: Finished difference Result 272 states and 356 transitions. [2022-04-27 15:03:19,481 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 356 transitions. [2022-04-27 15:03:19,482 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:19,482 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:19,483 INFO L74 IsIncluded]: Start isIncluded. First operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 272 states. [2022-04-27 15:03:19,483 INFO L87 Difference]: Start difference. First operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 272 states. [2022-04-27 15:03:19,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:19,487 INFO L93 Difference]: Finished difference Result 272 states and 356 transitions. [2022-04-27 15:03:19,487 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 356 transitions. [2022-04-27 15:03:19,488 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:19,488 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:19,488 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:19,488 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:19,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 198 states have (on average 1.378787878787879) internal successors, (273), 201 states have internal predecessors, (273), 27 states have call successors, (27), 19 states have call predecessors, (27), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:19,491 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 321 transitions. [2022-04-27 15:03:19,492 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 321 transitions. Word has length 47 [2022-04-27 15:03:19,492 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:19,492 INFO L495 AbstractCegarLoop]: Abstraction has 242 states and 321 transitions. [2022-04-27 15:03:19,492 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (7), 7 states have call predecessors, (7), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:19,492 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 321 transitions. [2022-04-27 15:03:19,492 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-27 15:03:19,492 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:19,492 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:19,492 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-04-27 15:03:19,493 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:19,493 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:19,493 INFO L85 PathProgramCache]: Analyzing trace with hash 916659597, now seen corresponding path program 1 times [2022-04-27 15:03:19,493 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:19,493 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [973832706] [2022-04-27 15:03:19,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:19,493 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:19,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:19,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:19,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:19,567 INFO L290 TraceCheckUtils]: 0: Hoare triple {12911#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12888#true} is VALID [2022-04-27 15:03:19,567 INFO L290 TraceCheckUtils]: 1: Hoare triple {12888#true} assume true; {12888#true} is VALID [2022-04-27 15:03:19,567 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12888#true} {12888#true} #783#return; {12888#true} is VALID [2022-04-27 15:03:19,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:19,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:19,588 INFO L290 TraceCheckUtils]: 0: Hoare triple {12912#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12888#true} is VALID [2022-04-27 15:03:19,588 INFO L290 TraceCheckUtils]: 1: Hoare triple {12888#true} assume true; {12888#true} is VALID [2022-04-27 15:03:19,588 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12888#true} {12888#true} #715#return; {12888#true} is VALID [2022-04-27 15:03:19,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:19,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:19,600 INFO L290 TraceCheckUtils]: 0: Hoare triple {12913#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12888#true} is VALID [2022-04-27 15:03:19,601 INFO L290 TraceCheckUtils]: 1: Hoare triple {12888#true} assume true; {12888#true} is VALID [2022-04-27 15:03:19,601 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12888#true} {12888#true} #717#return; {12888#true} is VALID [2022-04-27 15:03:19,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-04-27 15:03:19,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:19,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:19,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:19,611 INFO L290 TraceCheckUtils]: 0: Hoare triple {12914#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {12888#true} is VALID [2022-04-27 15:03:19,611 INFO L290 TraceCheckUtils]: 1: Hoare triple {12888#true} assume true; {12888#true} is VALID [2022-04-27 15:03:19,611 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12888#true} {12888#true} #713#return; {12888#true} is VALID [2022-04-27 15:03:19,611 INFO L290 TraceCheckUtils]: 0: Hoare triple {12914#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {12888#true} is VALID [2022-04-27 15:03:19,612 INFO L272 TraceCheckUtils]: 1: Hoare triple {12888#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {12914#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:19,612 INFO L290 TraceCheckUtils]: 2: Hoare triple {12914#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {12888#true} is VALID [2022-04-27 15:03:19,612 INFO L290 TraceCheckUtils]: 3: Hoare triple {12888#true} assume true; {12888#true} is VALID [2022-04-27 15:03:19,612 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {12888#true} {12888#true} #713#return; {12888#true} is VALID [2022-04-27 15:03:19,612 INFO L290 TraceCheckUtils]: 5: Hoare triple {12888#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {12888#true} is VALID [2022-04-27 15:03:19,612 INFO L290 TraceCheckUtils]: 6: Hoare triple {12888#true} assume true; {12888#true} is VALID [2022-04-27 15:03:19,612 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {12888#true} {12888#true} #777#return; {12888#true} is VALID [2022-04-27 15:03:19,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-04-27 15:03:19,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:19,621 INFO L290 TraceCheckUtils]: 0: Hoare triple {12918#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:19,621 INFO L290 TraceCheckUtils]: 1: Hoare triple {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:19,621 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {12888#true} #779#return; {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:19,622 INFO L272 TraceCheckUtils]: 0: Hoare triple {12888#true} call ULTIMATE.init(); {12911#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:19,622 INFO L290 TraceCheckUtils]: 1: Hoare triple {12911#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {12888#true} is VALID [2022-04-27 15:03:19,622 INFO L290 TraceCheckUtils]: 2: Hoare triple {12888#true} assume true; {12888#true} is VALID [2022-04-27 15:03:19,622 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12888#true} {12888#true} #783#return; {12888#true} is VALID [2022-04-27 15:03:19,623 INFO L272 TraceCheckUtils]: 4: Hoare triple {12888#true} call #t~ret81 := main(); {12888#true} is VALID [2022-04-27 15:03:19,623 INFO L290 TraceCheckUtils]: 5: Hoare triple {12888#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {12888#true} is VALID [2022-04-27 15:03:19,623 INFO L272 TraceCheckUtils]: 6: Hoare triple {12888#true} call _BLAST_init(); {12912#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:19,623 INFO L290 TraceCheckUtils]: 7: Hoare triple {12912#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12888#true} is VALID [2022-04-27 15:03:19,624 INFO L290 TraceCheckUtils]: 8: Hoare triple {12888#true} assume true; {12888#true} is VALID [2022-04-27 15:03:19,624 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {12888#true} {12888#true} #715#return; {12888#true} is VALID [2022-04-27 15:03:19,624 INFO L290 TraceCheckUtils]: 10: Hoare triple {12888#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {12888#true} is VALID [2022-04-27 15:03:19,624 INFO L290 TraceCheckUtils]: 11: Hoare triple {12888#true} assume !(0 == ~irp_choice~0); {12888#true} is VALID [2022-04-27 15:03:19,624 INFO L272 TraceCheckUtils]: 12: Hoare triple {12888#true} call stub_driver_init(); {12913#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:19,624 INFO L290 TraceCheckUtils]: 13: Hoare triple {12913#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {12888#true} is VALID [2022-04-27 15:03:19,624 INFO L290 TraceCheckUtils]: 14: Hoare triple {12888#true} assume true; {12888#true} is VALID [2022-04-27 15:03:19,624 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {12888#true} {12888#true} #717#return; {12888#true} is VALID [2022-04-27 15:03:19,624 INFO L290 TraceCheckUtils]: 16: Hoare triple {12888#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {12888#true} is VALID [2022-04-27 15:03:19,624 INFO L290 TraceCheckUtils]: 17: Hoare triple {12888#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {12888#true} is VALID [2022-04-27 15:03:19,624 INFO L290 TraceCheckUtils]: 18: Hoare triple {12888#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {12888#true} is VALID [2022-04-27 15:03:19,625 INFO L290 TraceCheckUtils]: 19: Hoare triple {12888#true} assume 3 == ~tmp_ndt_3~0; {12888#true} is VALID [2022-04-27 15:03:19,625 INFO L272 TraceCheckUtils]: 20: Hoare triple {12888#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {12888#true} is VALID [2022-04-27 15:03:19,625 INFO L290 TraceCheckUtils]: 21: Hoare triple {12888#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {12888#true} is VALID [2022-04-27 15:03:19,625 INFO L290 TraceCheckUtils]: 22: Hoare triple {12888#true} assume 0 == ~irpStack__MinorFunction~0; {12888#true} is VALID [2022-04-27 15:03:19,625 INFO L290 TraceCheckUtils]: 23: Hoare triple {12888#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {12888#true} is VALID [2022-04-27 15:03:19,625 INFO L290 TraceCheckUtils]: 24: Hoare triple {12888#true} assume !(~s~0 != ~NP~0); {12888#true} is VALID [2022-04-27 15:03:19,625 INFO L290 TraceCheckUtils]: 25: Hoare triple {12888#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {12888#true} is VALID [2022-04-27 15:03:19,625 INFO L290 TraceCheckUtils]: 26: Hoare triple {12888#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {12888#true} is VALID [2022-04-27 15:03:19,625 INFO L272 TraceCheckUtils]: 27: Hoare triple {12888#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {12888#true} is VALID [2022-04-27 15:03:19,625 INFO L290 TraceCheckUtils]: 28: Hoare triple {12888#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {12888#true} is VALID [2022-04-27 15:03:19,625 INFO L290 TraceCheckUtils]: 29: Hoare triple {12888#true} assume 0 != ~compRegistered~0; {12888#true} is VALID [2022-04-27 15:03:19,626 INFO L272 TraceCheckUtils]: 30: Hoare triple {12888#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {12914#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:19,626 INFO L290 TraceCheckUtils]: 31: Hoare triple {12914#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {12888#true} is VALID [2022-04-27 15:03:19,626 INFO L272 TraceCheckUtils]: 32: Hoare triple {12888#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {12914#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:19,626 INFO L290 TraceCheckUtils]: 33: Hoare triple {12914#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {12888#true} is VALID [2022-04-27 15:03:19,626 INFO L290 TraceCheckUtils]: 34: Hoare triple {12888#true} assume true; {12888#true} is VALID [2022-04-27 15:03:19,626 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {12888#true} {12888#true} #713#return; {12888#true} is VALID [2022-04-27 15:03:19,626 INFO L290 TraceCheckUtils]: 36: Hoare triple {12888#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {12888#true} is VALID [2022-04-27 15:03:19,626 INFO L290 TraceCheckUtils]: 37: Hoare triple {12888#true} assume true; {12888#true} is VALID [2022-04-27 15:03:19,626 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {12888#true} {12888#true} #777#return; {12888#true} is VALID [2022-04-27 15:03:19,626 INFO L290 TraceCheckUtils]: 39: Hoare triple {12888#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {12888#true} is VALID [2022-04-27 15:03:19,627 INFO L290 TraceCheckUtils]: 40: Hoare triple {12888#true} assume -1073741802 == ~__cil_tmp7~0; {12888#true} is VALID [2022-04-27 15:03:19,627 INFO L272 TraceCheckUtils]: 41: Hoare triple {12888#true} call stubMoreProcessingRequired(); {12918#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:19,627 INFO L290 TraceCheckUtils]: 42: Hoare triple {12918#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:19,627 INFO L290 TraceCheckUtils]: 43: Hoare triple {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume true; {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:19,628 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} {12888#true} #779#return; {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:19,628 INFO L290 TraceCheckUtils]: 45: Hoare triple {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:19,628 INFO L290 TraceCheckUtils]: 46: Hoare triple {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume 0 == ~tmp_ndt_6~0; {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:19,628 INFO L290 TraceCheckUtils]: 47: Hoare triple {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} ~returnVal2~0 := 0; {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:19,629 INFO L290 TraceCheckUtils]: 48: Hoare triple {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~NP~0); {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-04-27 15:03:19,629 INFO L290 TraceCheckUtils]: 49: Hoare triple {12910#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~MPR1~0); {12889#false} is VALID [2022-04-27 15:03:19,629 INFO L290 TraceCheckUtils]: 50: Hoare triple {12889#false} assume !(~s~0 == ~SKIP1~0); {12889#false} is VALID [2022-04-27 15:03:19,629 INFO L272 TraceCheckUtils]: 51: Hoare triple {12889#false} call errorFn(); {12889#false} is VALID [2022-04-27 15:03:19,629 INFO L290 TraceCheckUtils]: 52: Hoare triple {12889#false} assume !false; {12889#false} is VALID [2022-04-27 15:03:19,629 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:19,630 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:19,630 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [973832706] [2022-04-27 15:03:19,630 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [973832706] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:19,630 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:19,630 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-27 15:03:19,630 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [965870472] [2022-04-27 15:03:19,630 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:19,630 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-27 15:03:19,630 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:19,630 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:19,663 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:19,663 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-27 15:03:19,663 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:19,663 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-27 15:03:19,663 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-04-27 15:03:19,663 INFO L87 Difference]: Start difference. First operand 242 states and 321 transitions. Second operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:21,252 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:21,252 INFO L93 Difference]: Finished difference Result 270 states and 354 transitions. [2022-04-27 15:03:21,252 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-04-27 15:03:21,253 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 53 [2022-04-27 15:03:21,253 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:21,253 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:21,255 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 341 transitions. [2022-04-27 15:03:21,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:21,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 341 transitions. [2022-04-27 15:03:21,257 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 10 states and 341 transitions. [2022-04-27 15:03:21,560 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 341 edges. 341 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:21,564 INFO L225 Difference]: With dead ends: 270 [2022-04-27 15:03:21,564 INFO L226 Difference]: Without dead ends: 240 [2022-04-27 15:03:21,565 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=67, Unknown=0, NotChecked=0, Total=110 [2022-04-27 15:03:21,566 INFO L413 NwaCegarLoop]: 243 mSDtfsCounter, 195 mSDsluCounter, 264 mSDsCounter, 0 mSdLazyCounter, 640 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 195 SdHoareTripleChecker+Valid, 507 SdHoareTripleChecker+Invalid, 694 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 640 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:21,567 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [195 Valid, 507 Invalid, 694 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 640 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-04-27 15:03:21,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2022-04-27 15:03:21,679 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 240. [2022-04-27 15:03:21,680 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:21,680 INFO L82 GeneralOperation]: Start isEquivalent. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:21,680 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:21,681 INFO L87 Difference]: Start difference. First operand 240 states. Second operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:21,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:21,684 INFO L93 Difference]: Finished difference Result 240 states and 317 transitions. [2022-04-27 15:03:21,684 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-27 15:03:21,684 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:21,684 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:21,686 INFO L74 IsIncluded]: Start isIncluded. First operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-27 15:03:21,687 INFO L87 Difference]: Start difference. First operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-27 15:03:21,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:21,692 INFO L93 Difference]: Finished difference Result 240 states and 317 transitions. [2022-04-27 15:03:21,692 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-27 15:03:21,693 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:21,693 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:21,693 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:21,693 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:21,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 197 states have (on average 1.3705583756345177) internal successors, (270), 199 states have internal predecessors, (270), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:21,697 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 317 transitions. [2022-04-27 15:03:21,697 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 317 transitions. Word has length 53 [2022-04-27 15:03:21,697 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:21,697 INFO L495 AbstractCegarLoop]: Abstraction has 240 states and 317 transitions. [2022-04-27 15:03:21,698 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:21,698 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2022-04-27 15:03:21,699 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-04-27 15:03:21,699 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:21,699 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:21,699 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-04-27 15:03:21,699 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:21,699 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:21,699 INFO L85 PathProgramCache]: Analyzing trace with hash -1556296422, now seen corresponding path program 1 times [2022-04-27 15:03:21,700 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:21,700 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2032454726] [2022-04-27 15:03:21,700 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:21,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:21,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:21,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:21,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:21,779 INFO L290 TraceCheckUtils]: 0: Hoare triple {14123#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14093#true} is VALID [2022-04-27 15:03:21,780 INFO L290 TraceCheckUtils]: 1: Hoare triple {14093#true} assume true; {14093#true} is VALID [2022-04-27 15:03:21,780 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14093#true} {14093#true} #783#return; {14093#true} is VALID [2022-04-27 15:03:21,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:21,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:21,802 INFO L290 TraceCheckUtils]: 0: Hoare triple {14124#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14101#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-27 15:03:21,802 INFO L290 TraceCheckUtils]: 1: Hoare triple {14101#(not (= ~SKIP1~0 ~NP~0))} assume true; {14101#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-27 15:03:21,802 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14101#(not (= ~SKIP1~0 ~NP~0))} {14093#true} #715#return; {14101#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-27 15:03:21,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:21,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:21,815 INFO L290 TraceCheckUtils]: 0: Hoare triple {14125#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14093#true} is VALID [2022-04-27 15:03:21,815 INFO L290 TraceCheckUtils]: 1: Hoare triple {14093#true} assume true; {14093#true} is VALID [2022-04-27 15:03:21,815 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14093#true} {14101#(not (= ~SKIP1~0 ~NP~0))} #717#return; {14101#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-27 15:03:21,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-27 15:03:21,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:21,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-27 15:03:21,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:21,872 INFO L290 TraceCheckUtils]: 0: Hoare triple {14126#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {14138#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,873 INFO L290 TraceCheckUtils]: 1: Hoare triple {14138#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {14138#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,873 INFO L290 TraceCheckUtils]: 2: Hoare triple {14138#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {14138#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,873 INFO L290 TraceCheckUtils]: 3: Hoare triple {14138#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {14138#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,873 INFO L290 TraceCheckUtils]: 4: Hoare triple {14138#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {14138#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,874 INFO L290 TraceCheckUtils]: 5: Hoare triple {14138#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {14139#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,874 INFO L290 TraceCheckUtils]: 6: Hoare triple {14139#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {14139#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,874 INFO L290 TraceCheckUtils]: 7: Hoare triple {14139#(= ~NP~0 |old(~s~0)|)} assume true; {14139#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,875 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {14139#(= ~NP~0 |old(~s~0)|)} {14127#(= ~SKIP1~0 ~s~0)} #775#return; {14137#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-27 15:03:21,876 INFO L290 TraceCheckUtils]: 0: Hoare triple {14126#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {14093#true} is VALID [2022-04-27 15:03:21,876 INFO L290 TraceCheckUtils]: 1: Hoare triple {14093#true} assume 2 == ~irpStack__MinorFunction~1; {14093#true} is VALID [2022-04-27 15:03:21,876 INFO L290 TraceCheckUtils]: 2: Hoare triple {14093#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {14093#true} is VALID [2022-04-27 15:03:21,876 INFO L290 TraceCheckUtils]: 3: Hoare triple {14093#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {14127#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:21,876 INFO L290 TraceCheckUtils]: 4: Hoare triple {14127#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {14127#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:21,877 INFO L272 TraceCheckUtils]: 5: Hoare triple {14127#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {14126#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:21,877 INFO L290 TraceCheckUtils]: 6: Hoare triple {14126#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {14138#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,878 INFO L290 TraceCheckUtils]: 7: Hoare triple {14138#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {14138#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,878 INFO L290 TraceCheckUtils]: 8: Hoare triple {14138#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {14138#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,878 INFO L290 TraceCheckUtils]: 9: Hoare triple {14138#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {14138#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,878 INFO L290 TraceCheckUtils]: 10: Hoare triple {14138#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {14138#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,879 INFO L290 TraceCheckUtils]: 11: Hoare triple {14138#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {14139#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,879 INFO L290 TraceCheckUtils]: 12: Hoare triple {14139#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {14139#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,879 INFO L290 TraceCheckUtils]: 13: Hoare triple {14139#(= ~NP~0 |old(~s~0)|)} assume true; {14139#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,880 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {14139#(= ~NP~0 |old(~s~0)|)} {14127#(= ~SKIP1~0 ~s~0)} #775#return; {14137#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-27 15:03:21,880 INFO L290 TraceCheckUtils]: 15: Hoare triple {14137#(= ~SKIP1~0 ~NP~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {14137#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-27 15:03:21,880 INFO L290 TraceCheckUtils]: 16: Hoare triple {14137#(= ~SKIP1~0 ~NP~0)} assume true; {14137#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-27 15:03:21,881 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {14137#(= ~SKIP1~0 ~NP~0)} {14101#(not (= ~SKIP1~0 ~NP~0))} #725#return; {14094#false} is VALID [2022-04-27 15:03:21,882 INFO L272 TraceCheckUtils]: 0: Hoare triple {14093#true} call ULTIMATE.init(); {14123#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:21,882 INFO L290 TraceCheckUtils]: 1: Hoare triple {14123#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {14093#true} is VALID [2022-04-27 15:03:21,883 INFO L290 TraceCheckUtils]: 2: Hoare triple {14093#true} assume true; {14093#true} is VALID [2022-04-27 15:03:21,883 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14093#true} {14093#true} #783#return; {14093#true} is VALID [2022-04-27 15:03:21,883 INFO L272 TraceCheckUtils]: 4: Hoare triple {14093#true} call #t~ret81 := main(); {14093#true} is VALID [2022-04-27 15:03:21,883 INFO L290 TraceCheckUtils]: 5: Hoare triple {14093#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {14093#true} is VALID [2022-04-27 15:03:21,884 INFO L272 TraceCheckUtils]: 6: Hoare triple {14093#true} call _BLAST_init(); {14124#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:21,885 INFO L290 TraceCheckUtils]: 7: Hoare triple {14124#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14101#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-27 15:03:21,885 INFO L290 TraceCheckUtils]: 8: Hoare triple {14101#(not (= ~SKIP1~0 ~NP~0))} assume true; {14101#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-27 15:03:21,885 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {14101#(not (= ~SKIP1~0 ~NP~0))} {14093#true} #715#return; {14101#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-27 15:03:21,886 INFO L290 TraceCheckUtils]: 10: Hoare triple {14101#(not (= ~SKIP1~0 ~NP~0))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {14101#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-27 15:03:21,886 INFO L290 TraceCheckUtils]: 11: Hoare triple {14101#(not (= ~SKIP1~0 ~NP~0))} assume !(0 == ~irp_choice~0); {14101#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-27 15:03:21,887 INFO L272 TraceCheckUtils]: 12: Hoare triple {14101#(not (= ~SKIP1~0 ~NP~0))} call stub_driver_init(); {14125#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:21,887 INFO L290 TraceCheckUtils]: 13: Hoare triple {14125#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {14093#true} is VALID [2022-04-27 15:03:21,887 INFO L290 TraceCheckUtils]: 14: Hoare triple {14093#true} assume true; {14093#true} is VALID [2022-04-27 15:03:21,887 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {14093#true} {14101#(not (= ~SKIP1~0 ~NP~0))} #717#return; {14101#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-27 15:03:21,887 INFO L290 TraceCheckUtils]: 16: Hoare triple {14101#(not (= ~SKIP1~0 ~NP~0))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {14101#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-27 15:03:21,887 INFO L290 TraceCheckUtils]: 17: Hoare triple {14101#(not (= ~SKIP1~0 ~NP~0))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {14101#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-27 15:03:21,888 INFO L290 TraceCheckUtils]: 18: Hoare triple {14101#(not (= ~SKIP1~0 ~NP~0))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {14101#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-27 15:03:21,888 INFO L290 TraceCheckUtils]: 19: Hoare triple {14101#(not (= ~SKIP1~0 ~NP~0))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {14101#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-27 15:03:21,888 INFO L290 TraceCheckUtils]: 20: Hoare triple {14101#(not (= ~SKIP1~0 ~NP~0))} assume 4 == ~tmp_ndt_4~0; {14101#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-04-27 15:03:21,889 INFO L272 TraceCheckUtils]: 21: Hoare triple {14101#(not (= ~SKIP1~0 ~NP~0))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {14126#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:21,889 INFO L290 TraceCheckUtils]: 22: Hoare triple {14126#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {14093#true} is VALID [2022-04-27 15:03:21,889 INFO L290 TraceCheckUtils]: 23: Hoare triple {14093#true} assume 2 == ~irpStack__MinorFunction~1; {14093#true} is VALID [2022-04-27 15:03:21,889 INFO L290 TraceCheckUtils]: 24: Hoare triple {14093#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {14093#true} is VALID [2022-04-27 15:03:21,889 INFO L290 TraceCheckUtils]: 25: Hoare triple {14093#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {14127#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:21,890 INFO L290 TraceCheckUtils]: 26: Hoare triple {14127#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {14127#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:21,890 INFO L272 TraceCheckUtils]: 27: Hoare triple {14127#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {14126#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:21,890 INFO L290 TraceCheckUtils]: 28: Hoare triple {14126#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {14138#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,891 INFO L290 TraceCheckUtils]: 29: Hoare triple {14138#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {14138#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,891 INFO L290 TraceCheckUtils]: 30: Hoare triple {14138#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {14138#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,891 INFO L290 TraceCheckUtils]: 31: Hoare triple {14138#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {14138#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,891 INFO L290 TraceCheckUtils]: 32: Hoare triple {14138#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {14138#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,892 INFO L290 TraceCheckUtils]: 33: Hoare triple {14138#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal~0; {14139#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,892 INFO L290 TraceCheckUtils]: 34: Hoare triple {14139#(= ~NP~0 |old(~s~0)|)} #res := ~returnVal~0; {14139#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,892 INFO L290 TraceCheckUtils]: 35: Hoare triple {14139#(= ~NP~0 |old(~s~0)|)} assume true; {14139#(= ~NP~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:21,893 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {14139#(= ~NP~0 |old(~s~0)|)} {14127#(= ~SKIP1~0 ~s~0)} #775#return; {14137#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-27 15:03:21,893 INFO L290 TraceCheckUtils]: 37: Hoare triple {14137#(= ~SKIP1~0 ~NP~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {14137#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-27 15:03:21,893 INFO L290 TraceCheckUtils]: 38: Hoare triple {14137#(= ~SKIP1~0 ~NP~0)} assume true; {14137#(= ~SKIP1~0 ~NP~0)} is VALID [2022-04-27 15:03:21,894 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {14137#(= ~SKIP1~0 ~NP~0)} {14101#(not (= ~SKIP1~0 ~NP~0))} #725#return; {14094#false} is VALID [2022-04-27 15:03:21,894 INFO L290 TraceCheckUtils]: 40: Hoare triple {14094#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {14094#false} is VALID [2022-04-27 15:03:21,894 INFO L290 TraceCheckUtils]: 41: Hoare triple {14094#false} assume !(1 == ~pended~0); {14094#false} is VALID [2022-04-27 15:03:21,894 INFO L290 TraceCheckUtils]: 42: Hoare triple {14094#false} assume !(1 == ~pended~0); {14094#false} is VALID [2022-04-27 15:03:21,894 INFO L290 TraceCheckUtils]: 43: Hoare triple {14094#false} assume ~s~0 != ~UNLOADED~0; {14094#false} is VALID [2022-04-27 15:03:21,894 INFO L290 TraceCheckUtils]: 44: Hoare triple {14094#false} assume -1 != ~status~1; {14094#false} is VALID [2022-04-27 15:03:21,894 INFO L290 TraceCheckUtils]: 45: Hoare triple {14094#false} assume !(~s~0 != ~SKIP2~0); {14094#false} is VALID [2022-04-27 15:03:21,894 INFO L290 TraceCheckUtils]: 46: Hoare triple {14094#false} assume !(1 == ~pended~0); {14094#false} is VALID [2022-04-27 15:03:21,894 INFO L290 TraceCheckUtils]: 47: Hoare triple {14094#false} assume !(~s~0 == ~DC~0); {14094#false} is VALID [2022-04-27 15:03:21,894 INFO L290 TraceCheckUtils]: 48: Hoare triple {14094#false} assume ~status~1 != ~lowerDriverReturn~0; {14094#false} is VALID [2022-04-27 15:03:21,894 INFO L272 TraceCheckUtils]: 49: Hoare triple {14094#false} call errorFn(); {14094#false} is VALID [2022-04-27 15:03:21,895 INFO L290 TraceCheckUtils]: 50: Hoare triple {14094#false} assume !false; {14094#false} is VALID [2022-04-27 15:03:21,895 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:21,895 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:21,895 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2032454726] [2022-04-27 15:03:21,895 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2032454726] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:21,895 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:21,895 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-27 15:03:21,895 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2099502124] [2022-04-27 15:03:21,895 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:21,895 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 51 [2022-04-27 15:03:21,896 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:21,896 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-27 15:03:21,937 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:21,938 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-27 15:03:21,938 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:21,938 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-27 15:03:21,938 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-27 15:03:21,938 INFO L87 Difference]: Start difference. First operand 240 states and 317 transitions. Second operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-27 15:03:24,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:24,167 INFO L93 Difference]: Finished difference Result 284 states and 365 transitions. [2022-04-27 15:03:24,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-27 15:03:24,167 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 51 [2022-04-27 15:03:24,167 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:24,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-27 15:03:24,169 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 365 transitions. [2022-04-27 15:03:24,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-27 15:03:24,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 365 transitions. [2022-04-27 15:03:24,171 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 365 transitions. [2022-04-27 15:03:24,495 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:24,499 INFO L225 Difference]: With dead ends: 284 [2022-04-27 15:03:24,499 INFO L226 Difference]: Without dead ends: 243 [2022-04-27 15:03:24,499 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=109, Invalid=311, Unknown=0, NotChecked=0, Total=420 [2022-04-27 15:03:24,500 INFO L413 NwaCegarLoop]: 252 mSDtfsCounter, 655 mSDsluCounter, 305 mSDsCounter, 0 mSdLazyCounter, 798 mSolverCounterSat, 143 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 660 SdHoareTripleChecker+Valid, 557 SdHoareTripleChecker+Invalid, 941 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 143 IncrementalHoareTripleChecker+Valid, 798 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:24,500 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [660 Valid, 557 Invalid, 941 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [143 Valid, 798 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-27 15:03:24,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243 states. [2022-04-27 15:03:24,640 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 243 to 240. [2022-04-27 15:03:24,640 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:24,641 INFO L82 GeneralOperation]: Start isEquivalent. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:24,641 INFO L74 IsIncluded]: Start isIncluded. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:24,641 INFO L87 Difference]: Start difference. First operand 243 states. Second operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:24,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:24,645 INFO L93 Difference]: Finished difference Result 243 states and 317 transitions. [2022-04-27 15:03:24,645 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 317 transitions. [2022-04-27 15:03:24,648 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:24,648 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:24,648 INFO L74 IsIncluded]: Start isIncluded. First operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 243 states. [2022-04-27 15:03:24,649 INFO L87 Difference]: Start difference. First operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 243 states. [2022-04-27 15:03:24,652 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:24,652 INFO L93 Difference]: Finished difference Result 243 states and 317 transitions. [2022-04-27 15:03:24,652 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 317 transitions. [2022-04-27 15:03:24,655 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:24,655 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:24,655 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:24,655 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:24,656 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 197 states have (on average 1.3604060913705585) internal successors, (268), 199 states have internal predecessors, (268), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:24,659 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 315 transitions. [2022-04-27 15:03:24,659 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 315 transitions. Word has length 51 [2022-04-27 15:03:24,659 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:24,659 INFO L495 AbstractCegarLoop]: Abstraction has 240 states and 315 transitions. [2022-04-27 15:03:24,659 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 7 states have internal predecessors, (39), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-27 15:03:24,660 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 315 transitions. [2022-04-27 15:03:24,660 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-27 15:03:24,660 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:24,660 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:24,660 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-04-27 15:03:24,660 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:24,661 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:24,661 INFO L85 PathProgramCache]: Analyzing trace with hash 460482069, now seen corresponding path program 1 times [2022-04-27 15:03:24,661 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:24,661 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1612417069] [2022-04-27 15:03:24,661 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:24,661 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:24,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:24,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:24,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:24,746 INFO L290 TraceCheckUtils]: 0: Hoare triple {15379#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {15347#true} is VALID [2022-04-27 15:03:24,746 INFO L290 TraceCheckUtils]: 1: Hoare triple {15347#true} assume true; {15347#true} is VALID [2022-04-27 15:03:24,746 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15347#true} {15347#true} #783#return; {15347#true} is VALID [2022-04-27 15:03:24,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:24,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:24,784 INFO L290 TraceCheckUtils]: 0: Hoare triple {15380#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15381#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-27 15:03:24,785 INFO L290 TraceCheckUtils]: 1: Hoare triple {15381#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {15381#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-27 15:03:24,785 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15381#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {15347#true} #715#return; {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:24,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:24,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:24,799 INFO L290 TraceCheckUtils]: 0: Hoare triple {15382#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15347#true} is VALID [2022-04-27 15:03:24,799 INFO L290 TraceCheckUtils]: 1: Hoare triple {15347#true} assume true; {15347#true} is VALID [2022-04-27 15:03:24,800 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15347#true} {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:24,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-27 15:03:24,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:24,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-27 15:03:24,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:24,844 INFO L290 TraceCheckUtils]: 0: Hoare triple {15383#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {15347#true} is VALID [2022-04-27 15:03:24,844 INFO L290 TraceCheckUtils]: 1: Hoare triple {15347#true} assume !(0 != ~compRegistered~0); {15347#true} is VALID [2022-04-27 15:03:24,844 INFO L290 TraceCheckUtils]: 2: Hoare triple {15347#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {15347#true} is VALID [2022-04-27 15:03:24,844 INFO L290 TraceCheckUtils]: 3: Hoare triple {15347#true} assume 0 == ~tmp_ndt_9~0; {15347#true} is VALID [2022-04-27 15:03:24,844 INFO L290 TraceCheckUtils]: 4: Hoare triple {15347#true} ~returnVal~0 := 0; {15395#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-27 15:03:24,845 INFO L290 TraceCheckUtils]: 5: Hoare triple {15395#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {15395#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-27 15:03:24,845 INFO L290 TraceCheckUtils]: 6: Hoare triple {15395#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {15396#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-27 15:03:24,845 INFO L290 TraceCheckUtils]: 7: Hoare triple {15396#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {15348#false} is VALID [2022-04-27 15:03:24,845 INFO L290 TraceCheckUtils]: 8: Hoare triple {15348#false} #res := ~returnVal~0; {15348#false} is VALID [2022-04-27 15:03:24,845 INFO L290 TraceCheckUtils]: 9: Hoare triple {15348#false} assume true; {15348#false} is VALID [2022-04-27 15:03:24,845 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {15348#false} {15347#true} #775#return; {15348#false} is VALID [2022-04-27 15:03:24,846 INFO L290 TraceCheckUtils]: 0: Hoare triple {15383#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {15347#true} is VALID [2022-04-27 15:03:24,846 INFO L290 TraceCheckUtils]: 1: Hoare triple {15347#true} assume 2 == ~irpStack__MinorFunction~1; {15347#true} is VALID [2022-04-27 15:03:24,846 INFO L290 TraceCheckUtils]: 2: Hoare triple {15347#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {15347#true} is VALID [2022-04-27 15:03:24,846 INFO L290 TraceCheckUtils]: 3: Hoare triple {15347#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {15347#true} is VALID [2022-04-27 15:03:24,846 INFO L290 TraceCheckUtils]: 4: Hoare triple {15347#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {15347#true} is VALID [2022-04-27 15:03:24,846 INFO L272 TraceCheckUtils]: 5: Hoare triple {15347#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {15383#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:24,846 INFO L290 TraceCheckUtils]: 6: Hoare triple {15383#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {15347#true} is VALID [2022-04-27 15:03:24,846 INFO L290 TraceCheckUtils]: 7: Hoare triple {15347#true} assume !(0 != ~compRegistered~0); {15347#true} is VALID [2022-04-27 15:03:24,846 INFO L290 TraceCheckUtils]: 8: Hoare triple {15347#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {15347#true} is VALID [2022-04-27 15:03:24,846 INFO L290 TraceCheckUtils]: 9: Hoare triple {15347#true} assume 0 == ~tmp_ndt_9~0; {15347#true} is VALID [2022-04-27 15:03:24,847 INFO L290 TraceCheckUtils]: 10: Hoare triple {15347#true} ~returnVal~0 := 0; {15395#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-27 15:03:24,847 INFO L290 TraceCheckUtils]: 11: Hoare triple {15395#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {15395#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-27 15:03:24,847 INFO L290 TraceCheckUtils]: 12: Hoare triple {15395#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {15396#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-27 15:03:24,847 INFO L290 TraceCheckUtils]: 13: Hoare triple {15396#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {15348#false} is VALID [2022-04-27 15:03:24,848 INFO L290 TraceCheckUtils]: 14: Hoare triple {15348#false} #res := ~returnVal~0; {15348#false} is VALID [2022-04-27 15:03:24,848 INFO L290 TraceCheckUtils]: 15: Hoare triple {15348#false} assume true; {15348#false} is VALID [2022-04-27 15:03:24,848 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {15348#false} {15347#true} #775#return; {15348#false} is VALID [2022-04-27 15:03:24,848 INFO L290 TraceCheckUtils]: 17: Hoare triple {15348#false} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {15348#false} is VALID [2022-04-27 15:03:24,848 INFO L290 TraceCheckUtils]: 18: Hoare triple {15348#false} assume true; {15348#false} is VALID [2022-04-27 15:03:24,848 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {15348#false} {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {15348#false} is VALID [2022-04-27 15:03:24,849 INFO L272 TraceCheckUtils]: 0: Hoare triple {15347#true} call ULTIMATE.init(); {15379#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:24,849 INFO L290 TraceCheckUtils]: 1: Hoare triple {15379#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {15347#true} is VALID [2022-04-27 15:03:24,849 INFO L290 TraceCheckUtils]: 2: Hoare triple {15347#true} assume true; {15347#true} is VALID [2022-04-27 15:03:24,849 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {15347#true} {15347#true} #783#return; {15347#true} is VALID [2022-04-27 15:03:24,849 INFO L272 TraceCheckUtils]: 4: Hoare triple {15347#true} call #t~ret81 := main(); {15347#true} is VALID [2022-04-27 15:03:24,849 INFO L290 TraceCheckUtils]: 5: Hoare triple {15347#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {15347#true} is VALID [2022-04-27 15:03:24,850 INFO L272 TraceCheckUtils]: 6: Hoare triple {15347#true} call _BLAST_init(); {15380#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:24,851 INFO L290 TraceCheckUtils]: 7: Hoare triple {15380#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15381#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-27 15:03:24,851 INFO L290 TraceCheckUtils]: 8: Hoare triple {15381#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {15381#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-27 15:03:24,851 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {15381#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {15347#true} #715#return; {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:24,852 INFO L290 TraceCheckUtils]: 10: Hoare triple {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:24,852 INFO L290 TraceCheckUtils]: 11: Hoare triple {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~irp_choice~0); {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:24,853 INFO L272 TraceCheckUtils]: 12: Hoare triple {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call stub_driver_init(); {15382#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:24,853 INFO L290 TraceCheckUtils]: 13: Hoare triple {15382#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15347#true} is VALID [2022-04-27 15:03:24,853 INFO L290 TraceCheckUtils]: 14: Hoare triple {15347#true} assume true; {15347#true} is VALID [2022-04-27 15:03:24,853 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {15347#true} {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:24,853 INFO L290 TraceCheckUtils]: 16: Hoare triple {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:24,854 INFO L290 TraceCheckUtils]: 17: Hoare triple {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:24,854 INFO L290 TraceCheckUtils]: 18: Hoare triple {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:24,854 INFO L290 TraceCheckUtils]: 19: Hoare triple {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:24,855 INFO L290 TraceCheckUtils]: 20: Hoare triple {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 4 == ~tmp_ndt_4~0; {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:24,855 INFO L272 TraceCheckUtils]: 21: Hoare triple {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {15383#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:24,855 INFO L290 TraceCheckUtils]: 22: Hoare triple {15383#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {15347#true} is VALID [2022-04-27 15:03:24,855 INFO L290 TraceCheckUtils]: 23: Hoare triple {15347#true} assume 2 == ~irpStack__MinorFunction~1; {15347#true} is VALID [2022-04-27 15:03:24,855 INFO L290 TraceCheckUtils]: 24: Hoare triple {15347#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {15347#true} is VALID [2022-04-27 15:03:24,855 INFO L290 TraceCheckUtils]: 25: Hoare triple {15347#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {15347#true} is VALID [2022-04-27 15:03:24,855 INFO L290 TraceCheckUtils]: 26: Hoare triple {15347#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {15347#true} is VALID [2022-04-27 15:03:24,856 INFO L272 TraceCheckUtils]: 27: Hoare triple {15347#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {15383#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:24,856 INFO L290 TraceCheckUtils]: 28: Hoare triple {15383#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {15347#true} is VALID [2022-04-27 15:03:24,856 INFO L290 TraceCheckUtils]: 29: Hoare triple {15347#true} assume !(0 != ~compRegistered~0); {15347#true} is VALID [2022-04-27 15:03:24,856 INFO L290 TraceCheckUtils]: 30: Hoare triple {15347#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {15347#true} is VALID [2022-04-27 15:03:24,856 INFO L290 TraceCheckUtils]: 31: Hoare triple {15347#true} assume 0 == ~tmp_ndt_9~0; {15347#true} is VALID [2022-04-27 15:03:24,856 INFO L290 TraceCheckUtils]: 32: Hoare triple {15347#true} ~returnVal~0 := 0; {15395#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-27 15:03:24,857 INFO L290 TraceCheckUtils]: 33: Hoare triple {15395#(not (= 259 PoCallDriver_~returnVal~0))} assume !(~s~0 == ~NP~0); {15395#(not (= 259 PoCallDriver_~returnVal~0))} is VALID [2022-04-27 15:03:24,857 INFO L290 TraceCheckUtils]: 34: Hoare triple {15395#(not (= 259 PoCallDriver_~returnVal~0))} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {15396#(not (= 259 PoCallDriver_~__cil_tmp8~1))} is VALID [2022-04-27 15:03:24,857 INFO L290 TraceCheckUtils]: 35: Hoare triple {15396#(not (= 259 PoCallDriver_~__cil_tmp8~1))} assume 259 == ~__cil_tmp8~1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal~0; {15348#false} is VALID [2022-04-27 15:03:24,857 INFO L290 TraceCheckUtils]: 36: Hoare triple {15348#false} #res := ~returnVal~0; {15348#false} is VALID [2022-04-27 15:03:24,857 INFO L290 TraceCheckUtils]: 37: Hoare triple {15348#false} assume true; {15348#false} is VALID [2022-04-27 15:03:24,857 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {15348#false} {15347#true} #775#return; {15348#false} is VALID [2022-04-27 15:03:24,857 INFO L290 TraceCheckUtils]: 39: Hoare triple {15348#false} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {15348#false} is VALID [2022-04-27 15:03:24,857 INFO L290 TraceCheckUtils]: 40: Hoare triple {15348#false} assume true; {15348#false} is VALID [2022-04-27 15:03:24,857 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {15348#false} {15355#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {15348#false} is VALID [2022-04-27 15:03:24,857 INFO L290 TraceCheckUtils]: 42: Hoare triple {15348#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {15348#false} is VALID [2022-04-27 15:03:24,857 INFO L290 TraceCheckUtils]: 43: Hoare triple {15348#false} assume !(1 == ~pended~0); {15348#false} is VALID [2022-04-27 15:03:24,858 INFO L290 TraceCheckUtils]: 44: Hoare triple {15348#false} assume !(1 == ~pended~0); {15348#false} is VALID [2022-04-27 15:03:24,858 INFO L290 TraceCheckUtils]: 45: Hoare triple {15348#false} assume ~s~0 != ~UNLOADED~0; {15348#false} is VALID [2022-04-27 15:03:24,858 INFO L290 TraceCheckUtils]: 46: Hoare triple {15348#false} assume -1 != ~status~1; {15348#false} is VALID [2022-04-27 15:03:24,858 INFO L290 TraceCheckUtils]: 47: Hoare triple {15348#false} assume !(~s~0 != ~SKIP2~0); {15348#false} is VALID [2022-04-27 15:03:24,858 INFO L290 TraceCheckUtils]: 48: Hoare triple {15348#false} assume !(1 == ~pended~0); {15348#false} is VALID [2022-04-27 15:03:24,858 INFO L290 TraceCheckUtils]: 49: Hoare triple {15348#false} assume !(~s~0 == ~DC~0); {15348#false} is VALID [2022-04-27 15:03:24,858 INFO L290 TraceCheckUtils]: 50: Hoare triple {15348#false} assume ~status~1 != ~lowerDriverReturn~0; {15348#false} is VALID [2022-04-27 15:03:24,858 INFO L272 TraceCheckUtils]: 51: Hoare triple {15348#false} call errorFn(); {15348#false} is VALID [2022-04-27 15:03:24,858 INFO L290 TraceCheckUtils]: 52: Hoare triple {15348#false} assume !false; {15348#false} is VALID [2022-04-27 15:03:24,858 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:24,858 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:24,858 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1612417069] [2022-04-27 15:03:24,858 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1612417069] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:24,858 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:24,858 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-27 15:03:24,858 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1142846971] [2022-04-27 15:03:24,859 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:24,859 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 53 [2022-04-27 15:03:24,859 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:24,859 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:24,891 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:24,891 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-27 15:03:24,891 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:24,892 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-27 15:03:24,892 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=66, Unknown=0, NotChecked=0, Total=90 [2022-04-27 15:03:24,892 INFO L87 Difference]: Start difference. First operand 240 states and 315 transitions. Second operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:26,818 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:26,818 INFO L93 Difference]: Finished difference Result 272 states and 349 transitions. [2022-04-27 15:03:26,818 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-27 15:03:26,818 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 53 [2022-04-27 15:03:26,818 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:26,818 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:26,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 325 transitions. [2022-04-27 15:03:26,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:26,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 325 transitions. [2022-04-27 15:03:26,837 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 325 transitions. [2022-04-27 15:03:27,165 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 325 edges. 325 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:27,170 INFO L225 Difference]: With dead ends: 272 [2022-04-27 15:03:27,170 INFO L226 Difference]: Without dead ends: 253 [2022-04-27 15:03:27,170 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 37 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=95, Invalid=211, Unknown=0, NotChecked=0, Total=306 [2022-04-27 15:03:27,171 INFO L413 NwaCegarLoop]: 238 mSDtfsCounter, 722 mSDsluCounter, 327 mSDsCounter, 0 mSdLazyCounter, 522 mSolverCounterSat, 102 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 725 SdHoareTripleChecker+Valid, 565 SdHoareTripleChecker+Invalid, 624 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 102 IncrementalHoareTripleChecker+Valid, 522 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:27,171 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [725 Valid, 565 Invalid, 624 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [102 Valid, 522 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-04-27 15:03:27,172 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 253 states. [2022-04-27 15:03:27,313 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 253 to 243. [2022-04-27 15:03:27,313 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:27,314 INFO L82 GeneralOperation]: Start isEquivalent. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:27,314 INFO L74 IsIncluded]: Start isIncluded. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:27,314 INFO L87 Difference]: Start difference. First operand 253 states. Second operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:27,318 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:27,318 INFO L93 Difference]: Finished difference Result 253 states and 329 transitions. [2022-04-27 15:03:27,318 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 329 transitions. [2022-04-27 15:03:27,319 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:27,319 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:27,319 INFO L74 IsIncluded]: Start isIncluded. First operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 253 states. [2022-04-27 15:03:27,320 INFO L87 Difference]: Start difference. First operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 253 states. [2022-04-27 15:03:27,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:27,324 INFO L93 Difference]: Finished difference Result 253 states and 329 transitions. [2022-04-27 15:03:27,324 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 329 transitions. [2022-04-27 15:03:27,324 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:27,324 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:27,324 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:27,324 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:27,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 200 states have (on average 1.36) internal successors, (272), 202 states have internal predecessors, (272), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:27,329 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 319 transitions. [2022-04-27 15:03:27,329 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 319 transitions. Word has length 53 [2022-04-27 15:03:27,329 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:27,329 INFO L495 AbstractCegarLoop]: Abstraction has 243 states and 319 transitions. [2022-04-27 15:03:27,329 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-04-27 15:03:27,329 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 319 transitions. [2022-04-27 15:03:27,330 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-27 15:03:27,330 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:27,330 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:27,330 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-04-27 15:03:27,330 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:27,331 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:27,331 INFO L85 PathProgramCache]: Analyzing trace with hash -1533662637, now seen corresponding path program 1 times [2022-04-27 15:03:27,331 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:27,331 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [35844059] [2022-04-27 15:03:27,331 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:27,331 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:27,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:27,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:27,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:27,397 INFO L290 TraceCheckUtils]: 0: Hoare triple {16641#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16609#true} is VALID [2022-04-27 15:03:27,397 INFO L290 TraceCheckUtils]: 1: Hoare triple {16609#true} assume true; {16609#true} is VALID [2022-04-27 15:03:27,397 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16609#true} {16609#true} #783#return; {16609#true} is VALID [2022-04-27 15:03:27,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:27,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:27,432 INFO L290 TraceCheckUtils]: 0: Hoare triple {16642#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16643#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-27 15:03:27,432 INFO L290 TraceCheckUtils]: 1: Hoare triple {16643#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {16643#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-27 15:03:27,433 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16643#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {16609#true} #715#return; {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:27,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:27,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:27,447 INFO L290 TraceCheckUtils]: 0: Hoare triple {16644#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16609#true} is VALID [2022-04-27 15:03:27,447 INFO L290 TraceCheckUtils]: 1: Hoare triple {16609#true} assume true; {16609#true} is VALID [2022-04-27 15:03:27,448 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16609#true} {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:27,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-27 15:03:27,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:27,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-27 15:03:27,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:27,505 INFO L290 TraceCheckUtils]: 0: Hoare triple {16645#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,506 INFO L290 TraceCheckUtils]: 1: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,506 INFO L290 TraceCheckUtils]: 2: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,506 INFO L290 TraceCheckUtils]: 3: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,506 INFO L290 TraceCheckUtils]: 4: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,507 INFO L290 TraceCheckUtils]: 5: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,507 INFO L290 TraceCheckUtils]: 6: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {16660#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,507 INFO L290 TraceCheckUtils]: 7: Hoare triple {16660#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {16660#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,508 INFO L290 TraceCheckUtils]: 8: Hoare triple {16660#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {16660#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,508 INFO L290 TraceCheckUtils]: 9: Hoare triple {16660#(= ~MPR1~0 |old(~s~0)|)} assume true; {16660#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,509 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {16660#(= ~MPR1~0 |old(~s~0)|)} {16646#(= ~SKIP1~0 ~s~0)} #775#return; {16658#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-27 15:03:27,509 INFO L290 TraceCheckUtils]: 0: Hoare triple {16645#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {16609#true} is VALID [2022-04-27 15:03:27,509 INFO L290 TraceCheckUtils]: 1: Hoare triple {16609#true} assume 2 == ~irpStack__MinorFunction~1; {16609#true} is VALID [2022-04-27 15:03:27,509 INFO L290 TraceCheckUtils]: 2: Hoare triple {16609#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {16609#true} is VALID [2022-04-27 15:03:27,509 INFO L290 TraceCheckUtils]: 3: Hoare triple {16609#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {16646#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:27,510 INFO L290 TraceCheckUtils]: 4: Hoare triple {16646#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {16646#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:27,510 INFO L272 TraceCheckUtils]: 5: Hoare triple {16646#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {16645#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,511 INFO L290 TraceCheckUtils]: 6: Hoare triple {16645#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,511 INFO L290 TraceCheckUtils]: 7: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,511 INFO L290 TraceCheckUtils]: 8: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,512 INFO L290 TraceCheckUtils]: 9: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,512 INFO L290 TraceCheckUtils]: 10: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,512 INFO L290 TraceCheckUtils]: 11: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,512 INFO L290 TraceCheckUtils]: 12: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {16660#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,513 INFO L290 TraceCheckUtils]: 13: Hoare triple {16660#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {16660#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,513 INFO L290 TraceCheckUtils]: 14: Hoare triple {16660#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {16660#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,513 INFO L290 TraceCheckUtils]: 15: Hoare triple {16660#(= ~MPR1~0 |old(~s~0)|)} assume true; {16660#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,514 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {16660#(= ~MPR1~0 |old(~s~0)|)} {16646#(= ~SKIP1~0 ~s~0)} #775#return; {16658#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-27 15:03:27,514 INFO L290 TraceCheckUtils]: 17: Hoare triple {16658#(= ~MPR1~0 ~SKIP1~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {16658#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-27 15:03:27,514 INFO L290 TraceCheckUtils]: 18: Hoare triple {16658#(= ~MPR1~0 ~SKIP1~0)} assume true; {16658#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-27 15:03:27,515 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {16658#(= ~MPR1~0 ~SKIP1~0)} {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {16610#false} is VALID [2022-04-27 15:03:27,517 INFO L272 TraceCheckUtils]: 0: Hoare triple {16609#true} call ULTIMATE.init(); {16641#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:27,517 INFO L290 TraceCheckUtils]: 1: Hoare triple {16641#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {16609#true} is VALID [2022-04-27 15:03:27,517 INFO L290 TraceCheckUtils]: 2: Hoare triple {16609#true} assume true; {16609#true} is VALID [2022-04-27 15:03:27,517 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {16609#true} {16609#true} #783#return; {16609#true} is VALID [2022-04-27 15:03:27,517 INFO L272 TraceCheckUtils]: 4: Hoare triple {16609#true} call #t~ret81 := main(); {16609#true} is VALID [2022-04-27 15:03:27,517 INFO L290 TraceCheckUtils]: 5: Hoare triple {16609#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {16609#true} is VALID [2022-04-27 15:03:27,518 INFO L272 TraceCheckUtils]: 6: Hoare triple {16609#true} call _BLAST_init(); {16642#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,518 INFO L290 TraceCheckUtils]: 7: Hoare triple {16642#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16643#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-27 15:03:27,519 INFO L290 TraceCheckUtils]: 8: Hoare triple {16643#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} assume true; {16643#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} is VALID [2022-04-27 15:03:27,519 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {16643#(and (<= 5 ~MPR1~0) (= (+ ~SKIP1~0 (- 3)) 0))} {16609#true} #715#return; {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:27,520 INFO L290 TraceCheckUtils]: 10: Hoare triple {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:27,520 INFO L290 TraceCheckUtils]: 11: Hoare triple {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~irp_choice~0); {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:27,521 INFO L272 TraceCheckUtils]: 12: Hoare triple {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call stub_driver_init(); {16644#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,521 INFO L290 TraceCheckUtils]: 13: Hoare triple {16644#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {16609#true} is VALID [2022-04-27 15:03:27,521 INFO L290 TraceCheckUtils]: 14: Hoare triple {16609#true} assume true; {16609#true} is VALID [2022-04-27 15:03:27,521 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {16609#true} {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #717#return; {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:27,521 INFO L290 TraceCheckUtils]: 16: Hoare triple {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:27,522 INFO L290 TraceCheckUtils]: 17: Hoare triple {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:27,522 INFO L290 TraceCheckUtils]: 18: Hoare triple {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:27,522 INFO L290 TraceCheckUtils]: 19: Hoare triple {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:27,523 INFO L290 TraceCheckUtils]: 20: Hoare triple {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 4 == ~tmp_ndt_4~0; {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-04-27 15:03:27,523 INFO L272 TraceCheckUtils]: 21: Hoare triple {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {16645#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,524 INFO L290 TraceCheckUtils]: 22: Hoare triple {16645#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {16609#true} is VALID [2022-04-27 15:03:27,524 INFO L290 TraceCheckUtils]: 23: Hoare triple {16609#true} assume 2 == ~irpStack__MinorFunction~1; {16609#true} is VALID [2022-04-27 15:03:27,524 INFO L290 TraceCheckUtils]: 24: Hoare triple {16609#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {16609#true} is VALID [2022-04-27 15:03:27,524 INFO L290 TraceCheckUtils]: 25: Hoare triple {16609#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {16646#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:27,524 INFO L290 TraceCheckUtils]: 26: Hoare triple {16646#(= ~SKIP1~0 ~s~0)} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {16646#(= ~SKIP1~0 ~s~0)} is VALID [2022-04-27 15:03:27,525 INFO L272 TraceCheckUtils]: 27: Hoare triple {16646#(= ~SKIP1~0 ~s~0)} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {16645#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:27,525 INFO L290 TraceCheckUtils]: 28: Hoare triple {16645#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,525 INFO L290 TraceCheckUtils]: 29: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,526 INFO L290 TraceCheckUtils]: 30: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,526 INFO L290 TraceCheckUtils]: 31: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_9~0; {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,526 INFO L290 TraceCheckUtils]: 32: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} ~returnVal~0 := 0; {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,526 INFO L290 TraceCheckUtils]: 33: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~NP~0); {16659#(= ~s~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,527 INFO L290 TraceCheckUtils]: 34: Hoare triple {16659#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~MPR1~0;~__cil_tmp8~1 := ~returnVal~0; {16660#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,527 INFO L290 TraceCheckUtils]: 35: Hoare triple {16660#(= ~MPR1~0 |old(~s~0)|)} assume !(259 == ~__cil_tmp8~1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal~0; {16660#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,527 INFO L290 TraceCheckUtils]: 36: Hoare triple {16660#(= ~MPR1~0 |old(~s~0)|)} #res := ~returnVal~0; {16660#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,527 INFO L290 TraceCheckUtils]: 37: Hoare triple {16660#(= ~MPR1~0 |old(~s~0)|)} assume true; {16660#(= ~MPR1~0 |old(~s~0)|)} is VALID [2022-04-27 15:03:27,528 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {16660#(= ~MPR1~0 |old(~s~0)|)} {16646#(= ~SKIP1~0 ~s~0)} #775#return; {16658#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-27 15:03:27,528 INFO L290 TraceCheckUtils]: 39: Hoare triple {16658#(= ~MPR1~0 ~SKIP1~0)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {16658#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-27 15:03:27,529 INFO L290 TraceCheckUtils]: 40: Hoare triple {16658#(= ~MPR1~0 ~SKIP1~0)} assume true; {16658#(= ~MPR1~0 ~SKIP1~0)} is VALID [2022-04-27 15:03:27,529 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {16658#(= ~MPR1~0 ~SKIP1~0)} {16617#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} #725#return; {16610#false} is VALID [2022-04-27 15:03:27,529 INFO L290 TraceCheckUtils]: 42: Hoare triple {16610#false} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {16610#false} is VALID [2022-04-27 15:03:27,529 INFO L290 TraceCheckUtils]: 43: Hoare triple {16610#false} assume !(1 == ~pended~0); {16610#false} is VALID [2022-04-27 15:03:27,529 INFO L290 TraceCheckUtils]: 44: Hoare triple {16610#false} assume !(1 == ~pended~0); {16610#false} is VALID [2022-04-27 15:03:27,530 INFO L290 TraceCheckUtils]: 45: Hoare triple {16610#false} assume ~s~0 != ~UNLOADED~0; {16610#false} is VALID [2022-04-27 15:03:27,530 INFO L290 TraceCheckUtils]: 46: Hoare triple {16610#false} assume -1 != ~status~1; {16610#false} is VALID [2022-04-27 15:03:27,530 INFO L290 TraceCheckUtils]: 47: Hoare triple {16610#false} assume !(~s~0 != ~SKIP2~0); {16610#false} is VALID [2022-04-27 15:03:27,530 INFO L290 TraceCheckUtils]: 48: Hoare triple {16610#false} assume !(1 == ~pended~0); {16610#false} is VALID [2022-04-27 15:03:27,530 INFO L290 TraceCheckUtils]: 49: Hoare triple {16610#false} assume !(~s~0 == ~DC~0); {16610#false} is VALID [2022-04-27 15:03:27,530 INFO L290 TraceCheckUtils]: 50: Hoare triple {16610#false} assume ~status~1 != ~lowerDriverReturn~0; {16610#false} is VALID [2022-04-27 15:03:27,530 INFO L272 TraceCheckUtils]: 51: Hoare triple {16610#false} call errorFn(); {16610#false} is VALID [2022-04-27 15:03:27,530 INFO L290 TraceCheckUtils]: 52: Hoare triple {16610#false} assume !false; {16610#false} is VALID [2022-04-27 15:03:27,530 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:27,530 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:27,530 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [35844059] [2022-04-27 15:03:27,530 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [35844059] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:27,530 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:27,530 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-27 15:03:27,530 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1255989956] [2022-04-27 15:03:27,531 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:27,531 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 53 [2022-04-27 15:03:27,531 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:27,531 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-27 15:03:27,569 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:27,569 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-27 15:03:27,569 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:27,570 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-27 15:03:27,570 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:27,570 INFO L87 Difference]: Start difference. First operand 243 states and 319 transitions. Second operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-27 15:03:29,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:29,700 INFO L93 Difference]: Finished difference Result 284 states and 365 transitions. [2022-04-27 15:03:29,701 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-27 15:03:29,701 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 53 [2022-04-27 15:03:29,701 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:29,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-27 15:03:29,704 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 347 transitions. [2022-04-27 15:03:29,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-27 15:03:29,707 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 347 transitions. [2022-04-27 15:03:29,707 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 347 transitions. [2022-04-27 15:03:30,034 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 347 edges. 347 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:30,038 INFO L225 Difference]: With dead ends: 284 [2022-04-27 15:03:30,038 INFO L226 Difference]: Without dead ends: 240 [2022-04-27 15:03:30,039 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=101, Invalid=279, Unknown=0, NotChecked=0, Total=380 [2022-04-27 15:03:30,039 INFO L413 NwaCegarLoop]: 234 mSDtfsCounter, 595 mSDsluCounter, 317 mSDsCounter, 0 mSdLazyCounter, 765 mSolverCounterSat, 103 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 596 SdHoareTripleChecker+Valid, 551 SdHoareTripleChecker+Invalid, 868 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 103 IncrementalHoareTripleChecker+Valid, 765 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:30,039 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [596 Valid, 551 Invalid, 868 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [103 Valid, 765 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-27 15:03:30,040 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2022-04-27 15:03:30,172 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 238. [2022-04-27 15:03:30,172 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:30,172 INFO L82 GeneralOperation]: Start isEquivalent. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:30,173 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:30,173 INFO L87 Difference]: Start difference. First operand 240 states. Second operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:30,176 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:30,177 INFO L93 Difference]: Finished difference Result 240 states and 311 transitions. [2022-04-27 15:03:30,177 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 311 transitions. [2022-04-27 15:03:30,177 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:30,177 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:30,177 INFO L74 IsIncluded]: Start isIncluded. First operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-27 15:03:30,178 INFO L87 Difference]: Start difference. First operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) Second operand 240 states. [2022-04-27 15:03:30,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:30,181 INFO L93 Difference]: Finished difference Result 240 states and 311 transitions. [2022-04-27 15:03:30,181 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 311 transitions. [2022-04-27 15:03:30,182 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:30,182 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:30,182 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:30,182 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:30,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 238 states, 195 states have (on average 1.3435897435897435) internal successors, (262), 197 states have internal predecessors, (262), 26 states have call successors, (26), 19 states have call predecessors, (26), 16 states have return successors, (21), 21 states have call predecessors, (21), 20 states have call successors, (21) [2022-04-27 15:03:30,186 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 238 states to 238 states and 309 transitions. [2022-04-27 15:03:30,186 INFO L78 Accepts]: Start accepts. Automaton has 238 states and 309 transitions. Word has length 53 [2022-04-27 15:03:30,186 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:30,187 INFO L495 AbstractCegarLoop]: Abstraction has 238 states and 309 transitions. [2022-04-27 15:03:30,187 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 8 states have internal predecessors, (41), 4 states have call successors, (7), 6 states have call predecessors, (7), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-04-27 15:03:30,187 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 309 transitions. [2022-04-27 15:03:30,187 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-27 15:03:30,187 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:30,187 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:30,188 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-04-27 15:03:30,188 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:30,188 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:30,188 INFO L85 PathProgramCache]: Analyzing trace with hash -1386969835, now seen corresponding path program 1 times [2022-04-27 15:03:30,188 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:30,188 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1672011064] [2022-04-27 15:03:30,188 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:30,188 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:30,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:30,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:30,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:30,250 INFO L290 TraceCheckUtils]: 0: Hoare triple {17888#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {17855#true} is VALID [2022-04-27 15:03:30,251 INFO L290 TraceCheckUtils]: 1: Hoare triple {17855#true} assume true; {17855#true} is VALID [2022-04-27 15:03:30,251 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17855#true} {17855#true} #783#return; {17855#true} is VALID [2022-04-27 15:03:30,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:30,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:30,274 INFO L290 TraceCheckUtils]: 0: Hoare triple {17889#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17855#true} is VALID [2022-04-27 15:03:30,274 INFO L290 TraceCheckUtils]: 1: Hoare triple {17855#true} assume true; {17855#true} is VALID [2022-04-27 15:03:30,274 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17855#true} {17855#true} #715#return; {17855#true} is VALID [2022-04-27 15:03:30,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:30,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:30,288 INFO L290 TraceCheckUtils]: 0: Hoare triple {17890#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17855#true} is VALID [2022-04-27 15:03:30,288 INFO L290 TraceCheckUtils]: 1: Hoare triple {17855#true} assume true; {17855#true} is VALID [2022-04-27 15:03:30,288 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17855#true} {17855#true} #717#return; {17855#true} is VALID [2022-04-27 15:03:30,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-04-27 15:03:30,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:30,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-04-27 15:03:30,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:30,335 INFO L290 TraceCheckUtils]: 0: Hoare triple {17891#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {17855#true} is VALID [2022-04-27 15:03:30,335 INFO L290 TraceCheckUtils]: 1: Hoare triple {17855#true} assume !(0 != ~compRegistered~0); {17855#true} is VALID [2022-04-27 15:03:30,335 INFO L290 TraceCheckUtils]: 2: Hoare triple {17855#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {17855#true} is VALID [2022-04-27 15:03:30,335 INFO L290 TraceCheckUtils]: 3: Hoare triple {17855#true} assume 0 == ~tmp_ndt_9~0; {17855#true} is VALID [2022-04-27 15:03:30,335 INFO L290 TraceCheckUtils]: 4: Hoare triple {17855#true} ~returnVal~0 := 0; {17855#true} is VALID [2022-04-27 15:03:30,335 INFO L290 TraceCheckUtils]: 5: Hoare triple {17855#true} assume !(~s~0 == ~NP~0); {17855#true} is VALID [2022-04-27 15:03:30,335 INFO L290 TraceCheckUtils]: 6: Hoare triple {17855#true} assume !(~s~0 == ~MPR1~0); {17855#true} is VALID [2022-04-27 15:03:30,336 INFO L290 TraceCheckUtils]: 7: Hoare triple {17855#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {17905#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-27 15:03:30,336 INFO L290 TraceCheckUtils]: 8: Hoare triple {17905#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {17906#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,336 INFO L290 TraceCheckUtils]: 9: Hoare triple {17906#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {17906#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,348 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {17906#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {17855#true} #775#return; {17903#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-27 15:03:30,349 INFO L290 TraceCheckUtils]: 0: Hoare triple {17891#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {17855#true} is VALID [2022-04-27 15:03:30,349 INFO L290 TraceCheckUtils]: 1: Hoare triple {17855#true} assume 2 == ~irpStack__MinorFunction~1; {17855#true} is VALID [2022-04-27 15:03:30,349 INFO L290 TraceCheckUtils]: 2: Hoare triple {17855#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {17855#true} is VALID [2022-04-27 15:03:30,349 INFO L290 TraceCheckUtils]: 3: Hoare triple {17855#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {17855#true} is VALID [2022-04-27 15:03:30,349 INFO L290 TraceCheckUtils]: 4: Hoare triple {17855#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {17855#true} is VALID [2022-04-27 15:03:30,349 INFO L272 TraceCheckUtils]: 5: Hoare triple {17855#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {17891#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:30,349 INFO L290 TraceCheckUtils]: 6: Hoare triple {17891#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {17855#true} is VALID [2022-04-27 15:03:30,350 INFO L290 TraceCheckUtils]: 7: Hoare triple {17855#true} assume !(0 != ~compRegistered~0); {17855#true} is VALID [2022-04-27 15:03:30,350 INFO L290 TraceCheckUtils]: 8: Hoare triple {17855#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {17855#true} is VALID [2022-04-27 15:03:30,350 INFO L290 TraceCheckUtils]: 9: Hoare triple {17855#true} assume 0 == ~tmp_ndt_9~0; {17855#true} is VALID [2022-04-27 15:03:30,350 INFO L290 TraceCheckUtils]: 10: Hoare triple {17855#true} ~returnVal~0 := 0; {17855#true} is VALID [2022-04-27 15:03:30,350 INFO L290 TraceCheckUtils]: 11: Hoare triple {17855#true} assume !(~s~0 == ~NP~0); {17855#true} is VALID [2022-04-27 15:03:30,350 INFO L290 TraceCheckUtils]: 12: Hoare triple {17855#true} assume !(~s~0 == ~MPR1~0); {17855#true} is VALID [2022-04-27 15:03:30,350 INFO L290 TraceCheckUtils]: 13: Hoare triple {17855#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {17905#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-27 15:03:30,350 INFO L290 TraceCheckUtils]: 14: Hoare triple {17905#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {17906#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,351 INFO L290 TraceCheckUtils]: 15: Hoare triple {17906#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {17906#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,351 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {17906#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {17855#true} #775#return; {17903#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-27 15:03:30,351 INFO L290 TraceCheckUtils]: 17: Hoare triple {17903#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {17904#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,352 INFO L290 TraceCheckUtils]: 18: Hoare triple {17904#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} assume true; {17904#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,352 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {17904#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} {17855#true} #725#return; {17886#(= |main_#t~ret32| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,353 INFO L272 TraceCheckUtils]: 0: Hoare triple {17855#true} call ULTIMATE.init(); {17888#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:30,353 INFO L290 TraceCheckUtils]: 1: Hoare triple {17888#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {17855#true} is VALID [2022-04-27 15:03:30,354 INFO L290 TraceCheckUtils]: 2: Hoare triple {17855#true} assume true; {17855#true} is VALID [2022-04-27 15:03:30,354 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {17855#true} {17855#true} #783#return; {17855#true} is VALID [2022-04-27 15:03:30,354 INFO L272 TraceCheckUtils]: 4: Hoare triple {17855#true} call #t~ret81 := main(); {17855#true} is VALID [2022-04-27 15:03:30,354 INFO L290 TraceCheckUtils]: 5: Hoare triple {17855#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {17855#true} is VALID [2022-04-27 15:03:30,355 INFO L272 TraceCheckUtils]: 6: Hoare triple {17855#true} call _BLAST_init(); {17889#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:30,355 INFO L290 TraceCheckUtils]: 7: Hoare triple {17889#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17855#true} is VALID [2022-04-27 15:03:30,355 INFO L290 TraceCheckUtils]: 8: Hoare triple {17855#true} assume true; {17855#true} is VALID [2022-04-27 15:03:30,355 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {17855#true} {17855#true} #715#return; {17855#true} is VALID [2022-04-27 15:03:30,355 INFO L290 TraceCheckUtils]: 10: Hoare triple {17855#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {17855#true} is VALID [2022-04-27 15:03:30,355 INFO L290 TraceCheckUtils]: 11: Hoare triple {17855#true} assume !(0 == ~irp_choice~0); {17855#true} is VALID [2022-04-27 15:03:30,355 INFO L272 TraceCheckUtils]: 12: Hoare triple {17855#true} call stub_driver_init(); {17890#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:30,355 INFO L290 TraceCheckUtils]: 13: Hoare triple {17890#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {17855#true} is VALID [2022-04-27 15:03:30,355 INFO L290 TraceCheckUtils]: 14: Hoare triple {17855#true} assume true; {17855#true} is VALID [2022-04-27 15:03:30,355 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {17855#true} {17855#true} #717#return; {17855#true} is VALID [2022-04-27 15:03:30,356 INFO L290 TraceCheckUtils]: 16: Hoare triple {17855#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {17855#true} is VALID [2022-04-27 15:03:30,356 INFO L290 TraceCheckUtils]: 17: Hoare triple {17855#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {17855#true} is VALID [2022-04-27 15:03:30,356 INFO L290 TraceCheckUtils]: 18: Hoare triple {17855#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {17855#true} is VALID [2022-04-27 15:03:30,356 INFO L290 TraceCheckUtils]: 19: Hoare triple {17855#true} assume !(3 == ~tmp_ndt_3~0);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet27 && #t~nondet27 <= 2147483647;~tmp_ndt_4~0 := #t~nondet27;havoc #t~nondet27; {17855#true} is VALID [2022-04-27 15:03:30,356 INFO L290 TraceCheckUtils]: 20: Hoare triple {17855#true} assume 4 == ~tmp_ndt_4~0; {17855#true} is VALID [2022-04-27 15:03:30,356 INFO L272 TraceCheckUtils]: 21: Hoare triple {17855#true} call #t~ret32 := KbFilter_Power(~devobj~0, ~pirp~0); {17891#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:30,356 INFO L290 TraceCheckUtils]: 22: Hoare triple {17891#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet50 && #t~nondet50 <= 2147483647;~irpStack__MinorFunction~1 := #t~nondet50;havoc #t~nondet50;havoc ~devExt__DeviceState~0;assume -2147483648 <= #t~nondet51 && #t~nondet51 <= 2147483647;~powerState__DeviceState~0 := #t~nondet51;havoc #t~nondet51;assume -2147483648 <= #t~nondet52 && #t~nondet52 <= 2147483647;~Irp__CurrentLocation~2 := #t~nondet52;havoc #t~nondet52;assume -2147483648 <= #t~nondet53 && #t~nondet53 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~2 := #t~nondet53;havoc #t~nondet53;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~devExt__TopOfStack~1 := #t~nondet54;havoc #t~nondet54;assume -2147483648 <= #t~nondet55 && #t~nondet55 <= 2147483647;~powerType~0 := #t~nondet55;havoc #t~nondet55;havoc ~tmp~2; {17855#true} is VALID [2022-04-27 15:03:30,356 INFO L290 TraceCheckUtils]: 23: Hoare triple {17855#true} assume 2 == ~irpStack__MinorFunction~1; {17855#true} is VALID [2022-04-27 15:03:30,356 INFO L290 TraceCheckUtils]: 24: Hoare triple {17855#true} assume ~powerType~0 == ~DevicePowerState~0;~devExt__DeviceState~0 := ~powerState__DeviceState~0; {17855#true} is VALID [2022-04-27 15:03:30,356 INFO L290 TraceCheckUtils]: 25: Hoare triple {17855#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {17855#true} is VALID [2022-04-27 15:03:30,356 INFO L290 TraceCheckUtils]: 26: Hoare triple {17855#true} #t~post56 := ~Irp__CurrentLocation~2;~Irp__CurrentLocation~2 := 1 + #t~post56;havoc #t~post56;#t~post57 := ~Irp__Tail__Overlay__CurrentStackLocation~2;~Irp__Tail__Overlay__CurrentStackLocation~2 := 1 + #t~post57;havoc #t~post57; {17855#true} is VALID [2022-04-27 15:03:30,357 INFO L272 TraceCheckUtils]: 27: Hoare triple {17855#true} call #t~ret58 := PoCallDriver(~devExt__TopOfStack~1, ~Irp); {17891#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:30,357 INFO L290 TraceCheckUtils]: 28: Hoare triple {17891#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~compRetStatus~1;havoc ~returnVal~0;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~lcontext~1 := #t~nondet59;havoc #t~nondet59;havoc ~__cil_tmp7~1;havoc ~__cil_tmp8~1; {17855#true} is VALID [2022-04-27 15:03:30,357 INFO L290 TraceCheckUtils]: 29: Hoare triple {17855#true} assume !(0 != ~compRegistered~0); {17855#true} is VALID [2022-04-27 15:03:30,357 INFO L290 TraceCheckUtils]: 30: Hoare triple {17855#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp_ndt_9~0 := #t~nondet61;havoc #t~nondet61; {17855#true} is VALID [2022-04-27 15:03:30,357 INFO L290 TraceCheckUtils]: 31: Hoare triple {17855#true} assume 0 == ~tmp_ndt_9~0; {17855#true} is VALID [2022-04-27 15:03:30,357 INFO L290 TraceCheckUtils]: 32: Hoare triple {17855#true} ~returnVal~0 := 0; {17855#true} is VALID [2022-04-27 15:03:30,357 INFO L290 TraceCheckUtils]: 33: Hoare triple {17855#true} assume !(~s~0 == ~NP~0); {17855#true} is VALID [2022-04-27 15:03:30,357 INFO L290 TraceCheckUtils]: 34: Hoare triple {17855#true} assume !(~s~0 == ~MPR1~0); {17855#true} is VALID [2022-04-27 15:03:30,358 INFO L290 TraceCheckUtils]: 35: Hoare triple {17855#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal~0; {17905#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} is VALID [2022-04-27 15:03:30,358 INFO L290 TraceCheckUtils]: 36: Hoare triple {17905#(= ~lowerDriverReturn~0 PoCallDriver_~returnVal~0)} #res := ~returnVal~0; {17906#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,358 INFO L290 TraceCheckUtils]: 37: Hoare triple {17906#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} assume true; {17906#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,359 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {17906#(= |PoCallDriver_#res| ~lowerDriverReturn~0)} {17855#true} #775#return; {17903#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} is VALID [2022-04-27 15:03:30,359 INFO L290 TraceCheckUtils]: 39: Hoare triple {17903#(= ~lowerDriverReturn~0 |KbFilter_Power_#t~ret58|)} assume -2147483648 <= #t~ret58 && #t~ret58 <= 2147483647;~tmp~2 := #t~ret58;havoc #t~ret58;#res := ~tmp~2; {17904#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,359 INFO L290 TraceCheckUtils]: 40: Hoare triple {17904#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} assume true; {17904#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,360 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {17904#(= |KbFilter_Power_#res| ~lowerDriverReturn~0)} {17855#true} #725#return; {17886#(= |main_#t~ret32| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,360 INFO L290 TraceCheckUtils]: 42: Hoare triple {17886#(= |main_#t~ret32| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret32 && #t~ret32 <= 2147483647;~status~1 := #t~ret32;havoc #t~ret32; {17887#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,360 INFO L290 TraceCheckUtils]: 43: Hoare triple {17887#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {17887#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,361 INFO L290 TraceCheckUtils]: 44: Hoare triple {17887#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {17887#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,361 INFO L290 TraceCheckUtils]: 45: Hoare triple {17887#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {17887#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,361 INFO L290 TraceCheckUtils]: 46: Hoare triple {17887#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {17887#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,362 INFO L290 TraceCheckUtils]: 47: Hoare triple {17887#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {17887#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,362 INFO L290 TraceCheckUtils]: 48: Hoare triple {17887#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {17887#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,362 INFO L290 TraceCheckUtils]: 49: Hoare triple {17887#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {17887#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:30,362 INFO L290 TraceCheckUtils]: 50: Hoare triple {17887#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {17856#false} is VALID [2022-04-27 15:03:30,362 INFO L272 TraceCheckUtils]: 51: Hoare triple {17856#false} call errorFn(); {17856#false} is VALID [2022-04-27 15:03:30,362 INFO L290 TraceCheckUtils]: 52: Hoare triple {17856#false} assume !false; {17856#false} is VALID [2022-04-27 15:03:30,363 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:30,363 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:30,363 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1672011064] [2022-04-27 15:03:30,363 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1672011064] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:30,363 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:30,363 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-27 15:03:30,363 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [260620293] [2022-04-27 15:03:30,363 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:30,364 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 53 [2022-04-27 15:03:30,364 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:30,364 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:30,397 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:30,397 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-27 15:03:30,397 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:30,398 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-27 15:03:30,398 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=105, Unknown=0, NotChecked=0, Total=132 [2022-04-27 15:03:30,398 INFO L87 Difference]: Start difference. First operand 238 states and 309 transitions. Second operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:32,836 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:32,838 INFO L93 Difference]: Finished difference Result 250 states and 321 transitions. [2022-04-27 15:03:32,838 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-04-27 15:03:32,838 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 53 [2022-04-27 15:03:32,838 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:32,838 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:32,840 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 297 transitions. [2022-04-27 15:03:32,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:32,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 297 transitions. [2022-04-27 15:03:32,842 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 11 states and 297 transitions. [2022-04-27 15:03:33,104 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 297 edges. 297 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:33,107 INFO L225 Difference]: With dead ends: 250 [2022-04-27 15:03:33,107 INFO L226 Difference]: Without dead ends: 210 [2022-04-27 15:03:33,108 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2022-04-27 15:03:33,108 INFO L413 NwaCegarLoop]: 244 mSDtfsCounter, 148 mSDsluCounter, 662 mSDsCounter, 0 mSdLazyCounter, 1367 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 148 SdHoareTripleChecker+Valid, 906 SdHoareTripleChecker+Invalid, 1394 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 1367 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:33,108 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [148 Valid, 906 Invalid, 1394 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 1367 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-04-27 15:03:33,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-04-27 15:03:33,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 210. [2022-04-27 15:03:33,215 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:33,216 INFO L82 GeneralOperation]: Start isEquivalent. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-27 15:03:33,216 INFO L74 IsIncluded]: Start isIncluded. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-27 15:03:33,216 INFO L87 Difference]: Start difference. First operand 210 states. Second operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-27 15:03:33,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:33,219 INFO L93 Difference]: Finished difference Result 210 states and 273 transitions. [2022-04-27 15:03:33,219 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-27 15:03:33,220 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:33,220 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:33,220 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) Second operand 210 states. [2022-04-27 15:03:33,220 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) Second operand 210 states. [2022-04-27 15:03:33,223 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:33,223 INFO L93 Difference]: Finished difference Result 210 states and 273 transitions. [2022-04-27 15:03:33,223 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-27 15:03:33,224 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:33,224 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:33,224 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:33,224 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:33,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.345029239766082) internal successors, (230), 173 states have internal predecessors, (230), 24 states have call successors, (24), 17 states have call predecessors, (24), 14 states have return successors, (19), 19 states have call predecessors, (19), 18 states have call successors, (19) [2022-04-27 15:03:33,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 273 transitions. [2022-04-27 15:03:33,227 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 273 transitions. Word has length 53 [2022-04-27 15:03:33,227 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:33,228 INFO L495 AbstractCegarLoop]: Abstraction has 210 states and 273 transitions. [2022-04-27 15:03:33,228 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.4166666666666665) internal successors, (41), 6 states have internal predecessors, (41), 2 states have call successors, (7), 6 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:33,228 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 273 transitions. [2022-04-27 15:03:33,228 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-04-27 15:03:33,228 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:33,228 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:33,228 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-04-27 15:03:33,228 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:33,229 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:33,229 INFO L85 PathProgramCache]: Analyzing trace with hash -438914869, now seen corresponding path program 1 times [2022-04-27 15:03:33,229 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:33,229 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2003986991] [2022-04-27 15:03:33,229 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:33,229 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:33,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:33,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:33,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:33,292 INFO L290 TraceCheckUtils]: 0: Hoare triple {18986#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18951#true} is VALID [2022-04-27 15:03:33,292 INFO L290 TraceCheckUtils]: 1: Hoare triple {18951#true} assume true; {18951#true} is VALID [2022-04-27 15:03:33,292 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18951#true} {18951#true} #783#return; {18951#true} is VALID [2022-04-27 15:03:33,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:33,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:33,316 INFO L290 TraceCheckUtils]: 0: Hoare triple {18987#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18951#true} is VALID [2022-04-27 15:03:33,316 INFO L290 TraceCheckUtils]: 1: Hoare triple {18951#true} assume true; {18951#true} is VALID [2022-04-27 15:03:33,316 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18951#true} {18951#true} #715#return; {18951#true} is VALID [2022-04-27 15:03:33,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:33,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:33,330 INFO L290 TraceCheckUtils]: 0: Hoare triple {18988#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18951#true} is VALID [2022-04-27 15:03:33,330 INFO L290 TraceCheckUtils]: 1: Hoare triple {18951#true} assume true; {18951#true} is VALID [2022-04-27 15:03:33,331 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18951#true} {18951#true} #717#return; {18951#true} is VALID [2022-04-27 15:03:33,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-27 15:03:33,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:33,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:33,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:33,405 INFO L290 TraceCheckUtils]: 0: Hoare triple {19004#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {18951#true} is VALID [2022-04-27 15:03:33,405 INFO L290 TraceCheckUtils]: 1: Hoare triple {18951#true} assume !(0 != ~compRegistered~0); {18951#true} is VALID [2022-04-27 15:03:33,405 INFO L290 TraceCheckUtils]: 2: Hoare triple {18951#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {18951#true} is VALID [2022-04-27 15:03:33,405 INFO L290 TraceCheckUtils]: 3: Hoare triple {18951#true} assume 0 == ~tmp_ndt_6~0; {18951#true} is VALID [2022-04-27 15:03:33,405 INFO L290 TraceCheckUtils]: 4: Hoare triple {18951#true} ~returnVal2~0 := 0; {18951#true} is VALID [2022-04-27 15:03:33,405 INFO L290 TraceCheckUtils]: 5: Hoare triple {18951#true} assume !(~s~0 == ~NP~0); {18951#true} is VALID [2022-04-27 15:03:33,405 INFO L290 TraceCheckUtils]: 6: Hoare triple {18951#true} assume !(~s~0 == ~MPR1~0); {18951#true} is VALID [2022-04-27 15:03:33,406 INFO L290 TraceCheckUtils]: 7: Hoare triple {18951#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {19005#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:33,406 INFO L290 TraceCheckUtils]: 8: Hoare triple {19005#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {19006#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,406 INFO L290 TraceCheckUtils]: 9: Hoare triple {19006#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {19006#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,407 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {19006#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {18951#true} #763#return; {19001#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,407 INFO L290 TraceCheckUtils]: 0: Hoare triple {18989#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {18951#true} is VALID [2022-04-27 15:03:33,407 INFO L290 TraceCheckUtils]: 1: Hoare triple {18951#true} assume !(0 == ~irpStack__MinorFunction~0); {18951#true} is VALID [2022-04-27 15:03:33,407 INFO L290 TraceCheckUtils]: 2: Hoare triple {18951#true} assume 23 == ~irpStack__MinorFunction~0; {18951#true} is VALID [2022-04-27 15:03:33,407 INFO L290 TraceCheckUtils]: 3: Hoare triple {18951#true} ~devExt__SurpriseRemoved~0 := 1; {18951#true} is VALID [2022-04-27 15:03:33,407 INFO L290 TraceCheckUtils]: 4: Hoare triple {18951#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {18951#true} is VALID [2022-04-27 15:03:33,407 INFO L290 TraceCheckUtils]: 5: Hoare triple {18951#true} #t~post12 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post12;havoc #t~post12;#t~post13 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post13;havoc #t~post13; {18951#true} is VALID [2022-04-27 15:03:33,408 INFO L272 TraceCheckUtils]: 6: Hoare triple {18951#true} call #t~ret14 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {19004#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:33,408 INFO L290 TraceCheckUtils]: 7: Hoare triple {19004#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {18951#true} is VALID [2022-04-27 15:03:33,408 INFO L290 TraceCheckUtils]: 8: Hoare triple {18951#true} assume !(0 != ~compRegistered~0); {18951#true} is VALID [2022-04-27 15:03:33,408 INFO L290 TraceCheckUtils]: 9: Hoare triple {18951#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {18951#true} is VALID [2022-04-27 15:03:33,408 INFO L290 TraceCheckUtils]: 10: Hoare triple {18951#true} assume 0 == ~tmp_ndt_6~0; {18951#true} is VALID [2022-04-27 15:03:33,408 INFO L290 TraceCheckUtils]: 11: Hoare triple {18951#true} ~returnVal2~0 := 0; {18951#true} is VALID [2022-04-27 15:03:33,408 INFO L290 TraceCheckUtils]: 12: Hoare triple {18951#true} assume !(~s~0 == ~NP~0); {18951#true} is VALID [2022-04-27 15:03:33,408 INFO L290 TraceCheckUtils]: 13: Hoare triple {18951#true} assume !(~s~0 == ~MPR1~0); {18951#true} is VALID [2022-04-27 15:03:33,409 INFO L290 TraceCheckUtils]: 14: Hoare triple {18951#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {19005#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:33,409 INFO L290 TraceCheckUtils]: 15: Hoare triple {19005#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {19006#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,409 INFO L290 TraceCheckUtils]: 16: Hoare triple {19006#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {19006#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,410 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {19006#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {18951#true} #763#return; {19001#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,410 INFO L290 TraceCheckUtils]: 18: Hoare triple {19001#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;~status~0 := #t~ret14;havoc #t~ret14; {19002#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,410 INFO L290 TraceCheckUtils]: 19: Hoare triple {19002#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {19003#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,411 INFO L290 TraceCheckUtils]: 20: Hoare triple {19003#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {19003#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,411 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {19003#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {18951#true} #723#return; {18984#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,413 INFO L272 TraceCheckUtils]: 0: Hoare triple {18951#true} call ULTIMATE.init(); {18986#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:33,413 INFO L290 TraceCheckUtils]: 1: Hoare triple {18986#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {18951#true} is VALID [2022-04-27 15:03:33,413 INFO L290 TraceCheckUtils]: 2: Hoare triple {18951#true} assume true; {18951#true} is VALID [2022-04-27 15:03:33,413 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {18951#true} {18951#true} #783#return; {18951#true} is VALID [2022-04-27 15:03:33,413 INFO L272 TraceCheckUtils]: 4: Hoare triple {18951#true} call #t~ret81 := main(); {18951#true} is VALID [2022-04-27 15:03:33,413 INFO L290 TraceCheckUtils]: 5: Hoare triple {18951#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {18951#true} is VALID [2022-04-27 15:03:33,414 INFO L272 TraceCheckUtils]: 6: Hoare triple {18951#true} call _BLAST_init(); {18987#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:33,414 INFO L290 TraceCheckUtils]: 7: Hoare triple {18987#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18951#true} is VALID [2022-04-27 15:03:33,414 INFO L290 TraceCheckUtils]: 8: Hoare triple {18951#true} assume true; {18951#true} is VALID [2022-04-27 15:03:33,414 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {18951#true} {18951#true} #715#return; {18951#true} is VALID [2022-04-27 15:03:33,414 INFO L290 TraceCheckUtils]: 10: Hoare triple {18951#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {18951#true} is VALID [2022-04-27 15:03:33,414 INFO L290 TraceCheckUtils]: 11: Hoare triple {18951#true} assume !(0 == ~irp_choice~0); {18951#true} is VALID [2022-04-27 15:03:33,415 INFO L272 TraceCheckUtils]: 12: Hoare triple {18951#true} call stub_driver_init(); {18988#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:33,415 INFO L290 TraceCheckUtils]: 13: Hoare triple {18988#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18951#true} is VALID [2022-04-27 15:03:33,415 INFO L290 TraceCheckUtils]: 14: Hoare triple {18951#true} assume true; {18951#true} is VALID [2022-04-27 15:03:33,415 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {18951#true} {18951#true} #717#return; {18951#true} is VALID [2022-04-27 15:03:33,415 INFO L290 TraceCheckUtils]: 16: Hoare triple {18951#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {18951#true} is VALID [2022-04-27 15:03:33,415 INFO L290 TraceCheckUtils]: 17: Hoare triple {18951#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {18951#true} is VALID [2022-04-27 15:03:33,415 INFO L290 TraceCheckUtils]: 18: Hoare triple {18951#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {18951#true} is VALID [2022-04-27 15:03:33,415 INFO L290 TraceCheckUtils]: 19: Hoare triple {18951#true} assume 3 == ~tmp_ndt_3~0; {18951#true} is VALID [2022-04-27 15:03:33,416 INFO L272 TraceCheckUtils]: 20: Hoare triple {18951#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {18989#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:33,416 INFO L290 TraceCheckUtils]: 21: Hoare triple {18989#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {18951#true} is VALID [2022-04-27 15:03:33,416 INFO L290 TraceCheckUtils]: 22: Hoare triple {18951#true} assume !(0 == ~irpStack__MinorFunction~0); {18951#true} is VALID [2022-04-27 15:03:33,416 INFO L290 TraceCheckUtils]: 23: Hoare triple {18951#true} assume 23 == ~irpStack__MinorFunction~0; {18951#true} is VALID [2022-04-27 15:03:33,416 INFO L290 TraceCheckUtils]: 24: Hoare triple {18951#true} ~devExt__SurpriseRemoved~0 := 1; {18951#true} is VALID [2022-04-27 15:03:33,416 INFO L290 TraceCheckUtils]: 25: Hoare triple {18951#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {18951#true} is VALID [2022-04-27 15:03:33,416 INFO L290 TraceCheckUtils]: 26: Hoare triple {18951#true} #t~post12 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post12;havoc #t~post12;#t~post13 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post13;havoc #t~post13; {18951#true} is VALID [2022-04-27 15:03:33,417 INFO L272 TraceCheckUtils]: 27: Hoare triple {18951#true} call #t~ret14 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {19004#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:33,417 INFO L290 TraceCheckUtils]: 28: Hoare triple {19004#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {18951#true} is VALID [2022-04-27 15:03:33,417 INFO L290 TraceCheckUtils]: 29: Hoare triple {18951#true} assume !(0 != ~compRegistered~0); {18951#true} is VALID [2022-04-27 15:03:33,417 INFO L290 TraceCheckUtils]: 30: Hoare triple {18951#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {18951#true} is VALID [2022-04-27 15:03:33,417 INFO L290 TraceCheckUtils]: 31: Hoare triple {18951#true} assume 0 == ~tmp_ndt_6~0; {18951#true} is VALID [2022-04-27 15:03:33,417 INFO L290 TraceCheckUtils]: 32: Hoare triple {18951#true} ~returnVal2~0 := 0; {18951#true} is VALID [2022-04-27 15:03:33,417 INFO L290 TraceCheckUtils]: 33: Hoare triple {18951#true} assume !(~s~0 == ~NP~0); {18951#true} is VALID [2022-04-27 15:03:33,417 INFO L290 TraceCheckUtils]: 34: Hoare triple {18951#true} assume !(~s~0 == ~MPR1~0); {18951#true} is VALID [2022-04-27 15:03:33,418 INFO L290 TraceCheckUtils]: 35: Hoare triple {18951#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {19005#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:33,418 INFO L290 TraceCheckUtils]: 36: Hoare triple {19005#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {19006#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,418 INFO L290 TraceCheckUtils]: 37: Hoare triple {19006#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {19006#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,419 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {19006#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {18951#true} #763#return; {19001#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,419 INFO L290 TraceCheckUtils]: 39: Hoare triple {19001#(= |KbFilter_PnP_#t~ret14| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;~status~0 := #t~ret14;havoc #t~ret14; {19002#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,419 INFO L290 TraceCheckUtils]: 40: Hoare triple {19002#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {19003#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,420 INFO L290 TraceCheckUtils]: 41: Hoare triple {19003#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {19003#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,420 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {19003#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {18951#true} #723#return; {18984#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,421 INFO L290 TraceCheckUtils]: 43: Hoare triple {18984#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {18985#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,421 INFO L290 TraceCheckUtils]: 44: Hoare triple {18985#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {18985#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,421 INFO L290 TraceCheckUtils]: 45: Hoare triple {18985#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {18985#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,421 INFO L290 TraceCheckUtils]: 46: Hoare triple {18985#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {18985#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,422 INFO L290 TraceCheckUtils]: 47: Hoare triple {18985#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {18985#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,422 INFO L290 TraceCheckUtils]: 48: Hoare triple {18985#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {18985#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,422 INFO L290 TraceCheckUtils]: 49: Hoare triple {18985#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {18985#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,422 INFO L290 TraceCheckUtils]: 50: Hoare triple {18985#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {18985#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:33,423 INFO L290 TraceCheckUtils]: 51: Hoare triple {18985#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {18952#false} is VALID [2022-04-27 15:03:33,423 INFO L272 TraceCheckUtils]: 52: Hoare triple {18952#false} call errorFn(); {18952#false} is VALID [2022-04-27 15:03:33,423 INFO L290 TraceCheckUtils]: 53: Hoare triple {18952#false} assume !false; {18952#false} is VALID [2022-04-27 15:03:33,423 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:33,423 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:33,423 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2003986991] [2022-04-27 15:03:33,423 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2003986991] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:33,423 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:33,423 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-27 15:03:33,423 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [182862449] [2022-04-27 15:03:33,423 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:33,424 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 54 [2022-04-27 15:03:33,424 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:33,424 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:33,460 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 54 edges. 54 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:33,460 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-27 15:03:33,460 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:33,461 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-27 15:03:33,461 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-04-27 15:03:33,461 INFO L87 Difference]: Start difference. First operand 210 states and 273 transitions. Second operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:35,796 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:35,796 INFO L93 Difference]: Finished difference Result 226 states and 289 transitions. [2022-04-27 15:03:35,796 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-27 15:03:35,796 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 54 [2022-04-27 15:03:35,796 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:35,796 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:35,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 265 transitions. [2022-04-27 15:03:35,798 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:35,799 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 265 transitions. [2022-04-27 15:03:35,799 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 265 transitions. [2022-04-27 15:03:36,026 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 265 edges. 265 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:36,030 INFO L225 Difference]: With dead ends: 226 [2022-04-27 15:03:36,030 INFO L226 Difference]: Without dead ends: 205 [2022-04-27 15:03:36,031 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-04-27 15:03:36,031 INFO L413 NwaCegarLoop]: 214 mSDtfsCounter, 129 mSDsluCounter, 605 mSDsCounter, 0 mSdLazyCounter, 1306 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 819 SdHoareTripleChecker+Invalid, 1337 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 1306 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:36,031 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 819 Invalid, 1337 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 1306 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-04-27 15:03:36,031 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2022-04-27 15:03:36,141 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 205. [2022-04-27 15:03:36,141 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:36,141 INFO L82 GeneralOperation]: Start isEquivalent. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-27 15:03:36,142 INFO L74 IsIncluded]: Start isIncluded. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-27 15:03:36,142 INFO L87 Difference]: Start difference. First operand 205 states. Second operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-27 15:03:36,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:36,145 INFO L93 Difference]: Finished difference Result 205 states and 266 transitions. [2022-04-27 15:03:36,145 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-27 15:03:36,145 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:36,145 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:36,146 INFO L74 IsIncluded]: Start isIncluded. First operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) Second operand 205 states. [2022-04-27 15:03:36,146 INFO L87 Difference]: Start difference. First operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) Second operand 205 states. [2022-04-27 15:03:36,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:36,149 INFO L93 Difference]: Finished difference Result 205 states and 266 transitions. [2022-04-27 15:03:36,149 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-27 15:03:36,149 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:36,149 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:36,149 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:36,149 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:36,150 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 205 states, 167 states have (on average 1.347305389221557) internal successors, (225), 169 states have internal predecessors, (225), 23 states have call successors, (23), 17 states have call predecessors, (23), 14 states have return successors, (18), 18 states have call predecessors, (18), 17 states have call successors, (18) [2022-04-27 15:03:36,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 205 states to 205 states and 266 transitions. [2022-04-27 15:03:36,153 INFO L78 Accepts]: Start accepts. Automaton has 205 states and 266 transitions. Word has length 54 [2022-04-27 15:03:36,153 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:36,153 INFO L495 AbstractCegarLoop]: Abstraction has 205 states and 266 transitions. [2022-04-27 15:03:36,153 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.0) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:36,153 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 266 transitions. [2022-04-27 15:03:36,154 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-27 15:03:36,154 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:36,154 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:36,154 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-04-27 15:03:36,154 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:36,154 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:36,154 INFO L85 PathProgramCache]: Analyzing trace with hash 432963036, now seen corresponding path program 1 times [2022-04-27 15:03:36,154 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:36,154 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [529294032] [2022-04-27 15:03:36,154 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:36,154 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:36,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:36,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:36,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:36,217 INFO L290 TraceCheckUtils]: 0: Hoare triple {20036#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {20003#true} is VALID [2022-04-27 15:03:36,217 INFO L290 TraceCheckUtils]: 1: Hoare triple {20003#true} assume true; {20003#true} is VALID [2022-04-27 15:03:36,217 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20003#true} {20003#true} #783#return; {20003#true} is VALID [2022-04-27 15:03:36,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:36,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:36,241 INFO L290 TraceCheckUtils]: 0: Hoare triple {20037#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {20003#true} is VALID [2022-04-27 15:03:36,241 INFO L290 TraceCheckUtils]: 1: Hoare triple {20003#true} assume true; {20003#true} is VALID [2022-04-27 15:03:36,241 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20003#true} {20003#true} #715#return; {20003#true} is VALID [2022-04-27 15:03:36,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:36,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:36,255 INFO L290 TraceCheckUtils]: 0: Hoare triple {20038#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {20003#true} is VALID [2022-04-27 15:03:36,255 INFO L290 TraceCheckUtils]: 1: Hoare triple {20003#true} assume true; {20003#true} is VALID [2022-04-27 15:03:36,255 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20003#true} {20003#true} #717#return; {20003#true} is VALID [2022-04-27 15:03:36,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:36,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:36,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-27 15:03:36,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:36,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:36,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:36,311 INFO L290 TraceCheckUtils]: 0: Hoare triple {20050#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {20003#true} is VALID [2022-04-27 15:03:36,311 INFO L290 TraceCheckUtils]: 1: Hoare triple {20003#true} assume true; {20003#true} is VALID [2022-04-27 15:03:36,311 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20003#true} {20003#true} #713#return; {20003#true} is VALID [2022-04-27 15:03:36,312 INFO L290 TraceCheckUtils]: 0: Hoare triple {20050#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {20003#true} is VALID [2022-04-27 15:03:36,312 INFO L272 TraceCheckUtils]: 1: Hoare triple {20003#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {20050#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:36,312 INFO L290 TraceCheckUtils]: 2: Hoare triple {20050#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {20003#true} is VALID [2022-04-27 15:03:36,312 INFO L290 TraceCheckUtils]: 3: Hoare triple {20003#true} assume true; {20003#true} is VALID [2022-04-27 15:03:36,312 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {20003#true} {20003#true} #713#return; {20003#true} is VALID [2022-04-27 15:03:36,312 INFO L290 TraceCheckUtils]: 5: Hoare triple {20003#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {20003#true} is VALID [2022-04-27 15:03:36,312 INFO L290 TraceCheckUtils]: 6: Hoare triple {20003#true} assume true; {20003#true} is VALID [2022-04-27 15:03:36,313 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {20003#true} {20003#true} #777#return; {20003#true} is VALID [2022-04-27 15:03:36,313 INFO L290 TraceCheckUtils]: 0: Hoare triple {20039#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {20003#true} is VALID [2022-04-27 15:03:36,313 INFO L290 TraceCheckUtils]: 1: Hoare triple {20003#true} assume 0 != ~compRegistered~0; {20003#true} is VALID [2022-04-27 15:03:36,313 INFO L272 TraceCheckUtils]: 2: Hoare triple {20003#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {20050#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:36,313 INFO L290 TraceCheckUtils]: 3: Hoare triple {20050#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {20003#true} is VALID [2022-04-27 15:03:36,314 INFO L272 TraceCheckUtils]: 4: Hoare triple {20003#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {20050#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:36,314 INFO L290 TraceCheckUtils]: 5: Hoare triple {20050#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {20003#true} is VALID [2022-04-27 15:03:36,314 INFO L290 TraceCheckUtils]: 6: Hoare triple {20003#true} assume true; {20003#true} is VALID [2022-04-27 15:03:36,314 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {20003#true} {20003#true} #713#return; {20003#true} is VALID [2022-04-27 15:03:36,314 INFO L290 TraceCheckUtils]: 8: Hoare triple {20003#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {20003#true} is VALID [2022-04-27 15:03:36,314 INFO L290 TraceCheckUtils]: 9: Hoare triple {20003#true} assume true; {20003#true} is VALID [2022-04-27 15:03:36,314 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {20003#true} {20003#true} #777#return; {20003#true} is VALID [2022-04-27 15:03:36,314 INFO L290 TraceCheckUtils]: 11: Hoare triple {20003#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {20003#true} is VALID [2022-04-27 15:03:36,314 INFO L290 TraceCheckUtils]: 12: Hoare triple {20003#true} assume !(-1073741802 == ~__cil_tmp7~0); {20003#true} is VALID [2022-04-27 15:03:36,314 INFO L290 TraceCheckUtils]: 13: Hoare triple {20003#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {20003#true} is VALID [2022-04-27 15:03:36,314 INFO L290 TraceCheckUtils]: 14: Hoare triple {20003#true} assume 0 == ~tmp_ndt_6~0; {20003#true} is VALID [2022-04-27 15:03:36,314 INFO L290 TraceCheckUtils]: 15: Hoare triple {20003#true} ~returnVal2~0 := 0; {20048#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:36,315 INFO L290 TraceCheckUtils]: 16: Hoare triple {20048#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {20048#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:36,315 INFO L290 TraceCheckUtils]: 17: Hoare triple {20048#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {20049#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:36,315 INFO L290 TraceCheckUtils]: 18: Hoare triple {20049#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {20049#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:36,316 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {20049#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {20003#true} #755#return; {20034#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-27 15:03:36,317 INFO L272 TraceCheckUtils]: 0: Hoare triple {20003#true} call ULTIMATE.init(); {20036#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:36,317 INFO L290 TraceCheckUtils]: 1: Hoare triple {20036#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {20003#true} is VALID [2022-04-27 15:03:36,318 INFO L290 TraceCheckUtils]: 2: Hoare triple {20003#true} assume true; {20003#true} is VALID [2022-04-27 15:03:36,318 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {20003#true} {20003#true} #783#return; {20003#true} is VALID [2022-04-27 15:03:36,318 INFO L272 TraceCheckUtils]: 4: Hoare triple {20003#true} call #t~ret81 := main(); {20003#true} is VALID [2022-04-27 15:03:36,318 INFO L290 TraceCheckUtils]: 5: Hoare triple {20003#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {20003#true} is VALID [2022-04-27 15:03:36,318 INFO L272 TraceCheckUtils]: 6: Hoare triple {20003#true} call _BLAST_init(); {20037#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:36,319 INFO L290 TraceCheckUtils]: 7: Hoare triple {20037#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {20003#true} is VALID [2022-04-27 15:03:36,319 INFO L290 TraceCheckUtils]: 8: Hoare triple {20003#true} assume true; {20003#true} is VALID [2022-04-27 15:03:36,319 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {20003#true} {20003#true} #715#return; {20003#true} is VALID [2022-04-27 15:03:36,319 INFO L290 TraceCheckUtils]: 10: Hoare triple {20003#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {20003#true} is VALID [2022-04-27 15:03:36,319 INFO L290 TraceCheckUtils]: 11: Hoare triple {20003#true} assume !(0 == ~irp_choice~0); {20003#true} is VALID [2022-04-27 15:03:36,319 INFO L272 TraceCheckUtils]: 12: Hoare triple {20003#true} call stub_driver_init(); {20038#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:36,319 INFO L290 TraceCheckUtils]: 13: Hoare triple {20038#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {20003#true} is VALID [2022-04-27 15:03:36,319 INFO L290 TraceCheckUtils]: 14: Hoare triple {20003#true} assume true; {20003#true} is VALID [2022-04-27 15:03:36,319 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {20003#true} {20003#true} #717#return; {20003#true} is VALID [2022-04-27 15:03:36,319 INFO L290 TraceCheckUtils]: 16: Hoare triple {20003#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {20003#true} is VALID [2022-04-27 15:03:36,320 INFO L290 TraceCheckUtils]: 17: Hoare triple {20003#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {20003#true} is VALID [2022-04-27 15:03:36,320 INFO L290 TraceCheckUtils]: 18: Hoare triple {20003#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {20003#true} is VALID [2022-04-27 15:03:36,320 INFO L290 TraceCheckUtils]: 19: Hoare triple {20003#true} assume 3 == ~tmp_ndt_3~0; {20003#true} is VALID [2022-04-27 15:03:36,320 INFO L272 TraceCheckUtils]: 20: Hoare triple {20003#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {20003#true} is VALID [2022-04-27 15:03:36,320 INFO L290 TraceCheckUtils]: 21: Hoare triple {20003#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {20003#true} is VALID [2022-04-27 15:03:36,320 INFO L290 TraceCheckUtils]: 22: Hoare triple {20003#true} assume 0 == ~irpStack__MinorFunction~0; {20003#true} is VALID [2022-04-27 15:03:36,320 INFO L290 TraceCheckUtils]: 23: Hoare triple {20003#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {20003#true} is VALID [2022-04-27 15:03:36,320 INFO L290 TraceCheckUtils]: 24: Hoare triple {20003#true} assume !(~s~0 != ~NP~0); {20003#true} is VALID [2022-04-27 15:03:36,320 INFO L290 TraceCheckUtils]: 25: Hoare triple {20003#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {20003#true} is VALID [2022-04-27 15:03:36,320 INFO L290 TraceCheckUtils]: 26: Hoare triple {20003#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {20003#true} is VALID [2022-04-27 15:03:36,320 INFO L272 TraceCheckUtils]: 27: Hoare triple {20003#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {20039#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:36,321 INFO L290 TraceCheckUtils]: 28: Hoare triple {20039#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {20003#true} is VALID [2022-04-27 15:03:36,321 INFO L290 TraceCheckUtils]: 29: Hoare triple {20003#true} assume 0 != ~compRegistered~0; {20003#true} is VALID [2022-04-27 15:03:36,321 INFO L272 TraceCheckUtils]: 30: Hoare triple {20003#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {20050#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:36,321 INFO L290 TraceCheckUtils]: 31: Hoare triple {20050#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {20003#true} is VALID [2022-04-27 15:03:36,322 INFO L272 TraceCheckUtils]: 32: Hoare triple {20003#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {20050#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:36,322 INFO L290 TraceCheckUtils]: 33: Hoare triple {20050#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {20003#true} is VALID [2022-04-27 15:03:36,322 INFO L290 TraceCheckUtils]: 34: Hoare triple {20003#true} assume true; {20003#true} is VALID [2022-04-27 15:03:36,322 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {20003#true} {20003#true} #713#return; {20003#true} is VALID [2022-04-27 15:03:36,322 INFO L290 TraceCheckUtils]: 36: Hoare triple {20003#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {20003#true} is VALID [2022-04-27 15:03:36,322 INFO L290 TraceCheckUtils]: 37: Hoare triple {20003#true} assume true; {20003#true} is VALID [2022-04-27 15:03:36,322 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {20003#true} {20003#true} #777#return; {20003#true} is VALID [2022-04-27 15:03:36,322 INFO L290 TraceCheckUtils]: 39: Hoare triple {20003#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {20003#true} is VALID [2022-04-27 15:03:36,322 INFO L290 TraceCheckUtils]: 40: Hoare triple {20003#true} assume !(-1073741802 == ~__cil_tmp7~0); {20003#true} is VALID [2022-04-27 15:03:36,322 INFO L290 TraceCheckUtils]: 41: Hoare triple {20003#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {20003#true} is VALID [2022-04-27 15:03:36,322 INFO L290 TraceCheckUtils]: 42: Hoare triple {20003#true} assume 0 == ~tmp_ndt_6~0; {20003#true} is VALID [2022-04-27 15:03:36,322 INFO L290 TraceCheckUtils]: 43: Hoare triple {20003#true} ~returnVal2~0 := 0; {20048#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:36,323 INFO L290 TraceCheckUtils]: 44: Hoare triple {20048#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {20048#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:36,323 INFO L290 TraceCheckUtils]: 45: Hoare triple {20048#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {20049#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:36,323 INFO L290 TraceCheckUtils]: 46: Hoare triple {20049#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {20049#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:36,324 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {20049#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {20003#true} #755#return; {20034#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-27 15:03:36,324 INFO L290 TraceCheckUtils]: 48: Hoare triple {20034#(= |KbFilter_PnP_#t~ret10| 0)} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {20035#(= KbFilter_PnP_~__cil_tmp23~0 0)} is VALID [2022-04-27 15:03:36,325 INFO L290 TraceCheckUtils]: 49: Hoare triple {20035#(= KbFilter_PnP_~__cil_tmp23~0 0)} assume 259 == ~__cil_tmp23~0; {20004#false} is VALID [2022-04-27 15:03:36,325 INFO L272 TraceCheckUtils]: 50: Hoare triple {20004#false} call #t~ret11 := KeWaitForSingleObject(~event~0, ~Executive~0, ~KernelMode~0, 0, 0); {20004#false} is VALID [2022-04-27 15:03:36,325 INFO L290 TraceCheckUtils]: 51: Hoare triple {20004#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {20004#false} is VALID [2022-04-27 15:03:36,325 INFO L290 TraceCheckUtils]: 52: Hoare triple {20004#false} assume !(~s~0 == ~MPR3~0); {20004#false} is VALID [2022-04-27 15:03:36,325 INFO L290 TraceCheckUtils]: 53: Hoare triple {20004#false} assume !(1 == ~customIrp~0); {20004#false} is VALID [2022-04-27 15:03:36,325 INFO L290 TraceCheckUtils]: 54: Hoare triple {20004#false} assume ~s~0 == ~MPR3~0; {20004#false} is VALID [2022-04-27 15:03:36,325 INFO L272 TraceCheckUtils]: 55: Hoare triple {20004#false} call errorFn(); {20004#false} is VALID [2022-04-27 15:03:36,325 INFO L290 TraceCheckUtils]: 56: Hoare triple {20004#false} assume !false; {20004#false} is VALID [2022-04-27 15:03:36,325 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:36,325 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:36,325 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [529294032] [2022-04-27 15:03:36,325 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [529294032] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:36,325 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:36,325 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-27 15:03:36,325 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [343774490] [2022-04-27 15:03:36,326 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:36,326 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-27 15:03:36,326 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:36,326 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:36,362 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:36,362 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-27 15:03:36,362 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:36,363 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-27 15:03:36,363 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-27 15:03:36,363 INFO L87 Difference]: Start difference. First operand 205 states and 266 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:38,319 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:38,319 INFO L93 Difference]: Finished difference Result 263 states and 337 transitions. [2022-04-27 15:03:38,319 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-27 15:03:38,319 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-27 15:03:38,319 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:38,320 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:38,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 302 transitions. [2022-04-27 15:03:38,322 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:38,323 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 302 transitions. [2022-04-27 15:03:38,323 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 302 transitions. [2022-04-27 15:03:38,580 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 302 edges. 302 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:38,583 INFO L225 Difference]: With dead ends: 263 [2022-04-27 15:03:38,584 INFO L226 Difference]: Without dead ends: 222 [2022-04-27 15:03:38,584 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-04-27 15:03:38,584 INFO L413 NwaCegarLoop]: 203 mSDtfsCounter, 273 mSDsluCounter, 467 mSDsCounter, 0 mSdLazyCounter, 775 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 273 SdHoareTripleChecker+Valid, 670 SdHoareTripleChecker+Invalid, 837 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 775 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:38,584 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [273 Valid, 670 Invalid, 837 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 775 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-04-27 15:03:38,599 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2022-04-27 15:03:38,717 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 210. [2022-04-27 15:03:38,718 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:38,718 INFO L82 GeneralOperation]: Start isEquivalent. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-27 15:03:38,718 INFO L74 IsIncluded]: Start isIncluded. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-27 15:03:38,718 INFO L87 Difference]: Start difference. First operand 222 states. Second operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-27 15:03:38,722 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:38,722 INFO L93 Difference]: Finished difference Result 222 states and 287 transitions. [2022-04-27 15:03:38,722 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 287 transitions. [2022-04-27 15:03:38,723 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:38,723 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:38,723 INFO L74 IsIncluded]: Start isIncluded. First operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 222 states. [2022-04-27 15:03:38,723 INFO L87 Difference]: Start difference. First operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 222 states. [2022-04-27 15:03:38,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:38,726 INFO L93 Difference]: Finished difference Result 222 states and 287 transitions. [2022-04-27 15:03:38,726 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 287 transitions. [2022-04-27 15:03:38,727 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:38,727 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:38,727 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:38,727 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:38,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 171 states have (on average 1.3391812865497077) internal successors, (229), 173 states have internal predecessors, (229), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-27 15:03:38,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 271 transitions. [2022-04-27 15:03:38,730 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 271 transitions. Word has length 57 [2022-04-27 15:03:38,730 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:38,730 INFO L495 AbstractCegarLoop]: Abstraction has 210 states and 271 transitions. [2022-04-27 15:03:38,731 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:38,731 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 271 transitions. [2022-04-27 15:03:38,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-27 15:03:38,731 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:38,731 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:38,731 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-04-27 15:03:38,731 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:38,732 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:38,732 INFO L85 PathProgramCache]: Analyzing trace with hash 1039954733, now seen corresponding path program 1 times [2022-04-27 15:03:38,732 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:38,732 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [184719724] [2022-04-27 15:03:38,732 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:38,732 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:38,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:38,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:38,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:38,798 INFO L290 TraceCheckUtils]: 0: Hoare triple {21171#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {21138#true} is VALID [2022-04-27 15:03:38,798 INFO L290 TraceCheckUtils]: 1: Hoare triple {21138#true} assume true; {21138#true} is VALID [2022-04-27 15:03:38,798 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21138#true} {21138#true} #783#return; {21138#true} is VALID [2022-04-27 15:03:38,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:38,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:38,821 INFO L290 TraceCheckUtils]: 0: Hoare triple {21172#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21138#true} is VALID [2022-04-27 15:03:38,822 INFO L290 TraceCheckUtils]: 1: Hoare triple {21138#true} assume true; {21138#true} is VALID [2022-04-27 15:03:38,822 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21138#true} {21138#true} #715#return; {21138#true} is VALID [2022-04-27 15:03:38,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:38,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:38,836 INFO L290 TraceCheckUtils]: 0: Hoare triple {21173#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21138#true} is VALID [2022-04-27 15:03:38,836 INFO L290 TraceCheckUtils]: 1: Hoare triple {21138#true} assume true; {21138#true} is VALID [2022-04-27 15:03:38,836 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21138#true} {21138#true} #717#return; {21138#true} is VALID [2022-04-27 15:03:38,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:38,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:38,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-27 15:03:38,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:38,888 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:38,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:38,891 INFO L290 TraceCheckUtils]: 0: Hoare triple {21185#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {21138#true} is VALID [2022-04-27 15:03:38,891 INFO L290 TraceCheckUtils]: 1: Hoare triple {21138#true} assume true; {21138#true} is VALID [2022-04-27 15:03:38,891 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21138#true} {21138#true} #713#return; {21138#true} is VALID [2022-04-27 15:03:38,891 INFO L290 TraceCheckUtils]: 0: Hoare triple {21185#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {21138#true} is VALID [2022-04-27 15:03:38,891 INFO L272 TraceCheckUtils]: 1: Hoare triple {21138#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {21185#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:38,891 INFO L290 TraceCheckUtils]: 2: Hoare triple {21185#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {21138#true} is VALID [2022-04-27 15:03:38,892 INFO L290 TraceCheckUtils]: 3: Hoare triple {21138#true} assume true; {21138#true} is VALID [2022-04-27 15:03:38,892 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {21138#true} {21138#true} #713#return; {21138#true} is VALID [2022-04-27 15:03:38,892 INFO L290 TraceCheckUtils]: 5: Hoare triple {21138#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {21138#true} is VALID [2022-04-27 15:03:38,892 INFO L290 TraceCheckUtils]: 6: Hoare triple {21138#true} assume true; {21138#true} is VALID [2022-04-27 15:03:38,892 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {21138#true} {21138#true} #777#return; {21138#true} is VALID [2022-04-27 15:03:38,892 INFO L290 TraceCheckUtils]: 0: Hoare triple {21174#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {21138#true} is VALID [2022-04-27 15:03:38,892 INFO L290 TraceCheckUtils]: 1: Hoare triple {21138#true} assume 0 != ~compRegistered~0; {21138#true} is VALID [2022-04-27 15:03:38,892 INFO L272 TraceCheckUtils]: 2: Hoare triple {21138#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {21185#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:38,892 INFO L290 TraceCheckUtils]: 3: Hoare triple {21185#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {21138#true} is VALID [2022-04-27 15:03:38,893 INFO L272 TraceCheckUtils]: 4: Hoare triple {21138#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {21185#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:38,893 INFO L290 TraceCheckUtils]: 5: Hoare triple {21185#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {21138#true} is VALID [2022-04-27 15:03:38,893 INFO L290 TraceCheckUtils]: 6: Hoare triple {21138#true} assume true; {21138#true} is VALID [2022-04-27 15:03:38,893 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {21138#true} {21138#true} #713#return; {21138#true} is VALID [2022-04-27 15:03:38,893 INFO L290 TraceCheckUtils]: 8: Hoare triple {21138#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {21138#true} is VALID [2022-04-27 15:03:38,893 INFO L290 TraceCheckUtils]: 9: Hoare triple {21138#true} assume true; {21138#true} is VALID [2022-04-27 15:03:38,893 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {21138#true} {21138#true} #777#return; {21138#true} is VALID [2022-04-27 15:03:38,893 INFO L290 TraceCheckUtils]: 11: Hoare triple {21138#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {21138#true} is VALID [2022-04-27 15:03:38,893 INFO L290 TraceCheckUtils]: 12: Hoare triple {21138#true} assume !(-1073741802 == ~__cil_tmp7~0); {21138#true} is VALID [2022-04-27 15:03:38,893 INFO L290 TraceCheckUtils]: 13: Hoare triple {21138#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {21138#true} is VALID [2022-04-27 15:03:38,893 INFO L290 TraceCheckUtils]: 14: Hoare triple {21138#true} assume 0 == ~tmp_ndt_6~0; {21138#true} is VALID [2022-04-27 15:03:38,894 INFO L290 TraceCheckUtils]: 15: Hoare triple {21138#true} ~returnVal2~0 := 0; {21183#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:38,894 INFO L290 TraceCheckUtils]: 16: Hoare triple {21183#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {21183#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:38,894 INFO L290 TraceCheckUtils]: 17: Hoare triple {21183#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {21184#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:38,895 INFO L290 TraceCheckUtils]: 18: Hoare triple {21184#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {21184#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:38,895 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {21184#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {21138#true} #755#return; {21169#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-27 15:03:38,896 INFO L272 TraceCheckUtils]: 0: Hoare triple {21138#true} call ULTIMATE.init(); {21171#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:38,896 INFO L290 TraceCheckUtils]: 1: Hoare triple {21171#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {21138#true} is VALID [2022-04-27 15:03:38,897 INFO L290 TraceCheckUtils]: 2: Hoare triple {21138#true} assume true; {21138#true} is VALID [2022-04-27 15:03:38,897 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {21138#true} {21138#true} #783#return; {21138#true} is VALID [2022-04-27 15:03:38,897 INFO L272 TraceCheckUtils]: 4: Hoare triple {21138#true} call #t~ret81 := main(); {21138#true} is VALID [2022-04-27 15:03:38,897 INFO L290 TraceCheckUtils]: 5: Hoare triple {21138#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {21138#true} is VALID [2022-04-27 15:03:38,897 INFO L272 TraceCheckUtils]: 6: Hoare triple {21138#true} call _BLAST_init(); {21172#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:38,898 INFO L290 TraceCheckUtils]: 7: Hoare triple {21172#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21138#true} is VALID [2022-04-27 15:03:38,898 INFO L290 TraceCheckUtils]: 8: Hoare triple {21138#true} assume true; {21138#true} is VALID [2022-04-27 15:03:38,898 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {21138#true} {21138#true} #715#return; {21138#true} is VALID [2022-04-27 15:03:38,898 INFO L290 TraceCheckUtils]: 10: Hoare triple {21138#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {21138#true} is VALID [2022-04-27 15:03:38,898 INFO L290 TraceCheckUtils]: 11: Hoare triple {21138#true} assume !(0 == ~irp_choice~0); {21138#true} is VALID [2022-04-27 15:03:38,898 INFO L272 TraceCheckUtils]: 12: Hoare triple {21138#true} call stub_driver_init(); {21173#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:38,898 INFO L290 TraceCheckUtils]: 13: Hoare triple {21173#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {21138#true} is VALID [2022-04-27 15:03:38,898 INFO L290 TraceCheckUtils]: 14: Hoare triple {21138#true} assume true; {21138#true} is VALID [2022-04-27 15:03:38,898 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {21138#true} {21138#true} #717#return; {21138#true} is VALID [2022-04-27 15:03:38,898 INFO L290 TraceCheckUtils]: 16: Hoare triple {21138#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {21138#true} is VALID [2022-04-27 15:03:38,898 INFO L290 TraceCheckUtils]: 17: Hoare triple {21138#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {21138#true} is VALID [2022-04-27 15:03:38,899 INFO L290 TraceCheckUtils]: 18: Hoare triple {21138#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {21138#true} is VALID [2022-04-27 15:03:38,899 INFO L290 TraceCheckUtils]: 19: Hoare triple {21138#true} assume 3 == ~tmp_ndt_3~0; {21138#true} is VALID [2022-04-27 15:03:38,899 INFO L272 TraceCheckUtils]: 20: Hoare triple {21138#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {21138#true} is VALID [2022-04-27 15:03:38,899 INFO L290 TraceCheckUtils]: 21: Hoare triple {21138#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {21138#true} is VALID [2022-04-27 15:03:38,899 INFO L290 TraceCheckUtils]: 22: Hoare triple {21138#true} assume 0 == ~irpStack__MinorFunction~0; {21138#true} is VALID [2022-04-27 15:03:38,899 INFO L290 TraceCheckUtils]: 23: Hoare triple {21138#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {21138#true} is VALID [2022-04-27 15:03:38,899 INFO L290 TraceCheckUtils]: 24: Hoare triple {21138#true} assume !(~s~0 != ~NP~0); {21138#true} is VALID [2022-04-27 15:03:38,899 INFO L290 TraceCheckUtils]: 25: Hoare triple {21138#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {21138#true} is VALID [2022-04-27 15:03:38,899 INFO L290 TraceCheckUtils]: 26: Hoare triple {21138#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {21138#true} is VALID [2022-04-27 15:03:38,899 INFO L272 TraceCheckUtils]: 27: Hoare triple {21138#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {21174#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:38,899 INFO L290 TraceCheckUtils]: 28: Hoare triple {21174#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {21138#true} is VALID [2022-04-27 15:03:38,900 INFO L290 TraceCheckUtils]: 29: Hoare triple {21138#true} assume 0 != ~compRegistered~0; {21138#true} is VALID [2022-04-27 15:03:38,900 INFO L272 TraceCheckUtils]: 30: Hoare triple {21138#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {21185#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:38,900 INFO L290 TraceCheckUtils]: 31: Hoare triple {21185#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {21138#true} is VALID [2022-04-27 15:03:38,901 INFO L272 TraceCheckUtils]: 32: Hoare triple {21138#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {21185#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:38,901 INFO L290 TraceCheckUtils]: 33: Hoare triple {21185#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {21138#true} is VALID [2022-04-27 15:03:38,901 INFO L290 TraceCheckUtils]: 34: Hoare triple {21138#true} assume true; {21138#true} is VALID [2022-04-27 15:03:38,901 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {21138#true} {21138#true} #713#return; {21138#true} is VALID [2022-04-27 15:03:38,901 INFO L290 TraceCheckUtils]: 36: Hoare triple {21138#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {21138#true} is VALID [2022-04-27 15:03:38,901 INFO L290 TraceCheckUtils]: 37: Hoare triple {21138#true} assume true; {21138#true} is VALID [2022-04-27 15:03:38,901 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {21138#true} {21138#true} #777#return; {21138#true} is VALID [2022-04-27 15:03:38,901 INFO L290 TraceCheckUtils]: 39: Hoare triple {21138#true} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {21138#true} is VALID [2022-04-27 15:03:38,901 INFO L290 TraceCheckUtils]: 40: Hoare triple {21138#true} assume !(-1073741802 == ~__cil_tmp7~0); {21138#true} is VALID [2022-04-27 15:03:38,901 INFO L290 TraceCheckUtils]: 41: Hoare triple {21138#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {21138#true} is VALID [2022-04-27 15:03:38,901 INFO L290 TraceCheckUtils]: 42: Hoare triple {21138#true} assume 0 == ~tmp_ndt_6~0; {21138#true} is VALID [2022-04-27 15:03:38,901 INFO L290 TraceCheckUtils]: 43: Hoare triple {21138#true} ~returnVal2~0 := 0; {21183#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:38,902 INFO L290 TraceCheckUtils]: 44: Hoare triple {21183#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {21183#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:38,902 INFO L290 TraceCheckUtils]: 45: Hoare triple {21183#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} #res := ~returnVal2~0; {21184#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:38,902 INFO L290 TraceCheckUtils]: 46: Hoare triple {21184#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} assume true; {21184#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} is VALID [2022-04-27 15:03:38,903 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {21184#(and (<= 0 |IofCallDriver_#res|) (<= |IofCallDriver_#res| 0))} {21138#true} #755#return; {21169#(= |KbFilter_PnP_#t~ret10| 0)} is VALID [2022-04-27 15:03:38,903 INFO L290 TraceCheckUtils]: 48: Hoare triple {21169#(= |KbFilter_PnP_#t~ret10| 0)} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {21170#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-27 15:03:38,903 INFO L290 TraceCheckUtils]: 49: Hoare triple {21170#(= KbFilter_PnP_~status~0 0)} assume !(259 == ~__cil_tmp23~0); {21170#(= KbFilter_PnP_~status~0 0)} is VALID [2022-04-27 15:03:38,904 INFO L290 TraceCheckUtils]: 50: Hoare triple {21170#(= KbFilter_PnP_~status~0 0)} assume !(~status~0 >= 0); {21139#false} is VALID [2022-04-27 15:03:38,904 INFO L290 TraceCheckUtils]: 51: Hoare triple {21139#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {21139#false} is VALID [2022-04-27 15:03:38,904 INFO L272 TraceCheckUtils]: 52: Hoare triple {21139#false} call IofCompleteRequest(~Irp, 0); {21139#false} is VALID [2022-04-27 15:03:38,904 INFO L290 TraceCheckUtils]: 53: Hoare triple {21139#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {21139#false} is VALID [2022-04-27 15:03:38,904 INFO L290 TraceCheckUtils]: 54: Hoare triple {21139#false} assume !(~s~0 == ~NP~0); {21139#false} is VALID [2022-04-27 15:03:38,904 INFO L272 TraceCheckUtils]: 55: Hoare triple {21139#false} call errorFn(); {21139#false} is VALID [2022-04-27 15:03:38,904 INFO L290 TraceCheckUtils]: 56: Hoare triple {21139#false} assume !false; {21139#false} is VALID [2022-04-27 15:03:38,904 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:38,904 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:38,904 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [184719724] [2022-04-27 15:03:38,905 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [184719724] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:38,905 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:38,905 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-27 15:03:38,905 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [669933426] [2022-04-27 15:03:38,905 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:38,905 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-27 15:03:38,905 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:38,905 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:38,941 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:38,941 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-27 15:03:38,941 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:38,941 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-27 15:03:38,941 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2022-04-27 15:03:38,942 INFO L87 Difference]: Start difference. First operand 210 states and 271 transitions. Second operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:40,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:40,777 INFO L93 Difference]: Finished difference Result 230 states and 294 transitions. [2022-04-27 15:03:40,777 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-04-27 15:03:40,777 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 57 [2022-04-27 15:03:40,777 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:40,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:40,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 273 transitions. [2022-04-27 15:03:40,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:40,780 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 273 transitions. [2022-04-27 15:03:40,780 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 15 states and 273 transitions. [2022-04-27 15:03:40,958 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 273 edges. 273 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:40,961 INFO L225 Difference]: With dead ends: 230 [2022-04-27 15:03:40,961 INFO L226 Difference]: Without dead ends: 223 [2022-04-27 15:03:40,961 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=77, Invalid=265, Unknown=0, NotChecked=0, Total=342 [2022-04-27 15:03:40,962 INFO L413 NwaCegarLoop]: 202 mSDtfsCounter, 321 mSDsluCounter, 413 mSDsCounter, 0 mSdLazyCounter, 699 mSolverCounterSat, 73 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 321 SdHoareTripleChecker+Valid, 615 SdHoareTripleChecker+Invalid, 772 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 73 IncrementalHoareTripleChecker+Valid, 699 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:40,962 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [321 Valid, 615 Invalid, 772 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [73 Valid, 699 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-27 15:03:40,962 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2022-04-27 15:03:41,082 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 211. [2022-04-27 15:03:41,082 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:41,083 INFO L82 GeneralOperation]: Start isEquivalent. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-27 15:03:41,083 INFO L74 IsIncluded]: Start isIncluded. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-27 15:03:41,083 INFO L87 Difference]: Start difference. First operand 223 states. Second operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-27 15:03:41,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:41,086 INFO L93 Difference]: Finished difference Result 223 states and 287 transitions. [2022-04-27 15:03:41,086 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 287 transitions. [2022-04-27 15:03:41,087 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:41,087 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:41,087 INFO L74 IsIncluded]: Start isIncluded. First operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 223 states. [2022-04-27 15:03:41,087 INFO L87 Difference]: Start difference. First operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) Second operand 223 states. [2022-04-27 15:03:41,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:41,090 INFO L93 Difference]: Finished difference Result 223 states and 287 transitions. [2022-04-27 15:03:41,090 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 287 transitions. [2022-04-27 15:03:41,091 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:41,091 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:41,091 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:41,091 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:41,091 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 211 states, 172 states have (on average 1.3372093023255813) internal successors, (230), 174 states have internal predecessors, (230), 23 states have call successors, (23), 17 states have call predecessors, (23), 15 states have return successors, (19), 19 states have call predecessors, (19), 17 states have call successors, (19) [2022-04-27 15:03:41,094 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 272 transitions. [2022-04-27 15:03:41,094 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 272 transitions. Word has length 57 [2022-04-27 15:03:41,094 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:41,094 INFO L495 AbstractCegarLoop]: Abstraction has 211 states and 272 transitions. [2022-04-27 15:03:41,094 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.727272727272727) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (10), 7 states have call predecessors, (10), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:41,095 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 272 transitions. [2022-04-27 15:03:41,095 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-04-27 15:03:41,095 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:41,095 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:41,095 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-04-27 15:03:41,095 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:41,095 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:41,096 INFO L85 PathProgramCache]: Analyzing trace with hash -2132592656, now seen corresponding path program 1 times [2022-04-27 15:03:41,096 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:41,096 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2023552825] [2022-04-27 15:03:41,096 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:41,096 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:41,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:41,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:41,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:41,159 INFO L290 TraceCheckUtils]: 0: Hoare triple {22281#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22242#true} is VALID [2022-04-27 15:03:41,160 INFO L290 TraceCheckUtils]: 1: Hoare triple {22242#true} assume true; {22242#true} is VALID [2022-04-27 15:03:41,160 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22242#true} {22242#true} #783#return; {22242#true} is VALID [2022-04-27 15:03:41,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:41,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:41,179 INFO L290 TraceCheckUtils]: 0: Hoare triple {22282#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22242#true} is VALID [2022-04-27 15:03:41,179 INFO L290 TraceCheckUtils]: 1: Hoare triple {22242#true} assume true; {22242#true} is VALID [2022-04-27 15:03:41,179 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22242#true} {22242#true} #715#return; {22242#true} is VALID [2022-04-27 15:03:41,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:41,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:41,191 INFO L290 TraceCheckUtils]: 0: Hoare triple {22283#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22242#true} is VALID [2022-04-27 15:03:41,191 INFO L290 TraceCheckUtils]: 1: Hoare triple {22242#true} assume true; {22242#true} is VALID [2022-04-27 15:03:41,191 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22242#true} {22242#true} #717#return; {22242#true} is VALID [2022-04-27 15:03:41,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-04-27 15:03:41,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:41,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-04-27 15:03:41,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:41,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-04-27 15:03:41,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:41,275 INFO L290 TraceCheckUtils]: 0: Hoare triple {22305#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {22242#true} is VALID [2022-04-27 15:03:41,275 INFO L290 TraceCheckUtils]: 1: Hoare triple {22242#true} assume !(0 != ~compRegistered~0); {22242#true} is VALID [2022-04-27 15:03:41,275 INFO L290 TraceCheckUtils]: 2: Hoare triple {22242#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {22242#true} is VALID [2022-04-27 15:03:41,275 INFO L290 TraceCheckUtils]: 3: Hoare triple {22242#true} assume 0 == ~tmp_ndt_6~0; {22242#true} is VALID [2022-04-27 15:03:41,276 INFO L290 TraceCheckUtils]: 4: Hoare triple {22242#true} ~returnVal2~0 := 0; {22242#true} is VALID [2022-04-27 15:03:41,276 INFO L290 TraceCheckUtils]: 5: Hoare triple {22242#true} assume !(~s~0 == ~NP~0); {22242#true} is VALID [2022-04-27 15:03:41,276 INFO L290 TraceCheckUtils]: 6: Hoare triple {22242#true} assume !(~s~0 == ~MPR1~0); {22242#true} is VALID [2022-04-27 15:03:41,276 INFO L290 TraceCheckUtils]: 7: Hoare triple {22242#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {22319#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:41,276 INFO L290 TraceCheckUtils]: 8: Hoare triple {22319#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,276 INFO L290 TraceCheckUtils]: 9: Hoare triple {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,277 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {22242#true} #789#return; {22317#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,277 INFO L290 TraceCheckUtils]: 0: Hoare triple {22305#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {22242#true} is VALID [2022-04-27 15:03:41,277 INFO L290 TraceCheckUtils]: 1: Hoare triple {22242#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {22242#true} is VALID [2022-04-27 15:03:41,277 INFO L290 TraceCheckUtils]: 2: Hoare triple {22242#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {22242#true} is VALID [2022-04-27 15:03:41,278 INFO L272 TraceCheckUtils]: 3: Hoare triple {22242#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {22305#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:41,278 INFO L290 TraceCheckUtils]: 4: Hoare triple {22305#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {22242#true} is VALID [2022-04-27 15:03:41,278 INFO L290 TraceCheckUtils]: 5: Hoare triple {22242#true} assume !(0 != ~compRegistered~0); {22242#true} is VALID [2022-04-27 15:03:41,278 INFO L290 TraceCheckUtils]: 6: Hoare triple {22242#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {22242#true} is VALID [2022-04-27 15:03:41,278 INFO L290 TraceCheckUtils]: 7: Hoare triple {22242#true} assume 0 == ~tmp_ndt_6~0; {22242#true} is VALID [2022-04-27 15:03:41,278 INFO L290 TraceCheckUtils]: 8: Hoare triple {22242#true} ~returnVal2~0 := 0; {22242#true} is VALID [2022-04-27 15:03:41,278 INFO L290 TraceCheckUtils]: 9: Hoare triple {22242#true} assume !(~s~0 == ~NP~0); {22242#true} is VALID [2022-04-27 15:03:41,278 INFO L290 TraceCheckUtils]: 10: Hoare triple {22242#true} assume !(~s~0 == ~MPR1~0); {22242#true} is VALID [2022-04-27 15:03:41,278 INFO L290 TraceCheckUtils]: 11: Hoare triple {22242#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {22319#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:41,279 INFO L290 TraceCheckUtils]: 12: Hoare triple {22319#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,279 INFO L290 TraceCheckUtils]: 13: Hoare triple {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,279 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {22242#true} #789#return; {22317#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,280 INFO L290 TraceCheckUtils]: 15: Hoare triple {22317#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {22318#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,280 INFO L290 TraceCheckUtils]: 16: Hoare triple {22318#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {22318#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,281 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {22318#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {22242#true} #741#return; {22303#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-27 15:03:41,281 INFO L290 TraceCheckUtils]: 0: Hoare triple {22284#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {22242#true} is VALID [2022-04-27 15:03:41,281 INFO L290 TraceCheckUtils]: 1: Hoare triple {22242#true} assume 0 == ~irpStack__MajorFunction~0; {22242#true} is VALID [2022-04-27 15:03:41,281 INFO L290 TraceCheckUtils]: 2: Hoare triple {22242#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {22242#true} is VALID [2022-04-27 15:03:41,281 INFO L290 TraceCheckUtils]: 3: Hoare triple {22242#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {22242#true} is VALID [2022-04-27 15:03:41,281 INFO L272 TraceCheckUtils]: 4: Hoare triple {22242#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {22305#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:41,281 INFO L290 TraceCheckUtils]: 5: Hoare triple {22305#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {22242#true} is VALID [2022-04-27 15:03:41,281 INFO L290 TraceCheckUtils]: 6: Hoare triple {22242#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {22242#true} is VALID [2022-04-27 15:03:41,281 INFO L290 TraceCheckUtils]: 7: Hoare triple {22242#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {22242#true} is VALID [2022-04-27 15:03:41,282 INFO L272 TraceCheckUtils]: 8: Hoare triple {22242#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {22305#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:41,282 INFO L290 TraceCheckUtils]: 9: Hoare triple {22305#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {22242#true} is VALID [2022-04-27 15:03:41,282 INFO L290 TraceCheckUtils]: 10: Hoare triple {22242#true} assume !(0 != ~compRegistered~0); {22242#true} is VALID [2022-04-27 15:03:41,282 INFO L290 TraceCheckUtils]: 11: Hoare triple {22242#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {22242#true} is VALID [2022-04-27 15:03:41,282 INFO L290 TraceCheckUtils]: 12: Hoare triple {22242#true} assume 0 == ~tmp_ndt_6~0; {22242#true} is VALID [2022-04-27 15:03:41,282 INFO L290 TraceCheckUtils]: 13: Hoare triple {22242#true} ~returnVal2~0 := 0; {22242#true} is VALID [2022-04-27 15:03:41,282 INFO L290 TraceCheckUtils]: 14: Hoare triple {22242#true} assume !(~s~0 == ~NP~0); {22242#true} is VALID [2022-04-27 15:03:41,282 INFO L290 TraceCheckUtils]: 15: Hoare triple {22242#true} assume !(~s~0 == ~MPR1~0); {22242#true} is VALID [2022-04-27 15:03:41,283 INFO L290 TraceCheckUtils]: 16: Hoare triple {22242#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {22319#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:41,283 INFO L290 TraceCheckUtils]: 17: Hoare triple {22319#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,283 INFO L290 TraceCheckUtils]: 18: Hoare triple {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,284 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {22242#true} #789#return; {22317#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,284 INFO L290 TraceCheckUtils]: 20: Hoare triple {22317#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {22318#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,284 INFO L290 TraceCheckUtils]: 21: Hoare triple {22318#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {22318#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,285 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {22318#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {22242#true} #741#return; {22303#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-27 15:03:41,285 INFO L290 TraceCheckUtils]: 23: Hoare triple {22303#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~tmp~0 := #t~ret43;havoc #t~ret43;#res := ~tmp~0; {22304#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-27 15:03:41,285 INFO L290 TraceCheckUtils]: 24: Hoare triple {22304#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} assume true; {22304#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-27 15:03:41,286 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {22304#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} {22242#true} #719#return; {22279#(= |main_#t~ret29| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,287 INFO L272 TraceCheckUtils]: 0: Hoare triple {22242#true} call ULTIMATE.init(); {22281#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:41,287 INFO L290 TraceCheckUtils]: 1: Hoare triple {22281#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {22242#true} is VALID [2022-04-27 15:03:41,287 INFO L290 TraceCheckUtils]: 2: Hoare triple {22242#true} assume true; {22242#true} is VALID [2022-04-27 15:03:41,287 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {22242#true} {22242#true} #783#return; {22242#true} is VALID [2022-04-27 15:03:41,287 INFO L272 TraceCheckUtils]: 4: Hoare triple {22242#true} call #t~ret81 := main(); {22242#true} is VALID [2022-04-27 15:03:41,287 INFO L290 TraceCheckUtils]: 5: Hoare triple {22242#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {22242#true} is VALID [2022-04-27 15:03:41,288 INFO L272 TraceCheckUtils]: 6: Hoare triple {22242#true} call _BLAST_init(); {22282#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:41,288 INFO L290 TraceCheckUtils]: 7: Hoare triple {22282#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22242#true} is VALID [2022-04-27 15:03:41,288 INFO L290 TraceCheckUtils]: 8: Hoare triple {22242#true} assume true; {22242#true} is VALID [2022-04-27 15:03:41,288 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {22242#true} {22242#true} #715#return; {22242#true} is VALID [2022-04-27 15:03:41,288 INFO L290 TraceCheckUtils]: 10: Hoare triple {22242#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {22242#true} is VALID [2022-04-27 15:03:41,288 INFO L290 TraceCheckUtils]: 11: Hoare triple {22242#true} assume !(0 == ~irp_choice~0); {22242#true} is VALID [2022-04-27 15:03:41,289 INFO L272 TraceCheckUtils]: 12: Hoare triple {22242#true} call stub_driver_init(); {22283#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:41,289 INFO L290 TraceCheckUtils]: 13: Hoare triple {22283#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {22242#true} is VALID [2022-04-27 15:03:41,289 INFO L290 TraceCheckUtils]: 14: Hoare triple {22242#true} assume true; {22242#true} is VALID [2022-04-27 15:03:41,289 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {22242#true} {22242#true} #717#return; {22242#true} is VALID [2022-04-27 15:03:41,289 INFO L290 TraceCheckUtils]: 16: Hoare triple {22242#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {22242#true} is VALID [2022-04-27 15:03:41,289 INFO L290 TraceCheckUtils]: 17: Hoare triple {22242#true} assume 0 == ~tmp_ndt_1~0; {22242#true} is VALID [2022-04-27 15:03:41,290 INFO L272 TraceCheckUtils]: 18: Hoare triple {22242#true} call #t~ret29 := KbFilter_CreateClose(~devobj~0, ~pirp~0); {22284#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:41,290 INFO L290 TraceCheckUtils]: 19: Hoare triple {22284#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet41 && #t~nondet41 <= 2147483647;~irpStack__MajorFunction~0 := #t~nondet41;havoc #t~nondet41;assume -2147483648 <= #t~nondet42 && #t~nondet42 <= 2147483647;~devExt__UpperConnectData__ClassService~0 := #t~nondet42;havoc #t~nondet42;havoc ~Irp__IoStatus__Status~1;havoc ~status~2;havoc ~tmp~0;~status~2 := ~myStatus~0; {22242#true} is VALID [2022-04-27 15:03:41,290 INFO L290 TraceCheckUtils]: 20: Hoare triple {22242#true} assume 0 == ~irpStack__MajorFunction~0; {22242#true} is VALID [2022-04-27 15:03:41,290 INFO L290 TraceCheckUtils]: 21: Hoare triple {22242#true} assume 0 == ~devExt__UpperConnectData__ClassService~0;~status~2 := -1073741436; {22242#true} is VALID [2022-04-27 15:03:41,290 INFO L290 TraceCheckUtils]: 22: Hoare triple {22242#true} ~Irp__IoStatus__Status~1 := ~status~2;~myStatus~0 := ~status~2; {22242#true} is VALID [2022-04-27 15:03:41,290 INFO L272 TraceCheckUtils]: 23: Hoare triple {22242#true} call #t~ret43 := KbFilter_DispatchPassThrough(~DeviceObject, ~Irp); {22305#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:41,290 INFO L290 TraceCheckUtils]: 24: Hoare triple {22305#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet44 && #t~nondet44 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~1 := #t~nondet44;havoc #t~nondet44;assume -2147483648 <= #t~nondet45 && #t~nondet45 <= 2147483647;~Irp__CurrentLocation~1 := #t~nondet45;havoc #t~nondet45;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~DeviceObject__DeviceExtension__TopOfStack~0 := #t~nondet46;havoc #t~nondet46;havoc ~irpStack~1;havoc ~tmp~1;~irpStack~1 := ~Irp__Tail__Overlay__CurrentStackLocation~1; {22242#true} is VALID [2022-04-27 15:03:41,291 INFO L290 TraceCheckUtils]: 25: Hoare triple {22242#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {22242#true} is VALID [2022-04-27 15:03:41,291 INFO L290 TraceCheckUtils]: 26: Hoare triple {22242#true} #t~post47 := ~Irp__CurrentLocation~1;~Irp__CurrentLocation~1 := 1 + #t~post47;havoc #t~post47;#t~post48 := ~Irp__Tail__Overlay__CurrentStackLocation~1;~Irp__Tail__Overlay__CurrentStackLocation~1 := 1 + #t~post48;havoc #t~post48; {22242#true} is VALID [2022-04-27 15:03:41,291 INFO L272 TraceCheckUtils]: 27: Hoare triple {22242#true} call #t~ret49 := IofCallDriver(~DeviceObject__DeviceExtension__TopOfStack~0, ~Irp); {22305#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:41,291 INFO L290 TraceCheckUtils]: 28: Hoare triple {22305#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {22242#true} is VALID [2022-04-27 15:03:41,291 INFO L290 TraceCheckUtils]: 29: Hoare triple {22242#true} assume !(0 != ~compRegistered~0); {22242#true} is VALID [2022-04-27 15:03:41,291 INFO L290 TraceCheckUtils]: 30: Hoare triple {22242#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {22242#true} is VALID [2022-04-27 15:03:41,291 INFO L290 TraceCheckUtils]: 31: Hoare triple {22242#true} assume 0 == ~tmp_ndt_6~0; {22242#true} is VALID [2022-04-27 15:03:41,291 INFO L290 TraceCheckUtils]: 32: Hoare triple {22242#true} ~returnVal2~0 := 0; {22242#true} is VALID [2022-04-27 15:03:41,291 INFO L290 TraceCheckUtils]: 33: Hoare triple {22242#true} assume !(~s~0 == ~NP~0); {22242#true} is VALID [2022-04-27 15:03:41,291 INFO L290 TraceCheckUtils]: 34: Hoare triple {22242#true} assume !(~s~0 == ~MPR1~0); {22242#true} is VALID [2022-04-27 15:03:41,292 INFO L290 TraceCheckUtils]: 35: Hoare triple {22242#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {22319#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:41,292 INFO L290 TraceCheckUtils]: 36: Hoare triple {22319#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,292 INFO L290 TraceCheckUtils]: 37: Hoare triple {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,293 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {22320#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {22242#true} #789#return; {22317#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,293 INFO L290 TraceCheckUtils]: 39: Hoare triple {22317#(= |KbFilter_DispatchPassThrough_#t~ret49| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret49 && #t~ret49 <= 2147483647;~tmp~1 := #t~ret49;havoc #t~ret49;#res := ~tmp~1; {22318#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,293 INFO L290 TraceCheckUtils]: 40: Hoare triple {22318#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} assume true; {22318#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,294 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {22318#(= |KbFilter_DispatchPassThrough_#res| ~lowerDriverReturn~0)} {22242#true} #741#return; {22303#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} is VALID [2022-04-27 15:03:41,294 INFO L290 TraceCheckUtils]: 42: Hoare triple {22303#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#t~ret43|)} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~tmp~0 := #t~ret43;havoc #t~ret43;#res := ~tmp~0; {22304#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-27 15:03:41,294 INFO L290 TraceCheckUtils]: 43: Hoare triple {22304#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} assume true; {22304#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} is VALID [2022-04-27 15:03:41,295 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {22304#(= ~lowerDriverReturn~0 |KbFilter_CreateClose_#res|)} {22242#true} #719#return; {22279#(= |main_#t~ret29| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,295 INFO L290 TraceCheckUtils]: 45: Hoare triple {22279#(= |main_#t~ret29| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret29 && #t~ret29 <= 2147483647;~status~1 := #t~ret29;havoc #t~ret29; {22280#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,295 INFO L290 TraceCheckUtils]: 46: Hoare triple {22280#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22280#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,296 INFO L290 TraceCheckUtils]: 47: Hoare triple {22280#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22280#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,296 INFO L290 TraceCheckUtils]: 48: Hoare triple {22280#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {22280#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,296 INFO L290 TraceCheckUtils]: 49: Hoare triple {22280#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {22280#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,296 INFO L290 TraceCheckUtils]: 50: Hoare triple {22280#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {22280#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,297 INFO L290 TraceCheckUtils]: 51: Hoare triple {22280#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {22280#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,297 INFO L290 TraceCheckUtils]: 52: Hoare triple {22280#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {22280#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:41,297 INFO L290 TraceCheckUtils]: 53: Hoare triple {22280#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {22243#false} is VALID [2022-04-27 15:03:41,297 INFO L272 TraceCheckUtils]: 54: Hoare triple {22243#false} call errorFn(); {22243#false} is VALID [2022-04-27 15:03:41,297 INFO L290 TraceCheckUtils]: 55: Hoare triple {22243#false} assume !false; {22243#false} is VALID [2022-04-27 15:03:41,297 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:41,297 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:41,298 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2023552825] [2022-04-27 15:03:41,298 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2023552825] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:41,298 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:41,298 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-27 15:03:41,298 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [80400089] [2022-04-27 15:03:41,298 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:41,298 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 56 [2022-04-27 15:03:41,300 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:41,300 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:41,331 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:41,332 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-27 15:03:41,332 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:41,332 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-27 15:03:41,332 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2022-04-27 15:03:41,332 INFO L87 Difference]: Start difference. First operand 211 states and 272 transitions. Second operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:43,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:43,366 INFO L93 Difference]: Finished difference Result 223 states and 284 transitions. [2022-04-27 15:03:43,366 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-27 15:03:43,366 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) Word has length 56 [2022-04-27 15:03:43,366 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:43,366 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:43,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 254 transitions. [2022-04-27 15:03:43,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:43,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 254 transitions. [2022-04-27 15:03:43,369 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 254 transitions. [2022-04-27 15:03:43,592 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 254 edges. 254 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:43,595 INFO L225 Difference]: With dead ends: 223 [2022-04-27 15:03:43,596 INFO L226 Difference]: Without dead ends: 209 [2022-04-27 15:03:43,596 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-04-27 15:03:43,597 INFO L413 NwaCegarLoop]: 208 mSDtfsCounter, 126 mSDsluCounter, 651 mSDsCounter, 0 mSdLazyCounter, 1427 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 859 SdHoareTripleChecker+Invalid, 1458 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 1427 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:43,597 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [126 Valid, 859 Invalid, 1458 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 1427 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-04-27 15:03:43,597 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 209 states. [2022-04-27 15:03:43,680 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 209 to 209. [2022-04-27 15:03:43,680 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:43,681 INFO L82 GeneralOperation]: Start isEquivalent. First operand 209 states. Second operand has 209 states, 171 states have (on average 1.3333333333333333) internal successors, (228), 173 states have internal predecessors, (228), 22 states have call successors, (22), 17 states have call predecessors, (22), 15 states have return successors, (18), 18 states have call predecessors, (18), 16 states have call successors, (18) [2022-04-27 15:03:43,681 INFO L74 IsIncluded]: Start isIncluded. First operand 209 states. Second operand has 209 states, 171 states have (on average 1.3333333333333333) internal successors, (228), 173 states have internal predecessors, (228), 22 states have call successors, (22), 17 states have call predecessors, (22), 15 states have return successors, (18), 18 states have call predecessors, (18), 16 states have call successors, (18) [2022-04-27 15:03:43,682 INFO L87 Difference]: Start difference. First operand 209 states. Second operand has 209 states, 171 states have (on average 1.3333333333333333) internal successors, (228), 173 states have internal predecessors, (228), 22 states have call successors, (22), 17 states have call predecessors, (22), 15 states have return successors, (18), 18 states have call predecessors, (18), 16 states have call successors, (18) [2022-04-27 15:03:43,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:43,684 INFO L93 Difference]: Finished difference Result 209 states and 268 transitions. [2022-04-27 15:03:43,684 INFO L276 IsEmpty]: Start isEmpty. Operand 209 states and 268 transitions. [2022-04-27 15:03:43,685 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:43,685 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:43,685 INFO L74 IsIncluded]: Start isIncluded. First operand has 209 states, 171 states have (on average 1.3333333333333333) internal successors, (228), 173 states have internal predecessors, (228), 22 states have call successors, (22), 17 states have call predecessors, (22), 15 states have return successors, (18), 18 states have call predecessors, (18), 16 states have call successors, (18) Second operand 209 states. [2022-04-27 15:03:43,685 INFO L87 Difference]: Start difference. First operand has 209 states, 171 states have (on average 1.3333333333333333) internal successors, (228), 173 states have internal predecessors, (228), 22 states have call successors, (22), 17 states have call predecessors, (22), 15 states have return successors, (18), 18 states have call predecessors, (18), 16 states have call successors, (18) Second operand 209 states. [2022-04-27 15:03:43,691 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:43,691 INFO L93 Difference]: Finished difference Result 209 states and 268 transitions. [2022-04-27 15:03:43,691 INFO L276 IsEmpty]: Start isEmpty. Operand 209 states and 268 transitions. [2022-04-27 15:03:43,692 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:43,692 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:43,692 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:43,692 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:43,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 209 states, 171 states have (on average 1.3333333333333333) internal successors, (228), 173 states have internal predecessors, (228), 22 states have call successors, (22), 17 states have call predecessors, (22), 15 states have return successors, (18), 18 states have call predecessors, (18), 16 states have call successors, (18) [2022-04-27 15:03:43,695 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 209 states to 209 states and 268 transitions. [2022-04-27 15:03:43,695 INFO L78 Accepts]: Start accepts. Automaton has 209 states and 268 transitions. Word has length 56 [2022-04-27 15:03:43,695 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:43,695 INFO L495 AbstractCegarLoop]: Abstraction has 209 states and 268 transitions. [2022-04-27 15:03:43,695 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 2.8) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (8), 7 states have call predecessors, (8), 4 states have return successors, (6), 4 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:43,695 INFO L276 IsEmpty]: Start isEmpty. Operand 209 states and 268 transitions. [2022-04-27 15:03:43,696 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-04-27 15:03:43,696 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:43,696 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:43,696 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-04-27 15:03:43,696 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:43,696 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:43,696 INFO L85 PathProgramCache]: Analyzing trace with hash 1221590652, now seen corresponding path program 1 times [2022-04-27 15:03:43,696 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:43,696 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [334344925] [2022-04-27 15:03:43,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:43,696 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:43,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:43,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:43,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:43,754 INFO L290 TraceCheckUtils]: 0: Hoare triple {23356#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {23320#true} is VALID [2022-04-27 15:03:43,754 INFO L290 TraceCheckUtils]: 1: Hoare triple {23320#true} assume true; {23320#true} is VALID [2022-04-27 15:03:43,754 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {23320#true} {23320#true} #783#return; {23320#true} is VALID [2022-04-27 15:03:43,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:43,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:43,773 INFO L290 TraceCheckUtils]: 0: Hoare triple {23357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {23320#true} is VALID [2022-04-27 15:03:43,773 INFO L290 TraceCheckUtils]: 1: Hoare triple {23320#true} assume true; {23320#true} is VALID [2022-04-27 15:03:43,773 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {23320#true} {23320#true} #715#return; {23320#true} is VALID [2022-04-27 15:03:43,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:43,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:43,788 INFO L290 TraceCheckUtils]: 0: Hoare triple {23358#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {23320#true} is VALID [2022-04-27 15:03:43,788 INFO L290 TraceCheckUtils]: 1: Hoare triple {23320#true} assume true; {23320#true} is VALID [2022-04-27 15:03:43,788 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {23320#true} {23320#true} #717#return; {23320#true} is VALID [2022-04-27 15:03:43,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-27 15:03:43,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:43,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-04-27 15:03:43,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:43,871 INFO L290 TraceCheckUtils]: 0: Hoare triple {23374#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {23320#true} is VALID [2022-04-27 15:03:43,871 INFO L290 TraceCheckUtils]: 1: Hoare triple {23320#true} assume !(0 != ~compRegistered~0); {23320#true} is VALID [2022-04-27 15:03:43,871 INFO L290 TraceCheckUtils]: 2: Hoare triple {23320#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {23320#true} is VALID [2022-04-27 15:03:43,871 INFO L290 TraceCheckUtils]: 3: Hoare triple {23320#true} assume 0 == ~tmp_ndt_6~0; {23320#true} is VALID [2022-04-27 15:03:43,871 INFO L290 TraceCheckUtils]: 4: Hoare triple {23320#true} ~returnVal2~0 := 0; {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:43,871 INFO L290 TraceCheckUtils]: 5: Hoare triple {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:43,872 INFO L290 TraceCheckUtils]: 6: Hoare triple {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:43,872 INFO L290 TraceCheckUtils]: 7: Hoare triple {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {23371#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-27 15:03:43,872 INFO L290 TraceCheckUtils]: 8: Hoare triple {23371#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {23371#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-27 15:03:43,872 INFO L290 TraceCheckUtils]: 9: Hoare triple {23371#(= ~lowerDriverReturn~0 0)} assume true; {23371#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-27 15:03:43,873 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {23371#(= ~lowerDriverReturn~0 0)} {23320#true} #767#return; {23371#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-27 15:03:43,873 INFO L290 TraceCheckUtils]: 0: Hoare triple {23359#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {23320#true} is VALID [2022-04-27 15:03:43,873 INFO L290 TraceCheckUtils]: 1: Hoare triple {23320#true} assume !(0 == ~irpStack__MinorFunction~0); {23320#true} is VALID [2022-04-27 15:03:43,873 INFO L290 TraceCheckUtils]: 2: Hoare triple {23320#true} assume !(23 == ~irpStack__MinorFunction~0); {23320#true} is VALID [2022-04-27 15:03:43,873 INFO L290 TraceCheckUtils]: 3: Hoare triple {23320#true} assume 2 == ~irpStack__MinorFunction~0; {23320#true} is VALID [2022-04-27 15:03:43,873 INFO L290 TraceCheckUtils]: 4: Hoare triple {23320#true} ~devExt__Removed~0 := 1; {23320#true} is VALID [2022-04-27 15:03:43,873 INFO L290 TraceCheckUtils]: 5: Hoare triple {23320#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {23320#true} is VALID [2022-04-27 15:03:43,873 INFO L290 TraceCheckUtils]: 6: Hoare triple {23320#true} #t~post15 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post15;havoc #t~post15;#t~post16 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post16;havoc #t~post16; {23320#true} is VALID [2022-04-27 15:03:43,874 INFO L272 TraceCheckUtils]: 7: Hoare triple {23320#true} call #t~ret17 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {23374#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:43,874 INFO L290 TraceCheckUtils]: 8: Hoare triple {23374#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {23320#true} is VALID [2022-04-27 15:03:43,874 INFO L290 TraceCheckUtils]: 9: Hoare triple {23320#true} assume !(0 != ~compRegistered~0); {23320#true} is VALID [2022-04-27 15:03:43,874 INFO L290 TraceCheckUtils]: 10: Hoare triple {23320#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {23320#true} is VALID [2022-04-27 15:03:43,874 INFO L290 TraceCheckUtils]: 11: Hoare triple {23320#true} assume 0 == ~tmp_ndt_6~0; {23320#true} is VALID [2022-04-27 15:03:43,874 INFO L290 TraceCheckUtils]: 12: Hoare triple {23320#true} ~returnVal2~0 := 0; {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:43,875 INFO L290 TraceCheckUtils]: 13: Hoare triple {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:43,875 INFO L290 TraceCheckUtils]: 14: Hoare triple {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:43,875 INFO L290 TraceCheckUtils]: 15: Hoare triple {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {23371#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-27 15:03:43,875 INFO L290 TraceCheckUtils]: 16: Hoare triple {23371#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {23371#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-27 15:03:43,876 INFO L290 TraceCheckUtils]: 17: Hoare triple {23371#(= ~lowerDriverReturn~0 0)} assume true; {23371#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-27 15:03:43,876 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {23371#(= ~lowerDriverReturn~0 0)} {23320#true} #767#return; {23371#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-27 15:03:43,876 INFO L290 TraceCheckUtils]: 19: Hoare triple {23371#(= ~lowerDriverReturn~0 0)} assume -2147483648 <= #t~ret17 && #t~ret17 <= 2147483647;havoc #t~ret17;~status~0 := 0; {23372#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,877 INFO L290 TraceCheckUtils]: 20: Hoare triple {23372#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {23373#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,877 INFO L290 TraceCheckUtils]: 21: Hoare triple {23373#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {23373#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,877 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {23373#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {23320#true} #723#return; {23354#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,879 INFO L272 TraceCheckUtils]: 0: Hoare triple {23320#true} call ULTIMATE.init(); {23356#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:43,879 INFO L290 TraceCheckUtils]: 1: Hoare triple {23356#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {23320#true} is VALID [2022-04-27 15:03:43,879 INFO L290 TraceCheckUtils]: 2: Hoare triple {23320#true} assume true; {23320#true} is VALID [2022-04-27 15:03:43,879 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {23320#true} {23320#true} #783#return; {23320#true} is VALID [2022-04-27 15:03:43,879 INFO L272 TraceCheckUtils]: 4: Hoare triple {23320#true} call #t~ret81 := main(); {23320#true} is VALID [2022-04-27 15:03:43,879 INFO L290 TraceCheckUtils]: 5: Hoare triple {23320#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {23320#true} is VALID [2022-04-27 15:03:43,880 INFO L272 TraceCheckUtils]: 6: Hoare triple {23320#true} call _BLAST_init(); {23357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:43,880 INFO L290 TraceCheckUtils]: 7: Hoare triple {23357#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {23320#true} is VALID [2022-04-27 15:03:43,880 INFO L290 TraceCheckUtils]: 8: Hoare triple {23320#true} assume true; {23320#true} is VALID [2022-04-27 15:03:43,880 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {23320#true} {23320#true} #715#return; {23320#true} is VALID [2022-04-27 15:03:43,880 INFO L290 TraceCheckUtils]: 10: Hoare triple {23320#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {23320#true} is VALID [2022-04-27 15:03:43,880 INFO L290 TraceCheckUtils]: 11: Hoare triple {23320#true} assume !(0 == ~irp_choice~0); {23320#true} is VALID [2022-04-27 15:03:43,880 INFO L272 TraceCheckUtils]: 12: Hoare triple {23320#true} call stub_driver_init(); {23358#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:43,880 INFO L290 TraceCheckUtils]: 13: Hoare triple {23358#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {23320#true} is VALID [2022-04-27 15:03:43,881 INFO L290 TraceCheckUtils]: 14: Hoare triple {23320#true} assume true; {23320#true} is VALID [2022-04-27 15:03:43,881 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {23320#true} {23320#true} #717#return; {23320#true} is VALID [2022-04-27 15:03:43,881 INFO L290 TraceCheckUtils]: 16: Hoare triple {23320#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {23320#true} is VALID [2022-04-27 15:03:43,881 INFO L290 TraceCheckUtils]: 17: Hoare triple {23320#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {23320#true} is VALID [2022-04-27 15:03:43,881 INFO L290 TraceCheckUtils]: 18: Hoare triple {23320#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {23320#true} is VALID [2022-04-27 15:03:43,881 INFO L290 TraceCheckUtils]: 19: Hoare triple {23320#true} assume 3 == ~tmp_ndt_3~0; {23320#true} is VALID [2022-04-27 15:03:43,881 INFO L272 TraceCheckUtils]: 20: Hoare triple {23320#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {23359#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:43,881 INFO L290 TraceCheckUtils]: 21: Hoare triple {23359#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {23320#true} is VALID [2022-04-27 15:03:43,881 INFO L290 TraceCheckUtils]: 22: Hoare triple {23320#true} assume !(0 == ~irpStack__MinorFunction~0); {23320#true} is VALID [2022-04-27 15:03:43,881 INFO L290 TraceCheckUtils]: 23: Hoare triple {23320#true} assume !(23 == ~irpStack__MinorFunction~0); {23320#true} is VALID [2022-04-27 15:03:43,882 INFO L290 TraceCheckUtils]: 24: Hoare triple {23320#true} assume 2 == ~irpStack__MinorFunction~0; {23320#true} is VALID [2022-04-27 15:03:43,882 INFO L290 TraceCheckUtils]: 25: Hoare triple {23320#true} ~devExt__Removed~0 := 1; {23320#true} is VALID [2022-04-27 15:03:43,882 INFO L290 TraceCheckUtils]: 26: Hoare triple {23320#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {23320#true} is VALID [2022-04-27 15:03:43,882 INFO L290 TraceCheckUtils]: 27: Hoare triple {23320#true} #t~post15 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post15;havoc #t~post15;#t~post16 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post16;havoc #t~post16; {23320#true} is VALID [2022-04-27 15:03:43,882 INFO L272 TraceCheckUtils]: 28: Hoare triple {23320#true} call #t~ret17 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {23374#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:43,882 INFO L290 TraceCheckUtils]: 29: Hoare triple {23374#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {23320#true} is VALID [2022-04-27 15:03:43,882 INFO L290 TraceCheckUtils]: 30: Hoare triple {23320#true} assume !(0 != ~compRegistered~0); {23320#true} is VALID [2022-04-27 15:03:43,882 INFO L290 TraceCheckUtils]: 31: Hoare triple {23320#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {23320#true} is VALID [2022-04-27 15:03:43,882 INFO L290 TraceCheckUtils]: 32: Hoare triple {23320#true} assume 0 == ~tmp_ndt_6~0; {23320#true} is VALID [2022-04-27 15:03:43,883 INFO L290 TraceCheckUtils]: 33: Hoare triple {23320#true} ~returnVal2~0 := 0; {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:43,883 INFO L290 TraceCheckUtils]: 34: Hoare triple {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~NP~0); {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:43,883 INFO L290 TraceCheckUtils]: 35: Hoare triple {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume !(~s~0 == ~MPR1~0); {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} is VALID [2022-04-27 15:03:43,883 INFO L290 TraceCheckUtils]: 36: Hoare triple {23375#(and (<= IofCallDriver_~returnVal2~0 0) (<= 0 IofCallDriver_~returnVal2~0))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {23371#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-27 15:03:43,884 INFO L290 TraceCheckUtils]: 37: Hoare triple {23371#(= ~lowerDriverReturn~0 0)} #res := ~returnVal2~0; {23371#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-27 15:03:43,884 INFO L290 TraceCheckUtils]: 38: Hoare triple {23371#(= ~lowerDriverReturn~0 0)} assume true; {23371#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-27 15:03:43,884 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {23371#(= ~lowerDriverReturn~0 0)} {23320#true} #767#return; {23371#(= ~lowerDriverReturn~0 0)} is VALID [2022-04-27 15:03:43,884 INFO L290 TraceCheckUtils]: 40: Hoare triple {23371#(= ~lowerDriverReturn~0 0)} assume -2147483648 <= #t~ret17 && #t~ret17 <= 2147483647;havoc #t~ret17;~status~0 := 0; {23372#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,885 INFO L290 TraceCheckUtils]: 41: Hoare triple {23372#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {23373#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,885 INFO L290 TraceCheckUtils]: 42: Hoare triple {23373#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {23373#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,885 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {23373#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {23320#true} #723#return; {23354#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,886 INFO L290 TraceCheckUtils]: 44: Hoare triple {23354#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {23355#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,886 INFO L290 TraceCheckUtils]: 45: Hoare triple {23355#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {23355#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,886 INFO L290 TraceCheckUtils]: 46: Hoare triple {23355#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {23355#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,886 INFO L290 TraceCheckUtils]: 47: Hoare triple {23355#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {23355#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,886 INFO L290 TraceCheckUtils]: 48: Hoare triple {23355#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {23355#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,887 INFO L290 TraceCheckUtils]: 49: Hoare triple {23355#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {23355#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,887 INFO L290 TraceCheckUtils]: 50: Hoare triple {23355#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {23355#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,887 INFO L290 TraceCheckUtils]: 51: Hoare triple {23355#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {23355#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:43,887 INFO L290 TraceCheckUtils]: 52: Hoare triple {23355#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {23321#false} is VALID [2022-04-27 15:03:43,887 INFO L272 TraceCheckUtils]: 53: Hoare triple {23321#false} call errorFn(); {23321#false} is VALID [2022-04-27 15:03:43,887 INFO L290 TraceCheckUtils]: 54: Hoare triple {23321#false} assume !false; {23321#false} is VALID [2022-04-27 15:03:43,888 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:43,888 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:43,888 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [334344925] [2022-04-27 15:03:43,888 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [334344925] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:43,888 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:43,888 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-27 15:03:43,888 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [822564817] [2022-04-27 15:03:43,888 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:43,888 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-27 15:03:43,888 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:43,889 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:43,931 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:43,931 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-04-27 15:03:43,931 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:43,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-04-27 15:03:43,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2022-04-27 15:03:43,931 INFO L87 Difference]: Start difference. First operand 209 states and 268 transitions. Second operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:46,424 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:46,424 INFO L93 Difference]: Finished difference Result 266 states and 329 transitions. [2022-04-27 15:03:46,424 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-27 15:03:46,424 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-27 15:03:46,424 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:46,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:46,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 304 transitions. [2022-04-27 15:03:46,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:46,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 304 transitions. [2022-04-27 15:03:46,428 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 304 transitions. [2022-04-27 15:03:46,639 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 304 edges. 304 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:46,645 INFO L225 Difference]: With dead ends: 266 [2022-04-27 15:03:46,645 INFO L226 Difference]: Without dead ends: 249 [2022-04-27 15:03:46,646 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=101, Invalid=405, Unknown=0, NotChecked=0, Total=506 [2022-04-27 15:03:46,646 INFO L413 NwaCegarLoop]: 212 mSDtfsCounter, 741 mSDsluCounter, 428 mSDsCounter, 0 mSdLazyCounter, 917 mSolverCounterSat, 137 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 741 SdHoareTripleChecker+Valid, 640 SdHoareTripleChecker+Invalid, 1054 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 137 IncrementalHoareTripleChecker+Valid, 917 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:46,646 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [741 Valid, 640 Invalid, 1054 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [137 Valid, 917 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-04-27 15:03:46,647 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 249 states. [2022-04-27 15:03:46,766 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 249 to 215. [2022-04-27 15:03:46,766 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:46,767 INFO L82 GeneralOperation]: Start isEquivalent. First operand 249 states. Second operand has 215 states, 176 states have (on average 1.3238636363636365) internal successors, (233), 179 states have internal predecessors, (233), 22 states have call successors, (22), 17 states have call predecessors, (22), 16 states have return successors, (20), 18 states have call predecessors, (20), 16 states have call successors, (20) [2022-04-27 15:03:46,767 INFO L74 IsIncluded]: Start isIncluded. First operand 249 states. Second operand has 215 states, 176 states have (on average 1.3238636363636365) internal successors, (233), 179 states have internal predecessors, (233), 22 states have call successors, (22), 17 states have call predecessors, (22), 16 states have return successors, (20), 18 states have call predecessors, (20), 16 states have call successors, (20) [2022-04-27 15:03:46,767 INFO L87 Difference]: Start difference. First operand 249 states. Second operand has 215 states, 176 states have (on average 1.3238636363636365) internal successors, (233), 179 states have internal predecessors, (233), 22 states have call successors, (22), 17 states have call predecessors, (22), 16 states have return successors, (20), 18 states have call predecessors, (20), 16 states have call successors, (20) [2022-04-27 15:03:46,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:46,772 INFO L93 Difference]: Finished difference Result 249 states and 311 transitions. [2022-04-27 15:03:46,772 INFO L276 IsEmpty]: Start isEmpty. Operand 249 states and 311 transitions. [2022-04-27 15:03:46,773 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:46,773 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:46,773 INFO L74 IsIncluded]: Start isIncluded. First operand has 215 states, 176 states have (on average 1.3238636363636365) internal successors, (233), 179 states have internal predecessors, (233), 22 states have call successors, (22), 17 states have call predecessors, (22), 16 states have return successors, (20), 18 states have call predecessors, (20), 16 states have call successors, (20) Second operand 249 states. [2022-04-27 15:03:46,773 INFO L87 Difference]: Start difference. First operand has 215 states, 176 states have (on average 1.3238636363636365) internal successors, (233), 179 states have internal predecessors, (233), 22 states have call successors, (22), 17 states have call predecessors, (22), 16 states have return successors, (20), 18 states have call predecessors, (20), 16 states have call successors, (20) Second operand 249 states. [2022-04-27 15:03:46,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:46,777 INFO L93 Difference]: Finished difference Result 249 states and 311 transitions. [2022-04-27 15:03:46,777 INFO L276 IsEmpty]: Start isEmpty. Operand 249 states and 311 transitions. [2022-04-27 15:03:46,777 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:46,777 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:46,777 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:46,777 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:46,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 215 states, 176 states have (on average 1.3238636363636365) internal successors, (233), 179 states have internal predecessors, (233), 22 states have call successors, (22), 17 states have call predecessors, (22), 16 states have return successors, (20), 18 states have call predecessors, (20), 16 states have call successors, (20) [2022-04-27 15:03:46,781 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 215 states to 215 states and 275 transitions. [2022-04-27 15:03:46,781 INFO L78 Accepts]: Start accepts. Automaton has 215 states and 275 transitions. Word has length 55 [2022-04-27 15:03:46,781 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:46,781 INFO L495 AbstractCegarLoop]: Abstraction has 215 states and 275 transitions. [2022-04-27 15:03:46,781 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 3.3076923076923075) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:46,781 INFO L276 IsEmpty]: Start isEmpty. Operand 215 states and 275 transitions. [2022-04-27 15:03:46,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-04-27 15:03:46,782 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:46,782 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:46,782 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-04-27 15:03:46,782 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:46,782 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:46,782 INFO L85 PathProgramCache]: Analyzing trace with hash 2050869943, now seen corresponding path program 1 times [2022-04-27 15:03:46,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:46,783 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1278105550] [2022-04-27 15:03:46,783 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:46,783 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:46,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:46,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:46,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:46,855 INFO L290 TraceCheckUtils]: 0: Hoare triple {24574#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {24538#true} is VALID [2022-04-27 15:03:46,855 INFO L290 TraceCheckUtils]: 1: Hoare triple {24538#true} assume true; {24538#true} is VALID [2022-04-27 15:03:46,855 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24538#true} {24538#true} #783#return; {24538#true} is VALID [2022-04-27 15:03:46,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:46,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:46,874 INFO L290 TraceCheckUtils]: 0: Hoare triple {24575#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24538#true} is VALID [2022-04-27 15:03:46,874 INFO L290 TraceCheckUtils]: 1: Hoare triple {24538#true} assume true; {24538#true} is VALID [2022-04-27 15:03:46,874 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24538#true} {24538#true} #715#return; {24538#true} is VALID [2022-04-27 15:03:46,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:46,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:46,885 INFO L290 TraceCheckUtils]: 0: Hoare triple {24576#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24538#true} is VALID [2022-04-27 15:03:46,885 INFO L290 TraceCheckUtils]: 1: Hoare triple {24538#true} assume true; {24538#true} is VALID [2022-04-27 15:03:46,885 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24538#true} {24538#true} #717#return; {24538#true} is VALID [2022-04-27 15:03:46,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-04-27 15:03:46,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:46,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-04-27 15:03:46,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:46,947 INFO L290 TraceCheckUtils]: 0: Hoare triple {24592#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24538#true} is VALID [2022-04-27 15:03:46,947 INFO L290 TraceCheckUtils]: 1: Hoare triple {24538#true} assume !(0 != ~compRegistered~0); {24538#true} is VALID [2022-04-27 15:03:46,947 INFO L290 TraceCheckUtils]: 2: Hoare triple {24538#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24538#true} is VALID [2022-04-27 15:03:46,947 INFO L290 TraceCheckUtils]: 3: Hoare triple {24538#true} assume 0 == ~tmp_ndt_6~0; {24538#true} is VALID [2022-04-27 15:03:46,947 INFO L290 TraceCheckUtils]: 4: Hoare triple {24538#true} ~returnVal2~0 := 0; {24538#true} is VALID [2022-04-27 15:03:46,947 INFO L290 TraceCheckUtils]: 5: Hoare triple {24538#true} assume !(~s~0 == ~NP~0); {24538#true} is VALID [2022-04-27 15:03:46,947 INFO L290 TraceCheckUtils]: 6: Hoare triple {24538#true} assume !(~s~0 == ~MPR1~0); {24538#true} is VALID [2022-04-27 15:03:46,947 INFO L290 TraceCheckUtils]: 7: Hoare triple {24538#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24593#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:46,948 INFO L290 TraceCheckUtils]: 8: Hoare triple {24593#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24594#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,948 INFO L290 TraceCheckUtils]: 9: Hoare triple {24594#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24594#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,948 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {24594#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24538#true} #771#return; {24589#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,949 INFO L290 TraceCheckUtils]: 0: Hoare triple {24577#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {24538#true} is VALID [2022-04-27 15:03:46,949 INFO L290 TraceCheckUtils]: 1: Hoare triple {24538#true} assume !(0 == ~irpStack__MinorFunction~0); {24538#true} is VALID [2022-04-27 15:03:46,949 INFO L290 TraceCheckUtils]: 2: Hoare triple {24538#true} assume !(23 == ~irpStack__MinorFunction~0); {24538#true} is VALID [2022-04-27 15:03:46,949 INFO L290 TraceCheckUtils]: 3: Hoare triple {24538#true} assume !(2 == ~irpStack__MinorFunction~0); {24538#true} is VALID [2022-04-27 15:03:46,949 INFO L290 TraceCheckUtils]: 4: Hoare triple {24538#true} assume 1 == ~irpStack__MinorFunction~0; {24538#true} is VALID [2022-04-27 15:03:46,949 INFO L290 TraceCheckUtils]: 5: Hoare triple {24538#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {24538#true} is VALID [2022-04-27 15:03:46,949 INFO L290 TraceCheckUtils]: 6: Hoare triple {24538#true} #t~post18 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post18;havoc #t~post18;#t~post19 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post19;havoc #t~post19; {24538#true} is VALID [2022-04-27 15:03:46,949 INFO L272 TraceCheckUtils]: 7: Hoare triple {24538#true} call #t~ret20 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {24592#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:46,950 INFO L290 TraceCheckUtils]: 8: Hoare triple {24592#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24538#true} is VALID [2022-04-27 15:03:46,950 INFO L290 TraceCheckUtils]: 9: Hoare triple {24538#true} assume !(0 != ~compRegistered~0); {24538#true} is VALID [2022-04-27 15:03:46,950 INFO L290 TraceCheckUtils]: 10: Hoare triple {24538#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24538#true} is VALID [2022-04-27 15:03:46,950 INFO L290 TraceCheckUtils]: 11: Hoare triple {24538#true} assume 0 == ~tmp_ndt_6~0; {24538#true} is VALID [2022-04-27 15:03:46,950 INFO L290 TraceCheckUtils]: 12: Hoare triple {24538#true} ~returnVal2~0 := 0; {24538#true} is VALID [2022-04-27 15:03:46,950 INFO L290 TraceCheckUtils]: 13: Hoare triple {24538#true} assume !(~s~0 == ~NP~0); {24538#true} is VALID [2022-04-27 15:03:46,950 INFO L290 TraceCheckUtils]: 14: Hoare triple {24538#true} assume !(~s~0 == ~MPR1~0); {24538#true} is VALID [2022-04-27 15:03:46,950 INFO L290 TraceCheckUtils]: 15: Hoare triple {24538#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24593#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:46,950 INFO L290 TraceCheckUtils]: 16: Hoare triple {24593#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24594#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,951 INFO L290 TraceCheckUtils]: 17: Hoare triple {24594#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24594#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,951 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {24594#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24538#true} #771#return; {24589#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,951 INFO L290 TraceCheckUtils]: 19: Hoare triple {24589#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret20 && #t~ret20 <= 2147483647;~status~0 := #t~ret20;havoc #t~ret20; {24590#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,952 INFO L290 TraceCheckUtils]: 20: Hoare triple {24590#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {24591#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,952 INFO L290 TraceCheckUtils]: 21: Hoare triple {24591#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {24591#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,952 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {24591#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {24538#true} #723#return; {24572#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,954 INFO L272 TraceCheckUtils]: 0: Hoare triple {24538#true} call ULTIMATE.init(); {24574#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:46,954 INFO L290 TraceCheckUtils]: 1: Hoare triple {24574#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {24538#true} is VALID [2022-04-27 15:03:46,954 INFO L290 TraceCheckUtils]: 2: Hoare triple {24538#true} assume true; {24538#true} is VALID [2022-04-27 15:03:46,954 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {24538#true} {24538#true} #783#return; {24538#true} is VALID [2022-04-27 15:03:46,954 INFO L272 TraceCheckUtils]: 4: Hoare triple {24538#true} call #t~ret81 := main(); {24538#true} is VALID [2022-04-27 15:03:46,954 INFO L290 TraceCheckUtils]: 5: Hoare triple {24538#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {24538#true} is VALID [2022-04-27 15:03:46,955 INFO L272 TraceCheckUtils]: 6: Hoare triple {24538#true} call _BLAST_init(); {24575#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:46,955 INFO L290 TraceCheckUtils]: 7: Hoare triple {24575#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24538#true} is VALID [2022-04-27 15:03:46,955 INFO L290 TraceCheckUtils]: 8: Hoare triple {24538#true} assume true; {24538#true} is VALID [2022-04-27 15:03:46,955 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {24538#true} {24538#true} #715#return; {24538#true} is VALID [2022-04-27 15:03:46,955 INFO L290 TraceCheckUtils]: 10: Hoare triple {24538#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {24538#true} is VALID [2022-04-27 15:03:46,955 INFO L290 TraceCheckUtils]: 11: Hoare triple {24538#true} assume !(0 == ~irp_choice~0); {24538#true} is VALID [2022-04-27 15:03:46,956 INFO L272 TraceCheckUtils]: 12: Hoare triple {24538#true} call stub_driver_init(); {24576#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:46,956 INFO L290 TraceCheckUtils]: 13: Hoare triple {24576#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {24538#true} is VALID [2022-04-27 15:03:46,956 INFO L290 TraceCheckUtils]: 14: Hoare triple {24538#true} assume true; {24538#true} is VALID [2022-04-27 15:03:46,956 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {24538#true} {24538#true} #717#return; {24538#true} is VALID [2022-04-27 15:03:46,956 INFO L290 TraceCheckUtils]: 16: Hoare triple {24538#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {24538#true} is VALID [2022-04-27 15:03:46,956 INFO L290 TraceCheckUtils]: 17: Hoare triple {24538#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {24538#true} is VALID [2022-04-27 15:03:46,956 INFO L290 TraceCheckUtils]: 18: Hoare triple {24538#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {24538#true} is VALID [2022-04-27 15:03:46,956 INFO L290 TraceCheckUtils]: 19: Hoare triple {24538#true} assume 3 == ~tmp_ndt_3~0; {24538#true} is VALID [2022-04-27 15:03:46,957 INFO L272 TraceCheckUtils]: 20: Hoare triple {24538#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {24577#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:46,957 INFO L290 TraceCheckUtils]: 21: Hoare triple {24577#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {24538#true} is VALID [2022-04-27 15:03:46,957 INFO L290 TraceCheckUtils]: 22: Hoare triple {24538#true} assume !(0 == ~irpStack__MinorFunction~0); {24538#true} is VALID [2022-04-27 15:03:46,957 INFO L290 TraceCheckUtils]: 23: Hoare triple {24538#true} assume !(23 == ~irpStack__MinorFunction~0); {24538#true} is VALID [2022-04-27 15:03:46,957 INFO L290 TraceCheckUtils]: 24: Hoare triple {24538#true} assume !(2 == ~irpStack__MinorFunction~0); {24538#true} is VALID [2022-04-27 15:03:46,957 INFO L290 TraceCheckUtils]: 25: Hoare triple {24538#true} assume 1 == ~irpStack__MinorFunction~0; {24538#true} is VALID [2022-04-27 15:03:46,957 INFO L290 TraceCheckUtils]: 26: Hoare triple {24538#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {24538#true} is VALID [2022-04-27 15:03:46,957 INFO L290 TraceCheckUtils]: 27: Hoare triple {24538#true} #t~post18 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post18;havoc #t~post18;#t~post19 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post19;havoc #t~post19; {24538#true} is VALID [2022-04-27 15:03:46,957 INFO L272 TraceCheckUtils]: 28: Hoare triple {24538#true} call #t~ret20 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {24592#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:46,957 INFO L290 TraceCheckUtils]: 29: Hoare triple {24592#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {24538#true} is VALID [2022-04-27 15:03:46,957 INFO L290 TraceCheckUtils]: 30: Hoare triple {24538#true} assume !(0 != ~compRegistered~0); {24538#true} is VALID [2022-04-27 15:03:46,958 INFO L290 TraceCheckUtils]: 31: Hoare triple {24538#true} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {24538#true} is VALID [2022-04-27 15:03:46,958 INFO L290 TraceCheckUtils]: 32: Hoare triple {24538#true} assume 0 == ~tmp_ndt_6~0; {24538#true} is VALID [2022-04-27 15:03:46,958 INFO L290 TraceCheckUtils]: 33: Hoare triple {24538#true} ~returnVal2~0 := 0; {24538#true} is VALID [2022-04-27 15:03:46,958 INFO L290 TraceCheckUtils]: 34: Hoare triple {24538#true} assume !(~s~0 == ~NP~0); {24538#true} is VALID [2022-04-27 15:03:46,958 INFO L290 TraceCheckUtils]: 35: Hoare triple {24538#true} assume !(~s~0 == ~MPR1~0); {24538#true} is VALID [2022-04-27 15:03:46,958 INFO L290 TraceCheckUtils]: 36: Hoare triple {24538#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; {24593#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} is VALID [2022-04-27 15:03:46,958 INFO L290 TraceCheckUtils]: 37: Hoare triple {24593#(= ~lowerDriverReturn~0 IofCallDriver_~returnVal2~0)} #res := ~returnVal2~0; {24594#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,958 INFO L290 TraceCheckUtils]: 38: Hoare triple {24594#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} assume true; {24594#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,959 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {24594#(= |IofCallDriver_#res| ~lowerDriverReturn~0)} {24538#true} #771#return; {24589#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,959 INFO L290 TraceCheckUtils]: 40: Hoare triple {24589#(= |KbFilter_PnP_#t~ret20| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret20 && #t~ret20 <= 2147483647;~status~0 := #t~ret20;havoc #t~ret20; {24590#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,960 INFO L290 TraceCheckUtils]: 41: Hoare triple {24590#(= KbFilter_PnP_~status~0 ~lowerDriverReturn~0)} #res := ~status~0; {24591#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,960 INFO L290 TraceCheckUtils]: 42: Hoare triple {24591#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} assume true; {24591#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,960 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {24591#(= |KbFilter_PnP_#res| ~lowerDriverReturn~0)} {24538#true} #723#return; {24572#(= |main_#t~ret31| ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,961 INFO L290 TraceCheckUtils]: 44: Hoare triple {24572#(= |main_#t~ret31| ~lowerDriverReturn~0)} assume -2147483648 <= #t~ret31 && #t~ret31 <= 2147483647;~status~1 := #t~ret31;havoc #t~ret31; {24573#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,961 INFO L290 TraceCheckUtils]: 45: Hoare triple {24573#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24573#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,961 INFO L290 TraceCheckUtils]: 46: Hoare triple {24573#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24573#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,961 INFO L290 TraceCheckUtils]: 47: Hoare triple {24573#(= main_~status~1 ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {24573#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,961 INFO L290 TraceCheckUtils]: 48: Hoare triple {24573#(= main_~status~1 ~lowerDriverReturn~0)} assume -1 != ~status~1; {24573#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,962 INFO L290 TraceCheckUtils]: 49: Hoare triple {24573#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {24573#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,962 INFO L290 TraceCheckUtils]: 50: Hoare triple {24573#(= main_~status~1 ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {24573#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,962 INFO L290 TraceCheckUtils]: 51: Hoare triple {24573#(= main_~status~1 ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {24573#(= main_~status~1 ~lowerDriverReturn~0)} is VALID [2022-04-27 15:03:46,962 INFO L290 TraceCheckUtils]: 52: Hoare triple {24573#(= main_~status~1 ~lowerDriverReturn~0)} assume ~status~1 != ~lowerDriverReturn~0; {24539#false} is VALID [2022-04-27 15:03:46,962 INFO L272 TraceCheckUtils]: 53: Hoare triple {24539#false} call errorFn(); {24539#false} is VALID [2022-04-27 15:03:46,963 INFO L290 TraceCheckUtils]: 54: Hoare triple {24539#false} assume !false; {24539#false} is VALID [2022-04-27 15:03:46,963 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:46,963 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:46,963 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1278105550] [2022-04-27 15:03:46,963 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1278105550] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:46,963 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:46,963 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-27 15:03:46,963 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1845499231] [2022-04-27 15:03:46,963 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:46,964 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-27 15:03:46,964 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:46,964 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:47,010 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:47,011 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-27 15:03:47,011 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:47,011 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-27 15:03:47,011 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-04-27 15:03:47,011 INFO L87 Difference]: Start difference. First operand 215 states and 275 transitions. Second operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:49,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:49,484 INFO L93 Difference]: Finished difference Result 231 states and 291 transitions. [2022-04-27 15:03:49,484 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-27 15:03:49,485 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-04-27 15:03:49,485 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:49,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:49,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 254 transitions. [2022-04-27 15:03:49,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:49,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 254 transitions. [2022-04-27 15:03:49,488 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 254 transitions. [2022-04-27 15:03:49,704 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 254 edges. 254 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:49,707 INFO L225 Difference]: With dead ends: 231 [2022-04-27 15:03:49,707 INFO L226 Difference]: Without dead ends: 193 [2022-04-27 15:03:49,707 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-04-27 15:03:49,708 INFO L413 NwaCegarLoop]: 204 mSDtfsCounter, 242 mSDsluCounter, 570 mSDsCounter, 0 mSdLazyCounter, 1249 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 774 SdHoareTripleChecker+Invalid, 1296 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 1249 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:49,708 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [242 Valid, 774 Invalid, 1296 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 1249 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-27 15:03:49,708 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 193 states. [2022-04-27 15:03:49,816 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 193 to 193. [2022-04-27 15:03:49,816 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:49,816 INFO L82 GeneralOperation]: Start isEquivalent. First operand 193 states. Second operand has 193 states, 155 states have (on average 1.2451612903225806) internal successors, (193), 158 states have internal predecessors, (193), 21 states have call successors, (21), 17 states have call predecessors, (21), 16 states have return successors, (18), 17 states have call predecessors, (18), 15 states have call successors, (18) [2022-04-27 15:03:49,816 INFO L74 IsIncluded]: Start isIncluded. First operand 193 states. Second operand has 193 states, 155 states have (on average 1.2451612903225806) internal successors, (193), 158 states have internal predecessors, (193), 21 states have call successors, (21), 17 states have call predecessors, (21), 16 states have return successors, (18), 17 states have call predecessors, (18), 15 states have call successors, (18) [2022-04-27 15:03:49,816 INFO L87 Difference]: Start difference. First operand 193 states. Second operand has 193 states, 155 states have (on average 1.2451612903225806) internal successors, (193), 158 states have internal predecessors, (193), 21 states have call successors, (21), 17 states have call predecessors, (21), 16 states have return successors, (18), 17 states have call predecessors, (18), 15 states have call successors, (18) [2022-04-27 15:03:49,819 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:49,819 INFO L93 Difference]: Finished difference Result 193 states and 232 transitions. [2022-04-27 15:03:49,819 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 232 transitions. [2022-04-27 15:03:49,819 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:49,819 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:49,819 INFO L74 IsIncluded]: Start isIncluded. First operand has 193 states, 155 states have (on average 1.2451612903225806) internal successors, (193), 158 states have internal predecessors, (193), 21 states have call successors, (21), 17 states have call predecessors, (21), 16 states have return successors, (18), 17 states have call predecessors, (18), 15 states have call successors, (18) Second operand 193 states. [2022-04-27 15:03:49,819 INFO L87 Difference]: Start difference. First operand has 193 states, 155 states have (on average 1.2451612903225806) internal successors, (193), 158 states have internal predecessors, (193), 21 states have call successors, (21), 17 states have call predecessors, (21), 16 states have return successors, (18), 17 states have call predecessors, (18), 15 states have call successors, (18) Second operand 193 states. [2022-04-27 15:03:49,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:49,821 INFO L93 Difference]: Finished difference Result 193 states and 232 transitions. [2022-04-27 15:03:49,821 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 232 transitions. [2022-04-27 15:03:49,822 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:49,822 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:49,822 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:49,822 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:49,822 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 193 states, 155 states have (on average 1.2451612903225806) internal successors, (193), 158 states have internal predecessors, (193), 21 states have call successors, (21), 17 states have call predecessors, (21), 16 states have return successors, (18), 17 states have call predecessors, (18), 15 states have call successors, (18) [2022-04-27 15:03:49,824 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 193 states to 193 states and 232 transitions. [2022-04-27 15:03:49,824 INFO L78 Accepts]: Start accepts. Automaton has 193 states and 232 transitions. Word has length 55 [2022-04-27 15:03:49,824 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:49,824 INFO L495 AbstractCegarLoop]: Abstraction has 193 states and 232 transitions. [2022-04-27 15:03:49,825 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.0714285714285716) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (7), 7 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 1 states have call successors, (5) [2022-04-27 15:03:49,825 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 232 transitions. [2022-04-27 15:03:49,825 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-04-27 15:03:49,825 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:49,825 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:49,825 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-04-27 15:03:49,825 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:49,825 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:49,826 INFO L85 PathProgramCache]: Analyzing trace with hash 1918234721, now seen corresponding path program 1 times [2022-04-27 15:03:49,826 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:49,826 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [898403035] [2022-04-27 15:03:49,826 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:49,826 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:49,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:49,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-27 15:03:49,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:49,881 INFO L290 TraceCheckUtils]: 0: Hoare triple {25587#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {25556#true} is VALID [2022-04-27 15:03:49,881 INFO L290 TraceCheckUtils]: 1: Hoare triple {25556#true} assume true; {25556#true} is VALID [2022-04-27 15:03:49,881 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25556#true} {25556#true} #783#return; {25556#true} is VALID [2022-04-27 15:03:49,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-04-27 15:03:49,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:49,901 INFO L290 TraceCheckUtils]: 0: Hoare triple {25588#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25556#true} is VALID [2022-04-27 15:03:49,901 INFO L290 TraceCheckUtils]: 1: Hoare triple {25556#true} assume true; {25556#true} is VALID [2022-04-27 15:03:49,901 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25556#true} {25556#true} #715#return; {25556#true} is VALID [2022-04-27 15:03:49,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-04-27 15:03:49,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:49,912 INFO L290 TraceCheckUtils]: 0: Hoare triple {25589#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25556#true} is VALID [2022-04-27 15:03:49,912 INFO L290 TraceCheckUtils]: 1: Hoare triple {25556#true} assume true; {25556#true} is VALID [2022-04-27 15:03:49,912 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25556#true} {25556#true} #717#return; {25556#true} is VALID [2022-04-27 15:03:49,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-04-27 15:03:49,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:49,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-04-27 15:03:49,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:49,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-04-27 15:03:49,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-27 15:03:49,964 INFO L290 TraceCheckUtils]: 0: Hoare triple {25601#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25556#true} is VALID [2022-04-27 15:03:49,964 INFO L290 TraceCheckUtils]: 1: Hoare triple {25556#true} assume true; {25556#true} is VALID [2022-04-27 15:03:49,964 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25556#true} {25556#true} #713#return; {25556#true} is VALID [2022-04-27 15:03:49,964 INFO L290 TraceCheckUtils]: 0: Hoare triple {25601#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25556#true} is VALID [2022-04-27 15:03:49,964 INFO L272 TraceCheckUtils]: 1: Hoare triple {25556#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25601#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:49,976 INFO L290 TraceCheckUtils]: 2: Hoare triple {25601#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25556#true} is VALID [2022-04-27 15:03:49,976 INFO L290 TraceCheckUtils]: 3: Hoare triple {25556#true} assume true; {25556#true} is VALID [2022-04-27 15:03:49,976 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {25556#true} {25556#true} #713#return; {25556#true} is VALID [2022-04-27 15:03:49,977 INFO L290 TraceCheckUtils]: 5: Hoare triple {25556#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25605#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-27 15:03:49,977 INFO L290 TraceCheckUtils]: 6: Hoare triple {25605#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {25605#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-27 15:03:49,978 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {25605#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {25556#true} #777#return; {25599#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-27 15:03:49,978 INFO L290 TraceCheckUtils]: 0: Hoare triple {25590#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {25556#true} is VALID [2022-04-27 15:03:49,978 INFO L290 TraceCheckUtils]: 1: Hoare triple {25556#true} assume 0 != ~compRegistered~0; {25556#true} is VALID [2022-04-27 15:03:49,978 INFO L272 TraceCheckUtils]: 2: Hoare triple {25556#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {25601#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:49,978 INFO L290 TraceCheckUtils]: 3: Hoare triple {25601#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25556#true} is VALID [2022-04-27 15:03:49,979 INFO L272 TraceCheckUtils]: 4: Hoare triple {25556#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25601#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:49,979 INFO L290 TraceCheckUtils]: 5: Hoare triple {25601#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25556#true} is VALID [2022-04-27 15:03:49,979 INFO L290 TraceCheckUtils]: 6: Hoare triple {25556#true} assume true; {25556#true} is VALID [2022-04-27 15:03:49,979 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {25556#true} {25556#true} #713#return; {25556#true} is VALID [2022-04-27 15:03:49,979 INFO L290 TraceCheckUtils]: 8: Hoare triple {25556#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25605#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-27 15:03:49,980 INFO L290 TraceCheckUtils]: 9: Hoare triple {25605#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {25605#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-27 15:03:49,980 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {25605#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {25556#true} #777#return; {25599#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-27 15:03:49,981 INFO L290 TraceCheckUtils]: 11: Hoare triple {25599#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {25600#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-27 15:03:49,981 INFO L290 TraceCheckUtils]: 12: Hoare triple {25600#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {25557#false} is VALID [2022-04-27 15:03:49,981 INFO L290 TraceCheckUtils]: 13: Hoare triple {25557#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {25557#false} is VALID [2022-04-27 15:03:49,981 INFO L290 TraceCheckUtils]: 14: Hoare triple {25557#false} assume 0 == ~tmp_ndt_6~0; {25557#false} is VALID [2022-04-27 15:03:49,981 INFO L290 TraceCheckUtils]: 15: Hoare triple {25557#false} ~returnVal2~0 := 0; {25557#false} is VALID [2022-04-27 15:03:49,981 INFO L290 TraceCheckUtils]: 16: Hoare triple {25557#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {25557#false} is VALID [2022-04-27 15:03:49,981 INFO L290 TraceCheckUtils]: 17: Hoare triple {25557#false} #res := ~returnVal2~0; {25557#false} is VALID [2022-04-27 15:03:49,981 INFO L290 TraceCheckUtils]: 18: Hoare triple {25557#false} assume true; {25557#false} is VALID [2022-04-27 15:03:49,981 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {25557#false} {25556#true} #755#return; {25557#false} is VALID [2022-04-27 15:03:49,982 INFO L272 TraceCheckUtils]: 0: Hoare triple {25556#true} call ULTIMATE.init(); {25587#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-27 15:03:49,982 INFO L290 TraceCheckUtils]: 1: Hoare triple {25587#(and (= |old(~Executive~0)| ~Executive~0) (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~KernelMode~0 |old(~KernelMode~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~myStatus~0 |old(~myStatus~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= |old(~DevicePowerState~0)| ~DevicePowerState~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= |#NULL.offset| |old(#NULL.offset)|) (= ~s~0 |old(~s~0)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(23, 2);call #Ultimate.allocInit(12, 3);~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; {25556#true} is VALID [2022-04-27 15:03:49,982 INFO L290 TraceCheckUtils]: 2: Hoare triple {25556#true} assume true; {25556#true} is VALID [2022-04-27 15:03:49,982 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {25556#true} {25556#true} #783#return; {25556#true} is VALID [2022-04-27 15:03:49,983 INFO L272 TraceCheckUtils]: 4: Hoare triple {25556#true} call #t~ret81 := main(); {25556#true} is VALID [2022-04-27 15:03:49,983 INFO L290 TraceCheckUtils]: 5: Hoare triple {25556#true} havoc ~status~1;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~irp~0 := #t~nondet21;havoc #t~nondet21;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~irp_choice~0 := #t~nondet22;havoc #t~nondet22;assume -2147483648 <= #t~nondet23 && #t~nondet23 <= 2147483647;~devobj~0 := #t~nondet23;havoc #t~nondet23;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; {25556#true} is VALID [2022-04-27 15:03:49,983 INFO L272 TraceCheckUtils]: 6: Hoare triple {25556#true} call _BLAST_init(); {25588#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:49,983 INFO L290 TraceCheckUtils]: 7: Hoare triple {25588#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= ~DC~0 |old(~DC~0)|) (= |old(~SKIP1~0)| ~SKIP1~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~MPR3~0 |old(~MPR3~0)|) (= ~MPR1~0 |old(~MPR1~0)|) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= |old(~UNLOADED~0)| ~UNLOADED~0) (= ~compFptr~0 |old(~compFptr~0)|) (= ~NP~0 |old(~NP~0)|) (= ~pended~0 |old(~pended~0)|) (= ~IPC~0 |old(~IPC~0)|) (= |old(~SKIP2~0)| ~SKIP2~0) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25556#true} is VALID [2022-04-27 15:03:49,984 INFO L290 TraceCheckUtils]: 8: Hoare triple {25556#true} assume true; {25556#true} is VALID [2022-04-27 15:03:49,984 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {25556#true} {25556#true} #715#return; {25556#true} is VALID [2022-04-27 15:03:49,984 INFO L290 TraceCheckUtils]: 10: Hoare triple {25556#true} assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; {25556#true} is VALID [2022-04-27 15:03:49,984 INFO L290 TraceCheckUtils]: 11: Hoare triple {25556#true} assume !(0 == ~irp_choice~0); {25556#true} is VALID [2022-04-27 15:03:49,984 INFO L272 TraceCheckUtils]: 12: Hoare triple {25556#true} call stub_driver_init(); {25589#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:49,984 INFO L290 TraceCheckUtils]: 13: Hoare triple {25589#(and (= |old(~compRegistered~0)| ~compRegistered~0) (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~compFptr~0 |old(~compFptr~0)|) (= ~pended~0 |old(~pended~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {25556#true} is VALID [2022-04-27 15:03:49,984 INFO L290 TraceCheckUtils]: 14: Hoare triple {25556#true} assume true; {25556#true} is VALID [2022-04-27 15:03:49,984 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {25556#true} {25556#true} #717#return; {25556#true} is VALID [2022-04-27 15:03:49,984 INFO L290 TraceCheckUtils]: 16: Hoare triple {25556#true} assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647;~tmp_ndt_1~0 := #t~nondet24;havoc #t~nondet24; {25556#true} is VALID [2022-04-27 15:03:49,984 INFO L290 TraceCheckUtils]: 17: Hoare triple {25556#true} assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet25 && #t~nondet25 <= 2147483647;~tmp_ndt_2~0 := #t~nondet25;havoc #t~nondet25; {25556#true} is VALID [2022-04-27 15:03:49,984 INFO L290 TraceCheckUtils]: 18: Hoare triple {25556#true} assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~tmp_ndt_3~0 := #t~nondet26;havoc #t~nondet26; {25556#true} is VALID [2022-04-27 15:03:49,984 INFO L290 TraceCheckUtils]: 19: Hoare triple {25556#true} assume 3 == ~tmp_ndt_3~0; {25556#true} is VALID [2022-04-27 15:03:49,985 INFO L272 TraceCheckUtils]: 20: Hoare triple {25556#true} call #t~ret31 := KbFilter_PnP(~devobj~0, ~pirp~0); {25556#true} is VALID [2022-04-27 15:03:49,985 INFO L290 TraceCheckUtils]: 21: Hoare triple {25556#true} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~event~0 := #t~nondet4;havoc #t~nondet4;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet5;havoc #t~nondet5;assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet6;havoc #t~nondet6;assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet7;havoc #t~nondet7;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet8;havoc #t~nondet8;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet9;havoc #t~nondet9;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; {25556#true} is VALID [2022-04-27 15:03:49,985 INFO L290 TraceCheckUtils]: 22: Hoare triple {25556#true} assume 0 == ~irpStack__MinorFunction~0; {25556#true} is VALID [2022-04-27 15:03:49,985 INFO L290 TraceCheckUtils]: 23: Hoare triple {25556#true} ~irpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~nextIrpSp~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~nextIrpSp__Control~0 := 0; {25556#true} is VALID [2022-04-27 15:03:49,985 INFO L290 TraceCheckUtils]: 24: Hoare triple {25556#true} assume !(~s~0 != ~NP~0); {25556#true} is VALID [2022-04-27 15:03:49,985 INFO L290 TraceCheckUtils]: 25: Hoare triple {25556#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {25556#true} is VALID [2022-04-27 15:03:49,985 INFO L290 TraceCheckUtils]: 26: Hoare triple {25556#true} ~irpSp___0~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0 - 1;~irpSp__Context~0 := ~event~0;~irpSp__Control~0 := 224; {25556#true} is VALID [2022-04-27 15:03:49,985 INFO L272 TraceCheckUtils]: 27: Hoare triple {25556#true} call #t~ret10 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); {25590#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-04-27 15:03:49,985 INFO L290 TraceCheckUtils]: 28: Hoare triple {25590#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet34 && #t~nondet34 <= 2147483647;~lcontext~0 := #t~nondet34;havoc #t~nondet34;havoc ~__cil_tmp7~0; {25556#true} is VALID [2022-04-27 15:03:49,985 INFO L290 TraceCheckUtils]: 29: Hoare triple {25556#true} assume 0 != ~compRegistered~0; {25556#true} is VALID [2022-04-27 15:03:49,986 INFO L272 TraceCheckUtils]: 30: Hoare triple {25556#true} call #t~ret35 := KbFilter_Complete(~DeviceObject, ~Irp, ~lcontext~0); {25601#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:49,986 INFO L290 TraceCheckUtils]: 31: Hoare triple {25601#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;havoc ~event~1;~event~1 := ~Context; {25556#true} is VALID [2022-04-27 15:03:49,986 INFO L272 TraceCheckUtils]: 32: Hoare triple {25556#true} call #t~ret40 := KeSetEvent(~event~1, 0, 0); {25601#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} is VALID [2022-04-27 15:03:49,986 INFO L290 TraceCheckUtils]: 33: Hoare triple {25601#(= ~setEventCalled~0 |old(~setEventCalled~0)|)} ~Event := #in~Event;~Increment := #in~Increment;~Wait := #in~Wait;assume -2147483648 <= #t~nondet38 && #t~nondet38 <= 2147483647;~l~0 := #t~nondet38;havoc #t~nondet38;~setEventCalled~0 := 1;#res := ~l~0; {25556#true} is VALID [2022-04-27 15:03:49,986 INFO L290 TraceCheckUtils]: 34: Hoare triple {25556#true} assume true; {25556#true} is VALID [2022-04-27 15:03:49,987 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {25556#true} {25556#true} #713#return; {25556#true} is VALID [2022-04-27 15:03:49,987 INFO L290 TraceCheckUtils]: 36: Hoare triple {25556#true} assume -2147483648 <= #t~ret40 && #t~ret40 <= 2147483647;havoc #t~ret40;#res := -1073741802; {25605#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-27 15:03:49,987 INFO L290 TraceCheckUtils]: 37: Hoare triple {25605#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} assume true; {25605#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} is VALID [2022-04-27 15:03:49,988 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {25605#(and (<= (+ 1073741802 |KbFilter_Complete_#res|) 0) (<= 0 (+ 1073741802 |KbFilter_Complete_#res|)))} {25556#true} #777#return; {25599#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} is VALID [2022-04-27 15:03:49,988 INFO L290 TraceCheckUtils]: 39: Hoare triple {25599#(= (+ |IofCallDriver_#t~ret35| 1073741802) 0)} assume -2147483648 <= #t~ret35 && #t~ret35 <= 2147483647;~compRetStatus~0 := #t~ret35;havoc #t~ret35;~__cil_tmp7~0 := ~compRetStatus~0; {25600#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} is VALID [2022-04-27 15:03:49,988 INFO L290 TraceCheckUtils]: 40: Hoare triple {25600#(= IofCallDriver_~__cil_tmp7~0 (- 1073741802))} assume !(-1073741802 == ~__cil_tmp7~0); {25557#false} is VALID [2022-04-27 15:03:49,988 INFO L290 TraceCheckUtils]: 41: Hoare triple {25557#false} havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet36 && #t~nondet36 <= 2147483647;~tmp_ndt_6~0 := #t~nondet36;havoc #t~nondet36; {25557#false} is VALID [2022-04-27 15:03:49,988 INFO L290 TraceCheckUtils]: 42: Hoare triple {25557#false} assume 0 == ~tmp_ndt_6~0; {25557#false} is VALID [2022-04-27 15:03:49,988 INFO L290 TraceCheckUtils]: 43: Hoare triple {25557#false} ~returnVal2~0 := 0; {25557#false} is VALID [2022-04-27 15:03:49,989 INFO L290 TraceCheckUtils]: 44: Hoare triple {25557#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; {25557#false} is VALID [2022-04-27 15:03:49,989 INFO L290 TraceCheckUtils]: 45: Hoare triple {25557#false} #res := ~returnVal2~0; {25557#false} is VALID [2022-04-27 15:03:49,989 INFO L290 TraceCheckUtils]: 46: Hoare triple {25557#false} assume true; {25557#false} is VALID [2022-04-27 15:03:49,989 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {25557#false} {25556#true} #755#return; {25557#false} is VALID [2022-04-27 15:03:49,989 INFO L290 TraceCheckUtils]: 48: Hoare triple {25557#false} assume -2147483648 <= #t~ret10 && #t~ret10 <= 2147483647;~status~0 := #t~ret10;havoc #t~ret10;~__cil_tmp23~0 := ~status~0; {25557#false} is VALID [2022-04-27 15:03:49,989 INFO L290 TraceCheckUtils]: 49: Hoare triple {25557#false} assume !(259 == ~__cil_tmp23~0); {25557#false} is VALID [2022-04-27 15:03:49,989 INFO L290 TraceCheckUtils]: 50: Hoare triple {25557#false} assume ~status~0 >= 0; {25557#false} is VALID [2022-04-27 15:03:49,989 INFO L290 TraceCheckUtils]: 51: Hoare triple {25557#false} assume ~myStatus~0 >= 0;~devExt__Started~0 := 1;~devExt__Removed~0 := 0;~devExt__SurpriseRemoved~0 := 0; {25557#false} is VALID [2022-04-27 15:03:49,989 INFO L290 TraceCheckUtils]: 52: Hoare triple {25557#false} ~Irp__IoStatus__Status~0 := ~status~0;~myStatus~0 := ~status~0;~Irp__IoStatus__Information~0 := 0; {25557#false} is VALID [2022-04-27 15:03:49,989 INFO L272 TraceCheckUtils]: 53: Hoare triple {25557#false} call IofCompleteRequest(~Irp, 0); {25557#false} is VALID [2022-04-27 15:03:49,989 INFO L290 TraceCheckUtils]: 54: Hoare triple {25557#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {25557#false} is VALID [2022-04-27 15:03:49,989 INFO L290 TraceCheckUtils]: 55: Hoare triple {25557#false} assume !(~s~0 == ~NP~0); {25557#false} is VALID [2022-04-27 15:03:49,989 INFO L272 TraceCheckUtils]: 56: Hoare triple {25557#false} call errorFn(); {25557#false} is VALID [2022-04-27 15:03:49,989 INFO L290 TraceCheckUtils]: 57: Hoare triple {25557#false} assume !false; {25557#false} is VALID [2022-04-27 15:03:49,989 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-27 15:03:49,989 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-27 15:03:49,989 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [898403035] [2022-04-27 15:03:49,990 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [898403035] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-27 15:03:49,990 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-27 15:03:49,990 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-04-27 15:03:49,990 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1630842409] [2022-04-27 15:03:49,990 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-27 15:03:49,990 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-27 15:03:49,990 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-27 15:03:49,990 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:50,025 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:50,025 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-04-27 15:03:50,025 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-04-27 15:03:50,025 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-04-27 15:03:50,025 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-27 15:03:50,025 INFO L87 Difference]: Start difference. First operand 193 states and 232 transitions. Second operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:51,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:51,264 INFO L93 Difference]: Finished difference Result 229 states and 273 transitions. [2022-04-27 15:03:51,265 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-27 15:03:51,265 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) Word has length 58 [2022-04-27 15:03:51,265 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-27 15:03:51,265 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:51,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 240 transitions. [2022-04-27 15:03:51,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:51,267 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 240 transitions. [2022-04-27 15:03:51,268 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 240 transitions. [2022-04-27 15:03:51,460 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 240 edges. 240 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-27 15:03:51,462 INFO L225 Difference]: With dead ends: 229 [2022-04-27 15:03:51,462 INFO L226 Difference]: Without dead ends: 187 [2022-04-27 15:03:51,462 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-04-27 15:03:51,463 INFO L413 NwaCegarLoop]: 172 mSDtfsCounter, 274 mSDsluCounter, 342 mSDsCounter, 0 mSdLazyCounter, 444 mSolverCounterSat, 68 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 275 SdHoareTripleChecker+Valid, 514 SdHoareTripleChecker+Invalid, 512 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 68 IncrementalHoareTripleChecker+Valid, 444 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-27 15:03:51,463 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [275 Valid, 514 Invalid, 512 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [68 Valid, 444 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-27 15:03:51,463 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187 states. [2022-04-27 15:03:51,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187 to 187. [2022-04-27 15:03:51,569 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-27 15:03:51,569 INFO L82 GeneralOperation]: Start isEquivalent. First operand 187 states. Second operand has 187 states, 149 states have (on average 1.2348993288590604) internal successors, (184), 152 states have internal predecessors, (184), 21 states have call successors, (21), 17 states have call predecessors, (21), 16 states have return successors, (18), 17 states have call predecessors, (18), 15 states have call successors, (18) [2022-04-27 15:03:51,570 INFO L74 IsIncluded]: Start isIncluded. First operand 187 states. Second operand has 187 states, 149 states have (on average 1.2348993288590604) internal successors, (184), 152 states have internal predecessors, (184), 21 states have call successors, (21), 17 states have call predecessors, (21), 16 states have return successors, (18), 17 states have call predecessors, (18), 15 states have call successors, (18) [2022-04-27 15:03:51,570 INFO L87 Difference]: Start difference. First operand 187 states. Second operand has 187 states, 149 states have (on average 1.2348993288590604) internal successors, (184), 152 states have internal predecessors, (184), 21 states have call successors, (21), 17 states have call predecessors, (21), 16 states have return successors, (18), 17 states have call predecessors, (18), 15 states have call successors, (18) [2022-04-27 15:03:51,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:51,572 INFO L93 Difference]: Finished difference Result 187 states and 223 transitions. [2022-04-27 15:03:51,572 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 223 transitions. [2022-04-27 15:03:51,572 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:51,572 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:51,573 INFO L74 IsIncluded]: Start isIncluded. First operand has 187 states, 149 states have (on average 1.2348993288590604) internal successors, (184), 152 states have internal predecessors, (184), 21 states have call successors, (21), 17 states have call predecessors, (21), 16 states have return successors, (18), 17 states have call predecessors, (18), 15 states have call successors, (18) Second operand 187 states. [2022-04-27 15:03:51,573 INFO L87 Difference]: Start difference. First operand has 187 states, 149 states have (on average 1.2348993288590604) internal successors, (184), 152 states have internal predecessors, (184), 21 states have call successors, (21), 17 states have call predecessors, (21), 16 states have return successors, (18), 17 states have call predecessors, (18), 15 states have call successors, (18) Second operand 187 states. [2022-04-27 15:03:51,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-27 15:03:51,575 INFO L93 Difference]: Finished difference Result 187 states and 223 transitions. [2022-04-27 15:03:51,575 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 223 transitions. [2022-04-27 15:03:51,575 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-27 15:03:51,575 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-27 15:03:51,575 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-27 15:03:51,575 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-27 15:03:51,575 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 187 states, 149 states have (on average 1.2348993288590604) internal successors, (184), 152 states have internal predecessors, (184), 21 states have call successors, (21), 17 states have call predecessors, (21), 16 states have return successors, (18), 17 states have call predecessors, (18), 15 states have call successors, (18) [2022-04-27 15:03:51,578 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 187 states and 223 transitions. [2022-04-27 15:03:51,579 INFO L78 Accepts]: Start accepts. Automaton has 187 states and 223 transitions. Word has length 58 [2022-04-27 15:03:51,579 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-27 15:03:51,579 INFO L495 AbstractCegarLoop]: Abstraction has 187 states and 223 transitions. [2022-04-27 15:03:51,579 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (10), 7 states have call predecessors, (10), 3 states have return successors, (6), 3 states have call predecessors, (6), 1 states have call successors, (6) [2022-04-27 15:03:51,579 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 223 transitions. [2022-04-27 15:03:51,580 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-04-27 15:03:51,580 INFO L187 NwaCegarLoop]: Found error trace [2022-04-27 15:03:51,580 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:51,580 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-04-27 15:03:51,580 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-27 15:03:51,580 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-27 15:03:51,580 INFO L85 PathProgramCache]: Analyzing trace with hash 1199488421, now seen corresponding path program 1 times [2022-04-27 15:03:51,581 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-27 15:03:51,581 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [115064404] [2022-04-27 15:03:51,581 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-27 15:03:51,581 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-27 15:03:51,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-04-27 15:03:51,604 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-04-27 15:03:51,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-04-27 15:03:51,659 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-04-27 15:03:51,659 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-04-27 15:03:51,660 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-04-27 15:03:51,661 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2022-04-27 15:03:51,664 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-27 15:03:51,666 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-04-27 15:03:51,738 WARN L170 areAnnotationChecker]: reach_errorENTRY has no Hoare annotation [2022-04-27 15:03:51,738 WARN L170 areAnnotationChecker]: KeSetEventENTRY has no Hoare annotation [2022-04-27 15:03:51,738 WARN L170 areAnnotationChecker]: KbFilter_CompleteENTRY has no Hoare annotation [2022-04-27 15:03:51,738 WARN L170 areAnnotationChecker]: stub_driver_initENTRY has no Hoare annotation [2022-04-27 15:03:51,738 WARN L170 areAnnotationChecker]: KbFilter_PowerENTRY has no Hoare annotation [2022-04-27 15:03:51,738 WARN L170 areAnnotationChecker]: _BLAST_initENTRY has no Hoare annotation [2022-04-27 15:03:51,738 WARN L170 areAnnotationChecker]: errorFnENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: errorFnENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: IofCallDriverENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: PoCallDriverENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: IofCompleteRequestENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: KbFilter_PnPENTRY has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: reach_errorFINAL has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: KeSetEventFINAL has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: L624 has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: L624 has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: stub_driver_initFINAL has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: _BLAST_initFINAL has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: errorFnFINAL has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: L489 has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: L489 has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: L475-1 has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: L475 has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: L475 has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: L754 has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: L754 has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2022-04-27 15:03:51,739 WARN L170 areAnnotationChecker]: L638 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L638 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L875 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L875 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L558 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L558 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L674 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L674 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: KeSetEventEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L624-1 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: stub_driver_initEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L701 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L701 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L703 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: _BLAST_initEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: errorFnEXIT has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2022-04-27 15:03:51,740 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L491 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L491 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L489-1 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredEXIT has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: stubMoreProcessingRequiredEXIT has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L756 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L756 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L754-1 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L645 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L645 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L641 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L641 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L935 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L935 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L883 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L883 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L582 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L582 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L589 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L589 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L562-1 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L562 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L562 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L678-1 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L678 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L678 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L107 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L109 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L109 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: KbFilter_CompleteFINAL has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L342 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L342 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L724 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L724 has no Hoare annotation [2022-04-27 15:03:51,741 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L428 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L814-1 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L594-1 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L180-1 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L225-1 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L241-1 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L256-1 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L734-1 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L546-1 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L328 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L328 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L491-1 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L504 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L504 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L756-1 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L653 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L644 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L644 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L940 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L940 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L884 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: IofCompleteRequestEXIT has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: IofCompleteRequestEXIT has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L684 has no Hoare annotation [2022-04-27 15:03:51,742 WARN L170 areAnnotationChecker]: L684 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L110 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L112 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L112 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: KbFilter_CompleteEXIT has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: KbFilter_CompleteEXIT has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L351 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L351 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L734 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L734 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L709 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L709 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: PoCallDriverFINAL has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L247 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L247 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L262 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L262 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L740 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L740 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: IofCallDriverFINAL has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L413 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L413 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L419 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L419 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2022-04-27 15:03:51,743 WARN L170 areAnnotationChecker]: L505 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L509 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L509 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L760 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L760 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L770 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L660 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L660 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L997 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L997 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L1003 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L1003 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L892 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L892 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L596 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L596 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L997-1 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L267 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L684-1 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L180 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L180 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L221 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L221 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L113 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L115 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L115 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L356 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: L356 has no Hoare annotation [2022-04-27 15:03:51,744 WARN L170 areAnnotationChecker]: PoCallDriverEXIT has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L604 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L606 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L192-1 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L231-1 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L247-1 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L262-1 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L740-1 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: IofCallDriverEXIT has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L427 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L427 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L524 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L524 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L510 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L512 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L789 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L789 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L775 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L777 has no Hoare annotation [2022-04-27 15:03:51,745 WARN L170 areAnnotationChecker]: L660-1 has no Hoare annotation [2022-04-27 15:03:51,746 WARN L170 areAnnotationChecker]: L1003-1 has no Hoare annotation [2022-04-27 15:03:51,746 WARN L170 areAnnotationChecker]: L956 has no Hoare annotation [2022-04-27 15:03:51,746 WARN L170 areAnnotationChecker]: L956 has no Hoare annotation [2022-04-27 15:03:51,746 WARN L170 areAnnotationChecker]: L903 has no Hoare annotation [2022-04-27 15:03:51,746 WARN L170 areAnnotationChecker]: L903 has no Hoare annotation [2022-04-27 15:03:51,746 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlFINAL has no Hoare annotation [2022-04-27 15:03:51,746 WARN L170 areAnnotationChecker]: KbFilter_PnPFINAL has no Hoare annotation [2022-04-27 15:03:51,746 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughFINAL has no Hoare annotation [2022-04-27 15:03:51,746 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-04-27 15:03:51,746 WARN L170 areAnnotationChecker]: L182 has no Hoare annotation [2022-04-27 15:03:51,746 WARN L170 areAnnotationChecker]: L225 has no Hoare annotation [2022-04-27 15:03:51,746 WARN L170 areAnnotationChecker]: L225 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L237 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L237 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L378 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L357 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L357 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L361 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L361 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectFINAL has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: KbFilter_PowerFINAL has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L797 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L797 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseFINAL has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L956-2 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L956-2 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: KbFilter_InternIoCtlEXIT has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: KbFilter_PnPEXIT has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughEXIT has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: KbFilter_DispatchPassThroughEXIT has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L241 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L241 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L256 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L256 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2022-04-27 15:03:51,747 WARN L170 areAnnotationChecker]: L383 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L366 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L366 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: KeWaitForSingleObjectEXIT has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L197-2 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L197-2 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: KbFilter_PowerEXIT has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseEXIT has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: KbFilter_CreateCloseEXIT has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L959-1 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L917 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L917 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L398 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L388 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L124 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L124 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L367 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L367 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L371 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L371 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L199-1 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L206 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L206 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L205 has no Hoare annotation [2022-04-27 15:03:51,748 WARN L170 areAnnotationChecker]: L393 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L546 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L546 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L814 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L814 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L372 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L372 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L374 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L216 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L216 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L441 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L441 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L447 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L447 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L931 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L931 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L133 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L133 has no Hoare annotation [2022-04-27 15:03:51,749 WARN L170 areAnnotationChecker]: L453 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L453 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L136 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L136 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L139 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L139 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L142 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L142 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L145 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L145 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L148 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L148 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L154 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L154 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L157 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L157 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L160 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L160 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L163 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L163 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2022-04-27 15:03:51,750 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2022-04-27 15:03:51,750 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-04-27 15:03:51,751 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 27.04 03:03:51 BoogieIcfgContainer [2022-04-27 15:03:51,751 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-04-27 15:03:51,752 INFO L158 Benchmark]: Toolchain (without parser) took 53646.22ms. Allocated memory was 157.3MB in the beginning and 426.8MB in the end (delta: 269.5MB). Free memory was 106.5MB in the beginning and 342.9MB in the end (delta: -236.4MB). Peak memory consumption was 33.0MB. Max. memory is 8.0GB. [2022-04-27 15:03:51,752 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 157.3MB. Free memory was 123.8MB in the beginning and 123.8MB in the end (delta: 89.7kB). There was no memory consumed. Max. memory is 8.0GB. [2022-04-27 15:03:51,752 INFO L158 Benchmark]: CACSL2BoogieTranslator took 415.01ms. Allocated memory was 157.3MB in the beginning and 192.9MB in the end (delta: 35.7MB). Free memory was 106.3MB in the beginning and 160.1MB in the end (delta: -53.8MB). Peak memory consumption was 14.0MB. Max. memory is 8.0GB. [2022-04-27 15:03:51,752 INFO L158 Benchmark]: Boogie Preprocessor took 45.03ms. Allocated memory is still 192.9MB. Free memory was 160.1MB in the beginning and 156.9MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-04-27 15:03:51,752 INFO L158 Benchmark]: RCFGBuilder took 682.60ms. Allocated memory is still 192.9MB. Free memory was 156.9MB in the beginning and 112.9MB in the end (delta: 44.0MB). Peak memory consumption was 44.0MB. Max. memory is 8.0GB. [2022-04-27 15:03:51,753 INFO L158 Benchmark]: TraceAbstraction took 52498.93ms. Allocated memory was 192.9MB in the beginning and 426.8MB in the end (delta: 233.8MB). Free memory was 112.4MB in the beginning and 342.9MB in the end (delta: -230.6MB). Peak memory consumption was 4.3MB. Max. memory is 8.0GB. [2022-04-27 15:03:51,754 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 157.3MB. Free memory was 123.8MB in the beginning and 123.8MB in the end (delta: 89.7kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 415.01ms. Allocated memory was 157.3MB in the beginning and 192.9MB in the end (delta: 35.7MB). Free memory was 106.3MB in the beginning and 160.1MB in the end (delta: -53.8MB). Peak memory consumption was 14.0MB. Max. memory is 8.0GB. * Boogie Preprocessor took 45.03ms. Allocated memory is still 192.9MB. Free memory was 160.1MB in the beginning and 156.9MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 682.60ms. Allocated memory is still 192.9MB. Free memory was 156.9MB in the beginning and 112.9MB in the end (delta: 44.0MB). Peak memory consumption was 44.0MB. Max. memory is 8.0GB. * TraceAbstraction took 52498.93ms. Allocated memory was 192.9MB in the beginning and 426.8MB in the end (delta: 233.8MB). Free memory was 112.4MB in the beginning and 342.9MB in the end (delta: -230.6MB). Peak memory consumption was 4.3MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 1013]: a call to reach_error is reachable a call to reach_error is reachable We found a FailurePath: [L23] int KernelMode ; [L24] int Executive ; [L25] int DevicePowerState ; [L26] int s ; [L27] int UNLOADED ; [L28] int NP ; [L29] int DC ; [L30] int SKIP1 ; [L31] int SKIP2 ; [L32] int MPR1 ; [L33] int MPR3 ; [L34] int IPC ; [L35] int pended ; [L36] int compFptr ; [L37] int compRegistered ; [L38] int lowerDriverReturn ; [L39] int setEventCalled ; [L40] int customIrp ; [L41] int myStatus ; VAL [\old(compFptr)=67, \old(compRegistered)=61, \old(customIrp)=53, \old(DC)=65, \old(DevicePowerState)=68, \old(Executive)=50, \old(IPC)=58, \old(KernelMode)=55, \old(lowerDriverReturn)=49, \old(MPR1)=60, \old(MPR3)=69, \old(myStatus)=64, \old(NP)=51, \old(pended)=54, \old(s)=56, \old(setEventCalled)=52, \old(SKIP1)=57, \old(SKIP2)=62, \old(UNLOADED)=66, compFptr=0, compRegistered=0, customIrp=0, DC=0, DevicePowerState=0, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, UNLOADED=0] [L294] int status ; [L295] int irp = __VERIFIER_nondet_int() ; [L296] int pirp ; [L297] int pirp__IoStatus__Status ; [L298] int irp_choice = __VERIFIER_nondet_int() ; [L299] int devobj = __VERIFIER_nondet_int() ; [L300] int __cil_tmp8 ; [L302] KernelMode = 0 [L303] Executive = 0 [L304] DevicePowerState = 1 [L305] s = 0 [L306] UNLOADED = 0 [L307] NP = 0 [L308] DC = 0 [L309] SKIP1 = 0 [L310] SKIP2 = 0 [L311] MPR1 = 0 [L312] MPR3 = 0 [L313] IPC = 0 [L314] pended = 0 [L315] compFptr = 0 [L316] compRegistered = 0 [L317] lowerDriverReturn = 0 [L318] setEventCalled = 0 [L319] customIrp = 0 [L320] myStatus = 0 [L324] status = 0 [L325] pirp = irp VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=0, DevicePowerState=1, devobj=0, Executive=0, IPC=0, irp=-2, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=-2, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, status=0, UNLOADED=0] [L326] CALL _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=0, DevicePowerState=1, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, UNLOADED=0] [L61] UNLOADED = 0 [L62] NP = 1 [L63] DC = 2 [L64] SKIP1 = 3 [L65] SKIP2 = 4 [L66] MPR1 = 5 [L67] MPR3 = 6 [L68] IPC = 7 [L69] s = UNLOADED [L70] pended = 0 [L71] compFptr = 0 [L72] compRegistered = 0 [L73] lowerDriverReturn = 0 [L74] setEventCalled = 0 [L75] customIrp = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L326] RET _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=-2, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=-2, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L328] COND TRUE status >= 0 [L329] s = NP [L330] customIrp = 0 [L331] setEventCalled = customIrp [L332] lowerDriverReturn = setEventCalled [L333] compRegistered = lowerDriverReturn [L334] pended = compRegistered [L335] pirp__IoStatus__Status = 0 [L336] myStatus = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=-2, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=-2, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L337] COND FALSE !(irp_choice == 0) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=-2, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=-2, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L342] CALL stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L47] s = NP [L48] pended = 0 [L49] compFptr = 0 [L50] compRegistered = 0 [L51] lowerDriverReturn = 0 [L52] setEventCalled = 0 [L53] customIrp = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L342] RET stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=-2, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=-2, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L345] COND FALSE !(status < 0) [L349] int tmp_ndt_1; [L350] tmp_ndt_1 = __VERIFIER_nondet_int() [L351] COND FALSE !(tmp_ndt_1 == 0) [L354] int tmp_ndt_2; [L355] tmp_ndt_2 = __VERIFIER_nondet_int() [L356] COND FALSE !(tmp_ndt_2 == 1) [L359] int tmp_ndt_3; [L360] tmp_ndt_3 = __VERIFIER_nondet_int() [L361] COND TRUE tmp_ndt_3 == 3 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=-2, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=-2, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=-3, tmp_ndt_3=3, UNLOADED=0] [L388] CALL, EXPR KbFilter_PnP(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L80] int devExt ; [L81] int irpStack ; [L82] int status ; [L83] int event = __VERIFIER_nondet_int() ; [L84] int DeviceObject__DeviceExtension = __VERIFIER_nondet_int() ; [L85] int Irp__Tail__Overlay__CurrentStackLocation = __VERIFIER_nondet_int() ; [L86] int irpStack__MinorFunction = __VERIFIER_nondet_int() ; [L87] int devExt__TopOfStack = __VERIFIER_nondet_int() ; [L88] int devExt__Started ; [L89] int devExt__Removed ; [L90] int devExt__SurpriseRemoved ; [L91] int Irp__IoStatus__Status ; [L92] int Irp__IoStatus__Information ; [L93] int Irp__CurrentLocation = __VERIFIER_nondet_int() ; [L94] int irpSp ; [L95] int nextIrpSp ; [L96] int nextIrpSp__Control ; [L97] int irpSp___0 ; [L98] int irpSp__Context ; [L99] int irpSp__Control ; [L100] long __cil_tmp23 ; [L103] status = 0 [L104] devExt = DeviceObject__DeviceExtension [L105] irpStack = Irp__Tail__Overlay__CurrentStackLocation VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=-4, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=-4, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=-2, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L106] COND FALSE !(irpStack__MinorFunction == 0) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=-4, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=-4, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=-2, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L109] COND FALSE !(irpStack__MinorFunction == 23) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=-4, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=-4, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=-2, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L112] COND TRUE irpStack__MinorFunction == 2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=-4, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=-4, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=-2, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L236] devExt__Removed = 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=-4, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=-4, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=-2, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L237] COND TRUE s == NP [L238] s = SKIP1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=-4, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=-4, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=-2, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L245] Irp__CurrentLocation ++ [L246] Irp__Tail__Overlay__CurrentStackLocation ++ VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=-4, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=-4, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=-2, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L247] CALL IofCallDriver(devExt__TopOfStack, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L483] int returnVal2 ; [L484] int compRetStatus ; [L485] int lcontext = __VERIFIER_nondet_int() ; [L486] long long __cil_tmp7 ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=-2, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L489] COND FALSE !(\read(compRegistered)) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=-2, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L502] int tmp_ndt_6; [L503] tmp_ndt_6 = __VERIFIER_nondet_int() [L504] COND FALSE !(tmp_ndt_6 == 0) [L507] int tmp_ndt_7; [L508] tmp_ndt_7 = __VERIFIER_nondet_int() [L509] COND TRUE tmp_ndt_7 == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=-2, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=-5, tmp_ndt_7=1, UNLOADED=0] [L518] returnVal2 = -1073741823 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=-2, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=-5, tmp_ndt_7=1, UNLOADED=0] [L528] COND FALSE !(s == NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=-2, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=-5, tmp_ndt_7=1, UNLOADED=0] [L532] COND FALSE !(s == MPR1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=-2, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=-5, tmp_ndt_7=1, UNLOADED=0] [L541] COND TRUE s == SKIP1 [L542] s = SKIP2 [L543] lowerDriverReturn = returnVal2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=-2, KernelMode=0, lcontext=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=-5, tmp_ndt_7=1, UNLOADED=0] [L551] return (returnVal2); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, \result=-1073741823, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=-2, KernelMode=0, lcontext=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=-5, tmp_ndt_7=1, UNLOADED=0] [L247] RET IofCallDriver(devExt__TopOfStack, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=-4, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=-4, DevicePowerState=1, event=0, Executive=0, IofCallDriver(devExt__TopOfStack, Irp)=-1073741823, IPC=7, Irp=-2, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L248] status = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=-4, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=-4, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=-2, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L290] return (status); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=-2, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, \result=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=-4, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=-4, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=-2, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L388] RET, EXPR KbFilter_PnP(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=-2, irp_choice=1, KbFilter_PnP(devobj, pirp)=0, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=-2, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=-3, tmp_ndt_3=3, UNLOADED=0] [L388] status = KbFilter_PnP(devobj, pirp) [L412] COND FALSE !(pended == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=-2, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=-2, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=-3, tmp_ndt_3=3, UNLOADED=0] [L420] COND FALSE !(pended == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=-2, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=-2, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=-3, tmp_ndt_3=3, UNLOADED=0] [L428] COND TRUE s != UNLOADED VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=-2, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=-2, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=-3, tmp_ndt_3=3, UNLOADED=0] [L429] COND TRUE status != -1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=-2, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=-2, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=-3, tmp_ndt_3=3, UNLOADED=0] [L430] COND FALSE !(s != SKIP2) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=-2, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=-2, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=-3, tmp_ndt_3=3, UNLOADED=0] [L440] COND FALSE !(pended == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=-2, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=-2, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=-3, tmp_ndt_3=3, UNLOADED=0] [L447] COND FALSE !(s == DC) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=-2, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=-2, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=-3, tmp_ndt_3=3, UNLOADED=0] [L452] COND TRUE status != lowerDriverReturn VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=-2, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=-2, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=-3, tmp_ndt_3=3, UNLOADED=0] [L453] CALL errorFn() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L1013] reach_error() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 19 procedures, 243 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 52.4s, OverallIterations: 21, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 45.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 8545 SdHoareTripleChecker+Valid, 14.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 8525 mSDsluCounter, 11864 SdHoareTripleChecker+Invalid, 14.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6980 mSDsCounter, 1589 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 15667 IncrementalHoareTripleChecker+Invalid, 17256 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1589 mSolverCounterUnsat, 4884 mSDtfsCounter, 15667 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 428 GetRequests, 179 SyntacticMatches, 1 SemanticMatches, 248 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 420 ImplicationChecksByTransitivity, 3.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=344occurred in iteration=3, InterpolantAutomatonStates: 211, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 2.3s AutomataMinimizationTime, 20 MinimizatonAttempts, 231 StatesRemovedByMinimization, 13 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 3.3s InterpolantComputationTime, 1009 NumberOfCodeBlocks, 1009 NumberOfCodeBlocksAsserted, 21 NumberOfCheckSat, 933 ConstructedInterpolants, 0 QuantifiedInterpolants, 4821 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 20 InterpolantComputations, 20 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2022-04-27 15:03:51,801 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...