java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-08_1a-drivers--char--raw.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.1.24-112bae1 [2019-09-08 17:36:27,386 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-09-08 17:36:27,388 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-09-08 17:36:27,400 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-09-08 17:36:27,400 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-09-08 17:36:27,401 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-09-08 17:36:27,402 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-09-08 17:36:27,404 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-09-08 17:36:27,406 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-09-08 17:36:27,407 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-09-08 17:36:27,407 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-09-08 17:36:27,409 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-09-08 17:36:27,409 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-09-08 17:36:27,410 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-09-08 17:36:27,411 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-09-08 17:36:27,412 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-09-08 17:36:27,413 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-09-08 17:36:27,413 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-09-08 17:36:27,415 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-09-08 17:36:27,419 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-09-08 17:36:27,420 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-09-08 17:36:27,424 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-09-08 17:36:27,425 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-09-08 17:36:27,426 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-09-08 17:36:27,429 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-09-08 17:36:27,429 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-09-08 17:36:27,430 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-09-08 17:36:27,433 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-09-08 17:36:27,433 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-09-08 17:36:27,435 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-09-08 17:36:27,435 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-09-08 17:36:27,435 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-09-08 17:36:27,438 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-09-08 17:36:27,439 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-09-08 17:36:27,440 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-09-08 17:36:27,440 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-09-08 17:36:27,440 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-09-08 17:36:27,441 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-09-08 17:36:27,441 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-09-08 17:36:27,444 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-09-08 17:36:27,445 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-09-08 17:36:27,447 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2019-09-08 17:36:27,473 INFO L113 SettingsManager]: Loading preferences was successful [2019-09-08 17:36:27,474 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-09-08 17:36:27,476 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-09-08 17:36:27,476 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-09-08 17:36:27,476 INFO L138 SettingsManager]: * Use SBE=true [2019-09-08 17:36:27,477 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-09-08 17:36:27,477 INFO L138 SettingsManager]: * sizeof long=4 [2019-09-08 17:36:27,477 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-09-08 17:36:27,477 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-09-08 17:36:27,477 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-09-08 17:36:27,479 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-09-08 17:36:27,479 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-09-08 17:36:27,479 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-09-08 17:36:27,480 INFO L138 SettingsManager]: * sizeof long double=12 [2019-09-08 17:36:27,480 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-09-08 17:36:27,480 INFO L138 SettingsManager]: * Use constant arrays=true [2019-09-08 17:36:27,480 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-09-08 17:36:27,480 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-09-08 17:36:27,481 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-09-08 17:36:27,481 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-09-08 17:36:27,481 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-09-08 17:36:27,481 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-09-08 17:36:27,482 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-09-08 17:36:27,482 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-09-08 17:36:27,482 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-09-08 17:36:27,482 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-09-08 17:36:27,483 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-09-08 17:36:27,483 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-09-08 17:36:27,483 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-09-08 17:36:27,537 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-09-08 17:36:27,554 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-09-08 17:36:27,560 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-09-08 17:36:27,562 INFO L271 PluginConnector]: Initializing CDTParser... [2019-09-08 17:36:27,562 INFO L275 PluginConnector]: CDTParser initialized [2019-09-08 17:36:27,563 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-08_1a-drivers--char--raw.ko-entry_point.cil.out.i [2019-09-08 17:36:27,632 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ec5fcdc7c/389d4da79e644fbca47e3b9c25c78de6/FLAG654854507 [2019-09-08 17:36:28,306 INFO L306 CDTParser]: Found 1 translation units. [2019-09-08 17:36:28,308 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-08_1a-drivers--char--raw.ko-entry_point.cil.out.i [2019-09-08 17:36:28,339 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ec5fcdc7c/389d4da79e644fbca47e3b9c25c78de6/FLAG654854507 [2019-09-08 17:36:28,458 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ec5fcdc7c/389d4da79e644fbca47e3b9c25c78de6 [2019-09-08 17:36:28,467 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-09-08 17:36:28,468 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2019-09-08 17:36:28,469 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-09-08 17:36:28,469 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-09-08 17:36:28,472 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-09-08 17:36:28,473 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.09 05:36:28" (1/1) ... [2019-09-08 17:36:28,476 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@31a28b02 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 05:36:28, skipping insertion in model container [2019-09-08 17:36:28,476 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.09 05:36:28" (1/1) ... [2019-09-08 17:36:28,484 INFO L142 MainTranslator]: Starting translation in SV-COMP mode [2019-09-08 17:36:28,590 INFO L173 MainTranslator]: Built tables and reachable declarations [2019-09-08 17:36:29,807 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-09-08 17:36:29,847 INFO L188 MainTranslator]: Completed pre-run [2019-09-08 17:36:30,022 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-09-08 17:36:30,118 INFO L192 MainTranslator]: Completed translation [2019-09-08 17:36:30,119 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 05:36:30 WrapperNode [2019-09-08 17:36:30,120 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-09-08 17:36:30,121 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-09-08 17:36:30,121 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-09-08 17:36:30,121 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-09-08 17:36:30,143 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 05:36:30" (1/1) ... [2019-09-08 17:36:30,143 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 05:36:30" (1/1) ... [2019-09-08 17:36:30,215 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 05:36:30" (1/1) ... [2019-09-08 17:36:30,215 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 05:36:30" (1/1) ... [2019-09-08 17:36:30,329 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 05:36:30" (1/1) ... [2019-09-08 17:36:30,353 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 05:36:30" (1/1) ... [2019-09-08 17:36:30,379 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 05:36:30" (1/1) ... [2019-09-08 17:36:30,401 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-09-08 17:36:30,402 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-09-08 17:36:30,403 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-09-08 17:36:30,403 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-09-08 17:36:30,405 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 05:36:30" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-09-08 17:36:30,494 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2019-09-08 17:36:30,494 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-09-08 17:36:30,495 INFO L138 BoogieDeclarations]: Found implementation of procedure kobject_name [2019-09-08 17:36:30,495 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2019-09-08 17:36:30,497 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2019-09-08 17:36:30,497 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2019-09-08 17:36:30,497 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2019-09-08 17:36:30,498 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2019-09-08 17:36:30,498 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ptr [2019-09-08 17:36:30,498 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ulong [2019-09-08 17:36:30,499 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2019-09-08 17:36:30,499 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2019-09-08 17:36:30,501 INFO L138 BoogieDeclarations]: Found implementation of procedure iminor [2019-09-08 17:36:30,502 INFO L138 BoogieDeclarations]: Found implementation of procedure file_inode [2019-09-08 17:36:30,504 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2019-09-08 17:36:30,505 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_from_user [2019-09-08 17:36:30,509 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2019-09-08 17:36:30,510 INFO L138 BoogieDeclarations]: Found implementation of procedure bdev_get_queue [2019-09-08 17:36:30,510 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_logical_block_size [2019-09-08 17:36:30,511 INFO L138 BoogieDeclarations]: Found implementation of procedure bdev_logical_block_size [2019-09-08 17:36:30,511 INFO L138 BoogieDeclarations]: Found implementation of procedure compat_ptr [2019-09-08 17:36:30,511 INFO L138 BoogieDeclarations]: Found implementation of procedure raw_open [2019-09-08 17:36:30,512 INFO L138 BoogieDeclarations]: Found implementation of procedure raw_release [2019-09-08 17:36:30,512 INFO L138 BoogieDeclarations]: Found implementation of procedure raw_ioctl [2019-09-08 17:36:30,512 INFO L138 BoogieDeclarations]: Found implementation of procedure bind_set [2019-09-08 17:36:30,512 INFO L138 BoogieDeclarations]: Found implementation of procedure bind_get [2019-09-08 17:36:30,513 INFO L138 BoogieDeclarations]: Found implementation of procedure raw_ctl_ioctl [2019-09-08 17:36:30,513 INFO L138 BoogieDeclarations]: Found implementation of procedure raw_ctl_compat_ioctl [2019-09-08 17:36:30,513 INFO L138 BoogieDeclarations]: Found implementation of procedure raw_devnode [2019-09-08 17:36:30,514 INFO L138 BoogieDeclarations]: Found implementation of procedure raw_init [2019-09-08 17:36:30,514 INFO L138 BoogieDeclarations]: Found implementation of procedure raw_exit [2019-09-08 17:36:30,514 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_file_operations_2 [2019-09-08 17:36:30,514 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_file_operations_1 [2019-09-08 17:36:30,515 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2019-09-08 17:36:30,515 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2019-09-08 17:36:30,515 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2019-09-08 17:36:30,516 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_module_put_5 [2019-09-08 17:36:30,516 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv___module_get_6 [2019-09-08 17:36:30,516 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_cdev_init_7 [2019-09-08 17:36:30,516 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_cdev_del_8 [2019-09-08 17:36:30,517 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_cdev_del_9 [2019-09-08 17:36:30,517 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2019-09-08 17:36:30,517 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2019-09-08 17:36:30,517 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_err_ptr [2019-09-08 17:36:30,518 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_ptr_err [2019-09-08 17:36:30,518 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err_or_null [2019-09-08 17:36:30,518 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_module_get [2019-09-08 17:36:30,518 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_try_module_get [2019-09-08 17:36:30,519 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_module_put [2019-09-08 17:36:30,519 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_module_put_and_exit [2019-09-08 17:36:30,519 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_module_refcount [2019-09-08 17:36:30,520 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2019-09-08 17:36:30,520 INFO L138 BoogieDeclarations]: Found implementation of procedure __class_create [2019-09-08 17:36:30,520 INFO L138 BoogieDeclarations]: Found implementation of procedure __copy_from_user_overflow [2019-09-08 17:36:30,520 INFO L138 BoogieDeclarations]: Found implementation of procedure __copy_to_user_overflow [2019-09-08 17:36:30,521 INFO L138 BoogieDeclarations]: Found implementation of procedure __might_fault [2019-09-08 17:36:30,521 INFO L138 BoogieDeclarations]: Found implementation of procedure _copy_from_user [2019-09-08 17:36:30,521 INFO L138 BoogieDeclarations]: Found implementation of procedure _copy_to_user [2019-09-08 17:36:30,522 INFO L138 BoogieDeclarations]: Found implementation of procedure bdget [2019-09-08 17:36:30,522 INFO L138 BoogieDeclarations]: Found implementation of procedure bdput [2019-09-08 17:36:30,522 INFO L138 BoogieDeclarations]: Found implementation of procedure blkdev_fsync [2019-09-08 17:36:30,522 INFO L138 BoogieDeclarations]: Found implementation of procedure blkdev_get [2019-09-08 17:36:30,523 INFO L138 BoogieDeclarations]: Found implementation of procedure blkdev_ioctl [2019-09-08 17:36:30,523 INFO L138 BoogieDeclarations]: Found implementation of procedure blkdev_put [2019-09-08 17:36:30,523 INFO L138 BoogieDeclarations]: Found implementation of procedure blkdev_read_iter [2019-09-08 17:36:30,523 INFO L138 BoogieDeclarations]: Found implementation of procedure blkdev_write_iter [2019-09-08 17:36:30,524 INFO L138 BoogieDeclarations]: Found implementation of procedure capable [2019-09-08 17:36:30,524 INFO L138 BoogieDeclarations]: Found implementation of procedure cdev_add [2019-09-08 17:36:30,524 INFO L138 BoogieDeclarations]: Found implementation of procedure cdev_del [2019-09-08 17:36:30,525 INFO L138 BoogieDeclarations]: Found implementation of procedure cdev_init [2019-09-08 17:36:30,525 INFO L138 BoogieDeclarations]: Found implementation of procedure class_destroy [2019-09-08 17:36:30,525 INFO L138 BoogieDeclarations]: Found implementation of procedure default_llseek [2019-09-08 17:36:30,525 INFO L138 BoogieDeclarations]: Found implementation of procedure device_create [2019-09-08 17:36:30,526 INFO L138 BoogieDeclarations]: Found implementation of procedure device_destroy [2019-09-08 17:36:30,526 INFO L138 BoogieDeclarations]: Found implementation of procedure igrab [2019-09-08 17:36:30,526 INFO L138 BoogieDeclarations]: Found implementation of procedure kasprintf [2019-09-08 17:36:30,526 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize [2019-09-08 17:36:30,527 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_release_1 [2019-09-08 17:36:30,527 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2019-09-08 17:36:30,527 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2019-09-08 17:36:30,528 INFO L138 BoogieDeclarations]: Found implementation of procedure noop_llseek [2019-09-08 17:36:30,528 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2019-09-08 17:36:30,528 INFO L138 BoogieDeclarations]: Found implementation of procedure register_chrdev_region [2019-09-08 17:36:30,528 INFO L138 BoogieDeclarations]: Found implementation of procedure set_blocksize [2019-09-08 17:36:30,528 INFO L138 BoogieDeclarations]: Found implementation of procedure unregister_chrdev_region [2019-09-08 17:36:30,529 INFO L138 BoogieDeclarations]: Found implementation of procedure vfree [2019-09-08 17:36:30,529 INFO L138 BoogieDeclarations]: Found implementation of procedure vzalloc [2019-09-08 17:36:30,529 INFO L138 BoogieDeclarations]: Found implementation of procedure external_alloc [2019-09-08 17:36:30,530 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2019-09-08 17:36:30,530 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2019-09-08 17:36:30,530 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2019-09-08 17:36:30,530 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2019-09-08 17:36:30,530 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2019-09-08 17:36:30,531 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2019-09-08 17:36:30,531 INFO L130 BoogieDeclarations]: Found specification of procedure __might_fault [2019-09-08 17:36:30,531 INFO L130 BoogieDeclarations]: Found specification of procedure kasprintf [2019-09-08 17:36:30,531 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2019-09-08 17:36:30,531 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_ptr_err [2019-09-08 17:36:30,532 INFO L130 BoogieDeclarations]: Found specification of procedure memset [2019-09-08 17:36:30,532 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2019-09-08 17:36:30,532 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2019-09-08 17:36:30,533 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2019-09-08 17:36:30,533 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2019-09-08 17:36:30,533 INFO L130 BoogieDeclarations]: Found specification of procedure kobject_name [2019-09-08 17:36:30,533 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2019-09-08 17:36:30,534 INFO L130 BoogieDeclarations]: Found specification of procedure ldv___module_get_6 [2019-09-08 17:36:30,534 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_module_put_5 [2019-09-08 17:36:30,534 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_module_get [2019-09-08 17:36:30,534 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_module_put [2019-09-08 17:36:30,535 INFO L130 BoogieDeclarations]: Found specification of procedure capable [2019-09-08 17:36:30,535 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2019-09-08 17:36:30,535 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2019-09-08 17:36:30,536 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2019-09-08 17:36:30,536 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_uint [2019-09-08 17:36:30,536 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_ulong [2019-09-08 17:36:30,536 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_pointer [2019-09-08 17:36:30,536 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assume [2019-09-08 17:36:30,537 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2019-09-08 17:36:30,537 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2019-09-08 17:36:30,537 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2019-09-08 17:36:30,537 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2019-09-08 17:36:30,538 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2019-09-08 17:36:30,538 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2019-09-08 17:36:30,538 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2019-09-08 17:36:30,538 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2019-09-08 17:36:30,538 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ptr [2019-09-08 17:36:30,539 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ulong [2019-09-08 17:36:30,539 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2019-09-08 17:36:30,539 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_file_operations_2 [2019-09-08 17:36:30,539 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_file_operations_1 [2019-09-08 17:36:30,539 INFO L130 BoogieDeclarations]: Found specification of procedure iminor [2019-09-08 17:36:30,540 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2019-09-08 17:36:30,540 INFO L130 BoogieDeclarations]: Found specification of procedure file_inode [2019-09-08 17:36:30,540 INFO L130 BoogieDeclarations]: Found specification of procedure bdget [2019-09-08 17:36:30,540 INFO L130 BoogieDeclarations]: Found specification of procedure bdput [2019-09-08 17:36:30,540 INFO L130 BoogieDeclarations]: Found specification of procedure blkdev_ioctl [2019-09-08 17:36:30,540 INFO L130 BoogieDeclarations]: Found specification of procedure blkdev_get [2019-09-08 17:36:30,541 INFO L130 BoogieDeclarations]: Found specification of procedure blkdev_put [2019-09-08 17:36:30,541 INFO L130 BoogieDeclarations]: Found specification of procedure register_chrdev_region [2019-09-08 17:36:30,541 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_chrdev_region [2019-09-08 17:36:30,541 INFO L130 BoogieDeclarations]: Found specification of procedure default_llseek [2019-09-08 17:36:30,541 INFO L130 BoogieDeclarations]: Found specification of procedure igrab [2019-09-08 17:36:30,542 INFO L130 BoogieDeclarations]: Found specification of procedure set_blocksize [2019-09-08 17:36:30,542 INFO L130 BoogieDeclarations]: Found specification of procedure blkdev_read_iter [2019-09-08 17:36:30,542 INFO L130 BoogieDeclarations]: Found specification of procedure blkdev_write_iter [2019-09-08 17:36:30,542 INFO L130 BoogieDeclarations]: Found specification of procedure blkdev_fsync [2019-09-08 17:36:30,542 INFO L130 BoogieDeclarations]: Found specification of procedure noop_llseek [2019-09-08 17:36:30,543 INFO L130 BoogieDeclarations]: Found specification of procedure __class_create [2019-09-08 17:36:30,543 INFO L130 BoogieDeclarations]: Found specification of procedure class_destroy [2019-09-08 17:36:30,543 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2019-09-08 17:36:30,543 INFO L130 BoogieDeclarations]: Found specification of procedure device_create [2019-09-08 17:36:30,543 INFO L130 BoogieDeclarations]: Found specification of procedure device_destroy [2019-09-08 17:36:30,543 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_from_user [2019-09-08 17:36:30,544 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_to_user [2019-09-08 17:36:30,544 INFO L130 BoogieDeclarations]: Found specification of procedure __copy_from_user_overflow [2019-09-08 17:36:30,544 INFO L130 BoogieDeclarations]: Found specification of procedure __copy_to_user_overflow [2019-09-08 17:36:30,544 INFO L130 BoogieDeclarations]: Found specification of procedure copy_from_user [2019-09-08 17:36:30,544 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-09-08 17:36:30,544 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2019-09-08 17:36:30,545 INFO L130 BoogieDeclarations]: Found specification of procedure bdev_get_queue [2019-09-08 17:36:30,545 INFO L130 BoogieDeclarations]: Found specification of procedure queue_logical_block_size [2019-09-08 17:36:30,545 INFO L130 BoogieDeclarations]: Found specification of procedure bdev_logical_block_size [2019-09-08 17:36:30,545 INFO L130 BoogieDeclarations]: Found specification of procedure cdev_init [2019-09-08 17:36:30,545 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_cdev_init_7 [2019-09-08 17:36:30,545 INFO L130 BoogieDeclarations]: Found specification of procedure cdev_add [2019-09-08 17:36:30,546 INFO L130 BoogieDeclarations]: Found specification of procedure cdev_del [2019-09-08 17:36:30,546 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_cdev_del_8 [2019-09-08 17:36:30,546 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_cdev_del_9 [2019-09-08 17:36:30,546 INFO L130 BoogieDeclarations]: Found specification of procedure compat_ptr [2019-09-08 17:36:30,546 INFO L130 BoogieDeclarations]: Found specification of procedure vzalloc [2019-09-08 17:36:30,546 INFO L130 BoogieDeclarations]: Found specification of procedure vfree [2019-09-08 17:36:30,547 INFO L130 BoogieDeclarations]: Found specification of procedure raw_open [2019-09-08 17:36:30,547 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2019-09-08 17:36:30,547 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2019-09-08 17:36:30,547 INFO L130 BoogieDeclarations]: Found specification of procedure raw_release [2019-09-08 17:36:30,547 INFO L130 BoogieDeclarations]: Found specification of procedure raw_ioctl [2019-09-08 17:36:30,547 INFO L130 BoogieDeclarations]: Found specification of procedure bind_set [2019-09-08 17:36:30,548 INFO L130 BoogieDeclarations]: Found specification of procedure bind_get [2019-09-08 17:36:30,548 INFO L130 BoogieDeclarations]: Found specification of procedure raw_ctl_ioctl [2019-09-08 17:36:30,548 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2019-09-08 17:36:30,548 INFO L130 BoogieDeclarations]: Found specification of procedure raw_ctl_compat_ioctl [2019-09-08 17:36:30,548 INFO L130 BoogieDeclarations]: Found specification of procedure raw_devnode [2019-09-08 17:36:30,548 INFO L130 BoogieDeclarations]: Found specification of procedure raw_init [2019-09-08 17:36:30,549 INFO L130 BoogieDeclarations]: Found specification of procedure raw_exit [2019-09-08 17:36:30,549 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2019-09-08 17:36:30,549 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2019-09-08 17:36:30,549 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_release_1 [2019-09-08 17:36:30,549 INFO L130 BoogieDeclarations]: Found specification of procedure main [2019-09-08 17:36:30,549 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2019-09-08 17:36:30,549 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_err_ptr [2019-09-08 17:36:30,550 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err_or_null [2019-09-08 17:36:30,550 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_try_module_get [2019-09-08 17:36:30,550 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_module_put_and_exit [2019-09-08 17:36:30,550 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_module_refcount [2019-09-08 17:36:30,550 INFO L130 BoogieDeclarations]: Found specification of procedure external_alloc [2019-09-08 17:36:30,550 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_long [2019-09-08 17:36:30,551 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_bool [2019-09-08 17:36:30,551 INFO L130 BoogieDeclarations]: Found specification of procedure free [2019-09-08 17:36:30,551 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2019-09-08 17:36:30,551 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2019-09-08 17:36:30,551 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-09-08 17:36:30,551 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2019-09-08 17:36:30,552 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-09-08 17:36:31,351 INFO L684 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2019-09-08 17:36:32,178 INFO L684 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_module_put_and_exitFINAL: assume true; [2019-09-08 17:36:32,382 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-09-08 17:36:32,382 INFO L283 CfgBuilder]: Removed 0 assume(true) statements. [2019-09-08 17:36:32,385 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.09 05:36:32 BoogieIcfgContainer [2019-09-08 17:36:32,385 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-09-08 17:36:32,386 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-09-08 17:36:32,386 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-09-08 17:36:32,391 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-09-08 17:36:32,391 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 08.09 05:36:28" (1/3) ... [2019-09-08 17:36:32,392 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@62d68c9e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.09 05:36:32, skipping insertion in model container [2019-09-08 17:36:32,393 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 05:36:30" (2/3) ... [2019-09-08 17:36:32,393 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@62d68c9e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.09 05:36:32, skipping insertion in model container [2019-09-08 17:36:32,394 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.09 05:36:32" (3/3) ... [2019-09-08 17:36:32,396 INFO L109 eAbstractionObserver]: Analyzing ICFG linux-4.2-rc1.tar.xz-08_1a-drivers--char--raw.ko-entry_point.cil.out.i [2019-09-08 17:36:32,407 INFO L152 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-09-08 17:36:32,421 INFO L164 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2019-09-08 17:36:32,439 INFO L252 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2019-09-08 17:36:32,538 INFO L128 ementStrategyFactory]: Using default assertion order modulation [2019-09-08 17:36:32,539 INFO L377 AbstractCegarLoop]: Interprodecural is true [2019-09-08 17:36:32,539 INFO L378 AbstractCegarLoop]: Hoare is true [2019-09-08 17:36:32,539 INFO L379 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-09-08 17:36:32,539 INFO L380 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-09-08 17:36:32,539 INFO L381 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-09-08 17:36:32,540 INFO L382 AbstractCegarLoop]: Difference is false [2019-09-08 17:36:32,540 INFO L383 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-09-08 17:36:32,540 INFO L388 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-09-08 17:36:32,571 INFO L276 IsEmpty]: Start isEmpty. Operand 550 states. [2019-09-08 17:36:32,603 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 217 [2019-09-08 17:36:32,603 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:36:32,604 INFO L399 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:36:32,606 INFO L418 AbstractCegarLoop]: === Iteration 1 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:36:32,611 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:36:32,611 INFO L82 PathProgramCache]: Analyzing trace with hash -1134518664, now seen corresponding path program 1 times [2019-09-08 17:36:32,613 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:36:32,614 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:36:32,684 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:32,685 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 17:36:32,685 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:33,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:33,438 INFO L134 CoverageAnalysis]: Checked inductivity of 642 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 642 trivial. 0 not checked. [2019-09-08 17:36:33,442 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-09-08 17:36:33,442 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-09-08 17:36:33,447 INFO L454 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-09-08 17:36:33,461 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-09-08 17:36:33,462 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-09-08 17:36:33,464 INFO L87 Difference]: Start difference. First operand 550 states. Second operand 3 states. [2019-09-08 17:36:33,819 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:36:33,820 INFO L93 Difference]: Finished difference Result 1376 states and 1742 transitions. [2019-09-08 17:36:33,822 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-09-08 17:36:33,823 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 216 [2019-09-08 17:36:33,825 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:36:33,851 INFO L225 Difference]: With dead ends: 1376 [2019-09-08 17:36:33,851 INFO L226 Difference]: Without dead ends: 879 [2019-09-08 17:36:33,859 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-09-08 17:36:33,880 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 879 states. [2019-09-08 17:36:33,980 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 879 to 876. [2019-09-08 17:36:33,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 876 states. [2019-09-08 17:36:33,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 876 states to 876 states and 1097 transitions. [2019-09-08 17:36:33,999 INFO L78 Accepts]: Start accepts. Automaton has 876 states and 1097 transitions. Word has length 216 [2019-09-08 17:36:34,002 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:36:34,002 INFO L475 AbstractCegarLoop]: Abstraction has 876 states and 1097 transitions. [2019-09-08 17:36:34,002 INFO L476 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-09-08 17:36:34,003 INFO L276 IsEmpty]: Start isEmpty. Operand 876 states and 1097 transitions. [2019-09-08 17:36:34,012 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 217 [2019-09-08 17:36:34,013 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:36:34,013 INFO L399 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:36:34,013 INFO L418 AbstractCegarLoop]: === Iteration 2 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:36:34,014 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:36:34,014 INFO L82 PathProgramCache]: Analyzing trace with hash -837732705, now seen corresponding path program 1 times [2019-09-08 17:36:34,018 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:36:34,018 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:36:34,022 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:34,022 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 17:36:34,022 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:34,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:34,421 INFO L134 CoverageAnalysis]: Checked inductivity of 642 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 642 trivial. 0 not checked. [2019-09-08 17:36:34,421 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-09-08 17:36:34,422 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-09-08 17:36:34,424 INFO L454 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-09-08 17:36:34,424 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-09-08 17:36:34,424 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-09-08 17:36:34,424 INFO L87 Difference]: Start difference. First operand 876 states and 1097 transitions. Second operand 3 states. [2019-09-08 17:36:34,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:36:34,484 INFO L93 Difference]: Finished difference Result 886 states and 1105 transitions. [2019-09-08 17:36:34,485 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-09-08 17:36:34,485 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 216 [2019-09-08 17:36:34,486 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:36:34,492 INFO L225 Difference]: With dead ends: 886 [2019-09-08 17:36:34,492 INFO L226 Difference]: Without dead ends: 881 [2019-09-08 17:36:34,494 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-09-08 17:36:34,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 881 states. [2019-09-08 17:36:34,553 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 881 to 876. [2019-09-08 17:36:34,553 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 876 states. [2019-09-08 17:36:34,563 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 876 states to 876 states and 1096 transitions. [2019-09-08 17:36:34,563 INFO L78 Accepts]: Start accepts. Automaton has 876 states and 1096 transitions. Word has length 216 [2019-09-08 17:36:34,564 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:36:34,564 INFO L475 AbstractCegarLoop]: Abstraction has 876 states and 1096 transitions. [2019-09-08 17:36:34,564 INFO L476 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-09-08 17:36:34,564 INFO L276 IsEmpty]: Start isEmpty. Operand 876 states and 1096 transitions. [2019-09-08 17:36:34,568 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 217 [2019-09-08 17:36:34,569 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:36:34,569 INFO L399 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:36:34,569 INFO L418 AbstractCegarLoop]: === Iteration 3 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:36:34,569 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:36:34,570 INFO L82 PathProgramCache]: Analyzing trace with hash -780474403, now seen corresponding path program 1 times [2019-09-08 17:36:34,570 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:36:34,570 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:36:34,573 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:34,573 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 17:36:34,573 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:34,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:34,787 INFO L134 CoverageAnalysis]: Checked inductivity of 642 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 642 trivial. 0 not checked. [2019-09-08 17:36:34,787 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-09-08 17:36:34,787 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-09-08 17:36:34,788 INFO L454 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-09-08 17:36:34,788 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-09-08 17:36:34,789 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-09-08 17:36:34,789 INFO L87 Difference]: Start difference. First operand 876 states and 1096 transitions. Second operand 3 states. [2019-09-08 17:36:34,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:36:34,875 INFO L93 Difference]: Finished difference Result 2509 states and 3163 transitions. [2019-09-08 17:36:34,875 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-09-08 17:36:34,875 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 216 [2019-09-08 17:36:34,877 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:36:34,891 INFO L225 Difference]: With dead ends: 2509 [2019-09-08 17:36:34,891 INFO L226 Difference]: Without dead ends: 1667 [2019-09-08 17:36:34,895 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-09-08 17:36:34,899 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1667 states. [2019-09-08 17:36:34,986 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1667 to 1663. [2019-09-08 17:36:34,986 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1663 states. [2019-09-08 17:36:34,999 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1663 states to 1663 states and 2096 transitions. [2019-09-08 17:36:35,000 INFO L78 Accepts]: Start accepts. Automaton has 1663 states and 2096 transitions. Word has length 216 [2019-09-08 17:36:35,003 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:36:35,004 INFO L475 AbstractCegarLoop]: Abstraction has 1663 states and 2096 transitions. [2019-09-08 17:36:35,004 INFO L476 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-09-08 17:36:35,004 INFO L276 IsEmpty]: Start isEmpty. Operand 1663 states and 2096 transitions. [2019-09-08 17:36:35,012 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 247 [2019-09-08 17:36:35,012 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:36:35,013 INFO L399 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:36:35,013 INFO L418 AbstractCegarLoop]: === Iteration 4 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:36:35,013 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:36:35,014 INFO L82 PathProgramCache]: Analyzing trace with hash 214746551, now seen corresponding path program 1 times [2019-09-08 17:36:35,014 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:36:35,014 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:36:35,017 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:35,017 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 17:36:35,017 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:35,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:35,298 INFO L134 CoverageAnalysis]: Checked inductivity of 642 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 642 trivial. 0 not checked. [2019-09-08 17:36:35,299 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-09-08 17:36:35,299 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-09-08 17:36:35,299 INFO L454 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-09-08 17:36:35,300 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-09-08 17:36:35,300 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-09-08 17:36:35,300 INFO L87 Difference]: Start difference. First operand 1663 states and 2096 transitions. Second operand 3 states. [2019-09-08 17:36:35,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:36:35,466 INFO L93 Difference]: Finished difference Result 4015 states and 5053 transitions. [2019-09-08 17:36:35,466 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-09-08 17:36:35,466 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 246 [2019-09-08 17:36:35,467 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:36:35,482 INFO L225 Difference]: With dead ends: 4015 [2019-09-08 17:36:35,482 INFO L226 Difference]: Without dead ends: 2410 [2019-09-08 17:36:35,488 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-09-08 17:36:35,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2410 states. [2019-09-08 17:36:35,595 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2410 to 2380. [2019-09-08 17:36:35,596 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2380 states. [2019-09-08 17:36:35,611 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2380 states to 2380 states and 2994 transitions. [2019-09-08 17:36:35,612 INFO L78 Accepts]: Start accepts. Automaton has 2380 states and 2994 transitions. Word has length 246 [2019-09-08 17:36:35,612 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:36:35,612 INFO L475 AbstractCegarLoop]: Abstraction has 2380 states and 2994 transitions. [2019-09-08 17:36:35,612 INFO L476 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-09-08 17:36:35,613 INFO L276 IsEmpty]: Start isEmpty. Operand 2380 states and 2994 transitions. [2019-09-08 17:36:35,622 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 325 [2019-09-08 17:36:35,622 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:36:35,622 INFO L399 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 6, 6, 6, 6, 6, 6, 6, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:36:35,623 INFO L418 AbstractCegarLoop]: === Iteration 5 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:36:35,623 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:36:35,623 INFO L82 PathProgramCache]: Analyzing trace with hash -1502563238, now seen corresponding path program 1 times [2019-09-08 17:36:35,623 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:36:35,623 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:36:35,628 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:35,629 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 17:36:35,629 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:35,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:35,975 INFO L134 CoverageAnalysis]: Checked inductivity of 716 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 714 trivial. 0 not checked. [2019-09-08 17:36:35,975 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-09-08 17:36:35,975 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-09-08 17:36:35,976 INFO L454 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-09-08 17:36:35,976 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-09-08 17:36:35,977 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-09-08 17:36:35,977 INFO L87 Difference]: Start difference. First operand 2380 states and 2994 transitions. Second operand 3 states. [2019-09-08 17:36:36,187 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:36:36,188 INFO L93 Difference]: Finished difference Result 5489 states and 6929 transitions. [2019-09-08 17:36:36,191 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-09-08 17:36:36,192 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 324 [2019-09-08 17:36:36,195 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:36:36,213 INFO L225 Difference]: With dead ends: 5489 [2019-09-08 17:36:36,222 INFO L226 Difference]: Without dead ends: 3167 [2019-09-08 17:36:36,232 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-09-08 17:36:36,236 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3167 states. [2019-09-08 17:36:36,365 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3167 to 3132. [2019-09-08 17:36:36,366 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3132 states. [2019-09-08 17:36:36,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3132 states to 3132 states and 3946 transitions. [2019-09-08 17:36:36,387 INFO L78 Accepts]: Start accepts. Automaton has 3132 states and 3946 transitions. Word has length 324 [2019-09-08 17:36:36,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:36:36,388 INFO L475 AbstractCegarLoop]: Abstraction has 3132 states and 3946 transitions. [2019-09-08 17:36:36,388 INFO L476 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-09-08 17:36:36,388 INFO L276 IsEmpty]: Start isEmpty. Operand 3132 states and 3946 transitions. [2019-09-08 17:36:36,401 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 344 [2019-09-08 17:36:36,402 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:36:36,402 INFO L399 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 6, 6, 6, 6, 6, 6, 6, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:36:36,403 INFO L418 AbstractCegarLoop]: === Iteration 6 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:36:36,403 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:36:36,403 INFO L82 PathProgramCache]: Analyzing trace with hash -1468161068, now seen corresponding path program 1 times [2019-09-08 17:36:36,403 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:36:36,404 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:36:36,408 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:36,409 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 17:36:36,409 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:36,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:36,928 INFO L134 CoverageAnalysis]: Checked inductivity of 724 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 724 trivial. 0 not checked. [2019-09-08 17:36:36,928 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-09-08 17:36:36,928 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-09-08 17:36:36,929 INFO L454 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-09-08 17:36:36,929 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-09-08 17:36:36,930 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-09-08 17:36:36,930 INFO L87 Difference]: Start difference. First operand 3132 states and 3946 transitions. Second operand 6 states. [2019-09-08 17:36:37,174 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:36:37,174 INFO L93 Difference]: Finished difference Result 6234 states and 7869 transitions. [2019-09-08 17:36:37,175 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-09-08 17:36:37,175 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 343 [2019-09-08 17:36:37,176 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:36:37,193 INFO L225 Difference]: With dead ends: 6234 [2019-09-08 17:36:37,194 INFO L226 Difference]: Without dead ends: 3160 [2019-09-08 17:36:37,205 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2019-09-08 17:36:37,209 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3160 states. [2019-09-08 17:36:37,330 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3160 to 3156. [2019-09-08 17:36:37,331 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3156 states. [2019-09-08 17:36:37,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3156 states to 3156 states and 3982 transitions. [2019-09-08 17:36:37,349 INFO L78 Accepts]: Start accepts. Automaton has 3156 states and 3982 transitions. Word has length 343 [2019-09-08 17:36:37,350 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:36:37,350 INFO L475 AbstractCegarLoop]: Abstraction has 3156 states and 3982 transitions. [2019-09-08 17:36:37,350 INFO L476 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-09-08 17:36:37,351 INFO L276 IsEmpty]: Start isEmpty. Operand 3156 states and 3982 transitions. [2019-09-08 17:36:37,363 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 346 [2019-09-08 17:36:37,363 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:36:37,364 INFO L399 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 6, 6, 6, 6, 6, 6, 6, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:36:37,364 INFO L418 AbstractCegarLoop]: === Iteration 7 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:36:37,364 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:36:37,364 INFO L82 PathProgramCache]: Analyzing trace with hash 609633092, now seen corresponding path program 1 times [2019-09-08 17:36:37,365 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:36:37,365 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:36:37,368 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:37,369 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 17:36:37,369 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:37,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:37,825 INFO L134 CoverageAnalysis]: Checked inductivity of 724 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 720 trivial. 0 not checked. [2019-09-08 17:36:37,826 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-09-08 17:36:37,826 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-09-08 17:36:37,826 INFO L454 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-09-08 17:36:37,828 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-09-08 17:36:37,828 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-09-08 17:36:37,828 INFO L87 Difference]: Start difference. First operand 3156 states and 3982 transitions. Second operand 5 states. [2019-09-08 17:36:39,169 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:36:39,169 INFO L93 Difference]: Finished difference Result 6254 states and 7905 transitions. [2019-09-08 17:36:39,170 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-09-08 17:36:39,170 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 345 [2019-09-08 17:36:39,170 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:36:39,187 INFO L225 Difference]: With dead ends: 6254 [2019-09-08 17:36:39,188 INFO L226 Difference]: Without dead ends: 3156 [2019-09-08 17:36:39,197 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2019-09-08 17:36:39,202 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3156 states. [2019-09-08 17:36:39,342 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3156 to 3156. [2019-09-08 17:36:39,343 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3156 states. [2019-09-08 17:36:39,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3156 states to 3156 states and 3976 transitions. [2019-09-08 17:36:39,366 INFO L78 Accepts]: Start accepts. Automaton has 3156 states and 3976 transitions. Word has length 345 [2019-09-08 17:36:39,368 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:36:39,368 INFO L475 AbstractCegarLoop]: Abstraction has 3156 states and 3976 transitions. [2019-09-08 17:36:39,368 INFO L476 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-09-08 17:36:39,369 INFO L276 IsEmpty]: Start isEmpty. Operand 3156 states and 3976 transitions. [2019-09-08 17:36:39,383 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 346 [2019-09-08 17:36:39,383 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:36:39,384 INFO L399 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 6, 6, 6, 6, 6, 6, 6, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:36:39,384 INFO L418 AbstractCegarLoop]: === Iteration 8 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:36:39,384 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:36:39,385 INFO L82 PathProgramCache]: Analyzing trace with hash -1505284032, now seen corresponding path program 1 times [2019-09-08 17:36:39,385 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:36:39,385 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:36:39,388 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:39,388 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 17:36:39,388 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:39,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:40,231 INFO L134 CoverageAnalysis]: Checked inductivity of 722 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 722 trivial. 0 not checked. [2019-09-08 17:36:40,231 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-09-08 17:36:40,231 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-09-08 17:36:40,232 INFO L454 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-09-08 17:36:40,232 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-09-08 17:36:40,232 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-09-08 17:36:40,233 INFO L87 Difference]: Start difference. First operand 3156 states and 3976 transitions. Second operand 6 states. [2019-09-08 17:36:40,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:36:40,412 INFO L93 Difference]: Finished difference Result 6270 states and 7905 transitions. [2019-09-08 17:36:40,412 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-09-08 17:36:40,412 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 345 [2019-09-08 17:36:40,413 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:36:40,429 INFO L225 Difference]: With dead ends: 6270 [2019-09-08 17:36:40,429 INFO L226 Difference]: Without dead ends: 3172 [2019-09-08 17:36:40,438 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2019-09-08 17:36:40,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3172 states. [2019-09-08 17:36:40,571 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3172 to 3168. [2019-09-08 17:36:40,572 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3168 states. [2019-09-08 17:36:40,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3168 states to 3168 states and 3988 transitions. [2019-09-08 17:36:40,587 INFO L78 Accepts]: Start accepts. Automaton has 3168 states and 3988 transitions. Word has length 345 [2019-09-08 17:36:40,588 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:36:40,588 INFO L475 AbstractCegarLoop]: Abstraction has 3168 states and 3988 transitions. [2019-09-08 17:36:40,588 INFO L476 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-09-08 17:36:40,588 INFO L276 IsEmpty]: Start isEmpty. Operand 3168 states and 3988 transitions. [2019-09-08 17:36:40,600 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 346 [2019-09-08 17:36:40,600 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:36:40,601 INFO L399 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 6, 6, 6, 6, 6, 6, 6, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:36:40,601 INFO L418 AbstractCegarLoop]: === Iteration 9 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:36:40,601 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:36:40,602 INFO L82 PathProgramCache]: Analyzing trace with hash -1159838522, now seen corresponding path program 1 times [2019-09-08 17:36:40,602 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:36:40,602 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:36:40,604 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:40,604 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 17:36:40,605 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:40,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:41,068 INFO L134 CoverageAnalysis]: Checked inductivity of 724 backedges. 0 proven. 77 refuted. 0 times theorem prover too weak. 647 trivial. 0 not checked. [2019-09-08 17:36:41,069 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2019-09-08 17:36:41,069 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) [2019-09-08 17:36:41,102 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2019-09-08 17:36:41,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:41,610 INFO L256 TraceCheckSpWp]: Trace formula consists of 2679 conjuncts, 9 conjunts are in the unsatisfiable core [2019-09-08 17:36:41,645 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-09-08 17:36:41,862 INFO L134 CoverageAnalysis]: Checked inductivity of 724 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 720 trivial. 0 not checked. [MP z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (2)] Exception during sending of exit command (exit): Stream closed [2019-09-08 17:36:41,882 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2019-09-08 17:36:41,883 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 10 [2019-09-08 17:36:41,884 INFO L454 AbstractCegarLoop]: Interpolant automaton has 10 states [2019-09-08 17:36:41,885 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2019-09-08 17:36:41,890 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2019-09-08 17:36:41,890 INFO L87 Difference]: Start difference. First operand 3168 states and 3988 transitions. Second operand 10 states. [2019-09-08 17:36:42,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:36:42,467 INFO L93 Difference]: Finished difference Result 5140 states and 6454 transitions. [2019-09-08 17:36:42,467 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2019-09-08 17:36:42,467 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 345 [2019-09-08 17:36:42,468 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:36:42,484 INFO L225 Difference]: With dead ends: 5140 [2019-09-08 17:36:42,485 INFO L226 Difference]: Without dead ends: 1967 [2019-09-08 17:36:42,499 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 353 GetRequests, 342 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=127, Unknown=0, NotChecked=0, Total=156 [2019-09-08 17:36:42,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1967 states. [2019-09-08 17:36:42,615 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1967 to 1940. [2019-09-08 17:36:42,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1940 states. [2019-09-08 17:36:42,625 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1940 states to 1940 states and 2412 transitions. [2019-09-08 17:36:42,627 INFO L78 Accepts]: Start accepts. Automaton has 1940 states and 2412 transitions. Word has length 345 [2019-09-08 17:36:42,627 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:36:42,627 INFO L475 AbstractCegarLoop]: Abstraction has 1940 states and 2412 transitions. [2019-09-08 17:36:42,627 INFO L476 AbstractCegarLoop]: Interpolant automaton has 10 states. [2019-09-08 17:36:42,628 INFO L276 IsEmpty]: Start isEmpty. Operand 1940 states and 2412 transitions. [2019-09-08 17:36:42,639 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 363 [2019-09-08 17:36:42,639 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:36:42,639 INFO L399 BasicCegarLoop]: trace histogram [12, 12, 12, 12, 12, 12, 12, 12, 6, 6, 6, 6, 6, 6, 6, 5, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:36:42,640 INFO L418 AbstractCegarLoop]: === Iteration 10 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:36:42,641 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:36:42,641 INFO L82 PathProgramCache]: Analyzing trace with hash -1135408954, now seen corresponding path program 1 times [2019-09-08 17:36:42,641 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:36:42,641 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:36:42,646 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:42,646 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 17:36:42,646 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:42,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:43,272 INFO L134 CoverageAnalysis]: Checked inductivity of 797 backedges. 8 proven. 74 refuted. 0 times theorem prover too weak. 715 trivial. 0 not checked. [2019-09-08 17:36:43,273 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2019-09-08 17:36:43,273 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2019-09-08 17:36:43,343 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 17:36:44,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:44,428 INFO L256 TraceCheckSpWp]: Trace formula consists of 2780 conjuncts, 15 conjunts are in the unsatisfiable core [2019-09-08 17:36:44,439 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-09-08 17:36:44,665 INFO L134 CoverageAnalysis]: Checked inductivity of 797 backedges. 182 proven. 1 refuted. 0 times theorem prover too weak. 614 trivial. 0 not checked. [MP z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (3)] Exception during sending of exit command (exit): Broken pipe [2019-09-08 17:36:44,682 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2019-09-08 17:36:44,683 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 7] total 10 [2019-09-08 17:36:44,684 INFO L454 AbstractCegarLoop]: Interpolant automaton has 10 states [2019-09-08 17:36:44,684 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2019-09-08 17:36:44,684 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2019-09-08 17:36:44,685 INFO L87 Difference]: Start difference. First operand 1940 states and 2412 transitions. Second operand 10 states. [2019-09-08 17:36:45,026 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:36:45,027 INFO L93 Difference]: Finished difference Result 3866 states and 4824 transitions. [2019-09-08 17:36:45,027 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-09-08 17:36:45,027 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 362 [2019-09-08 17:36:45,028 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:36:45,038 INFO L225 Difference]: With dead ends: 3866 [2019-09-08 17:36:45,038 INFO L226 Difference]: Without dead ends: 1939 [2019-09-08 17:36:45,044 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 371 GetRequests, 359 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=143, Unknown=0, NotChecked=0, Total=182 [2019-09-08 17:36:45,047 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1939 states. [2019-09-08 17:36:45,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1939 to 1939. [2019-09-08 17:36:45,140 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1939 states. [2019-09-08 17:36:45,150 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1939 states to 1939 states and 2410 transitions. [2019-09-08 17:36:45,151 INFO L78 Accepts]: Start accepts. Automaton has 1939 states and 2410 transitions. Word has length 362 [2019-09-08 17:36:45,151 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:36:45,151 INFO L475 AbstractCegarLoop]: Abstraction has 1939 states and 2410 transitions. [2019-09-08 17:36:45,151 INFO L476 AbstractCegarLoop]: Interpolant automaton has 10 states. [2019-09-08 17:36:45,152 INFO L276 IsEmpty]: Start isEmpty. Operand 1939 states and 2410 transitions. [2019-09-08 17:36:45,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 382 [2019-09-08 17:36:45,160 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:36:45,160 INFO L399 BasicCegarLoop]: trace histogram [24, 12, 12, 12, 12, 12, 12, 12, 12, 6, 6, 6, 6, 6, 6, 6, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:36:45,161 INFO L418 AbstractCegarLoop]: === Iteration 11 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:36:45,161 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:36:45,161 INFO L82 PathProgramCache]: Analyzing trace with hash -1648370011, now seen corresponding path program 2 times [2019-09-08 17:36:45,161 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:36:45,161 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:36:45,163 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:45,164 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 17:36:45,164 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:45,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:45,976 INFO L134 CoverageAnalysis]: Checked inductivity of 1291 backedges. 0 proven. 168 refuted. 0 times theorem prover too weak. 1123 trivial. 0 not checked. [2019-09-08 17:36:45,976 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2019-09-08 17:36:45,976 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2019-09-08 17:36:46,005 INFO L103 rtionOrderModulation]: Keeping assertion order OUTSIDE_LOOP_FIRST1 [2019-09-08 17:36:47,723 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-09-08 17:36:47,724 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-09-08 17:36:47,735 INFO L256 TraceCheckSpWp]: Trace formula consists of 2894 conjuncts, 12 conjunts are in the unsatisfiable core [2019-09-08 17:36:47,747 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-09-08 17:36:47,942 INFO L134 CoverageAnalysis]: Checked inductivity of 1291 backedges. 419 proven. 3 refuted. 0 times theorem prover too weak. 869 trivial. 0 not checked. [MP z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (4)] Exception during sending of exit command (exit): Broken pipe [2019-09-08 17:36:47,954 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2019-09-08 17:36:47,954 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8] total 13 [2019-09-08 17:36:47,955 INFO L454 AbstractCegarLoop]: Interpolant automaton has 13 states [2019-09-08 17:36:47,955 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2019-09-08 17:36:47,955 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=123, Unknown=0, NotChecked=0, Total=156 [2019-09-08 17:36:47,955 INFO L87 Difference]: Start difference. First operand 1939 states and 2410 transitions. Second operand 13 states. [2019-09-08 17:36:48,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:36:48,300 INFO L93 Difference]: Finished difference Result 3861 states and 4811 transitions. [2019-09-08 17:36:48,300 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-09-08 17:36:48,300 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 381 [2019-09-08 17:36:48,301 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:36:48,310 INFO L225 Difference]: With dead ends: 3861 [2019-09-08 17:36:48,310 INFO L226 Difference]: Without dead ends: 1940 [2019-09-08 17:36:48,316 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 391 GetRequests, 377 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=51, Invalid=189, Unknown=0, NotChecked=0, Total=240 [2019-09-08 17:36:48,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1940 states. [2019-09-08 17:36:48,387 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1940 to 1940. [2019-09-08 17:36:48,388 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1940 states. [2019-09-08 17:36:48,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1940 states to 1940 states and 2411 transitions. [2019-09-08 17:36:48,394 INFO L78 Accepts]: Start accepts. Automaton has 1940 states and 2411 transitions. Word has length 381 [2019-09-08 17:36:48,395 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:36:48,395 INFO L475 AbstractCegarLoop]: Abstraction has 1940 states and 2411 transitions. [2019-09-08 17:36:48,395 INFO L476 AbstractCegarLoop]: Interpolant automaton has 13 states. [2019-09-08 17:36:48,395 INFO L276 IsEmpty]: Start isEmpty. Operand 1940 states and 2411 transitions. [2019-09-08 17:36:48,404 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 396 [2019-09-08 17:36:48,404 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:36:48,405 INFO L399 BasicCegarLoop]: trace histogram [36, 12, 12, 12, 12, 12, 12, 12, 12, 6, 6, 6, 6, 6, 6, 6, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:36:48,405 INFO L418 AbstractCegarLoop]: === Iteration 12 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:36:48,405 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:36:48,405 INFO L82 PathProgramCache]: Analyzing trace with hash 1406312047, now seen corresponding path program 1 times [2019-09-08 17:36:48,405 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:36:48,406 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:36:48,408 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:48,408 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2019-09-08 17:36:48,408 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:48,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:49,155 INFO L134 CoverageAnalysis]: Checked inductivity of 1787 backedges. 0 proven. 248 refuted. 0 times theorem prover too weak. 1539 trivial. 0 not checked. [2019-09-08 17:36:49,155 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2019-09-08 17:36:49,155 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) [2019-09-08 17:36:49,189 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY Waiting until toolchain timeout for monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2019-09-08 17:36:54,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:54,034 INFO L256 TraceCheckSpWp]: Trace formula consists of 2983 conjuncts, 17 conjunts are in the unsatisfiable core [2019-09-08 17:36:54,043 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-09-08 17:36:54,281 INFO L134 CoverageAnalysis]: Checked inductivity of 1787 backedges. 328 proven. 6 refuted. 0 times theorem prover too weak. 1453 trivial. 0 not checked. [2019-09-08 17:36:54,311 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2019-09-08 17:36:54,311 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9] total 15 [2019-09-08 17:36:54,312 INFO L454 AbstractCegarLoop]: Interpolant automaton has 15 states [2019-09-08 17:36:54,313 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2019-09-08 17:36:54,313 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=165, Unknown=0, NotChecked=0, Total=210 [2019-09-08 17:36:54,314 INFO L87 Difference]: Start difference. First operand 1940 states and 2411 transitions. Second operand 15 states. [2019-09-08 17:36:54,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:36:54,618 INFO L93 Difference]: Finished difference Result 3863 states and 4813 transitions. [2019-09-08 17:36:54,618 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2019-09-08 17:36:54,618 INFO L78 Accepts]: Start accepts. Automaton has 15 states. Word has length 395 [2019-09-08 17:36:54,619 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:36:54,628 INFO L225 Difference]: With dead ends: 3863 [2019-09-08 17:36:54,628 INFO L226 Difference]: Without dead ends: 1941 [2019-09-08 17:36:54,635 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 406 GetRequests, 390 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 61 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=63, Invalid=243, Unknown=0, NotChecked=0, Total=306 [2019-09-08 17:36:54,637 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1941 states. [2019-09-08 17:36:54,698 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1941 to 1941. [2019-09-08 17:36:54,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1941 states. [2019-09-08 17:36:54,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1941 states to 1941 states and 2412 transitions. [2019-09-08 17:36:54,704 INFO L78 Accepts]: Start accepts. Automaton has 1941 states and 2412 transitions. Word has length 395 [2019-09-08 17:36:54,704 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:36:54,705 INFO L475 AbstractCegarLoop]: Abstraction has 1941 states and 2412 transitions. [2019-09-08 17:36:54,705 INFO L476 AbstractCegarLoop]: Interpolant automaton has 15 states. [2019-09-08 17:36:54,705 INFO L276 IsEmpty]: Start isEmpty. Operand 1941 states and 2412 transitions. [2019-09-08 17:36:54,714 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 406 [2019-09-08 17:36:54,714 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:36:54,715 INFO L399 BasicCegarLoop]: trace histogram [48, 12, 12, 12, 12, 12, 12, 12, 12, 6, 6, 6, 6, 6, 6, 6, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:36:54,715 INFO L418 AbstractCegarLoop]: === Iteration 13 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:36:54,715 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:36:54,716 INFO L82 PathProgramCache]: Analyzing trace with hash 1609909541, now seen corresponding path program 3 times [2019-09-08 17:36:54,716 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:36:54,716 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:36:54,720 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:54,720 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 17:36:54,720 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:54,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:55,235 INFO L134 CoverageAnalysis]: Checked inductivity of 2431 backedges. 217 proven. 134 refuted. 0 times theorem prover too weak. 2080 trivial. 0 not checked. [2019-09-08 17:36:55,238 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2019-09-08 17:36:55,238 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) [2019-09-08 17:36:55,265 INFO L103 rtionOrderModulation]: Keeping assertion order OUTSIDE_LOOP_FIRST2 Waiting until toolchain timeout for monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2019-09-08 17:36:57,350 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2019-09-08 17:36:57,350 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-09-08 17:36:57,357 INFO L256 TraceCheckSpWp]: Trace formula consists of 2177 conjuncts, 14 conjunts are in the unsatisfiable core [2019-09-08 17:36:57,372 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-09-08 17:36:57,648 INFO L134 CoverageAnalysis]: Checked inductivity of 2431 backedges. 405 proven. 10 refuted. 0 times theorem prover too weak. 2016 trivial. 0 not checked. [2019-09-08 17:36:57,658 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2019-09-08 17:36:57,658 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10] total 17 [2019-09-08 17:36:57,659 INFO L454 AbstractCegarLoop]: Interpolant automaton has 17 states [2019-09-08 17:36:57,660 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2019-09-08 17:36:57,661 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=60, Invalid=212, Unknown=0, NotChecked=0, Total=272 [2019-09-08 17:36:57,661 INFO L87 Difference]: Start difference. First operand 1941 states and 2412 transitions. Second operand 17 states. [2019-09-08 17:36:58,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:36:58,096 INFO L93 Difference]: Finished difference Result 3866 states and 4811 transitions. [2019-09-08 17:36:58,097 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2019-09-08 17:36:58,097 INFO L78 Accepts]: Start accepts. Automaton has 17 states. Word has length 405 [2019-09-08 17:36:58,097 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:36:58,116 INFO L225 Difference]: With dead ends: 3866 [2019-09-08 17:36:58,116 INFO L226 Difference]: Without dead ends: 1950 [2019-09-08 17:36:58,123 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 420 GetRequests, 399 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 105 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=125, Invalid=381, Unknown=0, NotChecked=0, Total=506 [2019-09-08 17:36:58,125 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1950 states. [2019-09-08 17:36:58,182 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1950 to 1950. [2019-09-08 17:36:58,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1950 states. [2019-09-08 17:36:58,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1950 states to 1950 states and 2422 transitions. [2019-09-08 17:36:58,188 INFO L78 Accepts]: Start accepts. Automaton has 1950 states and 2422 transitions. Word has length 405 [2019-09-08 17:36:58,188 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:36:58,189 INFO L475 AbstractCegarLoop]: Abstraction has 1950 states and 2422 transitions. [2019-09-08 17:36:58,189 INFO L476 AbstractCegarLoop]: Interpolant automaton has 17 states. [2019-09-08 17:36:58,189 INFO L276 IsEmpty]: Start isEmpty. Operand 1950 states and 2422 transitions. [2019-09-08 17:36:58,194 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 415 [2019-09-08 17:36:58,194 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:36:58,194 INFO L399 BasicCegarLoop]: trace histogram [55, 12, 12, 12, 12, 12, 12, 12, 12, 6, 6, 6, 6, 6, 6, 6, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:36:58,195 INFO L418 AbstractCegarLoop]: === Iteration 14 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:36:58,195 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:36:58,195 INFO L82 PathProgramCache]: Analyzing trace with hash -2098233272, now seen corresponding path program 2 times [2019-09-08 17:36:58,195 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:36:58,195 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:36:58,198 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:58,198 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2019-09-08 17:36:58,198 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:36:58,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:36:58,734 INFO L134 CoverageAnalysis]: Checked inductivity of 2870 backedges. 120 proven. 327 refuted. 0 times theorem prover too weak. 2423 trivial. 0 not checked. [2019-09-08 17:36:58,734 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2019-09-08 17:36:58,734 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 7 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) [2019-09-08 17:36:58,756 INFO L103 rtionOrderModulation]: Keeping assertion order OUTSIDE_LOOP_FIRST1 Waiting until toolchain timeout for monitored process 7 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2019-09-08 17:37:11,297 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-09-08 17:37:11,297 INFO L250 tOrderPrioritization]: Conjunction of SSA is unknown [2019-09-08 17:37:11,404 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2019-09-08 17:37:11,404 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [11] total 11 [2019-09-08 17:37:11,405 INFO L454 AbstractCegarLoop]: Interpolant automaton has 11 states [2019-09-08 17:37:11,405 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2019-09-08 17:37:11,406 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2019-09-08 17:37:11,406 INFO L87 Difference]: Start difference. First operand 1950 states and 2422 transitions. Second operand 11 states. [2019-09-08 17:37:11,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:37:11,695 INFO L93 Difference]: Finished difference Result 3884 states and 4832 transitions. [2019-09-08 17:37:11,695 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2019-09-08 17:37:11,695 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 414 [2019-09-08 17:37:11,696 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:37:11,703 INFO L225 Difference]: With dead ends: 3884 [2019-09-08 17:37:11,704 INFO L226 Difference]: Without dead ends: 1957 [2019-09-08 17:37:11,710 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=48, Invalid=134, Unknown=0, NotChecked=0, Total=182 [2019-09-08 17:37:11,713 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1957 states. [2019-09-08 17:37:11,840 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1957 to 1951. [2019-09-08 17:37:11,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1951 states. [2019-09-08 17:37:11,845 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1951 states to 1951 states and 2423 transitions. [2019-09-08 17:37:11,845 INFO L78 Accepts]: Start accepts. Automaton has 1951 states and 2423 transitions. Word has length 414 [2019-09-08 17:37:11,846 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:37:11,846 INFO L475 AbstractCegarLoop]: Abstraction has 1951 states and 2423 transitions. [2019-09-08 17:37:11,846 INFO L476 AbstractCegarLoop]: Interpolant automaton has 11 states. [2019-09-08 17:37:11,846 INFO L276 IsEmpty]: Start isEmpty. Operand 1951 states and 2423 transitions. [2019-09-08 17:37:11,851 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 420 [2019-09-08 17:37:11,851 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:37:11,852 INFO L399 BasicCegarLoop]: trace histogram [62, 12, 12, 12, 12, 12, 12, 12, 12, 6, 6, 6, 6, 6, 6, 6, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:37:11,852 INFO L418 AbstractCegarLoop]: === Iteration 15 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:37:11,852 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:37:11,852 INFO L82 PathProgramCache]: Analyzing trace with hash -791485947, now seen corresponding path program 4 times [2019-09-08 17:37:11,853 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:37:11,853 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:37:11,855 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:37:11,855 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2019-09-08 17:37:11,855 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:37:12,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:37:12,405 INFO L134 CoverageAnalysis]: Checked inductivity of 3362 backedges. 535 proven. 21 refuted. 0 times theorem prover too weak. 2806 trivial. 0 not checked. [2019-09-08 17:37:12,406 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2019-09-08 17:37:12,406 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 8 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2019-09-08 17:37:12,427 INFO L103 rtionOrderModulation]: Keeping assertion order TERMS_WITH_SMALL_CONSTANTS_FIRST [2019-09-08 17:37:16,200 INFO L249 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2019-09-08 17:37:16,200 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-09-08 17:37:16,214 INFO L256 TraceCheckSpWp]: Trace formula consists of 3122 conjuncts, 20 conjunts are in the unsatisfiable core [2019-09-08 17:37:16,224 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-09-08 17:37:16,522 INFO L134 CoverageAnalysis]: Checked inductivity of 3362 backedges. 1009 proven. 21 refuted. 0 times theorem prover too weak. 2332 trivial. 0 not checked. [2019-09-08 17:37:16,568 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2019-09-08 17:37:16,568 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12] total 21 [2019-09-08 17:37:16,570 INFO L454 AbstractCegarLoop]: Interpolant automaton has 21 states [2019-09-08 17:37:16,571 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2019-09-08 17:37:16,571 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=99, Invalid=321, Unknown=0, NotChecked=0, Total=420 [2019-09-08 17:37:16,572 INFO L87 Difference]: Start difference. First operand 1951 states and 2423 transitions. Second operand 21 states. [2019-09-08 17:37:17,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:37:17,003 INFO L93 Difference]: Finished difference Result 3886 states and 4834 transitions. [2019-09-08 17:37:17,003 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2019-09-08 17:37:17,003 INFO L78 Accepts]: Start accepts. Automaton has 21 states. Word has length 419 [2019-09-08 17:37:17,004 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:37:17,010 INFO L225 Difference]: With dead ends: 3886 [2019-09-08 17:37:17,010 INFO L226 Difference]: Without dead ends: 1958 [2019-09-08 17:37:17,016 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 438 GetRequests, 411 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 191 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=209, Invalid=603, Unknown=0, NotChecked=0, Total=812 [2019-09-08 17:37:17,018 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1958 states. [2019-09-08 17:37:17,077 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1958 to 1952. [2019-09-08 17:37:17,078 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1952 states. [2019-09-08 17:37:17,082 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1952 states to 1952 states and 2424 transitions. [2019-09-08 17:37:17,083 INFO L78 Accepts]: Start accepts. Automaton has 1952 states and 2424 transitions. Word has length 419 [2019-09-08 17:37:17,083 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:37:17,083 INFO L475 AbstractCegarLoop]: Abstraction has 1952 states and 2424 transitions. [2019-09-08 17:37:17,083 INFO L476 AbstractCegarLoop]: Interpolant automaton has 21 states. [2019-09-08 17:37:17,083 INFO L276 IsEmpty]: Start isEmpty. Operand 1952 states and 2424 transitions. [2019-09-08 17:37:17,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 429 [2019-09-08 17:37:17,089 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:37:17,089 INFO L399 BasicCegarLoop]: trace histogram [69, 12, 12, 12, 12, 12, 12, 12, 12, 6, 6, 6, 6, 6, 6, 6, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:37:17,089 INFO L418 AbstractCegarLoop]: === Iteration 16 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:37:17,090 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:37:17,090 INFO L82 PathProgramCache]: Analyzing trace with hash -1746434200, now seen corresponding path program 3 times [2019-09-08 17:37:17,090 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:37:17,090 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:37:17,092 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:37:17,092 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2019-09-08 17:37:17,092 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:37:17,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 17:37:17,665 INFO L134 CoverageAnalysis]: Checked inductivity of 3899 backedges. 650 proven. 28 refuted. 0 times theorem prover too weak. 3221 trivial. 0 not checked. [2019-09-08 17:37:17,665 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2019-09-08 17:37:17,666 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 9 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2019-09-08 17:37:17,685 INFO L103 rtionOrderModulation]: Keeping assertion order OUTSIDE_LOOP_FIRST2 [2019-09-08 17:37:31,066 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2019-09-08 17:37:31,066 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-09-08 17:37:31,080 INFO L256 TraceCheckSpWp]: Trace formula consists of 2380 conjuncts, 17 conjunts are in the unsatisfiable core [2019-09-08 17:37:31,090 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-09-08 17:37:31,425 INFO L134 CoverageAnalysis]: Checked inductivity of 3899 backedges. 714 proven. 28 refuted. 0 times theorem prover too weak. 3157 trivial. 0 not checked. [2019-09-08 17:37:31,441 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2019-09-08 17:37:31,441 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 13] total 23 [2019-09-08 17:37:31,442 INFO L454 AbstractCegarLoop]: Interpolant automaton has 23 states [2019-09-08 17:37:31,443 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2019-09-08 17:37:31,443 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=123, Invalid=383, Unknown=0, NotChecked=0, Total=506 [2019-09-08 17:37:31,445 INFO L87 Difference]: Start difference. First operand 1952 states and 2424 transitions. Second operand 23 states. [2019-09-08 17:37:31,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 17:37:31,851 INFO L93 Difference]: Finished difference Result 3891 states and 4840 transitions. [2019-09-08 17:37:31,851 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2019-09-08 17:37:31,851 INFO L78 Accepts]: Start accepts. Automaton has 23 states. Word has length 428 [2019-09-08 17:37:31,852 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 17:37:31,858 INFO L225 Difference]: With dead ends: 3891 [2019-09-08 17:37:31,859 INFO L226 Difference]: Without dead ends: 1962 [2019-09-08 17:37:31,865 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 449 GetRequests, 419 SyntacticMatches, 0 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 243 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=260, Invalid=732, Unknown=0, NotChecked=0, Total=992 [2019-09-08 17:37:31,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1962 states. [2019-09-08 17:37:31,921 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1962 to 1953. [2019-09-08 17:37:31,921 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1953 states. [2019-09-08 17:37:31,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1953 states to 1953 states and 2425 transitions. [2019-09-08 17:37:31,927 INFO L78 Accepts]: Start accepts. Automaton has 1953 states and 2425 transitions. Word has length 428 [2019-09-08 17:37:31,927 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 17:37:31,927 INFO L475 AbstractCegarLoop]: Abstraction has 1953 states and 2425 transitions. [2019-09-08 17:37:31,927 INFO L476 AbstractCegarLoop]: Interpolant automaton has 23 states. [2019-09-08 17:37:31,927 INFO L276 IsEmpty]: Start isEmpty. Operand 1953 states and 2425 transitions. [2019-09-08 17:37:31,933 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 434 [2019-09-08 17:37:31,933 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 17:37:31,935 INFO L399 BasicCegarLoop]: trace histogram [76, 12, 12, 12, 12, 12, 12, 12, 12, 6, 6, 6, 6, 6, 6, 6, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 17:37:31,935 INFO L418 AbstractCegarLoop]: === Iteration 17 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 17:37:31,935 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 17:37:31,936 INFO L82 PathProgramCache]: Analyzing trace with hash -309217563, now seen corresponding path program 5 times [2019-09-08 17:37:31,936 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 17:37:31,936 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 17:37:31,938 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:37:31,938 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2019-09-08 17:37:31,938 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 17:37:38,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-09-08 17:37:44,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-09-08 17:37:45,210 INFO L466 BasicCegarLoop]: Counterexample might be feasible [2019-09-08 17:37:45,286 WARN L417 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2019-09-08 17:37:45,291 WARN L417 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2019-09-08 17:37:45,294 WARN L417 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2019-09-08 17:37:45,298 WARN L417 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2019-09-08 17:37:45,302 WARN L417 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2019-09-08 17:37:45,306 WARN L417 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2019-09-08 17:37:45,309 WARN L417 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2019-09-08 17:37:45,314 WARN L417 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2019-09-08 17:37:45,319 WARN L417 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2019-09-08 17:37:45,322 WARN L417 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2019-09-08 17:37:45,326 WARN L417 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2019-09-08 17:37:45,331 WARN L417 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2019-09-08 17:37:45,411 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 25769803819 could not be translated for associated CType STRUCT~~file_operations?owner~*module?llseek~*((*file ~loff_t~0 INT ) : ~loff_t~0)?read~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?write~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?read_iter~*((*kiocb *iov_iter ) : UINT)?write_iter~*((*kiocb *iov_iter ) : UINT)?iterate~*((*file *dir_context ) : INT)?poll~*((*file *poll_table_struct ) : UINT)?unlocked_ioctl~*((*file UINT ULONG ) : LONG)?compat_ioctl~*((*file UINT ULONG ) : LONG)?mmap~*((*file *vm_area_struct ) : INT)?mremap~*((*file *vm_area_struct ) : INT)?open~*((*inode *file ) : INT)?flush~*((*file ~fl_owner_t~0 ) : INT)?release~*((*inode *file ) : INT)?fsync~*((*file ~loff_t~0 ~loff_t~0 INT ) : INT)?aio_fsync~*((*kiocb INT ) : INT)?fasync~*((INT *file INT ) : INT)?lock~*((*file INT *file_lock ) : INT)?sendpage~*((*file *page INT UINT *~loff_t~0 INT ) : UINT)?get_unmapped_area~*((*file ULONG ULONG ULONG ULONG ) : ULONG)?check_flags~*((INT ) : INT)?flock~*((*file INT *file_lock ) : INT)?splice_write~*((*pipe_inode_info *file *~loff_t~0 UINT UINT ) : UINT)?splice_read~*((*file *~loff_t~0 *pipe_inode_info UINT UINT ) : UINT)?setlease~*((*file LONG **file_lock **VOID ) : INT)?fallocate~*((*file INT ~loff_t~0 ~loff_t~0 ) : LONG)?show_fdinfo~*((*seq_file *file ) : VOID)# [2019-09-08 17:37:45,412 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 25769803796 could not be translated for associated CType STRUCT~~mutex?count~~atomic_t~0?wait_lock~~spinlock_t~0?wait_list~STRUCT~~list_head?next~*list_head?prev~*list_head#?owner~*task_struct?magic~*VOID?dep_map~STRUCT~~lockdep_map?key~*lock_class_key?class_cache~ARRAY#_2_~*lock_class#?name~*CHAR?cpu~INT?ip~ULONG## [2019-09-08 17:37:45,413 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 25769803798 could not be translated for associated CType STRUCT~~cdev?kobj~STRUCT~~kobject?name~*CHAR?entry~STRUCT~~list_head?next~*list_head?prev~*list_head#?parent~*kobject?kset~*kset?ktype~*kobj_type?sd~*kernfs_node?kref~STRUCT~~kref?refcount~~atomic_t~0#?release~STRUCT~~delayed_work?work~STRUCT~~work_struct?data~~atomic_long_t~0?entry~STRUCT~~list_head?next~*list_head?prev~*list_head#?func~*((*work_struct ) : VOID)?lockdep_map~STRUCT~~lockdep_map?key~*lock_class_key?class_cache~ARRAY#_2_~*lock_class#?name~*CHAR?cpu~INT?ip~ULONG##?timer~STRUCT~~timer_list?entry~STRUCT~~hlist_node?next~*hlist_node?pprev~**hlist_node#?expires~ULONG?function~*((ULONG ) : VOID)?data~ULONG?flags~~u32~0?slack~INT?start_pid~INT?start_site~*VOID?start_comm~ARRAY#_16_~CHAR#?lockdep_map~STRUCT~~lockdep_map?key~*lock_class_key?class_cache~ARRAY#_2_~*lock_class#?name~*CHAR?cpu~INT?ip~ULONG##?wq~*workqueue_struct?cpu~INT#?state_initialized~UCHAR?state_in_sysfs~UCHAR?state_add_uevent_sent~UCHAR?state_remove_uevent_sent~UCHAR?uevent_suppress~UCHAR#?owner~*module?ops~*file_operations?list~STRUCT~~list_head?next~*list_head?prev~*list_head#?dev~~dev_t~0?count~UINT# [2019-09-08 17:37:45,413 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 25769803807 could not be translated for associated CType STRUCT~~file_operations?owner~*module?llseek~*((*file ~loff_t~0 INT ) : ~loff_t~0)?read~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?write~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?read_iter~*((*kiocb *iov_iter ) : UINT)?write_iter~*((*kiocb *iov_iter ) : UINT)?iterate~*((*file *dir_context ) : INT)?poll~*((*file *poll_table_struct ) : UINT)?unlocked_ioctl~*((*file UINT ULONG ) : LONG)?compat_ioctl~*((*file UINT ULONG ) : LONG)?mmap~*((*file *vm_area_struct ) : INT)?mremap~*((*file *vm_area_struct ) : INT)?open~*((*inode *file ) : INT)?flush~*((*file ~fl_owner_t~0 ) : INT)?release~*((*inode *file ) : INT)?fsync~*((*file ~loff_t~0 ~loff_t~0 INT ) : INT)?aio_fsync~*((*kiocb INT ) : INT)?fasync~*((INT *file INT ) : INT)?lock~*((*file INT *file_lock ) : INT)?sendpage~*((*file *page INT UINT *~loff_t~0 INT ) : UINT)?get_unmapped_area~*((*file ULONG ULONG ULONG ULONG ) : ULONG)?check_flags~*((INT ) : INT)?flock~*((*file INT *file_lock ) : INT)?splice_write~*((*pipe_inode_info *file *~loff_t~0 UINT UINT ) : UINT)?splice_read~*((*file *~loff_t~0 *pipe_inode_info UINT UINT ) : UINT)?setlease~*((*file LONG **file_lock **VOID ) : INT)?fallocate~*((*file INT ~loff_t~0 ~loff_t~0 ) : LONG)?show_fdinfo~*((*seq_file *file ) : VOID)# [2019-09-08 17:37:45,414 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 25769803794 could not be translated for associated CType STRUCT~~cdev?kobj~STRUCT~~kobject?name~*CHAR?entry~STRUCT~~list_head?next~*list_head?prev~*list_head#?parent~*kobject?kset~*kset?ktype~*kobj_type?sd~*kernfs_node?kref~STRUCT~~kref?refcount~~atomic_t~0#?release~STRUCT~~delayed_work?work~STRUCT~~work_struct?data~~atomic_long_t~0?entry~STRUCT~~list_head?next~*list_head?prev~*list_head#?func~*((*work_struct ) : VOID)?lockdep_map~STRUCT~~lockdep_map?key~*lock_class_key?class_cache~ARRAY#_2_~*lock_class#?name~*CHAR?cpu~INT?ip~ULONG##?timer~STRUCT~~timer_list?entry~STRUCT~~hlist_node?next~*hlist_node?pprev~**hlist_node#?expires~ULONG?function~*((ULONG ) : VOID)?data~ULONG?flags~~u32~0?slack~INT?start_pid~INT?start_site~*VOID?start_comm~ARRAY#_16_~CHAR#?lockdep_map~STRUCT~~lockdep_map?key~*lock_class_key?class_cache~ARRAY#_2_~*lock_class#?name~*CHAR?cpu~INT?ip~ULONG##?wq~*workqueue_struct?cpu~INT#?state_initialized~UCHAR?state_in_sysfs~UCHAR?state_add_uevent_sent~UCHAR?state_remove_uevent_sent~UCHAR?uevent_suppress~UCHAR#?owner~*module?ops~*file_operations?list~STRUCT~~list_head?next~*list_head?prev~*list_head#?dev~~dev_t~0?count~UINT# [2019-09-08 17:37:45,416 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 25769803817 could not be translated for associated CType STRUCT~~file_operations?owner~*module?llseek~*((*file ~loff_t~0 INT ) : ~loff_t~0)?read~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?write~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?read_iter~*((*kiocb *iov_iter ) : UINT)?write_iter~*((*kiocb *iov_iter ) : UINT)?iterate~*((*file *dir_context ) : INT)?poll~*((*file *poll_table_struct ) : UINT)?unlocked_ioctl~*((*file UINT ULONG ) : LONG)?compat_ioctl~*((*file UINT ULONG ) : LONG)?mmap~*((*file *vm_area_struct ) : INT)?mremap~*((*file *vm_area_struct ) : INT)?open~*((*inode *file ) : INT)?flush~*((*file ~fl_owner_t~0 ) : INT)?release~*((*inode *file ) : INT)?fsync~*((*file ~loff_t~0 ~loff_t~0 INT ) : INT)?aio_fsync~*((*kiocb INT ) : INT)?fasync~*((INT *file INT ) : INT)?lock~*((*file INT *file_lock ) : INT)?sendpage~*((*file *page INT UINT *~loff_t~0 INT ) : UINT)?get_unmapped_area~*((*file ULONG ULONG ULONG ULONG ) : ULONG)?check_flags~*((INT ) : INT)?flock~*((*file INT *file_lock ) : INT)?splice_write~*((*pipe_inode_info *file *~loff_t~0 UINT UINT ) : UINT)?splice_read~*((*file *~loff_t~0 *pipe_inode_info UINT UINT ) : UINT)?setlease~*((*file LONG **file_lock **VOID ) : INT)?fallocate~*((*file INT ~loff_t~0 ~loff_t~0 ) : LONG)?show_fdinfo~*((*seq_file *file ) : VOID)# [2019-09-08 17:37:45,416 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 25769803780 could not be translated for associated CType STRUCT~~file_operations?owner~*module?llseek~*((*file ~loff_t~0 INT ) : ~loff_t~0)?read~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?write~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?read_iter~*((*kiocb *iov_iter ) : UINT)?write_iter~*((*kiocb *iov_iter ) : UINT)?iterate~*((*file *dir_context ) : INT)?poll~*((*file *poll_table_struct ) : UINT)?unlocked_ioctl~*((*file UINT ULONG ) : LONG)?compat_ioctl~*((*file UINT ULONG ) : LONG)?mmap~*((*file *vm_area_struct ) : INT)?mremap~*((*file *vm_area_struct ) : INT)?open~*((*inode *file ) : INT)?flush~*((*file ~fl_owner_t~0 ) : INT)?release~*((*inode *file ) : INT)?fsync~*((*file ~loff_t~0 ~loff_t~0 INT ) : INT)?aio_fsync~*((*kiocb INT ) : INT)?fasync~*((INT *file INT ) : INT)?lock~*((*file INT *file_lock ) : INT)?sendpage~*((*file *page INT UINT *~loff_t~0 INT ) : UINT)?get_unmapped_area~*((*file ULONG ULONG ULONG ULONG ) : ULONG)?check_flags~*((INT ) : INT)?flock~*((*file INT *file_lock ) : INT)?splice_write~*((*pipe_inode_info *file *~loff_t~0 UINT UINT ) : UINT)?splice_read~*((*file *~loff_t~0 *pipe_inode_info UINT UINT ) : UINT)?setlease~*((*file LONG **file_lock **VOID ) : INT)?fallocate~*((*file INT ~loff_t~0 ~loff_t~0 ) : LONG)?show_fdinfo~*((*seq_file *file ) : VOID)# [2019-09-08 17:37:45,417 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 25769803810 could not be translated for associated CType STRUCT~~mutex?count~~atomic_t~0?wait_lock~~spinlock_t~0?wait_list~STRUCT~~list_head?next~*list_head?prev~*list_head#?owner~*task_struct?magic~*VOID?dep_map~STRUCT~~lockdep_map?key~*lock_class_key?class_cache~ARRAY#_2_~*lock_class#?name~*CHAR?cpu~INT?ip~ULONG## [2019-09-08 17:37:45,532 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,534 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,534 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,536 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,536 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,569 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,569 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,571 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,571 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,572 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,572 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,574 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,574 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,575 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,575 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,576 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch209 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,577 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,577 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,577 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch209 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,587 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,587 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,588 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch209 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,589 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,589 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,589 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch209 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,591 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,591 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,591 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch209 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,592 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,593 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,593 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch209 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,594 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,594 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,595 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch209 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,596 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch141 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,605 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch141 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,606 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch141 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 17:37:45,697 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 08.09 05:37:45 BoogieIcfgContainer [2019-09-08 17:37:45,697 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-09-08 17:37:45,700 INFO L168 Benchmark]: Toolchain (without parser) took 77230.90 ms. Allocated memory was 134.7 MB in the beginning and 1.7 GB in the end (delta: 1.6 GB). Free memory was 84.7 MB in the beginning and 1.2 GB in the end (delta: -1.1 GB). Peak memory consumption was 1.4 GB. Max. memory is 7.1 GB. [2019-09-08 17:37:45,704 INFO L168 Benchmark]: CDTParser took 0.39 ms. Allocated memory is still 134.7 MB. Free memory was 109.2 MB in the beginning and 109.0 MB in the end (delta: 209.9 kB). Peak memory consumption was 209.9 kB. Max. memory is 7.1 GB. [2019-09-08 17:37:45,708 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1651.79 ms. Allocated memory was 134.7 MB in the beginning and 220.7 MB in the end (delta: 86.0 MB). Free memory was 84.3 MB in the beginning and 121.0 MB in the end (delta: -36.8 MB). Peak memory consumption was 56.3 MB. Max. memory is 7.1 GB. [2019-09-08 17:37:45,709 INFO L168 Benchmark]: Boogie Preprocessor took 280.85 ms. Allocated memory is still 220.7 MB. Free memory was 121.0 MB in the beginning and 112.2 MB in the end (delta: 8.8 MB). Peak memory consumption was 8.8 MB. Max. memory is 7.1 GB. [2019-09-08 17:37:45,709 INFO L168 Benchmark]: RCFGBuilder took 1982.77 ms. Allocated memory was 220.7 MB in the beginning and 262.7 MB in the end (delta: 41.9 MB). Free memory was 112.2 MB in the beginning and 75.2 MB in the end (delta: 37.0 MB). Peak memory consumption was 79.0 MB. Max. memory is 7.1 GB. [2019-09-08 17:37:45,710 INFO L168 Benchmark]: TraceAbstraction took 73310.87 ms. Allocated memory was 262.7 MB in the beginning and 1.7 GB in the end (delta: 1.5 GB). Free memory was 75.2 MB in the beginning and 1.2 GB in the end (delta: -1.1 GB). Peak memory consumption was 1.3 GB. Max. memory is 7.1 GB. [2019-09-08 17:37:45,717 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.39 ms. Allocated memory is still 134.7 MB. Free memory was 109.2 MB in the beginning and 109.0 MB in the end (delta: 209.9 kB). Peak memory consumption was 209.9 kB. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 1651.79 ms. Allocated memory was 134.7 MB in the beginning and 220.7 MB in the end (delta: 86.0 MB). Free memory was 84.3 MB in the beginning and 121.0 MB in the end (delta: -36.8 MB). Peak memory consumption was 56.3 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 280.85 ms. Allocated memory is still 220.7 MB. Free memory was 121.0 MB in the beginning and 112.2 MB in the end (delta: 8.8 MB). Peak memory consumption was 8.8 MB. Max. memory is 7.1 GB. * RCFGBuilder took 1982.77 ms. Allocated memory was 220.7 MB in the beginning and 262.7 MB in the end (delta: 41.9 MB). Free memory was 112.2 MB in the beginning and 75.2 MB in the end (delta: 37.0 MB). Peak memory consumption was 79.0 MB. Max. memory is 7.1 GB. * TraceAbstraction took 73310.87 ms. Allocated memory was 262.7 MB in the beginning and 1.7 GB in the end (delta: 1.5 GB). Free memory was 75.2 MB in the beginning and 1.2 GB in the end (delta: -1.1 GB). Peak memory consumption was 1.3 GB. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 25769803819 could not be translated for associated CType STRUCT~~file_operations?owner~*module?llseek~*((*file ~loff_t~0 INT ) : ~loff_t~0)?read~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?write~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?read_iter~*((*kiocb *iov_iter ) : UINT)?write_iter~*((*kiocb *iov_iter ) : UINT)?iterate~*((*file *dir_context ) : INT)?poll~*((*file *poll_table_struct ) : UINT)?unlocked_ioctl~*((*file UINT ULONG ) : LONG)?compat_ioctl~*((*file UINT ULONG ) : LONG)?mmap~*((*file *vm_area_struct ) : INT)?mremap~*((*file *vm_area_struct ) : INT)?open~*((*inode *file ) : INT)?flush~*((*file ~fl_owner_t~0 ) : INT)?release~*((*inode *file ) : INT)?fsync~*((*file ~loff_t~0 ~loff_t~0 INT ) : INT)?aio_fsync~*((*kiocb INT ) : INT)?fasync~*((INT *file INT ) : INT)?lock~*((*file INT *file_lock ) : INT)?sendpage~*((*file *page INT UINT *~loff_t~0 INT ) : UINT)?get_unmapped_area~*((*file ULONG ULONG ULONG ULONG ) : ULONG)?check_flags~*((INT ) : INT)?flock~*((*file INT *file_lock ) : INT)?splice_write~*((*pipe_inode_info *file *~loff_t~0 UINT UINT ) : UINT)?splice_read~*((*file *~loff_t~0 *pipe_inode_info UINT UINT ) : UINT)?setlease~*((*file LONG **file_lock **VOID ) : INT)?fallocate~*((*file INT ~loff_t~0 ~loff_t~0 ) : LONG)?show_fdinfo~*((*seq_file *file ) : VOID)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 25769803796 could not be translated for associated CType STRUCT~~mutex?count~~atomic_t~0?wait_lock~~spinlock_t~0?wait_list~STRUCT~~list_head?next~*list_head?prev~*list_head#?owner~*task_struct?magic~*VOID?dep_map~STRUCT~~lockdep_map?key~*lock_class_key?class_cache~ARRAY#_2_~*lock_class#?name~*CHAR?cpu~INT?ip~ULONG## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 25769803798 could not be translated for associated CType STRUCT~~cdev?kobj~STRUCT~~kobject?name~*CHAR?entry~STRUCT~~list_head?next~*list_head?prev~*list_head#?parent~*kobject?kset~*kset?ktype~*kobj_type?sd~*kernfs_node?kref~STRUCT~~kref?refcount~~atomic_t~0#?release~STRUCT~~delayed_work?work~STRUCT~~work_struct?data~~atomic_long_t~0?entry~STRUCT~~list_head?next~*list_head?prev~*list_head#?func~*((*work_struct ) : VOID)?lockdep_map~STRUCT~~lockdep_map?key~*lock_class_key?class_cache~ARRAY#_2_~*lock_class#?name~*CHAR?cpu~INT?ip~ULONG##?timer~STRUCT~~timer_list?entry~STRUCT~~hlist_node?next~*hlist_node?pprev~**hlist_node#?expires~ULONG?function~*((ULONG ) : VOID)?data~ULONG?flags~~u32~0?slack~INT?start_pid~INT?start_site~*VOID?start_comm~ARRAY#_16_~CHAR#?lockdep_map~STRUCT~~lockdep_map?key~*lock_class_key?class_cache~ARRAY#_2_~*lock_class#?name~*CHAR?cpu~INT?ip~ULONG##?wq~*workqueue_struct?cpu~INT#?state_initialized~UCHAR?state_in_sysfs~UCHAR?state_add_uevent_sent~UCHAR?state_remove_uevent_sent~UCHAR?uevent_suppress~UCHAR#?owner~*module?ops~*file_operations?list~STRUCT~~list_head?next~*list_head?prev~*list_head#?dev~~dev_t~0?count~UINT# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 25769803807 could not be translated for associated CType STRUCT~~file_operations?owner~*module?llseek~*((*file ~loff_t~0 INT ) : ~loff_t~0)?read~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?write~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?read_iter~*((*kiocb *iov_iter ) : UINT)?write_iter~*((*kiocb *iov_iter ) : UINT)?iterate~*((*file *dir_context ) : INT)?poll~*((*file *poll_table_struct ) : UINT)?unlocked_ioctl~*((*file UINT ULONG ) : LONG)?compat_ioctl~*((*file UINT ULONG ) : LONG)?mmap~*((*file *vm_area_struct ) : INT)?mremap~*((*file *vm_area_struct ) : INT)?open~*((*inode *file ) : INT)?flush~*((*file ~fl_owner_t~0 ) : INT)?release~*((*inode *file ) : INT)?fsync~*((*file ~loff_t~0 ~loff_t~0 INT ) : INT)?aio_fsync~*((*kiocb INT ) : INT)?fasync~*((INT *file INT ) : INT)?lock~*((*file INT *file_lock ) : INT)?sendpage~*((*file *page INT UINT *~loff_t~0 INT ) : UINT)?get_unmapped_area~*((*file ULONG ULONG ULONG ULONG ) : ULONG)?check_flags~*((INT ) : INT)?flock~*((*file INT *file_lock ) : INT)?splice_write~*((*pipe_inode_info *file *~loff_t~0 UINT UINT ) : UINT)?splice_read~*((*file *~loff_t~0 *pipe_inode_info UINT UINT ) : UINT)?setlease~*((*file LONG **file_lock **VOID ) : INT)?fallocate~*((*file INT ~loff_t~0 ~loff_t~0 ) : LONG)?show_fdinfo~*((*seq_file *file ) : VOID)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 25769803794 could not be translated for associated CType STRUCT~~cdev?kobj~STRUCT~~kobject?name~*CHAR?entry~STRUCT~~list_head?next~*list_head?prev~*list_head#?parent~*kobject?kset~*kset?ktype~*kobj_type?sd~*kernfs_node?kref~STRUCT~~kref?refcount~~atomic_t~0#?release~STRUCT~~delayed_work?work~STRUCT~~work_struct?data~~atomic_long_t~0?entry~STRUCT~~list_head?next~*list_head?prev~*list_head#?func~*((*work_struct ) : VOID)?lockdep_map~STRUCT~~lockdep_map?key~*lock_class_key?class_cache~ARRAY#_2_~*lock_class#?name~*CHAR?cpu~INT?ip~ULONG##?timer~STRUCT~~timer_list?entry~STRUCT~~hlist_node?next~*hlist_node?pprev~**hlist_node#?expires~ULONG?function~*((ULONG ) : VOID)?data~ULONG?flags~~u32~0?slack~INT?start_pid~INT?start_site~*VOID?start_comm~ARRAY#_16_~CHAR#?lockdep_map~STRUCT~~lockdep_map?key~*lock_class_key?class_cache~ARRAY#_2_~*lock_class#?name~*CHAR?cpu~INT?ip~ULONG##?wq~*workqueue_struct?cpu~INT#?state_initialized~UCHAR?state_in_sysfs~UCHAR?state_add_uevent_sent~UCHAR?state_remove_uevent_sent~UCHAR?uevent_suppress~UCHAR#?owner~*module?ops~*file_operations?list~STRUCT~~list_head?next~*list_head?prev~*list_head#?dev~~dev_t~0?count~UINT# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 25769803817 could not be translated for associated CType STRUCT~~file_operations?owner~*module?llseek~*((*file ~loff_t~0 INT ) : ~loff_t~0)?read~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?write~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?read_iter~*((*kiocb *iov_iter ) : UINT)?write_iter~*((*kiocb *iov_iter ) : UINT)?iterate~*((*file *dir_context ) : INT)?poll~*((*file *poll_table_struct ) : UINT)?unlocked_ioctl~*((*file UINT ULONG ) : LONG)?compat_ioctl~*((*file UINT ULONG ) : LONG)?mmap~*((*file *vm_area_struct ) : INT)?mremap~*((*file *vm_area_struct ) : INT)?open~*((*inode *file ) : INT)?flush~*((*file ~fl_owner_t~0 ) : INT)?release~*((*inode *file ) : INT)?fsync~*((*file ~loff_t~0 ~loff_t~0 INT ) : INT)?aio_fsync~*((*kiocb INT ) : INT)?fasync~*((INT *file INT ) : INT)?lock~*((*file INT *file_lock ) : INT)?sendpage~*((*file *page INT UINT *~loff_t~0 INT ) : UINT)?get_unmapped_area~*((*file ULONG ULONG ULONG ULONG ) : ULONG)?check_flags~*((INT ) : INT)?flock~*((*file INT *file_lock ) : INT)?splice_write~*((*pipe_inode_info *file *~loff_t~0 UINT UINT ) : UINT)?splice_read~*((*file *~loff_t~0 *pipe_inode_info UINT UINT ) : UINT)?setlease~*((*file LONG **file_lock **VOID ) : INT)?fallocate~*((*file INT ~loff_t~0 ~loff_t~0 ) : LONG)?show_fdinfo~*((*seq_file *file ) : VOID)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 25769803780 could not be translated for associated CType STRUCT~~file_operations?owner~*module?llseek~*((*file ~loff_t~0 INT ) : ~loff_t~0)?read~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?write~*((*file *CHAR UINT *~loff_t~0 ) : UINT)?read_iter~*((*kiocb *iov_iter ) : UINT)?write_iter~*((*kiocb *iov_iter ) : UINT)?iterate~*((*file *dir_context ) : INT)?poll~*((*file *poll_table_struct ) : UINT)?unlocked_ioctl~*((*file UINT ULONG ) : LONG)?compat_ioctl~*((*file UINT ULONG ) : LONG)?mmap~*((*file *vm_area_struct ) : INT)?mremap~*((*file *vm_area_struct ) : INT)?open~*((*inode *file ) : INT)?flush~*((*file ~fl_owner_t~0 ) : INT)?release~*((*inode *file ) : INT)?fsync~*((*file ~loff_t~0 ~loff_t~0 INT ) : INT)?aio_fsync~*((*kiocb INT ) : INT)?fasync~*((INT *file INT ) : INT)?lock~*((*file INT *file_lock ) : INT)?sendpage~*((*file *page INT UINT *~loff_t~0 INT ) : UINT)?get_unmapped_area~*((*file ULONG ULONG ULONG ULONG ) : ULONG)?check_flags~*((INT ) : INT)?flock~*((*file INT *file_lock ) : INT)?splice_write~*((*pipe_inode_info *file *~loff_t~0 UINT UINT ) : UINT)?splice_read~*((*file *~loff_t~0 *pipe_inode_info UINT UINT ) : UINT)?setlease~*((*file LONG **file_lock **VOID ) : INT)?fallocate~*((*file INT ~loff_t~0 ~loff_t~0 ) : LONG)?show_fdinfo~*((*seq_file *file ) : VOID)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 25769803810 could not be translated for associated CType STRUCT~~mutex?count~~atomic_t~0?wait_lock~~spinlock_t~0?wait_list~STRUCT~~list_head?next~*list_head?prev~*list_head#?owner~*task_struct?magic~*VOID?dep_map~STRUCT~~lockdep_map?key~*lock_class_key?class_cache~ARRAY#_2_~*lock_class#?name~*CHAR?cpu~INT?ip~ULONG## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch209 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch209 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch209 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch209 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch209 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch209 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch207 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch221 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch209 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch141 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch141 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch141 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 4759]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of large string literal at line 4094, overapproximation of bitwiseOr at line 4192, overapproximation of bitwiseAnd at line 4198, overapproximation of __builtin_object_size at line 4020. Possible FailurePath: [L3956] struct inode *raw_fops_group1 ; [L3957] int LDV_IN_INTERRUPT = 1; [L3958] int ldv_state_variable_2 ; [L3959] struct file *raw_fops_group2 ; [L3960] int ref_cnt ; [L3961] struct file *raw_ctl_fops_group2 ; [L3962] struct inode *raw_ctl_fops_group1 ; [L3963] int ldv_state_variable_1 ; [L3964] int ldv_state_variable_0 ; [L4092] static struct class *raw_class ; [L4093] static struct raw_device_data *raw_devices ; [L4094-L4097] static struct mutex raw_mutex = {{1}, {{{{{0}}, 3735899821U, 4294967295U, (void *)-1, {0, {0, 0}, "raw_mutex.wait_lock", 0, 0UL}}}}, {& raw_mutex.wait_list, & raw_mutex.wait_list}, 0, (void *)(& raw_mutex), {0, {0, 0}, "raw_mutex", 0, 0UL}}; [L4099] static int max_raw_minors = 256; [L4352-L4355] static struct file_operations const raw_fops = {& __this_module, & default_llseek, 0, 0, & blkdev_read_iter, & blkdev_write_iter, 0, 0, & raw_ioctl, 0, 0, 0, & raw_open, 0, & raw_release, & blkdev_fsync, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L4356-L4358] static struct file_operations const raw_ctl_fops = {& __this_module, & noop_llseek, 0, 0, 0, 0, 0, 0, & raw_ctl_ioctl, & raw_ctl_compat_ioctl, 0, 0, & raw_open, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L4359] static struct cdev raw_cdev ; [L4437] int ldv_retval_0 ; [L4438] int ldv_retval_1 ; [L4441] int ldv_retval_2 ; [L4798] int ldv_module_refcounter = 1; VAL [\old(LDV_IN_INTERRUPT)=25769803793, \old(ldv_module_refcounter)=25769803834, \old(ldv_retval_0)=25769803790, \old(ldv_retval_1)=25769803785, \old(ldv_retval_2)=25769803804, \old(ldv_state_variable_0)=25769803801, \old(ldv_state_variable_1)=25769803829, \old(ldv_state_variable_2)=25769803820, \old(max_raw_minors)=25769803803, \old(raw_cdev)=null, \old(raw_cdev)=null, \old(raw_class)=25769803806, \old(raw_class)=25769803809, \old(raw_ctl_fops)=null, \old(raw_ctl_fops)=null, \old(raw_ctl_fops_group1)=25769803789, \old(raw_ctl_fops_group1)=25769803805, \old(raw_ctl_fops_group2)=25769803812, \old(raw_ctl_fops_group2)=25769803814, \old(raw_devices)=25769803783, \old(raw_devices)=25769803782, \old(raw_fops)=null, \old(raw_fops)=null, \old(raw_fops_group1)=25769803833, \old(raw_fops_group1)=25769803822, \old(raw_fops_group2)=25769803813, \old(raw_fops_group2)=25769803792, \old(raw_mutex)=null, \old(raw_mutex)=null, \old(ref_cnt)=25769803818, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4469] unsigned int ldvarg1 ; [L4470] unsigned long ldvarg4 ; [L4471] loff_t ldvarg3 ; [L4472] unsigned long ldvarg0 ; [L4473] unsigned int ldvarg5 ; [L4474] int ldvarg2 ; [L4475] loff_t ldvarg11 ; [L4476] unsigned int ldvarg7 ; [L4477] loff_t ldvarg12 ; [L4478] struct iov_iter *ldvarg16 ; [L4479] void *tmp ; [L4480] struct kiocb *ldvarg15 ; [L4481] void *tmp___0 ; [L4482] unsigned long ldvarg6 ; [L4483] int ldvarg8 ; [L4484] struct iov_iter *ldvarg14 ; [L4485] void *tmp___1 ; [L4486] struct kiocb *ldvarg13 ; [L4487] void *tmp___2 ; [L4488] int ldvarg10 ; [L4489] loff_t ldvarg9 ; [L4490] int tmp___3 ; [L4491] int tmp___4 ; [L4492] int tmp___5 ; [L4493] int tmp___6 ; VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4495] CALL, EXPR ldv_init_zalloc(40UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=40, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L3902] void *p ; [L3903] void *tmp ; [L3905] EXPR, FCALL calloc(1UL, size) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=40, __this_module={-12:13}, calloc(1UL, size)={8589934593:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, size=40] [L3905] tmp = calloc(1UL, size) [L3906] p = tmp [L3908] return (p); VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=40, \result={8589934593:0}, __this_module={-12:13}, calloc(1UL, size)={8589934593:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, p={8589934593:0}, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, size=40, tmp={8589934593:0}] [L4495] RET, EXPR ldv_init_zalloc(40UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_init_zalloc(40UL)={8589934593:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4495] tmp = ldv_init_zalloc(40UL) [L4496] ldvarg16 = (struct iov_iter *)tmp VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}] [L4497] CALL, EXPR ldv_init_zalloc(40UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=40, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L3902] void *p ; [L3903] void *tmp ; [L3905] EXPR, FCALL calloc(1UL, size) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=40, __this_module={-12:13}, calloc(1UL, size)={12884901889:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, size=40] [L3905] tmp = calloc(1UL, size) [L3906] p = tmp [L3908] return (p); VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=40, \result={12884901889:0}, __this_module={-12:13}, calloc(1UL, size)={12884901889:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, p={12884901889:0}, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, size=40, tmp={12884901889:0}] [L4497] RET, EXPR ldv_init_zalloc(40UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_init_zalloc(40UL)={12884901889:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}] [L4497] tmp___0 = ldv_init_zalloc(40UL) [L4498] ldvarg15 = (struct kiocb *)tmp___0 VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}] [L4499] CALL, EXPR ldv_init_zalloc(40UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=40, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L3902] void *p ; [L3903] void *tmp ; [L3905] EXPR, FCALL calloc(1UL, size) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=40, __this_module={-12:13}, calloc(1UL, size)={17179869185:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, size=40] [L3905] tmp = calloc(1UL, size) [L3906] p = tmp [L3908] return (p); VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=40, \result={17179869185:0}, __this_module={-12:13}, calloc(1UL, size)={17179869185:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, p={17179869185:0}, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, size=40, tmp={17179869185:0}] [L4499] RET, EXPR ldv_init_zalloc(40UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_init_zalloc(40UL)={17179869185:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}] [L4499] tmp___1 = ldv_init_zalloc(40UL) [L4500] ldvarg14 = (struct iov_iter *)tmp___1 VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}] [L4501] CALL, EXPR ldv_init_zalloc(40UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=40, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L3902] void *p ; [L3903] void *tmp ; [L3905] EXPR, FCALL calloc(1UL, size) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=40, __this_module={-12:13}, calloc(1UL, size)={21474836481:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, size=40] [L3905] tmp = calloc(1UL, size) [L3906] p = tmp [L3908] return (p); VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=40, \result={21474836481:0}, __this_module={-12:13}, calloc(1UL, size)={21474836481:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, p={21474836481:0}, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, size=40, tmp={21474836481:0}] [L4501] RET, EXPR ldv_init_zalloc(40UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_init_zalloc(40UL)={21474836481:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}] [L4501] tmp___2 = ldv_init_zalloc(40UL) [L4502] ldvarg13 = (struct kiocb *)tmp___2 VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}] [L4503] FCALL ldv_initialize() VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}] [L4504] CALL ldv_memset((void *)(& ldvarg1), 0, 4UL) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965260:0}] [L3913] void *tmp ; VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=4, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965260:0}, s={-4294965260:0}] [L3915] EXPR, FCALL memset(s, c, n) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, memset(s, c, n)={-4294965260:0}, n=4, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965260:0}, s={-4294965260:0}] [L3915] tmp = memset(s, c, n) [L3916] return (tmp); VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result={-4294965260:0}, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=4, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965260:0}, s={-4294965260:0}, tmp={-4294965260:0}] [L4504] RET ldv_memset((void *)(& ldvarg1), 0, 4UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg1), 0, 4UL)={-4294965260:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}] [L4505] CALL ldv_memset((void *)(& ldvarg4), 0, 8UL) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-7:0}] [L3913] void *tmp ; VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-7:0}, s={-7:0}] [L3915] EXPR, FCALL memset(s, c, n) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, memset(s, c, n)={-7:0}, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-7:0}, s={-7:0}] [L3915] tmp = memset(s, c, n) [L3916] return (tmp); VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result={-7:0}, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-7:0}, s={-7:0}, tmp={-7:0}] [L4505] RET ldv_memset((void *)(& ldvarg4), 0, 8UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg4), 0, 8UL)={-7:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}] [L4506] CALL ldv_memset((void *)(& ldvarg3), 0, 8UL) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-9:0}] [L3913] void *tmp ; VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-9:0}, s={-9:0}] [L3915] EXPR, FCALL memset(s, c, n) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, memset(s, c, n)={-9:0}, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-9:0}, s={-9:0}] [L3915] tmp = memset(s, c, n) [L3916] return (tmp); VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result={-9:0}, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-9:0}, s={-9:0}, tmp={-9:0}] [L4506] RET ldv_memset((void *)(& ldvarg3), 0, 8UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg3), 0, 8UL)={-9:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}] [L4507] CALL ldv_memset((void *)(& ldvarg0), 0, 8UL) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={14:0}] [L3913] void *tmp ; VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={14:0}, s={14:0}] [L3915] EXPR, FCALL memset(s, c, n) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, memset(s, c, n)={14:0}, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={14:0}, s={14:0}] [L3915] tmp = memset(s, c, n) [L3916] return (tmp); VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result={14:0}, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={14:0}, s={14:0}, tmp={14:0}] [L4507] RET ldv_memset((void *)(& ldvarg0), 0, 8UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg0), 0, 8UL)={14:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}] [L4508] ldvarg5 = __VERIFIER_nondet_uint() [L4509] CALL ldv_memset((void *)(& ldvarg2), 0, 4UL) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={15:0}] [L3913] void *tmp ; VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=4, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={15:0}, s={15:0}] [L3915] EXPR, FCALL memset(s, c, n) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, memset(s, c, n)={15:0}, n=4, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={15:0}, s={15:0}] [L3915] tmp = memset(s, c, n) [L3916] return (tmp); VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result={15:0}, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=4, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={15:0}, s={15:0}, tmp={15:0}] [L4509] RET ldv_memset((void *)(& ldvarg2), 0, 4UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg2), 0, 4UL)={15:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}] [L4510] CALL ldv_memset((void *)(& ldvarg11), 0, 8UL) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965259:0}] [L3913] void *tmp ; VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965259:0}, s={-4294965259:0}] [L3915] EXPR, FCALL memset(s, c, n) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, memset(s, c, n)={-4294965259:0}, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965259:0}, s={-4294965259:0}] [L3915] tmp = memset(s, c, n) [L3916] return (tmp); VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result={-4294965259:0}, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965259:0}, s={-4294965259:0}, tmp={-4294965259:0}] [L4510] RET ldv_memset((void *)(& ldvarg11), 0, 8UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg11), 0, 8UL)={-4294965259:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}] [L4511] CALL ldv_memset((void *)(& ldvarg7), 0, 4UL) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965258:0}] [L3913] void *tmp ; VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=4, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965258:0}, s={-4294965258:0}] [L3915] EXPR, FCALL memset(s, c, n) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, memset(s, c, n)={-4294965258:0}, n=4, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965258:0}, s={-4294965258:0}] [L3915] tmp = memset(s, c, n) [L3916] return (tmp); VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result={-4294965258:0}, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=4, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965258:0}, s={-4294965258:0}, tmp={-4294965258:0}] [L4511] RET ldv_memset((void *)(& ldvarg7), 0, 4UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg7), 0, 4UL)={-4294965258:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}] [L4512] CALL ldv_memset((void *)(& ldvarg12), 0, 8UL) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965262:0}] [L3913] void *tmp ; VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965262:0}, s={-4294965262:0}] [L3915] EXPR, FCALL memset(s, c, n) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, memset(s, c, n)={-4294965262:0}, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965262:0}, s={-4294965262:0}] [L3915] tmp = memset(s, c, n) [L3916] return (tmp); VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result={-4294965262:0}, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965262:0}, s={-4294965262:0}, tmp={-4294965262:0}] [L4512] RET ldv_memset((void *)(& ldvarg12), 0, 8UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg12), 0, 8UL)={-4294965262:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}] [L4513] CALL ldv_memset((void *)(& ldvarg6), 0, 8UL) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965261:0}] [L3913] void *tmp ; VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965261:0}, s={-4294965261:0}] [L3915] EXPR, FCALL memset(s, c, n) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, memset(s, c, n)={-4294965261:0}, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965261:0}, s={-4294965261:0}] [L3915] tmp = memset(s, c, n) [L3916] return (tmp); VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result={-4294965261:0}, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965261:0}, s={-4294965261:0}, tmp={-4294965261:0}] [L4513] RET ldv_memset((void *)(& ldvarg6), 0, 8UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg6), 0, 8UL)={-4294965261:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}] [L4514] CALL ldv_memset((void *)(& ldvarg8), 0, 4UL) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965257:0}] [L3913] void *tmp ; VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=4, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965257:0}, s={-4294965257:0}] [L3915] EXPR, FCALL memset(s, c, n) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, memset(s, c, n)={-4294965257:0}, n=4, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965257:0}, s={-4294965257:0}] [L3915] tmp = memset(s, c, n) [L3916] return (tmp); VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result={-4294965257:0}, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=4, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965257:0}, s={-4294965257:0}, tmp={-4294965257:0}] [L4514] RET ldv_memset((void *)(& ldvarg8), 0, 4UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg8), 0, 4UL)={-4294965257:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}] [L4515] CALL ldv_memset((void *)(& ldvarg10), 0, 4UL) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965263:0}] [L3913] void *tmp ; VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=4, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965263:0}, s={-4294965263:0}] [L3915] EXPR, FCALL memset(s, c, n) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, memset(s, c, n)={-4294965263:0}, n=4, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965263:0}, s={-4294965263:0}] [L3915] tmp = memset(s, c, n) [L3916] return (tmp); VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=4, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result={-4294965263:0}, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=4, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-4294965263:0}, s={-4294965263:0}, tmp={-4294965263:0}] [L4515] RET ldv_memset((void *)(& ldvarg10), 0, 4UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg10), 0, 4UL)={-4294965263:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}] [L4516] CALL ldv_memset((void *)(& ldvarg9), 0, 8UL) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-11:0}] [L3913] void *tmp ; VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-11:0}, s={-11:0}] [L3915] EXPR, FCALL memset(s, c, n) VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, memset(s, c, n)={-11:0}, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-11:0}, s={-11:0}] [L3915] tmp = memset(s, c, n) [L3916] return (tmp); VAL [\old(c)=0, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=8, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result={-11:0}, __this_module={-12:13}, c=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, n=8, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, s={-11:0}, s={-11:0}, tmp={-11:0}] [L4516] RET ldv_memset((void *)(& ldvarg9), 0, 8UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg9), 0, 8UL)={-11:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}] [L4517] ldv_state_variable_1 = 0 [L4518] ref_cnt = 0 [L4519] ldv_state_variable_0 = 1 [L4520] ldv_state_variable_2 = 0 VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}] [L4522] tmp___3 = __VERIFIER_nondet_int() [L4524] case 0: [L4575] case 1: VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}, tmp___3=1] [L4576] COND TRUE ldv_state_variable_0 != 0 [L4577] tmp___5 = __VERIFIER_nondet_int() [L4579] case 0: [L4587] case 1: VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}, tmp___3=1, tmp___5=1] [L4588] COND TRUE ldv_state_variable_0 == 1 VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}, tmp___3=1, tmp___5=1] [L4589] CALL, EXPR raw_init() VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4372] dev_t dev ; [L4373] int ret ; [L4374] void *tmp ; [L4375] struct lock_class_key __key ; [L4376] struct class *tmp___0 ; [L4377] long tmp___1 ; [L4378] bool tmp___2 ; [L4380] dev = 169869312U VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __key={-2:0}, __this_module={-12:13}, dev=169869312, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4381] COND FALSE !(max_raw_minors <= 0 || max_raw_minors > 65536) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __key={-2:0}, __this_module={-12:13}, dev=169869312, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4387] CALL, EXPR vzalloc((unsigned long )max_raw_minors * 16UL) VAL [\old(arg0)=4096, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4988] CALL, EXPR external_alloc() VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4992] return __VERIFIER_nondet_pointer(); [L4988] RET, EXPR external_alloc() VAL [\old(arg0)=4096, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, arg0=4096, external_alloc()={2034:-2033}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4988] return (void *)external_alloc(); [L4387] RET, EXPR vzalloc((unsigned long )max_raw_minors * 16UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __key={-2:0}, __this_module={-12:13}, dev=169869312, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={0:0}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, vzalloc((unsigned long )max_raw_minors * 16UL)={2034:-2033}] [L4387] tmp = vzalloc((unsigned long )max_raw_minors * 16UL) [L4388] raw_devices = (struct raw_device_data *)tmp VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __key={-2:0}, __this_module={-12:13}, dev=169869312, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={2034:-2033}] [L4389] COND FALSE !((unsigned long )raw_devices == (unsigned long )((struct raw_device_data *)0)) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __key={-2:0}, __this_module={-12:13}, dev=169869312, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={2034:-2033}] [L4395] CALL, EXPR register_chrdev_region(dev, (unsigned int )max_raw_minors, "raw") VAL [\old(arg0)=169869312, \old(arg1)=256, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, arg2={-3:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4974] return __VERIFIER_nondet_int(); [L4395] RET, EXPR register_chrdev_region(dev, (unsigned int )max_raw_minors, "raw") VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __key={-2:0}, __this_module={-12:13}, dev=169869312, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, register_chrdev_region(dev, (unsigned int )max_raw_minors, "raw")=0, tmp={2034:-2033}] [L4395] ret = register_chrdev_region(dev, (unsigned int )max_raw_minors, "raw") [L4396] COND FALSE !(ret != 0) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __key={-2:0}, __this_module={-12:13}, dev=169869312, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, ret=0, tmp={2034:-2033}] [L4400] CALL ldv_cdev_init_7(& raw_cdev, & raw_fops) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, cdev={-8:0}, fops={-5:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4732] FCALL cdev_init(cdev, fops) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, cdev={-8:0}, cdev={-8:0}, fops={-5:0}, fops={-5:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4733] ldv_state_variable_1 = 1 VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, cdev={-8:0}, cdev={-8:0}, fops={-5:0}, fops={-5:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4734] CALL ldv_file_operations_1() VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4457] void *tmp ; [L4458] void *tmp___0 ; VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4460] CALL, EXPR ldv_init_zalloc(1000UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=1000, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L3902] void *p ; [L3903] void *tmp ; [L3905] EXPR, FCALL calloc(1UL, size) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=1000, __this_module={-12:13}, calloc(1UL, size)={25769803777:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, size=1000] [L3905] tmp = calloc(1UL, size) [L3906] p = tmp [L3908] return (p); VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=1000, \result={25769803777:0}, __this_module={-12:13}, calloc(1UL, size)={25769803777:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, p={25769803777:0}, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, size=1000, tmp={25769803777:0}] [L4460] RET, EXPR ldv_init_zalloc(1000UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1000UL)={25769803777:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={0:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4460] tmp = ldv_init_zalloc(1000UL) [L4461] raw_ctl_fops_group1 = (struct inode *)tmp VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={25769803777:0}] [L4462] CALL, EXPR ldv_init_zalloc(504UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=504, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L3902] void *p ; [L3903] void *tmp ; [L3905] EXPR, FCALL calloc(1UL, size) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=504, __this_module={-12:13}, calloc(1UL, size)={4294967297:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, size=504] [L3905] tmp = calloc(1UL, size) [L3906] p = tmp [L3908] return (p); VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \old(size)=504, \result={4294967297:0}, __this_module={-12:13}, calloc(1UL, size)={4294967297:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, p={4294967297:0}, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, size=504, tmp={4294967297:0}] [L4462] RET, EXPR ldv_init_zalloc(504UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_init_zalloc(504UL)={4294967297:0}, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={0:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={25769803777:0}] [L4462] tmp___0 = ldv_init_zalloc(504UL) [L4463] raw_ctl_fops_group2 = (struct file *)tmp___0 VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={25769803777:0}, tmp___0={4294967297:0}] [L4734] RET ldv_file_operations_1() VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, cdev={-8:0}, cdev={-8:0}, fops={-5:0}, fops={-5:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4400] RET ldv_cdev_init_7(& raw_cdev, & raw_fops) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __key={-2:0}, __this_module={-12:13}, dev=169869312, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, ret=0, tmp={2034:-2033}] [L4401] CALL, EXPR cdev_add(& raw_cdev, dev, (unsigned int )max_raw_minors) VAL [\old(arg1)=169869312, \old(arg2)=256, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, arg0={-8:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4921] return __VERIFIER_nondet_int(); [L4401] RET, EXPR cdev_add(& raw_cdev, dev, (unsigned int )max_raw_minors) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __key={-2:0}, __this_module={-12:13}, cdev_add(& raw_cdev, dev, (unsigned int )max_raw_minors)=0, dev=169869312, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, ret=0, tmp={2034:-2033}] [L4401] ret = cdev_add(& raw_cdev, dev, (unsigned int )max_raw_minors) [L4402] COND FALSE !(ret != 0) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __key={-2:0}, __this_module={-12:13}, dev=169869312, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, ret=0, tmp={2034:-2033}] [L4406] CALL, EXPR __class_create(& __this_module, "raw", & __key) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, arg0={-12:13}, arg1={2:0}, arg2={-2:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4866] CALL, EXPR external_alloc() VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4992] return __VERIFIER_nondet_pointer(); [L4866] RET, EXPR external_alloc() VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, arg0={-12:13}, arg0={-12:13}, arg1={2:0}, arg1={2:0}, arg2={-2:0}, arg2={-2:0}, external_alloc()={-4294965260:-24}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4866] return (struct class *)external_alloc(); [L4406] RET, EXPR __class_create(& __this_module, "raw", & __key) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __class_create(& __this_module, "raw", & __key)={-4294965260:-24}, __key={-2:0}, __this_module={-12:13}, dev=169869312, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={0:0}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, ret=0, tmp={2034:-2033}] [L4406] tmp___0 = __class_create(& __this_module, "raw", & __key) [L4407] raw_class = tmp___0 VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __key={-2:0}, __this_module={-12:13}, dev=169869312, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, ret=0, tmp={2034:-2033}, tmp___0={-4294965260:-24}] [L4408] CALL, EXPR IS_ERR((void const *)raw_class) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, ptr={-4294965260:-24}, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4709] bool tmp ; VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, ptr={-4294965260:-24}, ptr={-4294965260:-24}, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4711] CALL, EXPR ldv_is_err(ptr) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, ptr={-4294965260:-24}, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4765] return ((unsigned long )ptr > 2012UL); VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, ptr={-4294965260:-24}, ptr={-4294965260:-24}, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4711] RET, EXPR ldv_is_err(ptr) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, ptr={-4294965260:-24}, ptr={-4294965260:-24}, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4711] tmp = ldv_is_err(ptr) [L4712] return (tmp); VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, ptr={-4294965260:-24}, ptr={-4294965260:-24}, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp=0] [L4408] RET, EXPR IS_ERR((void const *)raw_class) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __key={-2:0}, __this_module={-12:13}, dev=169869312, IS_ERR((void const *)raw_class)=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, ret=0, tmp={2034:-2033}, tmp___0={-4294965260:-24}] [L4408] tmp___2 = IS_ERR((void const *)raw_class) [L4409] COND FALSE !((int )tmp___2) [L4417] raw_class->devnode = & raw_devnode [L4419] return (0); [L4419] return (0); VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result=0, __this_module={-12:13}, dev=169869312, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, ret=0, tmp={2034:-2033}, tmp___0={-4294965260:-24}, tmp___2=0] [L4589] RET, EXPR raw_init() VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_init()=0, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}, tmp___3=1, tmp___5=1] [L4589] ldv_retval_1 = raw_init() [L4590] COND TRUE ldv_retval_1 == 0 [L4591] ldv_state_variable_0 = 3 VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}, tmp___3=1, tmp___5=1] [L4594] COND FALSE !(ldv_retval_1 != 0) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}, tmp___3=1, tmp___5=1] [L4522] tmp___3 = __VERIFIER_nondet_int() [L4524] case 0: VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}, tmp___3=0, tmp___5=1] [L4525] COND TRUE ldv_state_variable_1 != 0 [L4526] tmp___4 = __VERIFIER_nondet_int() [L4528] case 0: [L4535] case 1: [L4542] case 2: VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}, tmp___3=0, tmp___4=2, tmp___5=1] [L4543] COND TRUE ldv_state_variable_1 == 1 VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}, tmp___3=0, tmp___4=2, tmp___5=1] [L4544] CALL, EXPR raw_open(raw_ctl_fops_group1, raw_ctl_fops_group2) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, filp={4294967297:0}, inode={25769803777:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4102] int minor ; [L4103] unsigned int tmp ; [L4104] struct block_device *bdev ; [L4105] int err ; [L4106] unsigned short tmp___0 ; [L4107] struct inode *tmp___1 ; VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, filp={4294967297:0}, filp={4294967297:0}, inode={25769803777:0}, inode={25769803777:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4109] CALL, EXPR iminor((struct inode const *)inode) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, inode={25769803777:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L3970] EXPR inode->i_rdev [L3970] return ((unsigned int )inode->i_rdev & 1048575U); [L4109] RET, EXPR iminor((struct inode const *)inode) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, filp={4294967297:0}, filp={4294967297:0}, iminor((struct inode const *)inode)=8589934592, inode={25769803777:0}, inode={25769803777:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0] [L4109] tmp = iminor((struct inode const *)inode) [L4110] minor = (int const )tmp VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, filp={4294967297:0}, filp={4294967297:0}, inode={25769803777:0}, inode={25769803777:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, minor=0, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp=0] [L4111] COND TRUE minor == 0 [L4112] filp->f_op = & raw_ctl_fops [L4113] return (0); VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result=0, __this_module={-12:13}, filp={4294967297:0}, filp={4294967297:0}, inode={25769803777:0}, inode={25769803777:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, max_raw_minors=256, minor=0, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=0, tmp=0] [L4544] RET, EXPR raw_open(raw_ctl_fops_group1, raw_ctl_fops_group2) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, raw_open(raw_ctl_fops_group1, raw_ctl_fops_group2)=0, ref_cnt=0, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}, tmp___3=0, tmp___4=2, tmp___5=1] [L4544] ldv_retval_0 = raw_open(raw_ctl_fops_group1, raw_ctl_fops_group2) [L4545] COND TRUE ldv_retval_0 == 0 [L4546] ldv_state_variable_1 = 2 [L4547] ref_cnt = ref_cnt + 1 VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}, tmp___3=0, tmp___4=2, tmp___5=1] [L4522] tmp___3 = __VERIFIER_nondet_int() [L4524] case 0: VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}, tmp___3=0, tmp___4=2, tmp___5=1] [L4525] COND TRUE ldv_state_variable_1 != 0 [L4526] tmp___4 = __VERIFIER_nondet_int() [L4528] case 0: [L4535] case 1: [L4542] case 2: [L4553] case 3: VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}, tmp___3=0, tmp___4=3, tmp___5=1] [L4554] COND TRUE ldv_state_variable_1 == 2 [L4555] EXPR \read(ldvarg1) [L4555] EXPR \read(ldvarg0) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \read(ldvarg0)=0, \read(ldvarg1)=44032, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, ldvarg0={14:0}, ldvarg1={-4294965260:0}, ldvarg10={-4294965263:0}, ldvarg11={-4294965259:0}, ldvarg12={-4294965262:0}, ldvarg13={21474836481:0}, ldvarg14={17179869185:0}, ldvarg15={12884901889:0}, ldvarg16={8589934593:0}, ldvarg2={15:0}, ldvarg3={-9:0}, ldvarg4={-7:0}, ldvarg5=59, ldvarg6={-4294965261:0}, ldvarg7={-4294965258:0}, ldvarg8={-4294965257:0}, ldvarg9={-11:0}, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1, tmp={8589934593:0}, tmp___0={12884901889:0}, tmp___1={17179869185:0}, tmp___2={21474836481:0}, tmp___3=0, tmp___4=3, tmp___5=1] [L4555] CALL raw_ctl_ioctl(raw_ctl_fops_group2, ldvarg1, ldvarg0) VAL [\old(arg)=0, \old(command)=44032, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, filp={4294967297:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1] [L4265] struct raw_config_request rq ; [L4266] dev_t dev ; [L4267] int err ; [L4268] unsigned long tmp ; [L4269] int tmp___0 ; [L4270] unsigned long tmp___1 ; [L4271] unsigned long tmp___2 ; [L4274] case 44032U: VAL [\old(arg)=0, \old(command)=44032, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, arg=0, command=44032, dev={-2:0}, filp={4294967297:0}, filp={4294967297:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1, rq={17:0}] [L4275] CALL, EXPR copy_from_user((void *)(& rq), (void const *)arg, 24UL) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=24, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, from={0:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1, to={17:0}] [L4016] int sz ; [L4017] unsigned long tmp ; [L4018] long tmp___0 ; [L4020] tmp = __builtin_object_size((void const *)to, 0) [L4021] sz = (int )tmp VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=24, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, from={0:0}, from={0:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, n=24, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1, sz=-18, tmp=4294967278, to={17:0}, to={17:0}] [L4022] FCALL __might_fault("./arch/x86/include/asm/uaccess.h", 697) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=24, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, from={0:0}, from={0:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, n=24, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1, sz=-18, tmp=4294967278, to={17:0}, to={17:0}] [L4023] CALL, EXPR ldv__builtin_expect((long )(sz < 0 || (unsigned long )sz >= n), 1L) VAL [\old(c)=1, \old(exp)=1, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1] [L3953] return (exp); VAL [\old(c)=1, \old(exp)=1, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result=1, __this_module={-12:13}, c=1, exp=1, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1] [L4023] RET, EXPR ldv__builtin_expect((long )(sz < 0 || (unsigned long )sz >= n), 1L) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=24, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, from={0:0}, from={0:0}, ldv__builtin_expect((long )(sz < 0 || (unsigned long )sz >= n), 1L)=1, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, n=24, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1, sz=-18, tmp=4294967278, to={17:0}, to={17:0}] [L4023] tmp___0 = ldv__builtin_expect((long )(sz < 0 || (unsigned long )sz >= n), 1L) [L4024] COND TRUE tmp___0 != 0L VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=24, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, from={0:0}, from={0:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, n=24, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1, sz=-18, tmp=4294967278, tmp___0=1, to={17:0}, to={17:0}] [L4025] CALL, EXPR _copy_from_user(to, from, (unsigned int )n) VAL [\old(arg2)=24, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, arg0={17:0}, arg1={0:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1] [L4879] return __VERIFIER_nondet_ulong(); [L4025] RET, EXPR _copy_from_user(to, from, (unsigned int )n) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=24, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, _copy_from_user(to, from, (unsigned int )n)=4294967296, from={0:0}, from={0:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, n=24, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1, sz=-18, tmp=4294967278, tmp___0=1, to={17:0}, to={17:0}] [L4025] n = _copy_from_user(to, from, (unsigned int )n) [L4029] return (n); VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(n)=24, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, \result=4294967296, __this_module={-12:13}, from={0:0}, from={0:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, n=0, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1, sz=-18, tmp=4294967278, tmp___0=1, to={17:0}, to={17:0}] [L4275] RET, EXPR copy_from_user((void *)(& rq), (void const *)arg, 24UL) VAL [\old(arg)=0, \old(command)=44032, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, arg=0, command=44032, copy_from_user((void *)(& rq), (void const *)arg, 24UL)=4294967296, dev={-2:0}, filp={4294967297:0}, filp={4294967297:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1, rq={17:0}] [L4275] tmp = copy_from_user((void *)(& rq), (void const *)arg, 24UL) [L4276] COND FALSE !(tmp != 0UL) [L4280] EXPR rq.raw_minor [L4280] EXPR rq.block_major [L4280] EXPR rq.block_minor VAL [\old(arg)=0, \old(command)=44032, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, arg=0, command=44032, dev={-2:0}, filp={4294967297:0}, filp={4294967297:0}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1, rq={17:0}, rq.block_major=4294963200, rq.block_minor=18, rq.raw_minor=255, tmp=0] [L4280] CALL bind_set(rq.raw_minor, rq.block_major, rq.block_minor) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(major)=4294963200, \old(max_raw_minors)=256, \old(minor)=18, \old(number)=255, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1] [L4185] dev_t dev ; [L4186] struct raw_device_data *rawdev ; [L4187] int err ; [L4188] bool tmp ; [L4189] int tmp___0 ; [L4190] dev_t raw ; [L4192] dev = ((dev_t )major << 20U) | (dev_t )minor [L4193] err = 0 VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(major)=4294963200, \old(max_raw_minors)=256, \old(minor)=18, \old(number)=255, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, err=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, major=4294963200, max_raw_minors=256, minor=18, number=255, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1] [L4194] COND FALSE !(number <= 0 || number >= max_raw_minors) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(major)=4294963200, \old(max_raw_minors)=256, \old(minor)=18, \old(number)=255, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, err=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, major=4294963200, max_raw_minors=256, minor=18, number=255, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1] [L4198] COND FALSE !((u64 )(dev >> 20) != major || ((u64 )dev & 1048575ULL) != minor) [L4202] rawdev = raw_devices + (unsigned long )number VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(major)=4294963200, \old(max_raw_minors)=256, \old(minor)=18, \old(number)=255, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, dev=0, err=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, major=4294963200, max_raw_minors=256, minor=18, number=255, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, rawdev={2034:7}, ref_cnt=1] [L4203] CALL, EXPR capable(21) VAL [\old(arg0)=21, \old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1] [L4917] return __VERIFIER_nondet_bool(); [L4203] RET, EXPR capable(21) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(major)=4294963200, \old(max_raw_minors)=256, \old(minor)=18, \old(number)=255, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, capable(21)=257, dev=0, err=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, major=4294963200, max_raw_minors=256, minor=18, number=255, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, rawdev={2034:7}, ref_cnt=1] [L4203] tmp = capable(21) [L4204] COND TRUE \read(tmp) [L4205] tmp___0 = 0 VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(major)=4294963200, \old(max_raw_minors)=256, \old(minor)=18, \old(number)=255, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, dev=0, err=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, major=4294963200, max_raw_minors=256, minor=18, number=255, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, rawdev={2034:7}, ref_cnt=1, tmp=1, tmp___0=0] [L4209] COND FALSE !(\read(tmp___0)) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(major)=4294963200, \old(max_raw_minors)=256, \old(minor)=18, \old(number)=255, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, dev=0, err=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, major=4294963200, max_raw_minors=256, minor=18, number=255, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, rawdev={2034:7}, ref_cnt=1, tmp=1, tmp___0=0] [L4213] COND FALSE !(dev >> 20 == 0U && dev != 0U) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(major)=4294963200, \old(max_raw_minors)=256, \old(minor)=18, \old(number)=255, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, dev=0, err=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, major=4294963200, max_raw_minors=256, minor=18, number=255, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, rawdev={2034:7}, ref_cnt=1, tmp=1, tmp___0=0] [L4217] FCALL mutex_lock_nested(& raw_mutex, 0U) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(major)=4294963200, \old(max_raw_minors)=256, \old(minor)=18, \old(number)=255, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, dev=0, err=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, major=4294963200, max_raw_minors=256, minor=18, number=255, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, rawdev={2034:7}, ref_cnt=1, tmp=1, tmp___0=0] [L4218] EXPR rawdev->inuse VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(major)=4294963200, \old(max_raw_minors)=256, \old(minor)=18, \old(number)=255, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, dev=0, err=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, major=4294963200, max_raw_minors=256, minor=18, number=255, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, rawdev={2034:7}, rawdev->inuse=0, ref_cnt=1, tmp=1, tmp___0=0] [L4218] COND FALSE !(rawdev->inuse != 0) [L4223] EXPR rawdev->binding VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(major)=4294963200, \old(max_raw_minors)=256, \old(minor)=18, \old(number)=255, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, dev=0, err=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, major=4294963200, max_raw_minors=256, minor=18, number=255, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, rawdev={2034:7}, rawdev->binding={-10:11}, ref_cnt=1, tmp=1, tmp___0=0] [L4223] COND TRUE (unsigned long )rawdev->binding != (unsigned long )((struct block_device *)0) [L4224] EXPR rawdev->binding VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(major)=4294963200, \old(max_raw_minors)=256, \old(minor)=18, \old(number)=255, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, dev=0, err=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, major=4294963200, max_raw_minors=256, minor=18, number=255, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, rawdev={2034:7}, rawdev->binding={-10:11}, ref_cnt=1, tmp=1, tmp___0=0] [L4224] FCALL bdput(rawdev->binding) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(major)=4294963200, \old(max_raw_minors)=256, \old(minor)=18, \old(number)=255, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, dev=0, err=0, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, major=4294963200, max_raw_minors=256, minor=18, number=255, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, rawdev={2034:7}, rawdev->binding={-10:11}, ref_cnt=1, tmp=1, tmp___0=0] [L4225] CALL ldv_module_put_5(& __this_module) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, ldv_func_arg1={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1] [L4718] CALL ldv_module_put(ldv_func_arg1) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, module={-12:13}, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1] [L4829] COND TRUE (unsigned long )module != (unsigned long )((struct module *)0) VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, module={-12:13}, module={-12:13}, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1] [L4830] COND TRUE ldv_module_refcounter <= 1 VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, module={-12:13}, module={-12:13}, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1] [L4831] CALL ldv_error() VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1] [L4759] __VERIFIER_error() VAL [\old(ldv_module_refcounter)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(max_raw_minors)=256, \old(raw_class)=0, \old(raw_class)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group1)=0, \old(raw_ctl_fops_group2)=0, \old(raw_ctl_fops_group2)=0, \old(raw_devices)=0, \old(raw_devices)=0, \old(ref_cnt)=0, __this_module={-12:13}, LDV_IN_INTERRUPT=1, ldv_module_refcounter=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_state_variable_0=3, ldv_state_variable_1=2, ldv_state_variable_2=0, max_raw_minors=256, raw_cdev={-8:0}, raw_class={-4294965260:-24}, raw_ctl_fops={-4:0}, raw_ctl_fops_group1={25769803777:0}, raw_ctl_fops_group2={4294967297:0}, raw_devices={2034:-2033}, raw_fops={-5:0}, raw_fops_group1={0:0}, raw_fops_group2={0:0}, raw_mutex={5:0}, ref_cnt=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 91 procedures, 611 locations, 1 error locations. UNSAFE Result, 73.2s OverallTime, 17 OverallIterations, 76 TraceHistogramMax, 6.1s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 10598 SDtfs, 3381 SDslu, 48457 SDs, 0 SdLazy, 2375 SolverSat, 673 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 2.9s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 2880 GetRequests, 2718 SyntacticMatches, 0 SemanticMatches, 162 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 667 ImplicationChecksByTransitivity, 2.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=3168occurred in iteration=8, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 1.7s AutomataMinimizationTime, 16 MinimizatonAttempts, 133 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 1.3s SsaConstructionTime, 48.9s SatisfiabilityAnalysisTime, 5.2s InterpolantComputationTime, 8982 NumberOfCodeBlocks, 8691 NumberOfCodeBlocksAsserted, 38 NumberOfCheckSat, 8112 ConstructedInterpolants, 0 QuantifiedInterpolants, 3419435 SizeOfPredicates, 13 NumberOfNonLiveVariables, 19015 ConjunctsInSsa, 104 ConjunctsInUnsatCore, 23 InterpolantComputations, 9 PerfectInterpolantSequences, 35760/36906 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request...